Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
File: 6oPjDy1vznWmZqLQtja0bsmYocs.mft (raw, json)
Hash identifier: gAF3vZa8ro/qlSnFYoLO1/vNOgWilSkyaJTtU50RPNw=
Subject key identifier: 0C:29:3F:E6:11:E0:7C:50:DF:7C:6F:61:C7:2B:80:4C:A3:AD:83:1B
Authority key identifier: EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
Certificate issuer: /CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Certificate serial: 0196839113606C3AF17FE49936036EB5EBE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
Manifest number: 0D36
Signing time: Tue 29 Apr 2025 22:00:45 +0000
Manifest this update: Tue 29 Apr 2025 22:00:45 +0000
Manifest next update: Wed 30 Apr 2025 22:00:45 +0000
Files and hashes: 1: 6oPjDy1vznWmZqLQtja0bsmYocs.crl (hash: 4bcQtx4vjvK586ZSXqOhGRrkHAZQPp7jF4XAN4ONE04=)
2: PmUQGIgLz8QIpP_lpOReSK54Clg.roa (hash: Se5e2cwGwp5UjA/KSKu5YaznbQl9QedXbnS92uqoCrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:13:60:6c:3a:f1:7f:e4:99:36:03:6e:b5:eb:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Validity
Not Before: Apr 29 22:00:45 2025 GMT
Not After : Apr 30 22:00:45 2025 GMT
Subject: CN=0c293fe611e07c50df7c6f61c72b804ca3ad831b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:a2:01:3e:ad:f9:cb:91:c5:59:2b:c6:f7:
a1:97:12:00:70:e7:99:f4:a9:6a:72:b7:d9:a6:b4:
5e:8e:fa:eb:73:f8:fa:5f:08:21:bb:14:10:13:6f:
5b:c1:8d:df:5e:75:4b:2e:4d:8d:83:cf:37:ff:46:
48:54:4b:f9:ae:8d:d2:11:77:df:d7:16:d3:65:2c:
5c:b1:90:af:04:94:60:76:eb:0e:24:7d:a2:43:07:
ee:6e:96:01:0d:e8:8f:a8:fb:26:44:52:60:04:3c:
0b:dc:4f:ba:dd:16:b3:14:cc:5d:b6:2c:9d:db:a5:
64:3a:ad:85:1f:25:7a:9f:d5:c7:59:1b:49:45:57:
8e:c3:70:57:14:b0:3f:e2:b3:2c:79:a6:88:65:a2:
d1:e2:ac:1a:d7:85:45:ca:de:2e:5d:2b:b8:01:c8:
90:df:7c:48:8c:81:34:6c:a7:4c:3a:ff:89:45:4b:
63:75:e7:98:9a:98:2d:3f:bc:9c:2a:64:7d:c5:09:
e9:10:c6:a1:87:b6:c6:26:d0:43:82:e5:ff:1e:35:
3a:af:91:c2:62:be:0b:c9:de:f1:ae:67:8e:f9:d2:
41:0b:08:d6:1c:3d:5f:8a:54:cc:3a:27:62:e6:4c:
36:0b:e1:a0:23:f9:d8:b6:da:ed:1f:2c:35:db:a7:
64:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:29:3F:E6:11:E0:7C:50:DF:7C:6F:61:C7:2B:80:4C:A3:AD:83:1B
X509v3 Authority Key Identifier:
keyid:EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:8a:0d:9b:19:fe:60:5f:f7:8b:a4:d6:d5:3d:5a:a7:3b:be:
b2:66:84:a2:b2:61:d1:73:1b:ce:75:65:35:e9:b0:82:5e:f8:
52:8f:87:e0:fb:aa:7c:3d:1d:84:79:e5:2c:e1:3d:7c:ce:05:
0b:07:83:60:50:4a:ea:ed:1d:74:47:16:ad:78:13:01:d6:c2:
54:22:84:02:85:3b:3a:4d:b1:33:06:fe:a9:f6:a6:ed:22:1c:
a1:25:98:50:e8:23:eb:35:47:3f:80:44:e1:a7:85:4c:f0:de:
b1:b8:5f:85:c1:43:9d:8e:58:88:48:54:8f:07:15:6a:1c:c5:
e9:5d:86:2c:2f:6e:35:b8:f3:ea:c4:b8:87:82:9e:f6:5b:29:
1a:08:0c:00:00:cc:7d:e9:24:d3:2d:3f:74:c7:ac:5d:e4:89:
b0:d9:49:ca:8b:41:2e:55:b1:20:12:6d:b1:1b:ca:1e:14:85:
b0:30:6c:28:d8:bd:7b:e4:fc:d5:2c:0c:ca:bf:69:b5:a3:00:
72:23:87:ab:6a:67:c0:d8:55:96:80:58:2a:c1:7e:fe:46:c0:
12:8d:ce:ce:c3:37:0b:13:f8:a9:62:bd:bb:92:ca:72:93:da:
66:93:3d:1a:8f:ca:57:8c:b8:74:8d:43:09:a5:71:1c:c4:49:
fd:91:3f:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkRNgbDrxf+SZNgNutevnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhODNlMzBmMmQ2ZmNlNzVhNjY2YTJkMGI2MzZiNDZlYzk5
OGExY2IwHhcNMjUwNDI5MjIwMDQ1WhcNMjUwNDMwMjIwMDQ1WjAzMTEwLwYDVQQD
EygwYzI5M2ZlNjExZTA3YzUwZGY3YzZmNjFjNzJiODA0Y2EzYWQ4MzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBSiAT6t+cuRxVkrxvehlxIAcOeZ
9KlqcrfZprRejvrrc/j6XwghuxQQE29bwY3fXnVLLk2Ng883/0ZIVEv5ro3SEXff
1xbTZSxcsZCvBJRgdusOJH2iQwfubpYBDeiPqPsmRFJgBDwL3E+63RazFMxdtiyd
26VkOq2FHyV6n9XHWRtJRVeOw3BXFLA/4rMseaaIZaLR4qwa14VFyt4uXSu4AciQ
33xIjIE0bKdMOv+JRUtjdeeYmpgtP7ycKmR9xQnpEMahh7bGJtBDguX/HjU6r5HC
Yr4Lyd7xrmeO+dJBCwjWHD1filTMOidi5kw2C+GgI/nYttrtHyw126dk0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwpP+YR4HxQ33xvYccrgEyjrYMbMB8GA1UdIwQY
MBaAFOqD4w8tb851pmai0LY2tG7JmKHLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNjljNzUtODM5MS00ZDkzLWIzNzgt
M2ZhMTVhMzNmNDI5LzEvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jNjljNzUtODM5MS00ZDkzLWIzNzgtM2ZhMTVhMzNmNDI5
LzEvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4oNmxn+
YF/3i6TW1T1apzu+smaEorJh0XMbznVlNemwgl74Uo+H4PuqfD0dhHnlLOE9fM4F
CweDYFBK6u0ddEcWrXgTAdbCVCKEAoU7Ok2xMwb+qfam7SIcoSWYUOgj6zVHP4BE
4aeFTPDesbhfhcFDnY5YiEhUjwcVahzF6V2GLC9uNbjz6sS4h4Ke9lspGggMAADM
fekk0y0/dMesXeSJsNlJyotBLlWxIBJtsRvKHhSFsDBsKNi9e+T81SwMyr9ptaMA
ciOHq2pnwNhVloBYKsF+/kbAEo3OzsM3CxP4qWK9u5LKcpPaZpM9Go/KV4y4dI1D
CaVxHMRJ/ZE/5w==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:14:36 2025 by rpki-client