Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
File: 6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json)
Hash identifier: qyb8v1WkN5YqiuKPohpVeeKb2/HzpxUruYP1Y0QSu3s=
Subject key identifier: 4A:E1:7E:79:00:70:96:13:2C:31:C1:3D:64:42:BE:A1:11:97:7E:39
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial: 0196C6BA81CA808316CE74F34BDD3F2BE8A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 23:00:33 +0000
Manifest this update: Mon 12 May 2025 23:00:33 +0000
Manifest next update: Tue 13 May 2025 23:00:33 +0000
Files and hashes: 1: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: Xyt6AL2EBkeRzFbNOkkjcFI5hU3nJ4NiEjUWZBGa110=)
2: 6xhDMjLWegiTNxnVw5JYv0_kcfM.roa (hash: rSZUF0buOyvvO3wABYCztQlwFfnFNw3uLkpmp4vM9pw=)
3: B_U0Thd2hek7c5TP5isgn3nFY38.roa (hash: oQ6pviFf5arQiDT+3KFkPtsqKciLEZWlSeEkqGt55/c=)
4: IJoxcEd7VggD3on9VNdBwQ2ai4M.roa (hash: l1C0lwy47+vk4Lvd7mWl9lGXam1kddh45sEhzv6D1cA=)
5: acU8LPcjjnuwpEGnrC28mxzfjkI.roa (hash: LwbfB5h8UeIfjkLBn8DXzcf/70aOb76OSwOezLnK2PU=)
6: cYJ91ITuYXoj33vFG-jF0Fh-ajc.roa (hash: Z/p5QOfcesLJQjsnSA/ia08r7lvPlhHAViiVlSC49cw=)
7: i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa (hash: pAwH7XsKC3usAyUBQbyxSsEwXZk/zTFKfD5sKnbUUxQ=)
8: kP8WpbmlofJTdUaCmUWW68Yu-Rw.roa (hash: z9cTYSYhBDpdjPlGOiBqYli4fbEBwTaVHKlbVFfEd+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:ba:81:ca:80:83:16:ce:74:f3:4b:dd:3f:2b:e8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Validity
Not Before: May 12 23:00:33 2025 GMT
Not After : May 13 23:00:33 2025 GMT
Subject: CN=4ae17e79007096132c31c13d6442bea111977e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:cc:df:78:37:b9:c5:a5:d0:9a:ae:bb:19:
6b:1c:df:ed:a0:b9:79:ea:e3:82:7b:a8:a5:f9:f8:
e0:2d:e4:8c:44:03:c4:ea:29:b4:1f:a4:02:4b:0c:
31:af:b8:e4:84:68:03:36:db:1b:64:fb:91:16:89:
c3:9f:76:77:83:b7:bc:0e:58:7f:0f:9f:10:bc:90:
70:80:1a:de:ce:6d:71:bf:f6:b6:07:4a:db:4e:dd:
86:80:58:b6:be:7b:84:f7:d2:25:61:30:41:f0:82:
2b:d3:d3:11:1f:f1:2f:1c:b2:4c:07:f7:3a:2f:2c:
c4:2c:67:85:32:d5:21:0b:4d:e8:33:b7:bb:f2:77:
f0:36:28:d7:a4:03:f8:7e:0c:cb:1a:d1:34:99:f5:
d7:a0:88:a5:62:d2:56:e6:0b:77:be:63:f9:dc:ca:
a0:d9:92:da:16:da:4d:8b:52:9e:c2:f2:f2:2c:1d:
a5:36:8c:57:6c:c4:d0:bd:2d:e2:db:3b:94:44:6a:
25:93:6c:51:2f:98:12:61:4f:ac:9e:9d:6f:e6:fc:
33:3d:45:88:fb:27:68:e7:38:1f:ac:8d:23:f9:70:
39:86:2b:14:89:ac:ac:9d:de:fd:1b:9d:46:7e:81:
e2:05:df:b4:5f:cc:9b:32:39:57:85:a9:d4:e6:0a:
fc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E1:7E:79:00:70:96:13:2C:31:C1:3D:64:42:BE:A1:11:97:7E:39
X509v3 Authority Key Identifier:
keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:cc:0e:b0:ce:89:76:38:00:bd:ab:e6:2a:94:a1:f9:32:09:
8b:38:5e:98:ef:2d:78:6c:54:bb:97:b9:a0:1b:83:e2:f1:db:
46:ef:55:7e:22:3a:08:69:49:34:8d:ca:91:1b:fb:ce:ac:71:
52:2c:bf:40:4c:37:42:0e:da:82:67:a0:e0:95:f4:43:c7:96:
e4:a5:35:c8:92:a3:e3:da:f8:ea:a8:c0:51:fb:47:75:53:33:
e5:3f:e6:98:5f:db:b7:b5:30:8a:d5:5e:5e:1d:39:a3:24:88:
c6:95:8e:2c:36:ba:04:c5:1a:64:c9:6b:e4:8b:0d:12:d2:b5:
98:a5:d1:11:36:1e:e2:98:83:23:f1:96:b4:2d:65:e5:b2:55:
17:26:04:ec:12:74:49:3c:f7:2b:1b:30:67:b2:7b:fb:35:b7:
06:c5:b1:8d:ad:99:07:65:2d:c5:52:39:07:5c:63:cd:9f:54:
fb:7e:67:2b:2a:41:d7:73:bc:1a:46:03:52:f8:37:97:52:a5:
9e:ca:72:f6:f4:19:e7:7a:ba:00:78:0a:0d:13:ca:2c:64:be:
0d:01:e3:cd:75:4a:f7:c0:aa:c6:61:4b:39:6e:ed:a9:b2:a1:
2b:65:4b:7a:c4:42:bf:7f:1a:1c:f1:af:b9:2a:67:80:46:28:
53:41:70:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:37:13 2025 by rpki-client