Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
File: iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft (raw, json)
Hash identifier: G1EX2j15ob4xTZf+93pcN60Cp0baZZ4hRdQ3dSIUauk=
Subject key identifier: DA:E0:45:39:96:67:41:B1:BE:4F:45:2E:69:5B:11:BA:B1:DD:E1:43
Authority key identifier: 88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70
Certificate issuer: /CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70
Certificate serial: 019676B0EE313E3D382BE174D74F31ACB24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
Manifest number: 02B0
Signing time: Sun 27 Apr 2025 10:00:28 +0000
Manifest this update: Sun 27 Apr 2025 10:00:28 +0000
Manifest next update: Mon 28 Apr 2025 10:00:28 +0000
Files and hashes: 1: 8USyjcIT_1GOHpkZIowE_fxQy7g.roa (hash: SrhI+FQKoLnBdoVigVeYKJo+5g+IVUyEqc65USNCWB0=)
2: iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl (hash: k168x6ExotrDTpIX7O1yKn5ESrHZF4PuSRl5WuzTEJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:ee:31:3e:3d:38:2b:e1:74:d7:4f:31:ac:b2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70
Validity
Not Before: Apr 27 10:00:28 2025 GMT
Not After : Apr 28 10:00:28 2025 GMT
Subject: CN=dae04539966741b1be4f452e695b11bab1dde143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:53:03:21:6c:3f:d4:51:a5:94:18:07:a5:a5:
e4:6f:78:1d:6d:93:0c:a2:94:0b:5e:c9:34:80:a1:
b8:c5:d3:2e:52:73:62:05:24:9f:9c:0a:3e:df:3a:
3a:40:9d:f9:32:75:60:09:3e:ae:f8:3c:6f:50:a4:
0b:72:45:51:b4:fa:6c:24:ff:2c:d9:2a:5f:27:87:
89:a8:ec:34:b8:1c:e9:72:2a:fb:8a:8f:10:f6:0f:
93:29:87:19:f5:09:a9:02:b4:07:d5:6b:d4:5a:f7:
5c:5f:ce:8e:28:c4:81:fc:e7:05:bf:cc:45:9a:8b:
2e:ac:61:1c:a9:75:10:86:b1:51:5f:0d:67:65:16:
9b:dc:67:24:f2:1e:b4:73:be:65:0d:b5:9a:85:cb:
0d:ea:67:9a:35:25:7a:30:a9:09:00:33:67:d0:92:
2e:c5:c0:15:dd:29:33:5d:9f:e5:09:9a:25:c2:5a:
81:4f:fb:24:8e:69:1f:b9:d8:86:6f:30:bc:9b:86:
5c:38:e7:3d:b7:9b:57:b5:78:a5:02:dc:dd:a7:47:
3e:7a:6e:7a:2b:f7:1d:3c:7a:8e:a6:1d:3a:a3:40:
62:db:d9:44:fe:86:2f:d4:ff:08:61:60:ee:5a:1c:
23:74:85:6f:7f:e6:7d:6c:40:7b:b8:36:79:65:2e:
97:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E0:45:39:96:67:41:B1:BE:4F:45:2E:69:5B:11:BA:B1:DD:E1:43
X509v3 Authority Key Identifier:
keyid:88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a2:62:e7:5f:a5:ec:e4:34:fd:82:ec:03:ab:cc:9d:9e:8c:
16:d6:92:2c:35:f3:f3:ce:c9:c8:82:da:45:13:ed:0d:fb:b9:
