Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
File: 6CBqoyUuPqjWhOrseimTUTtdIwc.mft (raw, json)
Hash identifier: uB5fx3tkQb9oQdBxhZeOsN1Zu8IR4YDXSeRbj1Bv0Uk=
Subject key identifier: 45:82:97:AA:FB:09:3B:21:14:04:21:12:2D:FF:5F:CF:D2:DA:4C:F3
Authority key identifier: E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
Certificate issuer: /CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Certificate serial: 019675672E820F6C2CC90561535F82391E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
Manifest number: 1090
Signing time: Sun 27 Apr 2025 04:00:18 +0000
Manifest this update: Sun 27 Apr 2025 04:00:18 +0000
Manifest next update: Mon 28 Apr 2025 04:00:18 +0000
Files and hashes: 1: 6CBqoyUuPqjWhOrseimTUTtdIwc.crl (hash: OrFzBus3hxEFGm7vuIy96cYq2CEOoVS7bzSdE2y79hw=)
2: M-_cdcLtCwgztUAvo6U6xc0Pw7c.roa (hash: QqjONmK2RzxQWqZOMsrEEr0jP5v8oGa9bpmq/G1FKtE=)
3: fgObtEnjhGSc2Dbcv69KzOyhLQg.roa (hash: +AsZFMBywBZBAtd5zEwLILx86Sgs0i4z2/GivURPyZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:2e:82:0f:6c:2c:c9:05:61:53:5f:82:39:1e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Validity
Not Before: Apr 27 04:00:18 2025 GMT
Not After : Apr 28 04:00:18 2025 GMT
Subject: CN=458297aafb093b21140421122dff5fcfd2da4cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:61:c4:cf:8c:4a:80:57:ac:aa:b1:11:88:ec:
2a:7a:76:27:90:81:bb:27:02:bb:2e:ee:7a:7a:c2:
90:51:6b:71:61:e1:79:e0:0e:ae:74:dd:ab:cf:30:
03:25:06:31:47:67:b9:a3:a4:ff:93:41:03:00:da:
b1:e9:48:07:cd:62:c1:55:11:2e:80:5d:2f:6a:c9:
8d:86:f1:05:a7:cc:04:d8:04:01:70:d3:a4:3b:aa:
c2:b1:24:f2:37:41:31:1e:ad:f4:c3:81:0f:9b:5c:
4d:a0:9e:50:23:89:8a:11:ee:6a:d3:5e:45:86:2f:
96:ed:34:41:3a:5d:68:2e:75:0e:9a:33:59:50:6f:
75:31:ad:3b:a7:83:5f:a3:5d:95:90:6b:49:d7:71:
8f:6a:de:a2:11:27:64:b9:86:8b:0e:e2:57:18:7b:
46:6d:d6:36:f1:0b:02:3e:2e:c0:38:bf:9c:2e:e5:
c3:e8:ed:33:ea:45:b3:ee:50:b9:58:33:85:9d:19:
3f:12:f8:c6:0e:f0:36:a8:27:5f:9a:b8:fa:a3:24:
fc:63:28:b2:0c:50:d4:81:9f:84:be:d2:0d:50:be:
d6:37:c6:d4:c0:42:1e:e9:fe:6c:73:ed:4c:d4:36:
4d:55:f3:fb:c8:54:f8:76:d9:50:d7:53:c5:77:d7:
9e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:82:97:AA:FB:09:3B:21:14:04:21:12:2D:FF:5F:CF:D2:DA:4C:F3
X509v3 Authority Key Identifier:
keyid:E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2a:f2:cc:4a:fe:1a:2b:62:91:8b:70:85:a7:5e:d1:0a:ad:
