Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
File: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft (raw, json)
Hash identifier: EfWR29s4E05PchlYH8u7bui6fqxCE+oRdJiGCnM82xs=
Subject key identifier: 1B:DA:24:AA:41:07:E9:78:E0:FF:31:2E:C7:38:A7:94:6B:AB:E5:4F
Authority key identifier: 6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
Certificate issuer: /CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Certificate serial: 01967D8E784E11B159328E3EA147D28A568C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
Manifest number: 07DA
Signing time: Mon 28 Apr 2025 18:00:10 +0000
Manifest this update: Mon 28 Apr 2025 18:00:10 +0000
Manifest next update: Tue 29 Apr 2025 18:00:10 +0000
Files and hashes: 1: NBepUJO_wJpnxRX9pJTgcXP4eoA.roa (hash: s4sVSw+QsBgi1se1V8v61lF7jwGyJQc1wtJojCUHwDE=)
2: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl (hash: NRs0fjDy+7lNrMROYCf7CY5buzhnRj8lq+y33I6Fyzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:78:4e:11:b1:59:32:8e:3e:a1:47:d2:8a:56:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Validity
Not Before: Apr 28 18:00:10 2025 GMT
Not After : Apr 29 18:00:10 2025 GMT
Subject: CN=1bda24aa4107e978e0ff312ec738a7946babe54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:28:b4:ea:fc:97:96:51:06:d8:f1:9e:b9:
0d:ac:ae:6e:dd:bb:d5:26:77:19:8d:04:57:4c:7c:
a7:8e:41:15:24:88:85:30:33:a2:dc:a0:c7:59:03:
e5:a6:76:8c:0c:45:2a:c9:25:18:7e:a5:14:0c:c9:
4b:08:20:e1:d6:10:d8:af:13:26:d0:9e:a1:2d:35:
f6:10:7f:5e:32:c5:88:6e:93:76:64:ac:12:1a:68:
2f:32:be:e4:d5:d5:64:3a:2e:2a:d7:b3:48:34:5d:
59:0f:a9:ec:e9:e3:fd:a3:8e:6f:f8:fb:71:fc:c5:
77:a0:41:5a:42:8a:5b:b7:45:a8:29:a7:8a:e8:35:
bd:d5:e8:2e:4a:5a:4a:7e:53:a8:75:be:a0:f2:1b:
fa:5b:99:3e:39:42:da:d8:e5:26:c2:bd:05:6f:25:
66:a7:1b:8a:94:fa:39:91:13:a1:ba:ce:a8:25:c2:
db:83:f2:3f:df:8b:2a:71:5a:5d:c5:a9:d1:08:d4:
e2:88:c9:f3:9f:1c:4a:16:fe:e3:75:7c:7b:e5:22:
f3:2a:6d:3e:fb:37:df:a2:7c:ae:d0:80:da:e1:8f:
b8:2d:6e:37:fd:3f:9b:65:db:a4:c9:b2:79:54:9b:
2d:d6:16:a0:fd:97:3d:fb:61:61:8c:d8:18:6c:5f:
ca:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DA:24:AA:41:07:E9:78:E0:FF:31:2E:C7:38:A7:94:6B:AB:E5:4F
X509v3 Authority Key Identifier:
keyid:6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:99:9a:bb:75:b5:60:ec:61:cb:6a:ae:90:c0:e9:60:7e:6a:
fd:2b:38:87:1d:3f:5d:32:49:d9:54:cf:97:25:74:4c:4b:65:
