Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
File: 6tIKIulI-5ZEEprTAZ8I1PSYH88.mft (raw, json)
Hash identifier: mQ8JGa+bNyaO6hkNgGTDckx60ib618Ft7Z8QJIsYWFk=
Subject key identifier: 3B:BD:4D:89:D2:79:0C:7A:B6:C4:17:CF:BD:62:8E:BA:D8:4D:53:45
Authority key identifier: EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF
Certificate issuer: /CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
Certificate serial: 0196748C4EA5812A5B4DE05B1010054FA08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
Manifest number: 04DB
Signing time: Sun 27 Apr 2025 00:01:14 +0000
Manifest this update: Sun 27 Apr 2025 00:01:14 +0000
Manifest next update: Mon 28 Apr 2025 00:01:14 +0000
Files and hashes: 1: 603LAvQ5JXA5_S8BjHWOsHJK9Wo.roa (hash: 8uIPD2qt5HOkYhC38b1edHK/qDoR0Hb99DfiBmCJ4B8=)
2: 6tIKIulI-5ZEEprTAZ8I1PSYH88.crl (hash: 1zzrkb5W6uN0XjB2mrmzvvOmb5tsnBCzFDrgR4jSJ1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:4e:a5:81:2a:5b:4d:e0:5b:10:10:05:4f:a0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
Validity
Not Before: Apr 27 00:01:14 2025 GMT
Not After : Apr 28 00:01:14 2025 GMT
Subject: CN=3bbd4d89d2790c7ab6c417cfbd628ebad84d5345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:0a:34:7d:ea:c3:c5:10:63:74:97:f9:51:
9d:5d:d7:27:54:3e:1c:19:c6:c4:72:5f:a9:95:04:
07:41:7f:88:8e:fa:e4:6d:97:84:8c:3c:c4:07:88:
73:91:35:29:a0:2a:87:13:0c:70:87:5a:bd:ad:c4:
40:19:da:46:3a:22:3e:df:21:80:18:b9:23:c0:68:
1d:1d:69:62:0b:78:13:59:7a:a0:ec:66:72:cc:0f:
75:b7:a6:85:1b:f3:d4:69:b9:d9:02:f6:6a:04:b6:
5a:75:33:27:94:5f:a4:e3:73:8d:3f:eb:0e:05:31:
c4:bb:73:e1:78:2c:87:13:ad:37:53:a1:43:d2:fb:
d5:92:55:35:ae:2f:86:2d:2f:0e:e2:50:c2:0e:29:
76:46:02:6f:c2:0b:4d:f2:7f:3e:b6:ce:6a:10:60:
2a:6f:61:9f:f0:cc:51:a0:54:97:19:04:a1:dc:86:
c4:7c:ef:81:d1:91:f7:37:ad:56:1f:b2:b6:a6:4f:
f7:09:7e:da:1d:4c:ad:99:f2:04:3c:af:71:56:83:
f9:d6:4a:6f:2b:f5:4e:aa:d1:be:f6:29:52:b1:a4:
c7:f7:3a:0a:4a:7b:94:f2:36:9c:0e:ad:c7:59:82:
d7:28:0e:95:0b:c0:d6:b0:d5:11:65:0f:e3:16:51:
9f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BD:4D:89:D2:79:0C:7A:B6:C4:17:CF:BD:62:8E:BA:D8:4D:53:45
X509v3 Authority Key Identifier:
keyid:EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b2:62:11:45:ac:27:e5:f8:09:81:cd:7f:79:b1:27:0a:e0:
b9:80:8c:d4:f9:e4:07:2b:a5:db:b1:19:33:76:27:b1:e5:8b:
