Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
File: r6URZapQNqzaEf7gAg40_MQ57eY.mft (raw, json)
Hash identifier: 3G9auHhC6zoiKKBBzsxLYCIhGaXmrrMZY0fsZ4wc89M=
Subject key identifier: 6A:EB:B8:D3:EE:23:D8:77:69:A9:31:5F:AF:0F:F3:24:7F:44:73:B3
Authority key identifier: AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
Certificate issuer: /CN=afa51165aa5036acda11fee0020e34fcc439ede6
Certificate serial: 01968058E066BBD5054F0329B83404536DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
Manifest number: 151A
Signing time: Tue 29 Apr 2025 07:00:30 +0000
Manifest this update: Tue 29 Apr 2025 07:00:30 +0000
Manifest next update: Wed 30 Apr 2025 07:00:30 +0000
Files and hashes: 1: JXD4YyeKM2DbSEsSMseYjT0o7Ww.roa (hash: YAf2/29DjA3Na+Hgt1fQsq3jSQYLqFSkMb1fHAx4RUM=)
2: r6URZapQNqzaEf7gAg40_MQ57eY.crl (hash: 2+HWQaPu+dSIY979wy1wGyVcqu8juaXDPLc6IiYD2gk=)
3: rJjHJUl0uD_7dHjW4bG3nCxQ5iY.roa (hash: nazoboMf2p4XX7ExK1xqcEEDrXTJmHzU9uxX+kIOchk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:e0:66:bb:d5:05:4f:03:29:b8:34:04:53:6d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa51165aa5036acda11fee0020e34fcc439ede6
Validity
Not Before: Apr 29 07:00:30 2025 GMT
Not After : Apr 30 07:00:30 2025 GMT
Subject: CN=6aebb8d3ee23d87769a9315faf0ff3247f4473b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d1:77:39:3c:13:8e:10:eb:c8:61:54:a0:f9:
16:9a:d4:7a:80:f6:e5:a3:89:53:a8:93:70:ad:28:
f2:af:24:70:ed:23:be:01:be:2f:00:9d:dc:a9:d1:
e7:c9:1b:ad:85:40:88:b4:b0:d7:7c:ed:53:00:ad:
07:d9:9c:b7:20:0d:60:44:6c:20:18:6d:53:b1:8d:
43:9e:fb:7d:c0:54:8a:5e:85:fe:17:dc:51:c3:50:
ff:e1:d4:43:8c:0a:e6:bf:5b:03:3c:19:e3:3c:ea:
e1:ce:1b:0c:42:a4:9f:7d:70:d9:88:b3:e5:53:bd:
c8:5e:d8:4f:e4:c3:1b:01:ad:7b:d6:d2:a6:62:10:
ce:37:b9:be:0b:6b:29:f1:c6:5b:8a:1f:79:ec:2c:
b8:e6:fb:4f:60:5b:31:3e:5f:c9:64:ea:0f:e6:b9:
32:60:fb:66:ad:63:1e:3b:a8:8f:f2:43:01:9b:26:
19:0d:80:e6:52:8e:09:0d:a0:85:72:02:88:e9:63:
8a:d7:b9:27:a7:d5:92:86:1f:39:bd:ae:be:3a:14:
60:1b:9c:a2:ee:f6:7a:f2:c2:46:ad:0e:c8:59:f4:
26:db:48:6a:c0:cc:cb:56:db:71:9c:bc:e3:3a:90:
3a:ef:b6:30:69:89:98:26:c8:98:63:c5:d0:f6:c8:
03:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EB:B8:D3:EE:23:D8:77:69:A9:31:5F:AF:0F:F3:24:7F:44:73:B3
X509v3 Authority Key Identifier:
keyid:AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:99:0e:21:de:a4:11:6c:dc:03:2a:4d:24:28:33:4f:bb:d6:
