Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
File: b6rlVhP8iVhve9beDtygl7hhWmo.mft (raw, json)
Hash identifier: uJwX01JxNywshIha26axg7rnHkHhU+1Qfr3M/dnP9Kg=
Subject key identifier: DF:30:A2:5B:5D:9F:BE:55:CF:D2:97:99:7A:B7:72:A7:64:B0:83:E7
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Certificate issuer: /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial: 0196C26FCB92C540A8E9795C0108B1F3B10D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
Manifest number: 08A1
Signing time: Mon 12 May 2025 03:00:28 +0000
Manifest this update: Mon 12 May 2025 03:00:28 +0000
Manifest next update: Tue 13 May 2025 03:00:28 +0000
Files and hashes: 1: aOtm6U59mShACrUP4z50hrZCIxk.roa (hash: 8fQIVCesiryqBUIZoQ97a4j4i55DYNAa5i2DNRlMQ5M=)
2: b6rlVhP8iVhve9beDtygl7hhWmo.crl (hash: JFAvE05vzZJC3IoMVOgI6urgIVXB+MEJEDUFoDLGiOQ=)
3: y4zgX7Lvz7a-J26BXsPiVoxb_IM.roa (hash: NtJpJ4/+lfRrM4AtabmrS2+ljg+xewyFLniZOgVUMdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:cb:92:c5:40:a8:e9:79:5c:01:08:b1:f3:b1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Validity
Not Before: May 12 03:00:28 2025 GMT
Not After : May 13 03:00:28 2025 GMT
Subject: CN=df30a25b5d9fbe55cfd297997ab772a764b083e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:4b:97:be:4f:a9:14:18:1b:d7:d0:c7:16:
7a:0a:b9:ec:ca:8f:15:4b:d8:cb:d5:03:12:96:b5:
1e:96:51:05:65:9e:40:4e:81:9b:a9:ec:aa:f2:a3:
6b:b5:60:b6:11:26:89:ed:7e:c8:8c:55:1f:f0:da:
99:eb:4b:5c:89:e8:e0:5a:dd:92:d6:5d:48:57:48:
48:40:c0:8c:65:dd:6e:9a:a5:d3:37:82:65:ff:72:
b2:61:fc:11:b1:0e:47:b0:b6:28:1e:d6:d3:7f:9f:
ce:62:37:e4:6b:a3:6f:ad:2b:76:a8:d4:cb:c8:76:
3d:68:e7:40:8f:e9:e1:ef:4a:bf:9e:78:bd:d6:6e:
3a:ed:5e:77:30:55:d3:0a:8c:c3:c4:1b:28:34:dd:
1d:bb:dd:f0:ac:e8:40:8f:e6:a2:e6:13:b5:e6:de:
9b:e7:eb:da:ef:39:8a:57:1b:9a:56:2c:99:36:f3:
07:23:62:37:01:74:6f:6d:29:04:a3:71:d4:e7:bb:
50:f1:d1:af:84:e1:ef:2e:d5:17:79:a7:38:56:04:
73:13:28:0a:33:dd:3d:39:1a:08:4f:b4:dc:af:0a:
b1:75:95:09:c4:db:ac:51:f2:07:ae:6b:d8:d6:ec:
3d:4f:35:df:1c:de:5b:5a:5f:36:76:c8:c6:c1:aa:
37:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:30:A2:5B:5D:9F:BE:55:CF:D2:97:99:7A:B7:72:A7:64:B0:83:E7
X509v3 Authority Key Identifier:
keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:de:06:61:3b:49:97:f0:3c:bf:69:cf:1e:3c:ef:4d:f2:3b:
bd:0d:ea:1c:94:72:6f:e3:e7:c3:fc:d1:b4:01:7b:e4:44:ca:
c9:a3:a8:47:84:85:ad:9d:17:7b:59:63:d1:91:9b:b2:8d:a8:
97:93:64:40:06:5d:08:2a:14:98:78:f4:a5:30:1e:ed:e0:df:
16:3d:44:e4:d9:46:db:96:53:a6:e5:f1:9c:60:11:d9:04:65:
52:6b:ab:9f:3a:08:aa:00:09:78:45:e7:13:c2:cc:7d:6c:90:
56:75:ad:90:59:f7:2e:46:fb:bd:ee:84:eb:c1:06:4a:c5:fc:
06:d8:c5:77:0c:9b:aa:f6:dc:ae:22:ef:23:7d:a9:42:b1:8a:
5c:47:d2:37:e6:2c:1d:b9:43:4c:e2:55:85:d4:9a:0d:dd:49:
79:5b:09:3e:dc:78:02:12:09:a0:04:21:b4:f8:f5:58:94:44:
d9:c4:8d:32:37:d6:48:8b:51:47:ad:6f:43:43:61:95:8f:7f:
b0:c4:00:ff:84:d8:45:8f:47:f1:a3:45:51:f1:cd:cf:21:fe:
32:86:bf:47:4b:41:d7:1c:37:61:82:2e:1f:14:2c:48:ea:84:
6e:1a:bd:9e:c2:91:6d:4a:00:96:e3:8f:89:98:e8:b6:e8:e0:
c4:7e:73:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:49:21 2025 by rpki-client