Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier: iiOs9ssxrDveN5nr1pgDAe5JApe3gKY8TI3dWYrlgB4=
Subject key identifier: 89:D0:41:5B:E0:28:F4:27:DA:AC:1A:02:2E:7E:74:DA:62:2C:78:72
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 0196D0995B1FF7A8B9F727821D633A591CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number: 135E
Signing time: Wed 14 May 2025 21:00:33 +0000
Manifest this update: Wed 14 May 2025 21:00:33 +0000
Manifest next update: Thu 15 May 2025 21:00:33 +0000
Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: OneDKDcZACISr+jL0OQXymNKMW6+gZLvXCNX72EtEzY=)
2: tbW3C2BxGOP8RipICwkXorNWMa0.roa (hash: sAyggufTAiW8TAkDGmUgXEYrufIqSzYFIzTOlTIqneg=)
3: u1VhcVTy354RLIy1HL3zp9mHr4s.roa (hash: bTXjEk3aPbxZmee9JV98PLXefqyqj+KHu6+Sm9Lnq+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:99:5b:1f:f7:a8:b9:f7:27:82:1d:63:3a:59:1c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: May 14 21:00:33 2025 GMT
Not After : May 15 21:00:33 2025 GMT
Subject: CN=89d0415be028f427daac1a022e7e74da622c7872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:ee:cb:66:e8:98:05:e2:36:93:cf:44:74:
5a:10:49:4f:1b:f6:d7:eb:17:78:3a:ec:07:10:f4:
79:e8:e7:70:e2:df:f9:ef:a5:32:e3:a9:75:ba:f7:
d1:94:ed:50:d0:41:65:0f:0b:7d:d6:79:2c:ad:04:
34:78:c2:de:b1:89:86:54:01:09:96:1d:e2:8c:c2:
79:03:20:e4:9c:2d:79:2a:28:f6:6f:c7:3f:68:ae:
af:57:72:e8:e1:da:45:21:b8:ec:6d:ec:1e:36:83:
21:1d:82:47:7b:68:1e:fd:16:31:e1:b9:4d:49:b8:
22:50:f0:3a:4e:76:35:82:77:dc:96:48:73:fc:97:
5c:0d:db:27:90:38:0b:cf:1c:85:ba:2d:d7:6d:e7:
bd:0a:a1:a1:d0:9d:6b:16:73:0b:0c:52:f9:04:08:
62:af:48:0c:fb:41:92:6c:69:c1:6a:93:5b:e5:9f:
c0:5e:92:f6:fb:2d:39:fa:0b:50:1c:0c:d7:91:ac:
2d:b4:59:6f:1b:40:7f:19:47:e5:63:0d:67:4a:fa:
c5:5e:e2:54:d0:09:c9:07:75:c0:89:e4:56:10:6e:
b1:00:98:67:3d:14:c5:75:ce:50:04:d4:f1:14:37:
e9:ec:34:a4:b5:32:0c:df:7f:fd:66:e5:36:e2:cd:
e9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D0:41:5B:E0:28:F4:27:DA:AC:1A:02:2E:7E:74:DA:62:2C:78:72
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a5:52:b6:34:74:2d:f6:f9:1d:90:2c:51:66:e5:39:c7:36:
d5:0a:7b:42:72:31:da:30:45:7f:a7:1f:64:ff:2d:91:cd:5f:
12:41:ed:ef:24:85:95:a4:77:94:87:6e:68:fd:9b:20:fc:a0:
4b:d0:fd:c3:1d:b8:ab:4f:ea:ec:b1:e2:aa:44:40:66:af:e5:
8e:75:bf:05:4f:c2:e5:f7:9d:38:df:98:1b:8a:8f:92:10:c0:
ff:4b:39:bd:f3:63:9b:fc:96:5a:50:27:16:e1:33:bf:83:14:
ec:44:a0:81:1e:2b:60:4b:c2:13:ec:b8:76:1e:3c:df:f6:6c:
77:9f:48:fa:1f:0b:0b:74:67:c2:e9:28:cd:28:22:c7:c1:ec:
72:49:3e:59:0b:ef:e5:99:b2:3f:b2:53:e5:c8:63:40:ed:59:
3f:d5:14:7a:5f:d4:07:aa:83:f4:14:54:88:7d:a4:9c:f5:0e:
2f:e2:09:39:9e:59:02:4c:17:22:ce:c9:57:8d:f9:e6:95:7f:
51:15:59:93:f0:d4:2d:0e:9d:78:02:05:5a:b0:0d:a6:f9:72:
af:0f:e3:c8:fb:25:c8:38:19:16:35:c3:c5:bf:9a:f6:06:8e:
ef:0a:24:d2:71:65:43:a3:b3:91:cd:95:8c:04:ed:59:ce:f3:
b2:10:ac:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:23:54 2025 by rpki-client