Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
File: 6QYQQQz4AUrB2-n2q8yBxmGHr74.mft (raw, json)
Hash identifier: bqUDDma571oyuOUZ7KXfo9fzjtlldA5Pt9j5NhzhiGY=
Subject key identifier: 5A:65:2A:E9:1A:C3:A1:A1:DE:A1:B9:60:A5:C1:2E:B5:5C:A5:27:01
Authority key identifier: E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE
Certificate issuer: /CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe
Certificate serial: 0196BFA5AF38732D301A1D9D17E3152431EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
Manifest number: 061A
Signing time: Sun 11 May 2025 14:00:28 +0000
Manifest this update: Sun 11 May 2025 14:00:28 +0000
Manifest next update: Mon 12 May 2025 14:00:28 +0000
Files and hashes: 1: 6QYQQQz4AUrB2-n2q8yBxmGHr74.crl (hash: x7qRkXu+dSV+hbv7lG5wivEQA9nBihu9ctGPWrFWm/c=)
2: QhkomV9_6ceJGU8VKTfbtyRNcXM.roa (hash: OB6SsMliHPSapAri1eb5Zi/y08KLAC6vdxvVZUeAlWU=)
3: gz7px3LCXwdOhvRIWMGfnzsiLoY.roa (hash: F70BUXb5RkAWoSm6MxaywQeDn9WJDpTvkQ2ap1NhBjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:af:38:73:2d:30:1a:1d:9d:17:e3:15:24:31:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe
Validity
Not Before: May 11 14:00:28 2025 GMT
Not After : May 12 14:00:28 2025 GMT
Subject: CN=5a652ae91ac3a1a1dea1b960a5c12eb55ca52701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:99:1d:9d:00:c4:a7:a1:90:14:f1:5b:a8:
f1:da:d5:fd:ee:7d:7a:e8:69:50:5c:38:f3:14:81:
dc:bc:0b:61:6a:54:10:8b:68:ec:e5:18:76:14:00:
e6:73:1b:89:f1:a3:9a:65:3b:64:23:6f:26:62:76:
97:ba:98:e9:e2:34:a7:8c:28:d7:da:dd:0f:3a:7d:
1d:4e:4e:d5:69:fc:b6:2a:8a:fe:c2:0e:63:db:00:
1f:05:de:18:da:7b:6e:9b:07:cc:13:ca:4d:eb:c4:
d3:c4:df:3c:ff:f0:a6:3a:cc:ae:89:90:06:24:a1:
4b:da:eb:16:23:a6:f0:87:d6:fc:1d:b2:03:a8:41:
22:45:79:ad:05:ea:c0:48:ff:9f:d0:7a:3f:ea:54:
c3:7f:38:3a:54:75:97:a2:c6:11:fc:46:6c:40:34:
1c:e7:2f:ad:be:d2:85:a4:0f:f2:c7:13:ab:24:d5:
ca:10:f0:57:2c:1e:52:61:a1:47:7d:7f:9f:16:d5:
aa:ae:33:ea:e7:63:3e:bd:83:81:eb:bb:c4:ea:df:
31:1d:84:ae:c9:51:62:90:72:7c:b9:83:eb:65:75:
fe:38:58:70:b6:9f:c5:c3:cd:c7:84:09:8f:f9:80:
85:b1:b1:7a:ab:50:f6:82:8e:2b:4f:25:89:ef:c5:
1e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:65:2A:E9:1A:C3:A1:A1:DE:A1:B9:60:A5:C1:2E:B5:5C:A5:27:01
X509v3 Authority Key Identifier:
keyid:E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6d:e8:7d:70:eb:43:9e:2b:d6:27:1a:00:03:43:e5:27:44:
5f:06:28:e9:c3:3e:c5:ee:9d:ae:15:8a:98:6c:4e:57:99:9b:
64:89:0f:c3:b9:f5:8e:ab:12:cb:8b:5d:b5:88:c0:72:d5:a6:
a1:0a:97:84:a9:78:3c:99:8e:fa:4e:71:a6:ba:70:2d:f2:44:
e6:87:9f:11:de:42:31:47:3d:c9:34:96:30:91:ff:23:00:19:
c7:c1:90:9b:e8:28:85:d2:f5:ca:2b:84:d5:21:bb:24:25:0b:
d9:0e:22:b8:70:95:22:f5:2f:14:9c:fd:e3:cc:5f:60:5b:cd:
80:9b:ac:c7:1a:05:08:96:4d:c9:44:bd:a3:ee:18:33:7c:f2:
a9:16:9f:81:eb:94:02:0b:8e:fa:a9:f0:92:73:2b:c3:06:72:
c7:09:18:fb:a5:e2:71:6c:72:23:85:1b:a8:ea:6e:d1:8a:f5:
67:b4:30:28:0a:df:ab:3f:82:b5:25:62:3c:a0:76:8c:16:03:
2d:8b:9d:40:af:4a:ea:8b:e8:45:81:8e:44:1e:ae:e0:7d:aa:
88:63:5e:b2:ec:bd:bd:76:25:df:82:92:a3:69:ec:64:6f:b7:
55:50:c4:6c:33:a0:7c:14:5b:d2:10:05:10:3d:ab:7e:b7:ea:
21:13:a7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:14:55 2025 by rpki-client