Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
File: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft (raw, json)
Hash identifier: o1nEd2Xjj+5I+opdv8du8IwrWsGDap0nAXD5dDVOXdc=
Subject key identifier: C8:30:8E:3E:DE:19:99:62:A5:54:A1:9D:79:06:96:6F:32:CF:CD:7B
Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
Certificate issuer: /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Certificate serial: 01967B69B0DE98EE1FBC6C8560CAD00069A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
Manifest number: 09CA
Signing time: Mon 28 Apr 2025 08:00:46 +0000
Manifest this update: Mon 28 Apr 2025 08:00:46 +0000
Manifest next update: Tue 29 Apr 2025 08:00:46 +0000
Files and hashes: 1: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl (hash: pVRbQihmbykqpS2bQP1BkaOApTmSnOPEhshPKV3gC9c=)
2: LdRBYy0Dc5TAEL5DjhgBeOrbOd4.roa (hash: DqAe52Zea4wwRHNsVvBEFGj53/XE1pCKy+2JNBHlZFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:b0:de:98:ee:1f:bc:6c:85:60:ca:d0:00:69:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Validity
Not Before: Apr 28 08:00:46 2025 GMT
Not After : Apr 29 08:00:46 2025 GMT
Subject: CN=c8308e3ede199962a554a19d7906966f32cfcd7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:9e:7c:5d:dd:d4:20:0c:dd:b8:b6:06:c6:
dd:e3:17:5c:fe:c8:93:be:af:d8:89:6b:62:35:e0:
01:86:75:4f:80:b6:73:7c:53:2a:8e:ca:5b:00:56:
c4:d1:74:c9:c0:d0:fe:3d:dc:9c:7b:d9:a4:ea:d3:
be:4e:ed:80:ae:b8:d2:65:01:50:1d:4c:43:2c:1a:
65:3c:a7:49:04:7a:c2:c7:38:34:bc:c5:da:4b:a7:
0c:3a:63:b0:d1:2b:8a:4c:45:4e:b3:34:b4:a0:39:
7d:17:29:62:06:89:d3:d3:11:6b:e2:bd:e7:a9:a6:
ab:bb:01:1b:6c:0a:09:c1:5c:95:de:65:46:a6:a9:
02:24:ee:bc:4a:f9:3d:87:6a:b4:17:04:de:6e:20:
98:78:a4:0a:d6:c6:83:1c:8e:9b:b1:4b:51:12:db:
6e:66:02:50:e2:0d:a7:2c:e0:6c:29:07:0d:f8:c1:
66:0b:a4:e0:75:4b:c1:07:2c:b7:db:27:b1:2e:08:
ac:82:c3:3e:9f:01:1d:8f:71:f3:3d:46:34:3c:6f:
17:8f:ec:54:dc:c2:0f:84:85:ce:c0:e5:6f:64:cb:
38:20:ae:37:f1:d6:02:64:ff:7b:b8:80:08:7c:c0:
48:23:8a:e0:fb:ee:57:ed:7c:7c:8f:c9:0f:b5:4f:
eb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:30:8E:3E:DE:19:99:62:A5:54:A1:9D:79:06:96:6F:32:CF:CD:7B
X509v3 Authority Key Identifier:
keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:03:9f:76:c3:25:14:e7:4c:57:6e:bb:7b:a8:80:18:54:42:
66:9d:89:50:10:2d:e1:9b:2c:cd:cd:af:61:15:9a:00:64:a0:
fa:e3:c6:9b:32:7d:f7:2e:24:3f:9f:77:31:5b:4a:3b:1b:08:
70:0d:04:d3:ae:a9:fb:83:51:b5:76:4d:92:2c:fc:3a:cc:fd:
3a:75:f7:53:94:a7:a2:27:c3:cf:2d:26:19:81:bf:95:17:5e:
9f:42:73:93:4b:78:5d:02:83:af:0f:88:63:1f:7e:cf:a4:8e:
ad:d3:f2:2c:60:43:16:93:9f:77:59:75:d5:d7:53:2f:04:d4:
3c:fd:f6:1a:55:d8:65:30:f1:59:97:4a:9b:3f:f3:84:10:aa:
da:fc:16:09:4d:c0:1c:7f:d8:4d:3d:8c:8e:a8:3d:b6:58:37:
ce:1d:2f:59:11:58:94:1f:97:7e:d6:7e:7a:20:a6:2b:28:cb:
70:3b:45:92:09:6d:4b:a0:cc:fd:3f:c0:b0:02:3e:56:76:97:
d3:fe:d7:7b:97:92:9e:75:53:44:ff:3a:06:6a:bf:d8:f5:0f:
d5:1d:e1:e5:c0:fd:c4:c1:28:10:fb:4e:47:0e:8d:3f:a5:70:
d4:cf:2e:11:ba:da:d6:16:e3:09:06:2a:8b:9f:6d:36:bf:a5:
1e:4f:b7:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7abDemO4fvGyFYMrQAGmhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYTVhYmU5ZjczMDQzODMxOThiYTFmZmE1OTI3OTBlY2Yy
YzNjZWIwHhcNMjUwNDI4MDgwMDQ2WhcNMjUwNDI5MDgwMDQ2WjAzMTEwLwYDVQQD
EyhjODMwOGUzZWRlMTk5OTYyYTU1NGExOWQ3OTA2OTY2ZjMyY2ZjZDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskWefF3d1CAM3bi2Bsbd4xdc/siT
vq/YiWtiNeABhnVPgLZzfFMqjspbAFbE0XTJwND+Pdyce9mk6tO+Tu2ArrjSZQFQ
HUxDLBplPKdJBHrCxzg0vMXaS6cMOmOw0SuKTEVOszS0oDl9FyliBonT0xFr4r3n
qaaruwEbbAoJwVyV3mVGpqkCJO68Svk9h2q0FwTebiCYeKQK1saDHI6bsUtREttu
ZgJQ4g2nLOBsKQcN+MFmC6TgdUvBByy32yexLgisgsM+nwEdj3HzPUY0PG8Xj+xU
3MIPhIXOwOVvZMs4IK438dYCZP97uIAIfMBII4rg++5X7Xx8j8kPtU/r5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgwjj7eGZlipVShnXkGlm8yz817MB8GA1UdIwQY
MBaAFOqlq+n3MEODGYuh/6WSeQ7PLDzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9mYjJhYTEtMDA0Yi00OWM0LWFhNDEt
YzlkZTIyYjkxNmNhLzEvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9mYjJhYTEtMDA0Yi00OWM0LWFhNDEtYzlkZTIyYjkxNmNh
LzEvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwOfdsMl
FOdMV267e6iAGFRCZp2JUBAt4Zsszc2vYRWaAGSg+uPGmzJ99y4kP593MVtKOxsI
cA0E066p+4NRtXZNkiz8Osz9OnX3U5SnoifDzy0mGYG/lRden0Jzk0t4XQKDrw+I
Yx9+z6SOrdPyLGBDFpOfd1l11ddTLwTUPP32GlXYZTDxWZdKmz/zhBCq2vwWCU3A
HH/YTT2Mjqg9tlg3zh0vWRFYlB+XftZ+eiCmKyjLcDtFkgltS6DM/T/AsAI+VnaX
0/7Xe5eSnnVTRP86Bmq/2PUP1R3h5cD9xMEoEPtORw6NP6Vw1M8uEbra1hbjCQYq
i59tNr+lHk+3ew==
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:01:16 2025 by rpki-client