f6:1f:12:c4:cd:37:7e:27:0f:f3:64:74:f5:45:20:95:c7:eb:
b9:90:28:c7:ae:f5:56:cf:5e:07:86:0b:7e:10:94:38:38:83:
3a:89:e4:30:cd:20:47:41:8c:38:dc:16:3d:a9:5f:94:cf:78:
b8:b3:8e:b8:11:92:f2:a2:74:65:46:43:8f:19:43:15:95:7b:
c7:f8:1f:35:f2:23:95:a0:e5:aa:ec:1a:7a:f6:df:d4:9f:32:
c7:1e:0f:d5:93:2f:a1:fc:10:03:2e:b6:c8:c0:df:f7:9b:94:
fb:d9:94:0d:96:c1:6b:7b:73:fd:4d:c1:2c:f9:9d:03:3d:88:
cb:56:df:f6:fc:e9:48:fb:f8:be:ae:f9:d2:86:1f:46:80:bb:
05:17:70:e4:82:7c:ba:3d:2c:2b:8e:cd:8f:65:21:ed:a5:58:
2d:3f:59:b3:04:0b:db:df:2e:c6:e7:9c:75:44:aa:05:02:63:
52:71:d5:90:d1:03:ea:99:57:ed:72:bf:45:33:76:ee:06:31:
9e:52:8d:b9:1f:37:c1:5f:d8:94:0d:d5:81:42:29:ee:b5:20:
db:56:04:ad:40:4a:1e:1e:44:1d:5b:b5:26:d6:7c:6a:4f:1f:
50:76:43:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1Zy6CD2wsyQVhU1+COR4LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MjA2YWEzMjUyZTNlYThkNjg0ZWFlYzdhMjk5MzUxM2I1
ZDIzMDcwHhcNMjUwNDI3MDQwMDE4WhcNMjUwNDI4MDQwMDE4WjAzMTEwLwYDVQQD
Eyg0NTgyOTdhYWZiMDkzYjIxMTQwNDIxMTIyZGZmNWZjZmQyZGE0Y2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12HEz4xKgFesqrERiOwqenYnkIG7
JwK7Lu56esKQUWtxYeF54A6udN2rzzADJQYxR2e5o6T/k0EDANqx6UgHzWLBVREu
gF0vasmNhvEFp8wE2AQBcNOkO6rCsSTyN0ExHq30w4EPm1xNoJ5QI4mKEe5q015F
hi+W7TRBOl1oLnUOmjNZUG91Ma07p4Nfo12VkGtJ13GPat6iESdkuYaLDuJXGHtG
bdY28QsCPi7AOL+cLuXD6O0z6kWz7lC5WDOFnRk/EvjGDvA2qCdfmrj6oyT8Yyiy
DFDUgZ+EvtINUL7WN8bUwEIe6f5sc+1M1DZNVfP7yFT4dtlQ11PFd9ee4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWCl6r7CTshFAQhEi3/X8/S2kzzMB8GA1UdIwQY
MBaAFOggaqMlLj6o1oTq7Hopk1E7XSMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkNCcW95VXVQcWpXaE9yc2VpbVRVVHRkSXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80N2FjY2ItNmYzYy00YzZjLTlmZDAt
NTg1ZWI4NDU1OGY5LzEvNkNCcW95VXVQcWpXaE9yc2VpbVRVVHRkSXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80N2FjY2ItNmYzYy00YzZjLTlmZDAtNTg1ZWI4NDU1OGY5
LzEvNkNCcW95VXVQcWpXaE9yc2VpbVRVVHRkSXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjyryzEr+
GitikYtwhade0Qqt9h8SxM03ficP82R09UUglcfruZAox671Vs9eB4YLfhCUODiD
OonkMM0gR0GMONwWPalflM94uLOOuBGS8qJ0ZUZDjxlDFZV7x/gfNfIjlaDlquwa
evbf1J8yxx4P1ZMvofwQAy62yMDf95uU+9mUDZbBa3tz/U3BLPmdAz2Iy1bf9vzp
SPv4vq750oYfRoC7BRdw5IJ8uj0sK47Nj2Uh7aVYLT9ZswQL298uxuecdUSqBQJj
UnHVkNED6plX7XK/RTN27gYxnlKNuR83wV/YlA3VgUIp7rUg21YErUBKHh5EHVu1
JtZ8ak8fUHZDIA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:14:06 2025 by rpki-client