Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
File: 6BOTvf9gFGKlVZHSass9jJI_8m0.mft (raw, json)
Hash identifier: bX8Dv/C8Vk7wfdChP6OzNnrQy5rhNAQyi0qYK3I97OM=
Subject key identifier: CC:2A:23:B4:18:9B:50:F8:9C:FC:56:E9:CF:CA:D9:FE:C4:D9:57:89
Authority key identifier: E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
Certificate issuer: /CN=e81393bdff601462a55591d26acb3d8c923ff26d
Certificate serial: 0196A2401C7E5CEC62A3F075E6E4D5627F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
Manifest number: 13C3
Signing time: Mon 05 May 2025 21:00:32 +0000
Manifest this update: Mon 05 May 2025 21:00:32 +0000
Manifest next update: Tue 06 May 2025 21:00:32 +0000
Files and hashes: 1: 6BOTvf9gFGKlVZHSass9jJI_8m0.crl (hash: ONPeOB6HBMUvDHALTogcj8MJBHo0LJVR7lXcPCQI2WQ=)
2: RwWHoWi8bvEcrn91U7_cQg2FozE.roa (hash: HQDbKoqS2BbhQGyXNSljHl9fABiKNRyJ1D+l6ixZKCE=)
3: vvQy0Yj8i6h1g42ZTAwhRIXBuw8.roa (hash: T8KzIT3w14qu1ZHhgwVuDOIW10SZ/SXhFvfY0nRS5nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:40:1c:7e:5c:ec:62:a3:f0:75:e6:e4:d5:62:7f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81393bdff601462a55591d26acb3d8c923ff26d
Validity
Not Before: May 5 21:00:32 2025 GMT
Not After : May 6 21:00:32 2025 GMT
Subject: CN=cc2a23b4189b50f89cfc56e9cfcad9fec4d95789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0c:66:0d:b6:b6:b8:f8:77:d0:af:d5:a8:89:
c6:fd:f4:1c:d1:3b:0d:22:b3:53:ac:3c:e7:8f:2d:
ef:9b:c9:14:fb:16:78:4b:f1:31:01:22:2b:65:7f:
1b:fd:ff:2f:68:5b:0d:d8:64:94:5c:57:a8:c5:3d:
b0:ce:48:68:b1:65:c4:d8:3a:fa:2d:d8:39:fd:cc:
6a:93:13:dc:76:9c:d6:65:01:db:3b:80:f0:a9:d0:
3e:b1:6a:9d:48:f9:9d:3e:dd:00:28:3c:33:cc:41:
c3:ef:c4:ec:5d:7d:7c:32:3f:d8:35:ee:54:0a:61:
d2:7d:53:60:47:21:7a:01:80:b1:2f:62:93:36:5d:
cb:ac:ec:41:07:58:1a:f9:5e:9a:0f:7b:ce:65:0a:
81:8f:36:90:4f:cb:9e:6c:9b:d3:07:64:57:e7:21:
52:97:31:2d:10:70:5f:f2:b9:06:96:fa:80:91:97:
c5:66:58:60:70:1a:7e:76:4e:f0:b3:7f:84:6c:df:
18:c0:e5:24:e0:c7:d5:7e:43:c1:6b:6d:89:64:a1:
26:e1:3d:1b:48:1d:2b:77:b6:ff:2a:1c:5e:94:18:
ce:6c:75:62:7b:86:40:6c:26:a2:66:86:73:bf:72:
9e:d9:62:35:d3:72:49:97:8b:e4:d4:f8:71:c0:3c:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2A:23:B4:18:9B:50:F8:9C:FC:56:E9:CF:CA:D9:FE:C4:D9:57:89
X509v3 Authority Key Identifier:
keyid:E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c9:32:74:63:81:9a:12:b0:75:93:54:bf:4c:a9:b0:2e:25:
21:20:51:9d:9b:4b:fb:e0:b5:39:a3:f7:c8:42:ce:b4:b9:f5:
fa:7f:16:a3:4d:c7:a2:86:d3:48:b5:07:0e:0a:ee:21:cc:e0:
eb:4a:a7:7b:f4:f9:ab:6d:73:f5:c5:ae:14:2d:52:e3:e9:a6:
a6:23:ac:49:fc:60:ba:a8:40:39:0f:97:63:11:35:2b:3f:41:
91:52:2c:8b:d1:85:5a:db:87:72:4f:8e:8f:34:b1:84:57:68:
22:b3:1c:d2:47:5c:91:4a:f5:13:27:78:69:87:7a:a9:35:af:
e5:7f:65:4d:9c:a1:f5:5f:6e:5d:87:57:08:61:0f:99:46:e3:
72:e3:9b:df:58:0c:3b:31:56:73:41:5f:e9:b8:8c:7c:1b:77:
2c:bf:24:0f:26:19:3f:19:5d:d9:bc:7b:7d:b0:ef:7c:06:5e:
8b:cd:b9:25:ac:95:97:79:d1:f4:a2:5c:94:da:1c:fe:2b:c6:
63:8d:9a:30:aa:5d:42:fc:d4:f9:35:88:48:f5:da:fa:87:cf:
9b:b4:11:ed:2c:83:00:96:7b:f7:b3:4e:6c:71:6b:4c:3f:e3:
90:6f:06:a3:53:75:5e:90:66:df:62:36:48:a4:ab:a5:b6:f5:
b5:33:42:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:31:17 2025 by rpki-client