Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
File: 6CBqoyUuPqjWhOrseimTUTtdIwc.mft (raw, json)
Hash identifier: iAXrhKeuoFgvzbhEhCVf4tIbh6tT4BNv/Lf9/sLBuZ0=
Subject key identifier: 27:88:DB:14:90:4F:51:77:2A:D5:4F:91:6F:DC:31:96:73:30:FF:61
Authority key identifier: E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
Certificate issuer: /CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Certificate serial: 0196A98C0B31667F2EC5062CFF17630A4FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
Manifest number: 10AB
Signing time: Wed 07 May 2025 07:00:49 +0000
Manifest this update: Wed 07 May 2025 07:00:49 +0000
Manifest next update: Thu 08 May 2025 07:00:49 +0000
Files and hashes: 1: 6CBqoyUuPqjWhOrseimTUTtdIwc.crl (hash: Zr8q2Oel+XvvuLeKITU+p4DX4bAGdBYsjTkDB21l4Po=)
2: M-_cdcLtCwgztUAvo6U6xc0Pw7c.roa (hash: QqjONmK2RzxQWqZOMsrEEr0jP5v8oGa9bpmq/G1FKtE=)
3: fgObtEnjhGSc2Dbcv69KzOyhLQg.roa (hash: +AsZFMBywBZBAtd5zEwLILx86Sgs0i4z2/GivURPyZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8c:0b:31:66:7f:2e:c5:06:2c:ff:17:63:0a:4f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Validity
Not Before: May 7 07:00:49 2025 GMT
Not After : May 8 07:00:49 2025 GMT
Subject: CN=2788db14904f51772ad54f916fdc31967330ff61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:c9:cf:66:6b:d0:23:41:d4:0f:4a:fe:49:
63:74:fc:af:71:df:b9:b6:24:dc:12:ff:d6:d4:3a:
b7:96:55:52:34:8a:69:d9:c0:15:db:79:b6:d2:bc:
b9:b3:c7:65:f5:41:fb:2b:cd:94:8c:a4:03:28:21:
41:ca:1f:43:7d:69:34:2b:da:e6:77:41:55:06:9e:
0a:3c:47:71:c6:91:19:40:93:de:f5:1e:c9:3f:f1:
4f:17:55:74:29:04:38:e9:18:8d:23:56:45:95:23:
cd:b5:d5:6d:cd:32:91:81:eb:66:1a:da:13:cc:38:
00:85:5a:ca:d4:34:6a:ef:7b:f4:e6:87:de:75:96:
31:6f:5f:a6:c2:dc:7e:e4:56:4f:41:56:db:20:58:
fe:84:77:50:9b:8e:29:4d:83:f9:34:e3:c6:08:92:
fc:3d:9b:07:40:7e:e3:70:38:1c:a4:1e:2d:61:30:
4b:93:55:d6:ae:fb:10:65:45:12:43:36:1e:78:b0:
1c:3e:2d:5b:16:86:bf:7c:85:e1:87:30:e8:f0:33:
52:a4:50:93:dc:73:8f:6f:2b:3e:48:5d:4f:0f:2f:
9a:36:ce:3f:54:a8:90:c8:e3:89:06:8e:0f:c9:05:
d2:e2:94:e0:96:fb:34:4c:28:a6:8e:84:e1:30:04:
c9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:88:DB:14:90:4F:51:77:2A:D5:4F:91:6F:DC:31:96:73:30:FF:61
X509v3 Authority Key Identifier:
keyid:E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c1:e5:f4:7b:76:be:87:12:bb:07:3b:92:e0:2d:c1:f8:9a:
5f:80:b2:84:88:06:22:01:8e:20:1b:d2:6f:7a:75:01:a9:54:
89:93:fd:7e:95:1a:7e:54:1c:5b:36:96:bf:2b:87:54:1b:c6:
73:7c:93:17:c8:b8:fd:3a:1d:c7:e0:d4:b1:cd:bb:ee:33:72:
8e:84:d5:db:cb:ca:42:23:bd:a2:cd:78:47:12:75:bf:f8:c5:
e1:d9:c7:6f:8a:34:6a:5c:37:97:27:af:40:38:57:d2:fd:53:
63:7c:87:af:8d:91:f7:ec:56:b7:71:79:45:d6:cb:1f:8a:72:
87:6d:e1:bd:03:23:38:b2:aa:19:77:c8:2d:d3:49:6d:78:95:
b2:f3:14:e0:b4:0c:ef:b1:d1:fd:67:7a:6e:9b:35:63:30:5f:
7a:51:c5:bd:ed:3a:46:78:6f:37:5c:49:f5:6c:38:b5:c5:93:
dd:74:73:82:1d:30:4f:bf:d5:4a:e0:68:05:7d:71:f0:20:0f:
07:5d:83:4c:8d:fb:46:b7:00:64:32:57:07:da:b8:1d:72:b5:
1b:6b:94:75:9b:a1:b9:a0:d0:7c:2c:d1:32:00:63:09:76:6b:
7c:1d:13:19:cc:fe:3e:5f:64:8f:97:04:9c:09:2b:27:f2:52:
5a:f9:41:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:04:31 2025 by rpki-client