Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
File: 6tIKIulI-5ZEEprTAZ8I1PSYH88.mft (raw, json)
Hash identifier: 8LrPQmylawQLH6WfsedoSHM2CcUHGUKMrFQn5kMeCqE=
Subject key identifier: F5:9C:B1:75:6A:B4:3C:5D:34:0B:43:59:B8:51:F6:75:3A:77:80:4C
Authority key identifier: EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF
Certificate issuer: /CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
Certificate serial: 0196B822F2524B9B4ED4E429A96B2330C03A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
Manifest number: 04FE
Signing time: Sat 10 May 2025 03:00:19 +0000
Manifest this update: Sat 10 May 2025 03:00:19 +0000
Manifest next update: Sun 11 May 2025 03:00:19 +0000
Files and hashes: 1: 603LAvQ5JXA5_S8BjHWOsHJK9Wo.roa (hash: 8uIPD2qt5HOkYhC38b1edHK/qDoR0Hb99DfiBmCJ4B8=)
2: 6tIKIulI-5ZEEprTAZ8I1PSYH88.crl (hash: ReQZOx9AWRA3arrYdQKmcU8CTd6DkG8C/ITzpeviVD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:22:f2:52:4b:9b:4e:d4:e4:29:a9:6b:23:30:c0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
Validity
Not Before: May 10 03:00:19 2025 GMT
Not After : May 11 03:00:19 2025 GMT
Subject: CN=f59cb1756ab43c5d340b4359b851f6753a77804c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:50:06:7c:db:2e:63:0e:15:ae:ec:5f:d9:
1b:20:18:fe:86:89:f6:a5:c6:e5:41:67:64:98:69:
5c:0c:13:f3:d0:e1:31:60:31:e7:a1:45:07:80:64:
7c:27:bc:c7:f4:17:15:af:82:3f:c9:1c:45:b1:e1:
96:55:12:2d:cc:97:43:09:dd:5c:8d:89:b9:c1:b0:
10:92:25:ef:2b:38:47:55:9a:f4:ed:60:03:19:9b:
45:34:68:09:8d:c8:d9:49:42:23:ef:59:bf:6f:ae:
76:f5:4d:09:d9:79:59:05:89:a1:81:32:83:0d:a0:
8b:ec:56:29:6f:d1:ab:2e:e4:11:86:f4:0b:01:ec:
b7:62:da:d4:9a:00:76:53:88:c9:d0:08:fe:8f:65:
f9:1b:6e:c7:12:6b:2e:a0:06:d6:74:a1:1b:43:76:
a1:2b:b3:70:a5:4d:b9:e2:72:6c:ce:2f:3f:30:ac:
19:5a:d4:eb:e4:93:42:0f:68:8e:e2:91:93:85:9b:
24:2a:73:69:c5:76:a4:e1:d9:4a:bd:a0:c0:39:1e:
7c:4c:78:31:69:d3:56:ef:ea:df:f9:d8:03:c5:cc:
83:46:ee:f2:2f:55:03:fc:8e:84:4c:7a:c3:d9:b3:
21:40:71:fe:c6:da:fc:35:1e:88:d6:aa:7d:90:e6:
d6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9C:B1:75:6A:B4:3C:5D:34:0B:43:59:B8:51:F6:75:3A:77:80:4C
X509v3 Authority Key Identifier:
keyid:EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ac:93:b6:24:d4:97:56:ae:49:79:40:fa:3d:f6:5f:2a:72:
b5:ca:de:84:61:20:b5:99:45:db:f1:80:7a:a6:29:4e:27:6f:
5a:5e:ae:71:45:5c:47:ad:ed:74:a5:d1:c3:ce:de:7b:3c:18:
c9:ad:bc:16:8f:f1:39:2d:ef:7c:32:b5:15:b1:5f:8e:bc:54:
91:91:e3:94:a0:b9:84:8b:88:02:19:51:f2:5a:8a:1b:06:7e:
2f:60:fc:8a:b7:3d:c2:e6:09:1d:af:3e:26:aa:65:b1:11:a5:
d4:38:30:f8:7d:fd:23:6e:9d:e0:bb:04:5f:55:b9:32:8d:17:
60:d7:f3:a4:4a:61:30:44:a9:2a:3f:0a:c8:e0:ba:b4:e1:3f:
24:00:ec:27:f5:79:5f:eb:27:b9:50:e9:44:93:a2:cf:43:88:
9e:14:3c:32:62:2a:bb:ae:bb:7e:36:2d:2c:f8:30:30:17:ce:
6e:4d:ec:43:ea:11:1e:47:74:0f:21:02:44:86:f8:d3:8b:c1:
2e:b5:e4:e9:1d:50:da:db:af:a5:81:24:5a:c6:84:79:f3:7e:
0e:cd:43:24:96:c4:87:47:e1:ba:13:33:3c:00:20:9b:5a:53:
d6:c7:87:72:d2:1b:b2:60:92:27:dc:76:35:90:04:34:e5:73:
61:93:e4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:23:35 2025 by rpki-client