f2:6b:8d:c5:d3:05:3c:08:48:0f:e3:84:9c:8e:5e:ff:a2:ed:
54:ca:5b:49:46:9f:f2:84:e7:8b:a7:a2:50:0c:37:ee:58:8f:
94:eb:29:72:a4:8a:bb:db:fc:ed:b7:a2:b1:f2:7e:c5:4f:87:
66:24:bc:95:fa:bd:b7:74:00:f8:a8:37:f3:f7:f1:3d:90:a6:
e0:be:80:8b:0a:24:31:5c:1c:2a:b1:7f:89:c7:c3:76:62:46:
18:22:ff:6f:25:6e:bb:ac:d8:63:d1:99:ca:ad:33:c7:40:c5:
e2:89:d1:67:d2:7b:54:96:df:c5:4e:b1:26:41:8f:e1:31:8d:
d7:16:a3:02:f2:02:ee:c6:4b:1a:1f:1b:1f:3d:12:c1:7b:64:
4f:bf:b9:54:79:de:1d:d4:9f:c0:34:b9:5e:64:e9:13:7a:a4:
aa:3c:cc:01:9a:70:b0:7c:a6:77:41:f5:ee:4a:a7:2d:ab:84:
94:c9:0b:41:9f:61:cb:04:bb:76:ab:2b:60:59:98:e4:d5:5a:
34:fd:7b:1a:d1:53:33:95:0c:f5:78:0c:15:ad:7c:0e:f2:6f:
c3:8c:6f:92:e0:f4:28:23:63:3a:6c:cc:ef:1d:f4:3a:5b:18:
3a:7a:ee:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAWOBmu9UFTwMpuDQEU23YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYTUxMTY1YWE1MDM2YWNkYTExZmVlMDAyMGUzNGZjYzQz
OWVkZTYwHhcNMjUwNDI5MDcwMDMwWhcNMjUwNDMwMDcwMDMwWjAzMTEwLwYDVQQD
Eyg2YWViYjhkM2VlMjNkODc3NjlhOTMxNWZhZjBmZjMyNDdmNDQ3M2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitF3OTwTjhDryGFUoPkWmtR6gPbl
o4lTqJNwrSjyryRw7SO+Ab4vAJ3cqdHnyRuthUCItLDXfO1TAK0H2Zy3IA1gRGwg
GG1TsY1Dnvt9wFSKXoX+F9xRw1D/4dRDjArmv1sDPBnjPOrhzhsMQqSffXDZiLPl
U73IXthP5MMbAa171tKmYhDON7m+C2sp8cZbih957Cy45vtPYFsxPl/JZOoP5rky
YPtmrWMeO6iP8kMBmyYZDYDmUo4JDaCFcgKI6WOK17knp9WShh85va6+OhRgG5yi
7vZ68sJGrQ7IWfQm20hqwMzLVttxnLzjOpA677YwaYmYJsiYY8XQ9sgDCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrruNPuI9h3aakxX68P8yR/RHOzMB8GA1UdIwQY
MBaAFK+lEWWqUDas2hH+4AIONPzEOe3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjZVUlphcFFOcXphRWY3Z0FnNDBfTVE1N2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yZGExZWMtYWE0Yi00ZDk0LTk4Y2It
YTc3NmU0YTYzZTZmLzEvcjZVUlphcFFOcXphRWY3Z0FnNDBfTVE1N2VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yZGExZWMtYWE0Yi00ZDk0LTk4Y2ItYTc3NmU0YTYzZTZm
LzEvcjZVUlphcFFOcXphRWY3Z0FnNDBfTVE1N2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZkOId6k
EWzcAypNJCgzT7vW8muNxdMFPAhID+OEnI5e/6LtVMpbSUaf8oTni6eiUAw37liP
lOspcqSKu9v87beisfJ+xU+HZiS8lfq9t3QA+Kg38/fxPZCm4L6AiwokMVwcKrF/
icfDdmJGGCL/byVuu6zYY9GZyq0zx0DF4onRZ9J7VJbfxU6xJkGP4TGN1xajAvIC
7sZLGh8bHz0SwXtkT7+5VHneHdSfwDS5XmTpE3qkqjzMAZpwsHymd0H17kqnLauE
lMkLQZ9hywS7dqsrYFmY5NVaNP17GtFTM5UM9XgMFa18DvJvw4xvkuD0KCNjOmzM
7x30OlsYOnrusg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:07:45 2025 by rpki-client