Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
File: 6vauX7W-PpqblzGcevhQK76JOjc.mft (raw, json)
Hash identifier: G2BFkzGzwr4dSbQu9w0EVeE0Zx903HX6yt2OvK8ISfk=
Subject key identifier: 65:7A:67:A7:8F:FE:05:7A:3E:10:BE:EC:B2:34:56:AB:B5:26:68:F2
Authority key identifier: EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37
Certificate issuer: /CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
Certificate serial: 0196AAD548A082066B2850ACB6DC2CF54F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
Manifest number: 14CA
Signing time: Wed 07 May 2025 13:00:26 +0000
Manifest this update: Wed 07 May 2025 13:00:26 +0000
Manifest next update: Thu 08 May 2025 13:00:26 +0000
Files and hashes: 1: 6vauX7W-PpqblzGcevhQK76JOjc.crl (hash: x4CrWolF4Eb+BFXK0/bnRny5VIO0aFFr9WmG8bwN2xw=)
2: Ahvmv48ngf-KjVDLWWBDTBDASd0.roa (hash: 7ZyR7Sl5BjMwCkDy0XgoHIL8hy/aGuAql4BiOWVa8/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:d5:48:a0:82:06:6b:28:50:ac:b6:dc:2c:f5:4f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
Validity
Not Before: May 7 13:00:26 2025 GMT
Not After : May 8 13:00:26 2025 GMT
Subject: CN=657a67a78ffe057a3e10beecb23456abb52668f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:16:10:e1:47:15:61:14:37:35:78:40:22:
73:69:41:ed:81:f1:9d:ce:fc:9a:52:0a:dd:4b:1f:
48:ea:f6:22:0a:e0:b3:b6:08:8c:1a:e0:7b:dc:70:
fb:0a:95:a3:53:6d:93:97:af:d9:5d:af:9e:1b:eb:
27:cf:66:6c:eb:ac:e2:65:da:01:24:78:c1:56:7b:
55:c2:16:6e:a9:7a:e7:91:59:e5:1e:1d:7b:5b:90:
b1:6a:76:a3:8e:75:fb:b6:17:3a:16:2b:5d:88:ef:
74:ff:e2:a1:73:56:40:43:94:d1:e7:8d:f3:2a:12:
c0:a1:72:5d:71:a1:69:e8:7a:c8:f8:1d:83:63:21:
db:18:07:fd:7e:f0:e7:8a:ae:d4:50:43:cf:84:36:
a8:0b:da:e3:34:5d:05:83:a4:6c:9e:3c:54:78:ef:
76:ae:80:02:9e:7c:9c:36:7d:c4:d7:b9:6d:06:f6:
a6:8a:8e:3a:30:a7:a4:25:e2:d4:82:67:84:d1:24:
8c:c4:f7:6e:38:ff:6d:80:99:d9:ff:35:6d:2f:70:
22:40:c4:6a:37:a1:67:f6:1d:6f:ee:9f:f0:e4:4a:
04:20:90:8e:31:3c:a1:75:64:d5:31:3c:45:f9:67:
73:f1:66:97:fe:88:b9:41:92:07:1a:0b:c1:bb:10:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7A:67:A7:8F:FE:05:7A:3E:10:BE:EC:B2:34:56:AB:B5:26:68:F2
X509v3 Authority Key Identifier:
keyid:EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:60:fc:61:df:7b:d3:62:f7:44:e7:cd:04:0e:45:26:a4:9e:
9e:79:98:4b:c4:aa:92:b6:33:78:8b:5f:f4:1d:60:1c:22:5a:
32:68:c7:26:a3:aa:b6:8a:39:b4:d7:0d:24:61:c6:ef:70:59:
18:96:40:b5:ab:03:99:79:59:f6:2a:46:9f:c1:cc:6f:53:aa:
f8:c5:10:46:87:08:9b:94:68:84:46:dd:66:47:95:4c:ec:3e:
ae:bf:6a:ed:05:37:17:e2:6e:b2:8b:d6:9c:d1:74:b8:16:07:
38:d2:8d:63:77:43:0e:a6:16:ad:d4:f4:d8:36:7c:42:77:ab:
f1:7f:8e:60:a9:1b:d0:8f:e0:eb:44:2e:f3:37:ac:e9:03:8f:
8c:17:a6:b4:28:02:72:a1:10:56:80:16:9b:c1:ea:c6:3a:00:
80:32:96:a5:ef:7d:d7:69:21:4e:de:c9:a4:6d:ae:a0:e4:da:
81:99:5b:9f:55:33:66:b3:ba:9b:2c:8d:00:e4:a0:ea:44:8d:
57:c1:69:70:09:08:0f:9a:23:01:30:6d:18:06:34:0c:c1:4d:
77:1b:08:d6:cd:ba:85:f9:b7:1c:19:c4:24:6a:52:82:7d:51:
1d:36:62:ec:6d:bf:a4:e2:ed:2f:c0:53:03:f5:57:24:b9:ec:
42:99:dc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:04:08 2025 by rpki-client