b6:42:5d:70:30:6c:b9:58:04:a0:18:df:29:35:9d:3f:24:98:
b7:48:62:1e:d1:d6:8d:0d:aa:6f:a6:5f:26:70:52:0d:24:96:
9b:5e:93:91:10:d4:a1:0d:76:8c:4b:31:42:9d:cd:22:0a:69:
e9:10:dd:2a:ca:46:c4:2c:5f:9f:30:70:6d:20:1c:93:e8:9e:
22:f7:fb:8a:dd:68:08:ff:2d:64:8a:b1:b7:85:29:5f:fd:a3:
7d:cb:f3:cf:0d:19:31:61:df:6b:45:06:a7:40:1e:96:fe:a0:
f6:06:25:78:8a:94:29:d4:57:49:85:b1:87:91:b1:e5:41:37:
94:39:4b:9a:b2:e4:b0:11:c6:16:6a:76:99:f5:f2:06:1f:51:
28:d4:73:45:df:5a:1e:e4:bb:08:89:c1:f0:e2:ee:63:c2:24:
99:7c:fa:2e:33:50:5d:16:7c:22:ed:86:29:20:46:1a:03:ba:
5f:55:f5:35:aa:8f:3a:e3:0e:98:11:76:5f:5a:c4:55:6f:57:
c0:b9:8d:14:8e:5b:fb:17:ed:4c:23:e5:44:d5:c1:0b:a3:c1:
c6:bd:f7:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9jnhOEbFZMo4+oUfSilaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNjE5OWU1NWMzNTNlZjdmM2QyYmY0YTRmZTM4ZGQxYTBh
ZDg1NjUwHhcNMjUwNDI4MTgwMDEwWhcNMjUwNDI5MTgwMDEwWjAzMTEwLwYDVQQD
EygxYmRhMjRhYTQxMDdlOTc4ZTBmZjMxMmVjNzM4YTc5NDZiYWJlNTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrcotOr8l5ZRBtjxnrkNrK5u3bvV
JncZjQRXTHynjkEVJIiFMDOi3KDHWQPlpnaMDEUqySUYfqUUDMlLCCDh1hDYrxMm
0J6hLTX2EH9eMsWIbpN2ZKwSGmgvMr7k1dVkOi4q17NINF1ZD6ns6eP9o45v+Ptx
/MV3oEFaQopbt0WoKaeK6DW91eguSlpKflOodb6g8hv6W5k+OULa2OUmwr0FbyVm
pxuKlPo5kROhus6oJcLbg/I/34sqcVpdxanRCNTiiMnznxxKFv7jdXx75SLzKm0+
+zffonyu0IDa4Y+4LW43/T+bZdukybJ5VJst1hag/Zc9+2FhjNgYbF/KrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvaJKpBB+l44P8xLsc4p5Rrq+VPMB8GA1UdIwQY
MBaAFGthmeVcNT7389K/Sk/jjdGgrYVlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTJHWjVWdzFQdmZ6MHI5S1QtT04wYUN0aFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mZjJjZWItZTlhOC00NzhjLTg4YzEt
M2RlNGVjZTNhYjJhLzEvYTJHWjVWdzFQdmZ6MHI5S1QtT04wYUN0aFdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9mZjJjZWItZTlhOC00NzhjLTg4YzEtM2RlNGVjZTNhYjJh
LzEvYTJHWjVWdzFQdmZ6MHI5S1QtT04wYUN0aFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5mau3W1
YOxhy2qukMDpYH5q/Ss4hx0/XTJJ2VTPlyV0TEtltkJdcDBsuVgEoBjfKTWdPySY
t0hiHtHWjQ2qb6ZfJnBSDSSWm16TkRDUoQ12jEsxQp3NIgpp6RDdKspGxCxfnzBw
bSAck+ieIvf7it1oCP8tZIqxt4UpX/2jfcvzzw0ZMWHfa0UGp0Aelv6g9gYleIqU
KdRXSYWxh5Gx5UE3lDlLmrLksBHGFmp2mfXyBh9RKNRzRd9aHuS7CInB8OLuY8Ik
mXz6LjNQXRZ8Iu2GKSBGGgO6X1X1NaqPOuMOmBF2X1rEVW9XwLmNFI5b+xftTCPl
RNXBC6PBxr33HA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:13 2025 by rpki-client