Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
File: 6lPzPM38X-hLhMFfBDIpBpka-ec.mft (raw, json)
Hash identifier: c0mw0Fd1LSRKaFBMZac2hw8iB4Aq6mm3tu6739fXX80=
Subject key identifier: 4F:FA:A7:1B:9C:39:05:25:3D:3E:E6:88:E0:35:17:73:73:D0:7B:6F
Authority key identifier: EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
Certificate issuer: /CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Certificate serial: 0196B96C6E3FE11347FFDB4D81D687F6C11F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 09:00:13 +0000
Manifest this update: Sat 10 May 2025 09:00:13 +0000
Manifest next update: Sun 11 May 2025 09:00:13 +0000
Files and hashes: 1: 6lPzPM38X-hLhMFfBDIpBpka-ec.crl (hash: LWWZiVHTfc9ZL66o65l45GzwtSjLCUFsUinTazcxJdo=)
2: xNXvRwm0cFi8tLLdb2nvNopZe5s.roa (hash: Ek+ehf6lVos9XeTSOdvg4+GzfPP9fwac2An5Jv96Lm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:6c:6e:3f:e1:13:47:ff:db:4d:81:d6:87:f6:c1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Validity
Not Before: May 10 09:00:13 2025 GMT
Not After : May 11 09:00:13 2025 GMT
Subject: CN=4ffaa71b9c3905253d3ee688e035177373d07b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:19:e6:f9:cd:c5:03:8d:ef:21:ee:59:0c:
18:e6:aa:0d:8a:1f:58:53:64:d9:9d:ea:d6:53:d8:
b8:7e:4a:17:ea:20:2f:a8:a3:bd:fa:4b:57:c8:26:
a8:43:8d:0f:e1:f9:84:18:3e:89:e1:21:a1:79:5f:
15:da:5a:66:38:a6:72:0c:e9:76:19:59:c9:43:03:
33:2c:50:ec:5e:81:b9:1d:a5:43:2e:dd:28:d8:45:
28:7b:da:00:f6:f9:07:f4:c4:ff:7b:97:4a:c6:16:
88:04:fa:6b:d0:64:0a:89:3d:16:17:87:6f:ad:89:
9e:78:ae:a9:58:5e:50:60:9c:ed:8e:9b:5c:22:12:
ff:81:3b:e9:95:cc:e7:af:a2:32:9d:1d:df:d8:96:
0c:06:ce:ea:96:f7:02:30:7a:48:9f:bf:a0:d3:d1:
7c:eb:d6:91:4b:9c:58:c5:93:d6:02:34:b6:b0:2a:
8b:d6:23:c5:af:35:0a:5d:cc:8f:fb:27:d6:e1:1b:
c6:33:dd:a1:1f:af:b7:e2:86:be:8f:b2:1c:e0:5b:
8f:24:53:22:d5:10:ea:50:5e:54:63:19:64:94:36:
4b:a1:9d:fa:35:49:5d:2c:06:10:b8:ea:15:cf:6c:
3c:85:54:33:12:c0:f7:b6:1d:8e:8b:a4:58:e7:4f:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FA:A7:1B:9C:39:05:25:3D:3E:E6:88:E0:35:17:73:73:D0:7B:6F
X509v3 Authority Key Identifier:
keyid:EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b6:cf:72:24:54:11:9d:bb:fd:d4:0d:2e:da:d9:cb:46:a1:
ca:12:c9:a0:4b:11:ab:ff:f6:e0:fd:50:0c:98:1f:68:ae:47:
4d:f1:d5:55:80:0c:16:ff:39:0e:b2:02:36:de:d7:cb:e8:93:
53:da:83:73:21:04:6f:d2:99:63:45:e9:70:4c:07:44:e4:ae:
1f:e1:70:28:43:f5:d3:ba:10:a8:61:e5:68:9a:4f:03:af:d0:
b5:53:00:a8:2c:6b:99:a5:bb:8d:70:9a:b7:0c:6a:c1:11:fc:
db:05:e9:5b:89:80:a4:97:1c:39:8f:6d:1a:c5:df:8a:63:f9:
c6:5b:72:19:ab:ba:af:3c:25:24:f8:31:10:01:78:21:27:52:
2c:e6:29:74:fb:44:56:29:ee:4e:40:a1:40:41:7a:2c:4b:4f:
c9:1e:73:49:68:39:ac:53:59:37:a9:24:4a:84:8e:91:03:56:
33:d0:53:6e:fa:c3:ed:cb:8d:c1:15:6c:08:03:e4:95:cb:ee:
6b:b3:e5:34:2d:a4:2c:d4:77:ec:2f:07:41:98:9d:26:85:7d:
02:d5:e3:f4:5a:02:01:97:8a:9e:ba:44:8c:e0:ee:58:34:d8:
9c:7f:06:c0:dc:02:5b:8a:e4:98:b6:7a:ad:f4:f8:ad:a3:41:
89:02:a7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:47:51 2025 by rpki-client