Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
File: 6e5l7GbZD_j_-NFwcyBXdALoXMc.mft (raw, json)
Hash identifier: G/Nh2l44wFifjWbgG0Yug2a5EZ5lqKij6KcMcidgRwY=
Subject key identifier: F2:4F:D1:64:0F:16:9F:67:F6:02:FA:0B:84:05:A2:7F:D0:C8:5E:AE
Authority key identifier: E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7
Certificate issuer: /CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
Certificate serial: 01969DF606A77EA9CB3076A4A93CC9BBDD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
Manifest number: 0F1E
Signing time: Mon 05 May 2025 01:01:08 +0000
Manifest this update: Mon 05 May 2025 01:01:08 +0000
Manifest next update: Tue 06 May 2025 01:01:08 +0000
Files and hashes: 1: 49q3DDmrg6cVtppsLABS81MGkqg.roa (hash: Y49UGOvEecC7Z5Ts0nifT62msA+Ws1fglGSRVZSw/Hs=)
2: 6e5l7GbZD_j_-NFwcyBXdALoXMc.crl (hash: TWDPiqJrKEwMj9JaJwOgc9nLIm7ZyVAyUmxf5VX+MR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f6:06:a7:7e:a9:cb:30:76:a4:a9:3c:c9:bb:dd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
Validity
Not Before: May 5 01:01:08 2025 GMT
Not After : May 6 01:01:08 2025 GMT
Subject: CN=f24fd1640f169f67f602fa0b8405a27fd0c85eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8b:88:ed:74:bd:3f:ca:2b:3d:81:e8:50:73:
b0:83:5a:71:90:fa:d6:6d:77:d9:fd:e5:5d:36:2d:
f4:e2:40:98:7f:9f:9c:c1:f0:ca:6f:55:7e:f8:2f:
4a:58:40:6f:1d:40:86:41:45:24:16:41:94:4d:dc:
5b:fc:0d:38:20:4a:c3:0d:ac:4f:32:80:f3:16:92:
65:1b:00:2b:8d:e2:04:84:d5:25:78:57:33:11:f7:
b8:9d:d5:b5:00:64:dc:0c:5b:63:4b:ea:ae:fe:87:
43:57:51:42:97:fd:b8:38:12:b8:45:f9:25:86:ec:
58:ab:19:86:c8:b2:46:82:f2:3c:c2:4a:27:f1:da:
8b:a6:74:ae:ea:ef:5f:35:57:97:7b:60:36:e1:87:
c6:08:6a:26:05:97:50:77:bb:03:e3:d0:41:f1:26:
d6:e8:bf:77:43:83:a7:b8:28:15:11:79:fd:bf:d0:
f2:0d:fe:1f:ef:07:be:e4:e7:34:6b:35:da:48:80:
17:66:0a:51:f5:69:45:b3:c9:69:aa:18:ae:b4:51:
32:4e:b9:b4:2c:69:c9:26:59:ac:f5:f0:75:d5:05:
98:d4:63:0b:69:88:96:82:71:3f:74:3e:f2:ce:df:
f6:dc:27:74:f9:1a:29:5d:80:74:3d:79:c5:08:fb:
43:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4F:D1:64:0F:16:9F:67:F6:02:FA:0B:84:05:A2:7F:D0:C8:5E:AE
X509v3 Authority Key Identifier:
keyid:E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:0d:1e:8a:e0:3f:cb:41:8e:43:89:f5:b6:d3:bc:a4:d7:10:
ba:41:90:6c:dc:a6:cc:c3:2b:b7:31:3e:4b:f5:ce:75:ac:e9:
65:b0:37:e7:49:e7:fa:cd:99:5c:a8:a6:5f:68:01:af:01:69:
9b:97:09:35:f6:11:d3:0d:80:e6:f6:a8:88:0f:38:5d:b0:65:
d3:04:a5:bd:26:72:84:da:af:e4:23:4e:d5:21:f3:83:c3:14:
7d:02:4f:56:61:01:7f:a1:a4:6d:03:2c:12:b6:6a:69:6a:64:
af:36:da:a5:5d:57:d2:df:dd:52:c8:21:fc:13:30:ce:7e:89:
9e:18:17:72:bb:58:a5:4d:a1:ac:0b:c4:d0:58:47:8d:20:1f:
11:ab:ef:de:35:36:b4:c6:77:09:29:c4:e6:35:5e:31:ae:39:
56:02:0e:6b:a3:78:e6:5d:c0:a7:75:90:b8:1f:f3:ee:ad:24:
9e:6b:ba:32:d6:98:81:57:4a:66:c8:16:1f:2a:48:af:1c:16:
e3:28:a8:45:ae:00:36:98:25:ff:81:8b:7f:46:1c:17:67:ee:
8b:42:6a:ff:04:3e:84:b3:8e:a7:68:97:f5:c0:ea:8b:91:f9:
f9:05:bc:39:ad:b4:a7:77:1c:f4:de:4e:c5:fc:5b:c6:f0:f4:
7b:e1:f3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:33:35 2025 by rpki-client