Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
File: mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft (raw, json)
Hash identifier: y5PEz5bvr6Nf38zV2TY2hKdLxbXoZG5PJg0Hk+yomP4=
Subject key identifier: 6C:D0:1D:7C:84:02:A5:EB:82:C3:C4:FF:7C:4F:5C:C6:1D:5B:45:FD
Authority key identifier: 98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
Certificate issuer: /CN=985d472fa538204f1c23e8b6a758073b80cfc199
Certificate serial: 01969F07EFE56D4FBBF9D82E0BF15307F31F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
Manifest number: 10F6
Signing time: Mon 05 May 2025 06:00:19 +0000
Manifest this update: Mon 05 May 2025 06:00:19 +0000
Manifest next update: Tue 06 May 2025 06:00:19 +0000
Files and hashes: 1: AzENH95bt8URAYkHoVsIpFCsCKo.roa (hash: AH2b85dRr2FxufgtlMVISLL90V2KJDLxN1PjWzu3Llc=)
2: mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl (hash: wXHxZuDDgaTcE7BY561hVZ9d7gi7rGDciPnDvIV/yfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:07:ef:e5:6d:4f:bb:f9:d8:2e:0b:f1:53:07:f3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985d472fa538204f1c23e8b6a758073b80cfc199
Validity
Not Before: May 5 06:00:19 2025 GMT
Not After : May 6 06:00:19 2025 GMT
Subject: CN=6cd01d7c8402a5eb82c3c4ff7c4f5cc61d5b45fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:97:a9:02:62:1b:c8:20:4d:5c:80:ac:d0:
13:49:9e:76:ea:29:fb:4f:c6:8c:31:23:73:d5:31:
35:55:e6:7b:04:4c:c8:7c:f4:04:9a:9e:65:58:ca:
e5:0c:bc:2b:c9:5e:09:37:d3:cb:79:0d:93:17:2d:
4f:0b:4f:c5:7a:b8:66:65:f2:ae:5d:22:41:91:7e:
2c:fd:a3:14:0c:2e:49:ec:14:0a:56:b2:10:3b:d2:
ba:4d:2f:bd:a4:48:e6:69:95:b5:9a:cc:6a:6e:30:
86:ea:bd:cf:ac:f7:fe:57:5d:f1:10:63:a1:b0:7b:
3e:e8:b4:50:fa:7d:1f:e2:9c:ab:f1:cd:0c:48:e1:
de:ed:e5:dc:e1:a6:54:cf:bb:72:b1:f4:e8:b4:86:
2c:76:69:f7:ad:f0:dd:d0:6f:02:17:3a:b7:2c:85:
04:97:e1:cd:32:73:42:22:9b:f6:2a:bd:a0:8b:4b:
79:86:c1:27:3d:ca:2c:5e:ed:35:7d:b3:1e:7c:25:
9b:dc:3a:7a:ec:d9:16:9e:e2:7d:cf:04:d5:52:31:
41:e2:af:4b:75:51:59:6d:14:9f:cc:b0:11:33:33:
55:f0:74:23:ab:42:83:4a:c4:37:25:50:d7:9e:3a:
fe:ab:d5:6e:98:8b:5a:12:29:33:ec:e0:3b:56:c4:
0d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D0:1D:7C:84:02:A5:EB:82:C3:C4:FF:7C:4F:5C:C6:1D:5B:45:FD
X509v3 Authority Key Identifier:
keyid:98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7b:c3:29:43:24:c4:c7:99:33:e6:44:ea:d8:bc:59:98:0d:
5e:58:11:a8:01:90:c5:9d:8f:25:4c:79:65:e9:e3:bc:c3:a1:
c2:1e:69:a2:a8:06:63:4d:1c:59:44:b7:da:57:22:45:ad:8d:
de:06:6f:56:30:d2:4f:9e:35:bc:12:7a:de:29:00:61:ec:64:
98:49:98:f1:4b:a9:78:f8:c1:78:e5:99:ca:ee:dc:03:ee:40:
f2:cd:13:e3:f7:f8:6a:1d:4e:d5:18:07:03:b9:c3:ae:c7:5e:
91:e4:7f:56:f6:04:91:33:99:07:72:5e:0e:bb:e1:0b:48:de:
10:c1:af:ee:d2:b8:ae:82:7f:d2:12:0c:b6:a3:23:ca:d8:7b:
1a:e5:57:3b:80:04:e1:0c:d6:84:6c:bc:6b:99:c1:c7:4c:5b:
e7:be:f6:f9:b4:0d:b1:a4:34:54:18:4c:92:51:27:09:d7:74:
09:97:06:44:12:1e:f2:a9:d6:da:06:c0:59:d0:04:5c:a3:9c:
45:46:a3:6e:af:5b:87:de:79:4a:9d:16:44:26:2f:7a:f7:5b:
79:8b:a9:b4:7c:46:1e:09:9f:5f:3b:35:94:ad:ba:b3:1d:5b:
1b:ca:44:c3:e7:c4:b6:b0:56:e6:30:ca:82:2b:2d:34:df:cb:
2d:b7:21:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:36:24 2025 by rpki-client