ca:25:b6:d2:ae:25:9f:51:8c:44:4c:9b:33:69:61:58:c9:4e:
45:5f:7f:b0:4b:38:ed:e0:c8:04:d8:48:29:92:1c:b7:74:c4:
12:52:9e:00:2a:69:77:e7:e8:bd:7c:f9:20:9b:d3:f5:62:41:
3b:9e:dc:7f:63:a8:1f:89:40:f1:9e:e6:79:7d:7b:d9:eb:31:
9e:59:ce:d8:0c:b3:8e:a0:25:95:16:85:c2:90:d4:99:88:4c:
3b:14:88:00:a7:c8:0c:92:8f:d1:ba:8b:7f:a1:e1:eb:12:69:
48:32:a6:fe:f3:84:4a:38:bb:31:4b:e1:6b:f4:7a:f5:c6:29:
96:ac:f3:cd:a0:e1:b3:27:3f:1d:d0:78:eb:41:e0:b8:e0:50:
5a:db:67:0a:58:72:58:54:8b:68:78:a7:07:c7:62:79:a1:e3:
a4:5d:0b:47:84:2d:1b:27:6b:7d:84:8c:11:8e:27:95:78:39:
c4:d2:3c:b6:25:04:b1:99:79:28:e0:9b:56:5e:1b:46:89:98:
05:7e:73:e5:72:38:0d:e7:2e:45:8f:a5:0a:8f:d6:a4:ba:46:
c6:65:3f:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0jE6lgSpbTeBbEBAFT6CPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZDIwYTIyZTk0OGZiOTY0NDEyOWFkMzAxOWYwOGQ0ZjQ5
ODFmY2YwHhcNMjUwNDI3MDAwMTE0WhcNMjUwNDI4MDAwMTE0WjAzMTEwLwYDVQQD
EygzYmJkNGQ4OWQyNzkwYzdhYjZjNDE3Y2ZiZDYyOGViYWQ4NGQ1MzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJkKNH3qw8UQY3SX+VGdXdcnVD4c
GcbEcl+plQQHQX+IjvrkbZeEjDzEB4hzkTUpoCqHEwxwh1q9rcRAGdpGOiI+3yGA
GLkjwGgdHWliC3gTWXqg7GZyzA91t6aFG/PUabnZAvZqBLZadTMnlF+k43ONP+sO
BTHEu3PheCyHE603U6FD0vvVklU1ri+GLS8O4lDCDil2RgJvwgtN8n8+ts5qEGAq
b2Gf8MxRoFSXGQSh3IbEfO+B0ZH3N61WH7K2pk/3CX7aHUytmfIEPK9xVoP51kpv
K/VOqtG+9ilSsaTH9zoKSnuU8jacDq3HWYLXKA6VC8DWsNURZQ/jFlGf2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDu9TYnSeQx6tsQXz71ijrrYTVNFMB8GA1UdIwQY
MBaAFOrSCiLpSPuWRBKa0wGfCNT0mB/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnRJS0l1bEktNVpFRXByVEFaOEkxUFNZSDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xN2NhNWYtNDMyNy00YTg4LWI5NzYt
YjY0ZmZjZTA2NTgwLzEvNnRJS0l1bEktNVpFRXByVEFaOEkxUFNZSDg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8xN2NhNWYtNDMyNy00YTg4LWI5NzYtYjY0ZmZjZTA2NTgw
LzEvNnRJS0l1bEktNVpFRXByVEFaOEkxUFNZSDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLJiEUWs
J+X4CYHNf3mxJwrguYCM1PnkByul27EZM3YnseWLyiW20q4ln1GMREybM2lhWMlO
RV9/sEs47eDIBNhIKZIct3TEElKeACppd+fovXz5IJvT9WJBO57cf2OoH4lA8Z7m
eX172esxnlnO2AyzjqAllRaFwpDUmYhMOxSIAKfIDJKP0bqLf6Hh6xJpSDKm/vOE
Sji7MUvha/R69cYplqzzzaDhsyc/HdB460HguOBQWttnClhyWFSLaHinB8dieaHj
pF0LR4QtGydrfYSMEY4nlXg5xNI8tiUEsZl5KOCbVl4bRomYBX5z5XI4DecuRY+l
Co/WpLpGxmU/HA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:48 2025 by rpki-client