Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
File: F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft (raw, json)
Hash identifier: oBGYPRjRtsSdVK1uamTFVABAqv0gsM1dBMM+N/q308I=
Subject key identifier: D6:18:14:62:67:45:E0:68:95:50:59:43:DB:42:9E:CC:66:22:7A:35
Authority key identifier: 17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5
Certificate issuer: /CN=17a16657a2497737ca03621cc668d20c762136d5
Certificate serial: 019678D685319B2CF14A5D2D65E9572A722C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
Manifest number: 0CB2
Signing time: Sun 27 Apr 2025 20:00:46 +0000
Manifest this update: Sun 27 Apr 2025 20:00:46 +0000
Manifest next update: Mon 28 Apr 2025 20:00:46 +0000
Files and hashes: 1: F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl (hash: v2lscVXMVAgTi2mBrFYbHx02kf0mwdLopdPinXBn66s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:85:31:9b:2c:f1:4a:5d:2d:65:e9:57:2a:72:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17a16657a2497737ca03621cc668d20c762136d5
Validity
Not Before: Apr 27 20:00:46 2025 GMT
Not After : Apr 28 20:00:46 2025 GMT
Subject: CN=d61814626745e06895505943db429ecc66227a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:59:48:8c:24:6d:7c:dd:8e:39:94:b0:63:
e8:66:07:ec:88:52:d6:e4:32:c4:a8:74:7a:02:bb:
4a:30:65:58:4e:21:a4:35:11:6e:0b:10:e2:28:07:
84:27:fb:f9:c1:c3:d4:25:2a:cb:f5:9c:b9:1d:d7:
6d:96:6b:55:4b:51:e4:1c:78:24:b1:8e:0b:7a:a8:
14:2f:89:fb:37:74:76:e0:90:01:02:d4:6c:05:c8:
31:16:a4:3c:70:2b:ba:3b:d3:36:01:ac:8d:07:40:
f6:8f:c7:8c:99:20:2a:85:68:b4:fd:22:ba:f9:f4:
3b:fc:ca:a9:cc:15:e0:9e:c1:68:d2:42:f1:67:26:
c2:b3:77:c8:56:35:2b:7a:47:e1:bf:ff:04:0b:f9:
ba:bf:f7:9f:66:5d:ab:43:99:1f:37:cc:3d:3d:9e:
67:9a:f7:59:e3:27:da:a5:43:d3:bb:34:46:91:49:
8c:9e:6e:57:56:d2:0e:b4:0b:a1:5a:ec:88:55:29:
c9:18:63:72:04:f5:39:6b:3f:49:3b:c4:c5:fd:32:
e1:d3:13:61:d6:db:87:df:15:f2:a1:17:3c:6e:cf:
ca:65:60:3e:bc:dc:50:1c:4e:8d:62:21:00:cc:8c:
cb:34:33:d1:e8:d9:9f:40:91:20:0a:af:39:d1:d4:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:18:14:62:67:45:E0:68:95:50:59:43:DB:42:9E:CC:66:22:7A:35
X509v3 Authority Key Identifier:
keyid:17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4c:d2:16:63:03:32:4f:b3:f5:c1:fe:3a:66:6e:87:42:3b:
31:89:01:b4:5d:e2:6c:58:16:b6:63:17:4b:20:fc:b8:0a:71:
a0:7e:c1:22:b4:84:d2:40:d9:e6:a2:05:39:c1:50:e5:af:82:
d3:1f:e1:4d:ad:57:0d:30:ac:0a:41:3f:7e:91:22:1a:17:83:
67:ad:d0:be:d2:27:c2:c3:c9:4b:ff:d0:d5:01:b5:e8:d4:91:
c9:e2:be:5e:45:aa:a1:5e:15:b8:35:8e:85:fe:57:27:c7:0f:
3d:be:04:f5:e1:ad:16:33:e8:32:9b:04:81:c2:53:76:38:95:
df:03:2e:50:9b:7b:7c:e1:6e:bf:4d:f2:6f:16:99:a7:32:50:
6c:e5:4a:cc:4d:09:ba:4e:87:54:5e:32:3a:3a:26:89:cb:f4:
bc:4d:36:84:57:dc:91:d1:7b:cd:b2:f8:c8:c9:cd:ab:a8:64:
0b:9e:6e:bc:ed:0d:36:61:64:06:eb:12:bf:ba:33:fe:ee:7f:
e2:eb:31:3f:b5:41:c3:07:e5:fe:cb:be:07:8c:6d:9f:6b:dd:
0f:21:56:6d:c8:a0:8a:a1:dc:d5:3a:5f:79:e7:57:ca:36:a4:
b4:57:c5:4d:81:d5:51:63:93:cc:27:4f:84:5d:44:07:a4:b1:
92:83:4d:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ41oUxmyzxSl0tZelXKnIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YTE2NjU3YTI0OTc3MzdjYTAzNjIxY2M2NjhkMjBjNzYy
MTM2ZDUwHhcNMjUwNDI3MjAwMDQ2WhcNMjUwNDI4MjAwMDQ2WjAzMTEwLwYDVQQD
EyhkNjE4MTQ2MjY3NDVlMDY4OTU1MDU5NDNkYjQyOWVjYzY2MjI3YTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCVZSIwkbXzdjjmUsGPoZgfsiFLW
5DLEqHR6ArtKMGVYTiGkNRFuCxDiKAeEJ/v5wcPUJSrL9Zy5HddtlmtVS1HkHHgk
sY4LeqgUL4n7N3R24JABAtRsBcgxFqQ8cCu6O9M2AayNB0D2j8eMmSAqhWi0/SK6
+fQ7/MqpzBXgnsFo0kLxZybCs3fIVjUrekfhv/8EC/m6v/efZl2rQ5kfN8w9PZ5n
mvdZ4yfapUPTuzRGkUmMnm5XVtIOtAuhWuyIVSnJGGNyBPU5az9JO8TF/TLh0xNh
1tuH3xXyoRc8bs/KZWA+vNxQHE6NYiEAzIzLNDPR6NmfQJEgCq850dSWKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYYFGJnReBolVBZQ9tCnsxmIno1MB8GA1UdIwQY
MBaAFBehZleiSXc3ygNiHMZo0gx2ITbVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjZGbVY2SkpkemZLQTJJY3htalNESFloTnRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80YWM4NWYtZTNmZi00YjUyLWI4OTgt
OTZjOGY0MzlhYjgxLzEvRjZGbVY2SkpkemZLQTJJY3htalNESFloTnRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni80YWM4NWYtZTNmZi00YjUyLWI4OTgtOTZjOGY0MzlhYjgx
LzEvRjZGbVY2SkpkemZLQTJJY3htalNESFloTnRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0zSFmMD
Mk+z9cH+OmZuh0I7MYkBtF3ibFgWtmMXSyD8uApxoH7BIrSE0kDZ5qIFOcFQ5a+C
0x/hTa1XDTCsCkE/fpEiGheDZ63QvtInwsPJS//Q1QG16NSRyeK+XkWqoV4VuDWO
hf5XJ8cPPb4E9eGtFjPoMpsEgcJTdjiV3wMuUJt7fOFuv03ybxaZpzJQbOVKzE0J
uk6HVF4yOjomicv0vE02hFfckdF7zbL4yMnNq6hkC55uvO0NNmFkBusSv7oz/u5/
4usxP7VBwwfl/su+B4xtn2vdDyFWbcigiqHc1TpfeedXyjaktFfFTYHVUWOTzCdP
hF1EB6SxkoNNlw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 04:26:09 2025 by rpki-client