Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
File: 6D-DcLFcuReWVQPKADcyMthXqp0.mft (raw, json)
Hash identifier: fhCW21usGTi1pnKmngDoPnkRjm371PS0lAG3xRt/xYg=
Subject key identifier: D1:5B:E1:10:E3:12:14:F0:B7:3C:CB:E7:01:67:30:56:80:C6:DD:98
Authority key identifier: E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D
Certificate issuer: /CN=e83f8370b15cb917965503ca00373232d857aa9d
Certificate serial: 01967FB4993BFE34A827C9D8EAA1D8FBA1D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
Manifest number: 1007
Signing time: Tue 29 Apr 2025 04:01:04 +0000
Manifest this update: Tue 29 Apr 2025 04:01:04 +0000
Manifest next update: Wed 30 Apr 2025 04:01:04 +0000
Files and hashes: 1: 6D-DcLFcuReWVQPKADcyMthXqp0.crl (hash: /vfOooRz/v1hRxG4YFAX6ucp+cNK3BwcB8Bve9f+fM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:99:3b:fe:34:a8:27:c9:d8:ea:a1:d8:fb:a1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e83f8370b15cb917965503ca00373232d857aa9d
Validity
Not Before: Apr 29 04:01:04 2025 GMT
Not After : Apr 30 04:01:04 2025 GMT
Subject: CN=d15be110e31214f0b73ccbe70167305680c6dd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:31:7b:26:e7:11:62:2d:5a:12:33:77:08:
b3:17:23:cb:93:9d:3d:ed:22:ea:65:2f:0c:39:0d:
ac:b3:b9:41:dc:0d:a9:f5:11:50:f6:e3:0b:e1:09:
b4:84:34:ae:0c:c4:48:33:fb:90:16:fe:96:83:aa:
fc:3b:1f:24:da:c4:f8:88:12:53:e5:28:5a:6b:16:
08:5b:d0:2b:56:20:66:57:97:8d:c3:39:29:30:a8:
b4:36:2f:4e:22:cd:05:79:f8:0a:41:25:47:ec:34:
02:1f:35:f5:f7:6b:5e:61:e6:26:85:a3:d0:95:f9:
ee:50:8a:9e:11:31:fd:27:10:77:f0:7c:3c:f5:b0:
9e:46:06:ac:38:e9:d0:98:e5:3c:86:0e:3c:57:6a:
fd:4b:1a:ee:5d:32:41:a7:ab:02:d8:e1:29:d6:73:
70:e2:38:1d:13:42:e7:9b:64:1c:7e:7f:a3:6b:8d:
d0:c9:52:83:e5:72:40:62:e0:79:07:51:12:46:02:
5a:13:03:15:97:f9:b1:c9:d2:66:db:7e:8f:18:17:
50:54:0f:b2:1d:b1:f7:ea:64:e7:c4:af:ab:65:26:
f1:92:45:24:79:94:80:fd:5d:aa:4e:31:9e:64:8a:
84:f9:38:41:ba:bc:a9:ac:5d:a2:13:f4:e1:0c:b2:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5B:E1:10:E3:12:14:F0:B7:3C:CB:E7:01:67:30:56:80:C6:DD:98
X509v3 Authority Key Identifier:
keyid:E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bf:4c:31:c7:de:c3:df:15:5d:4d:44:a7:25:15:24:29:5e:
e0:a2:29:63:ab:c4:0f:2a:0a:c6:dd:44:3f:23:7b:6e:25:5e:
7a:ac:60:e3:2e:d5:36:09:31:a5:37:bd:1a:ba:81:6a:f2:61:
c1:73:57:25:5c:6c:6d:0c:82:fc:3f:f9:c9:5d:2b:4c:0d:f7:
e0:ec:0d:e3:6c:be:f3:cf:b3:03:aa:aa:07:a6:8f:d6:dd:57:
0b:3f:82:c0:5e:8c:eb:a3:71:30:4b:11:f4:b9:ac:20:2f:22:
9d:03:aa:b2:f7:af:66:30:06:da:57:ba:d4:33:59:a9:10:e4:
d7:66:9b:e5:1b:47:ee:f5:a5:d4:9e:c3:10:03:f9:ab:8f:05:
1c:02:4f:e1:f0:59:c2:2d:fd:02:e7:c6:21:d4:80:f8:e1:50:
55:7b:39:9e:7a:5a:10:1b:00:fd:b8:10:7d:b1:eb:e9:c2:6e:
45:fd:40:61:a9:fd:54:d9:05:45:f4:af:24:99:db:39:d2:cf:
8c:78:3d:88:e7:18:66:2c:e7:91:04:c6:c1:b3:48:97:52:d9:
fc:1d:81:f4:40:f5:39:c2:3d:ca:6d:fd:fb:c7:cb:6f:3e:43:
59:d8:45:20:45:77:5a:c5:bf:b9:74:f6:a3:84:18:8a:c1:89:
ac:c8:a2:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/tJk7/jSoJ8nY6qHY+6HVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4M2Y4MzcwYjE1Y2I5MTc5NjU1MDNjYTAwMzczMjMyZDg1
N2FhOWQwHhcNMjUwNDI5MDQwMTA0WhcNMjUwNDMwMDQwMTA0WjAzMTEwLwYDVQQD
EyhkMTViZTExMGUzMTIxNGYwYjczY2NiZTcwMTY3MzA1NjgwYzZkZDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWMxeybnEWItWhIzdwizFyPLk509
7SLqZS8MOQ2ss7lB3A2p9RFQ9uML4Qm0hDSuDMRIM/uQFv6Wg6r8Ox8k2sT4iBJT
5ShaaxYIW9ArViBmV5eNwzkpMKi0Ni9OIs0FefgKQSVH7DQCHzX192teYeYmhaPQ
lfnuUIqeETH9JxB38Hw89bCeRgasOOnQmOU8hg48V2r9SxruXTJBp6sC2OEp1nNw
4jgdE0Lnm2Qcfn+ja43QyVKD5XJAYuB5B1ESRgJaEwMVl/mxydJm236PGBdQVA+y
HbH36mTnxK+rZSbxkkUkeZSA/V2qTjGeZIqE+ThBuryprF2iE/ThDLIrxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFb4RDjEhTwtzzL5wFnMFaAxt2YMB8GA1UdIwQY
MBaAFOg/g3CxXLkXllUDygA3MjLYV6qdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkQtRGNMRmN1UmVXVlFQS0FEY3lNdGhYcXAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS82NzE0MWMtZDY2ZS00MjBiLTg4ZTEt
MzY4Y2I5NWQxOGNhLzEvNkQtRGNMRmN1UmVXVlFQS0FEY3lNdGhYcXAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS82NzE0MWMtZDY2ZS00MjBiLTg4ZTEtMzY4Y2I5NWQxOGNh
LzEvNkQtRGNMRmN1UmVXVlFQS0FEY3lNdGhYcXAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXr9MMcfe
w98VXU1EpyUVJCle4KIpY6vEDyoKxt1EPyN7biVeeqxg4y7VNgkxpTe9GrqBavJh
wXNXJVxsbQyC/D/5yV0rTA334OwN42y+88+zA6qqB6aP1t1XCz+CwF6M66NxMEsR
9LmsIC8inQOqsvevZjAG2le61DNZqRDk12ab5RtH7vWl1J7DEAP5q48FHAJP4fBZ
wi39AufGIdSA+OFQVXs5nnpaEBsA/bgQfbHr6cJuRf1AYan9VNkFRfSvJJnbOdLP
jHg9iOcYZiznkQTGwbNIl1LZ/B2B9ED1OcI9ym39+8fLbz5DWdhFIEV3WsW/uXT2
o4QYisGJrMiiqg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:54:18 2025 by rpki-client