Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: DY4QDy9mO/tfw5+MwTecaKS/p0IOcTd9w0CMzHIFSIo=
Subject key identifier: CF:61:15:F8:BD:F4:36:22:AF:B6:F4:7C:E4:7A:24:AE:40:9D:F7:99
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 019677FAB69D752660697C8654E3D430D767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 16:00:41 +0000
Manifest this update: Sun 27 Apr 2025 16:00:41 +0000
Manifest next update: Mon 28 Apr 2025 16:00:41 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: nCL1cm6jNFJFO3kLGcC6Zo6e1IvK3Nsh1JRqP3iTTvU=)
2: EdM8mT-itEKC9G8RLMrDLsNcS3o.roa (hash: aC1rODFSDGloRhxUO+L4zBSj1xyAZL+tlsZ8+nVllOY=)
3: LKntu7OdIVDRUeVXjemgx5JdRkc.roa (hash: kna/rCNXXypoDbewR/02DlClr5ejgsrzdo1XT3WKJ6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:b6:9d:75:26:60:69:7c:86:54:e3:d4:30:d7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Apr 27 16:00:41 2025 GMT
Not After : Apr 28 16:00:41 2025 GMT
Subject: CN=cf6115f8bdf43622afb6f47ce47a24ae409df799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e0:c2:ce:48:46:84:ef:13:2a:0b:3f:9e:2e:
0d:96:90:f6:92:d9:8b:92:c0:af:03:83:d9:de:ab:
cb:e3:94:60:e2:35:4a:8e:8e:d3:fc:69:82:40:0d:
45:3e:e2:c0:24:25:f3:9e:57:b9:a2:d8:ff:32:5e:
ce:b0:96:01:c9:ea:7a:93:30:75:22:e5:9f:cc:76:
ae:5b:33:41:2c:b9:74:e7:77:dd:5b:3a:15:cb:90:
52:a8:85:0b:18:c6:76:26:90:57:34:cf:ae:42:ce:
34:d7:40:01:7c:4e:1f:fc:6b:60:99:3b:fb:c7:8b:
a3:d7:31:08:38:ea:0a:88:a6:46:27:7f:39:da:f8:
d5:21:96:ee:8f:20:74:6f:85:5c:15:cf:f3:cd:ea:
6c:57:6b:77:cd:8c:bc:ee:bf:08:95:85:9d:21:13:
b6:ed:0b:1f:15:9b:b5:3c:b8:07:c4:23:5d:c0:74:
c5:b3:9a:bf:30:73:d2:e1:b0:66:0a:3b:d6:93:4c:
4e:61:12:9b:59:50:f8:b3:38:db:b0:82:f2:d7:92:
9a:96:4a:69:8b:bb:7c:5a:7a:82:23:e4:4a:f0:b8:
3f:13:11:cc:24:02:37:4a:97:1f:e5:80:30:1e:c7:
73:3a:7c:0b:b5:69:11:3f:27:0f:10:10:6b:79:61:
8a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:61:15:F8:BD:F4:36:22:AF:B6:F4:7C:E4:7A:24:AE:40:9D:F7:99
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c0:e5:bb:b7:b3:b1:d8:f4:2b:50:7c:96:f9:a9:e0:31:9c:
cd:5d:72:61:d4:75:d4:0f:67:86:d7:ec:1c:4d:b7:eb:8b:d1:
93:b5:dc:22:7e:9d:71:b0:9c:ed:c2:48:07:1d:94:47:03:3d:
5a:0b:df:ca:91:67:11:90:fd:ed:ea:01:5d:5e:31:4d:81:15:
4b:87:40:55:ba:54:aa:1d:f2:c1:9e:6e:ba:6b:94:14:e0:2d:
97:73:7b:94:cf:5c:30:6a:57:ec:f6:8b:42:7d:4a:2e:d9:41:
e5:b0:d8:9e:e1:22:dd:d9:18:fe:d5:5d:8c:f3:4c:a3:d3:52:
bf:fb:fd:44:f6:f8:1f:fd:d8:c9:83:0b:5e:83:43:84:f5:b4:
3c:bc:81:f7:c6:c2:1e:fe:86:85:5b:e3:24:2e:1b:a4:1b:34:
3a:fe:3f:be:f5:48:90:71:15:b8:e0:08:d5:c5:af:ae:44:58:
b4:46:4b:ef:fe:97:1d:af:f2:77:a1:70:c8:7f:1b:a2:27:77:
74:fc:69:6d:c5:82:91:b2:c6:d3:38:16:35:6f:54:65:54:7c:
00:df:30:0e:ba:d9:09:f7:f4:93:e5:94:79:2b:26:94:f4:28:
6e:4a:63:e8:24:10:b6:8e:bb:fe:af:13:01:ee:fd:c8:76:a0:
eb:9e:bf:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+raddSZgaXyGVOPUMNdnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMGYwOGQ0ZWUxZjk0Zjk4NDQ5M2I0NjdiZDhhY2EyYWRm
YTI4NjYwHhcNMjUwNDI3MTYwMDQxWhcNMjUwNDI4MTYwMDQxWjAzMTEwLwYDVQQD
EyhjZjYxMTVmOGJkZjQzNjIyYWZiNmY0N2NlNDdhMjRhZTQwOWRmNzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8uDCzkhGhO8TKgs/ni4NlpD2ktmL
ksCvA4PZ3qvL45Rg4jVKjo7T/GmCQA1FPuLAJCXznle5otj/Ml7OsJYByep6kzB1
IuWfzHauWzNBLLl053fdWzoVy5BSqIULGMZ2JpBXNM+uQs4010ABfE4f/GtgmTv7
x4uj1zEIOOoKiKZGJ3852vjVIZbujyB0b4VcFc/zzepsV2t3zYy87r8IlYWdIRO2
7QsfFZu1PLgHxCNdwHTFs5q/MHPS4bBmCjvWk0xOYRKbWVD4szjbsILy15Kalkpp
i7t8WnqCI+RK8Lg/ExHMJAI3Spcf5YAwHsdzOnwLtWkRPycPEBBreWGKyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9hFfi99DYir7b0fOR6JK5AnfeZMB8GA1UdIwQY
MBaAFOoPCNTuH5T5hEk7RnvYrKKt+ihmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUt
MmVmYjQ2MWZkNDEzLzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUtMmVmYjQ2MWZkNDEz
LzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsDlu7ez
sdj0K1B8lvmp4DGczV1yYdR11A9nhtfsHE2364vRk7XcIn6dcbCc7cJIBx2URwM9
WgvfypFnEZD97eoBXV4xTYEVS4dAVbpUqh3ywZ5uumuUFOAtl3N7lM9cMGpX7PaL
Qn1KLtlB5bDYnuEi3dkY/tVdjPNMo9NSv/v9RPb4H/3YyYMLXoNDhPW0PLyB98bC
Hv6GhVvjJC4bpBs0Ov4/vvVIkHEVuOAI1cWvrkRYtEZL7/6XHa/yd6FwyH8boid3
dPxpbcWCkbLG0zgWNW9UZVR8AN8wDrrZCff0k+WUeSsmlPQobkpj6CQQto67/q8T
Ae79yHag656/GQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 18:51:03 2025 by rpki-client