f6:70:07:d9:1d:ad:85:3e:74:75:20:d6:30:fa:f2:d9:3c:8b:
22:b8:74:e4:af:80:18:ed:a4:ca:8e:4a:3c:de:9c:9b:56:21:
43:c8:1d:53:64:42:13:36:87:8a:ed:25:97:0a:0c:5f:bf:b1:
ee:60:fe:a5:9a:07:ea:6f:e5:08:fa:86:0c:bc:3b:2a:f3:0d:
2b:9d:02:4e:3a:75:43:0c:e0:34:3d:b2:2b:ff:13:b6:68:98:
7e:c1:37:15:b8:84:06:57:73:73:25:cf:78:7d:c0:1e:31:19:
6e:e6:93:1a:6e:6e:0a:46:dd:ab:03:bb:92:ab:9c:8e:1f:3c:
10:72:be:4d:ab:d8:7f:c9:23:c4:77:5d:91:26:cc:5a:94:25:
64:88:6a:f6:3a:46:4f:3d:2c:ab:7c:8d:12:a5:1d:9b:39:09:
89:51:4d:88:70:5e:0d:3c:e1:38:f7:d2:ca:34:3e:5c:21:15:
65:81:a3:f1:34:15:6a:90:6a:73:1f:d4:f8:08:31:21:a4:44:
32:77:b9:0b:93:ad:4a:10:ce:89:e8:c4:b6:2b:ed:4e:54:e2:
e3:1f:9b:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2sO4xPj04K+F0108xrLJPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZTlmYTIzZGE0ZmU5N2FhOWUwZjM5MTE1NjIwNTU5YTI5
ZjZiNzAwHhcNMjUwNDI3MTAwMDI4WhcNMjUwNDI4MTAwMDI4WjAzMTEwLwYDVQQD
EyhkYWUwNDUzOTk2Njc0MWIxYmU0ZjQ1MmU2OTViMTFiYWIxZGRlMTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlMDIWw/1FGllBgHpaXkb3gdbZMM
opQLXsk0gKG4xdMuUnNiBSSfnAo+3zo6QJ35MnVgCT6u+DxvUKQLckVRtPpsJP8s
2SpfJ4eJqOw0uBzpcir7io8Q9g+TKYcZ9QmpArQH1WvUWvdcX86OKMSB/OcFv8xF
mosurGEcqXUQhrFRXw1nZRab3Gck8h60c75lDbWahcsN6meaNSV6MKkJADNn0JIu
xcAV3SkzXZ/lCZolwlqBT/skjmkfudiGbzC8m4ZcOOc9t5tXtXilAtzdp0c+em56
K/cdPHqOph06o0Bi29lE/oYv1P8IYWDuWhwjdIVvf+Z9bEB7uDZ5ZS6X7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrgRTmWZ0Gxvk9FLmlbEbqx3eFDMB8GA1UdIwQY
MBaAFIjp+iPaT+l6qeDzkRViBVmin2twMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU9uNkk5cFA2WHFwNFBPUkZXSUZXYUtmYTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82ZDE1YzAtODBjYy00ZWRmLThmMTQt
M2UyNDc4OTQ3ZTZlLzEvaU9uNkk5cFA2WHFwNFBPUkZXSUZXYUtmYTNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS82ZDE1YzAtODBjYy00ZWRmLThmMTQtM2UyNDc4OTQ3ZTZl
LzEvaU9uNkk5cFA2WHFwNFBPUkZXSUZXYUtmYTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqJi51+l
7OQ0/YLsA6vMnZ6MFtaSLDXz887JyILaRRPtDfu59nAH2R2thT50dSDWMPry2TyL
Irh05K+AGO2kyo5KPN6cm1YhQ8gdU2RCEzaHiu0llwoMX7+x7mD+pZoH6m/lCPqG
DLw7KvMNK50CTjp1QwzgND2yK/8TtmiYfsE3FbiEBldzcyXPeH3AHjEZbuaTGm5u
CkbdqwO7kqucjh88EHK+TavYf8kjxHddkSbMWpQlZIhq9jpGTz0sq3yNEqUdmzkJ
iVFNiHBeDTzhOPfSyjQ+XCEVZYGj8TQVapBqcx/U+AgxIaREMne5C5OtShDOiejE
tivtTlTi4x+bUg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:41:57 2025 by rpki-client