Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier: 4QeWPIIBRHbJSrAoYn3YhS3cdZ2IfVu4E26hkYz/4+c=
Subject key identifier: B2:0E:C5:EF:0E:93:85:3E:DD:7F:DB:D2:B7:76:E5:54:5A:60:26:E6
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 0196BCA4CBB8F3ACB06FF204B5BF192383C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number: 0E8A
Signing time: Sun 11 May 2025 00:00:38 +0000
Manifest this update: Sun 11 May 2025 00:00:38 +0000
Manifest next update: Mon 12 May 2025 00:00:38 +0000
Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: gQGFwgsV2FHVFCWvzcGrC6SUfyIhDvgffB0EAbIyJJk=)
2: dxgxd6-xP9JkwgZUnUwpf-WY-Kw.roa (hash: hqOsy5iRYOF259KVMk0QtmelCMMCDmkaOIHQ2ucYLWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:cb:b8:f3:ac:b0:6f:f2:04:b5:bf:19:23:83:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: May 11 00:00:38 2025 GMT
Not After : May 12 00:00:38 2025 GMT
Subject: CN=b20ec5ef0e93853edd7fdbd2b776e5545a6026e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:bb:47:23:55:7f:d7:29:a0:8d:de:70:52:
d7:db:d0:77:1e:93:8c:0a:89:8e:09:ec:4c:ee:cd:
f7:b2:65:53:a1:0d:fb:a4:5f:92:5c:fa:f3:0e:69:
1f:67:a8:8c:f4:c3:97:19:41:f9:9a:9c:23:5d:9d:
15:b6:fe:09:ab:66:f6:78:d6:83:60:5c:47:14:ab:
f6:89:62:20:a0:da:03:9c:c7:81:29:65:7a:48:7f:
ed:b6:5b:a7:95:03:be:ae:14:9e:a6:61:9a:49:93:
df:49:c4:39:ee:cf:c4:59:6f:75:fe:43:54:68:d2:
10:c1:91:25:4a:17:81:40:d4:ef:5d:61:32:1f:1c:
54:63:b9:13:27:c7:be:80:cf:3f:98:3f:44:70:da:
0f:6c:b6:20:0b:83:ba:7c:1e:00:0a:8d:12:48:5e:
4a:5d:f6:c9:e1:d5:5e:3e:5f:6d:95:98:4d:9c:77:
83:71:68:a3:14:d3:a1:28:54:3e:4a:3b:71:b1:9d:
2a:d8:b0:e4:33:6d:52:5c:a1:c6:1a:66:39:fe:3d:
d6:b8:ae:a7:93:82:85:e4:f0:eb:5b:b2:ac:9e:5e:
ec:42:ab:db:37:d0:e2:18:35:c0:44:58:f9:a5:17:
3a:b5:31:ea:0b:f9:aa:65:ce:ba:fc:eb:c9:ab:74:
37:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0E:C5:EF:0E:93:85:3E:DD:7F:DB:D2:B7:76:E5:54:5A:60:26:E6
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:69:d1:0a:44:23:84:5b:bc:9a:e0:c7:a5:6f:76:38:b9:ee:
ad:c4:ec:5b:48:a3:d3:b8:06:01:f3:0c:09:6b:a2:68:98:9f:
fd:db:79:80:2e:bd:b0:0e:06:a7:7f:70:2f:52:bf:c3:39:90:
de:06:0c:9f:2f:ea:25:54:c3:89:08:f4:f9:00:5e:77:26:77:
25:c3:5a:e5:8b:5f:c9:c6:a9:00:ba:54:aa:f8:ba:1d:43:1f:
33:42:3c:39:f6:08:f0:4a:a0:c5:fd:67:75:26:6d:2f:49:7e:
e3:91:f1:c9:45:bb:b7:1c:3c:da:64:48:21:30:23:cb:59:aa:
d3:f8:a0:43:7e:01:0f:11:f9:55:a5:68:98:eb:b9:c3:e0:c1:
85:ea:22:ba:90:61:fb:fd:c1:a2:5d:db:0c:b6:b0:f1:55:77:
ca:20:c2:57:df:8d:48:d4:a9:2b:e3:fa:60:5c:0d:cd:d9:44:
05:ed:a5:76:2e:04:80:c0:5b:47:9f:68:80:f3:fa:8b:e6:01:
5c:2f:c1:23:ac:5a:92:19:a6:3c:a5:e7:6b:56:c5:34:5e:7c:
a5:6c:ea:8e:fd:c8:5a:92:d1:c3:36:41:82:20:f6:1e:50:0f:
a3:7c:24:7f:90:a5:b6:01:8a:9c:81:7e:e8:00:d1:90:28:b5:
62:28:c7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:39:34 2025 by rpki-client