Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
File: 6rBmxuGACj9b0uQG6aYg0qD29lM.mft (raw, json)
Hash identifier: fnmK0kGxjU5ZvcIQ9hb1YPEbsWa4Z8zCxnNfO5Vxwwo=
Subject key identifier: 50:4E:30:C0:04:8B:52:65:9D:95:8A:CB:86:7A:17:D0:77:6C:62:C7
Authority key identifier: EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
Certificate issuer: /CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Certificate serial: 0196C1CB10F1D0B3C44D1B79DFB9C5AA8B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
Manifest number: 0BCA
Signing time: Mon 12 May 2025 00:00:32 +0000
Manifest this update: Mon 12 May 2025 00:00:32 +0000
Manifest next update: Tue 13 May 2025 00:00:32 +0000
Files and hashes: 1: 6rBmxuGACj9b0uQG6aYg0qD29lM.crl (hash: rGHZzng4fWzRa8CSSADm+M70/cXfMqTH72siqeAAJgo=)
2: 9uvjekcau3PbfLrEyZwNzBwQO7Q.roa (hash: mH0HAaOf2X0fWHcxqJaO7mLzzy3VZpb8eqMe7h725z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:10:f1:d0:b3:c4:4d:1b:79:df:b9:c5:aa:8b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Validity
Not Before: May 12 00:00:32 2025 GMT
Not After : May 13 00:00:32 2025 GMT
Subject: CN=504e30c0048b52659d958acb867a17d0776c62c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:67:6f:e9:02:38:8b:bc:c7:ed:c2:0e:fd:
6a:28:05:c7:f2:7d:26:98:b2:43:14:fc:5d:1c:86:
a2:83:5f:5b:21:94:99:62:65:75:44:fa:b7:8f:c8:
e0:37:26:86:6d:44:51:5a:2e:0f:39:5d:e6:40:42:
f3:fe:01:ef:8b:b1:59:f2:50:81:a1:51:50:0d:0a:
b9:a1:12:2f:e5:09:27:0a:cd:92:81:6c:04:36:8b:
a9:ec:66:e3:22:ca:44:5f:b3:d5:23:51:f4:f7:74:
b9:91:fb:81:ab:49:59:c3:e7:7f:71:80:90:67:ac:
18:a4:8b:2c:38:ca:d4:af:3d:59:21:57:04:c5:72:
0a:f5:94:43:23:70:08:62:76:f7:33:64:02:72:70:
09:20:71:cf:30:13:99:5b:77:39:60:c3:6b:f8:d5:
b2:e2:fa:90:2a:1f:47:ef:9f:82:3f:dd:79:e5:4b:
a4:52:11:4e:1a:20:28:4e:2d:ce:3e:2f:6a:8a:2f:
08:1d:51:39:23:19:d2:3d:73:1b:53:7d:15:4a:3d:
e7:87:dc:72:ae:84:bd:06:42:a0:d8:09:c9:d2:4c:
27:e4:00:14:03:d5:63:17:59:ef:a7:c0:6e:ee:ef:
90:65:ea:c9:6b:42:5c:d5:2d:13:7f:43:ab:2f:05:
ab:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4E:30:C0:04:8B:52:65:9D:95:8A:CB:86:7A:17:D0:77:6C:62:C7
X509v3 Authority Key Identifier:
keyid:EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:93:c0:4e:72:5a:cd:71:16:c9:76:63:d5:5b:8a:36:71:fd:
a8:a2:91:39:0b:1b:01:0c:44:37:b1:a7:85:5e:39:67:ac:8f:
48:19:fc:8a:b7:ca:37:0a:93:cd:a6:83:00:3f:84:47:28:8d:
25:bb:ae:49:65:6f:20:95:9e:95:f3:37:b1:40:f7:33:60:d3:
c3:30:ff:ce:87:b9:43:3d:c9:9f:94:9d:da:47:95:6b:a8:76:
40:66:aa:b6:bf:fa:be:28:95:dc:72:96:ff:92:0a:c3:c0:5d:
d5:64:71:94:9c:4c:21:34:c5:be:0c:8b:8f:d6:d7:13:54:bb:
15:eb:f9:75:cb:a9:90:19:6a:0f:07:3f:c9:d8:13:d1:a8:14:
02:fe:a4:3e:f6:91:5e:6a:44:f2:a9:4c:42:97:db:fb:f8:bf:
ac:ef:da:d5:79:17:03:e5:c9:44:d3:f3:3e:04:08:6e:d3:55:
2a:1d:6c:ba:42:df:ad:40:a1:fc:33:14:49:ac:c7:3a:10:8b:
82:66:6f:53:0a:e5:49:45:91:c9:d8:89:22:a9:60:2c:86:37:
47:fd:8d:98:bc:da:c3:7a:32:4f:48:f6:84:e0:83:ac:2e:23:
ae:e6:75:ff:60:5e:d6:bc:65:bf:b2:0c:9f:8e:8e:cf:9b:5b:
66:d5:7e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:18:26 2025 by rpki-client