Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
File: I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft (raw, json)
Hash identifier: I0CDD2u5RTA253Y4ODeVYbK2RNT1AWIQuUhtEf9E1c8=
Subject key identifier: 06:8E:A6:7C:0C:EA:AE:F6:81:98:74:A2:63:5F:FC:59:0F:C1:BD:DA
Authority key identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
Certificate issuer: /CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Certificate serial: 019699AB2B80ACBE42B7CAE2C9D1E5F4BE04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
Manifest number: 1269
Signing time: Sun 04 May 2025 05:00:53 +0000
Manifest this update: Sun 04 May 2025 05:00:53 +0000
Manifest next update: Mon 05 May 2025 05:00:53 +0000
Files and hashes: 1: I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl (hash: f49eSQlptC8NNwdQtijGkSExBBeGt5KvRl3cDU/1OW4=)
2: i8Q4g4VsliGNNp87vd6oYtqJ_zk.roa (hash: O+cLxQgdSxj9HwSnDkkvV/wDo/+EE05gj69lFrqob6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:ab:2b:80:ac:be:42:b7:ca:e2:c9:d1:e5:f4:be:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Validity
Not Before: May 4 05:00:53 2025 GMT
Not After : May 5 05:00:53 2025 GMT
Subject: CN=068ea67c0ceaaef6819874a2635ffc590fc1bdda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:08:7b:50:5a:f6:77:e1:12:16:1d:45:20:
de:87:fc:d5:c4:93:15:f1:05:82:b5:01:fa:91:74:
35:ab:97:ce:57:86:bc:16:cf:a0:72:68:d3:1e:f6:
89:d2:3e:9b:7c:1c:7d:78:01:8f:a1:1f:16:2c:10:
0a:19:18:8a:66:37:c8:53:34:d8:46:f4:1e:11:eb:
06:d7:87:9b:04:82:7f:0b:40:02:dc:5d:0d:53:5b:
54:05:95:e8:2b:6e:5b:09:bf:2b:f0:70:66:11:ec:
1a:1f:d0:55:ba:60:b7:83:27:a0:fc:f5:24:29:e4:
c4:4a:89:c1:6b:7f:e5:36:a7:30:70:ca:d6:92:0a:
02:e1:79:2e:e3:c0:8a:80:be:a4:c0:e4:28:db:ae:
54:21:86:5b:a1:b4:2c:9d:84:36:8d:ac:06:ab:8f:
38:61:4f:fa:de:7d:12:e3:4f:c2:ea:70:7b:92:5f:
3e:24:4b:2a:92:ec:4e:78:e4:31:a8:2a:17:e7:ad:
5e:d6:ba:40:66:23:39:af:70:42:38:f1:e7:b0:1e:
4a:51:89:bc:0e:ce:68:8d:b6:86:f2:26:8c:76:bf:
4b:70:3d:33:e6:f9:ae:4d:8b:5a:c4:c5:18:0a:b5:
b9:b2:29:65:b4:74:c6:15:24:b3:45:9e:5b:8f:c6:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8E:A6:7C:0C:EA:AE:F6:81:98:74:A2:63:5F:FC:59:0F:C1:BD:DA
X509v3 Authority Key Identifier:
keyid:23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1b:9c:a0:20:d6:28:13:4b:4a:01:87:41:81:ca:95:70:f4:
b7:97:50:3a:5c:b4:db:3f:b4:b3:6f:d3:9f:ea:f5:92:27:8a:
35:12:52:ae:be:4e:1d:f6:82:1a:da:01:8a:79:56:6b:55:54:
b5:37:bf:db:bb:7e:41:c4:87:b4:fe:3f:be:9b:da:ec:aa:58:
1b:55:37:f2:d0:3b:bb:e3:c9:9c:d0:09:6c:7a:a0:6f:21:50:
47:3e:ee:79:30:47:8c:c1:c7:12:5d:46:af:c3:8f:bc:e8:90:
4a:a8:aa:90:f8:cd:4d:78:b1:4d:88:f9:9e:98:d7:ac:0c:af:
aa:7c:92:a1:28:7e:cf:5c:37:bf:6f:c3:84:98:0b:f1:79:77:
a9:ea:7a:d7:ee:aa:bf:92:2d:f7:c0:22:38:95:49:43:53:43:
86:b9:3a:8a:89:9b:6b:67:0e:89:ff:7c:a2:ab:f8:e4:37:c9:
cc:67:f0:51:aa:c5:e5:65:02:0f:dd:ce:7c:cf:07:06:00:5a:
21:b7:50:58:1a:76:37:3f:42:c3:5e:29:e2:7f:19:2a:56:f5:
24:3e:3f:b9:06:94:00:56:8c:d9:67:1e:08:7e:11:19:97:af:
6a:e1:da:7b:c4:82:8e:b1:d9:38:8b:f4:f8:c2:1f:f9:6f:37:
45:24:a4:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaZqyuArL5Ct8riydHl9L4EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTdiNTkzYzgwNGE2ODNmMGM4ZmEzZWRhOTMzNWFmOTJh
ODkwNDQwHhcNMjUwNTA0MDUwMDUzWhcNMjUwNTA1MDUwMDUzWjAzMTEwLwYDVQQD
EygwNjhlYTY3YzBjZWFhZWY2ODE5ODc0YTI2MzVmZmM1OTBmYzFiZGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqYIe1Ba9nfhEhYdRSDeh/zVxJMV
8QWCtQH6kXQ1q5fOV4a8Fs+gcmjTHvaJ0j6bfBx9eAGPoR8WLBAKGRiKZjfIUzTY
RvQeEesG14ebBIJ/C0AC3F0NU1tUBZXoK25bCb8r8HBmEewaH9BVumC3gyeg/PUk
KeTESonBa3/lNqcwcMrWkgoC4Xku48CKgL6kwOQo265UIYZbobQsnYQ2jawGq484
YU/63n0S40/C6nB7kl8+JEsqkuxOeOQxqCoX561e1rpAZiM5r3BCOPHnsB5KUYm8
Ds5ojbaG8iaMdr9LcD0z5vmuTYtaxMUYCrW5silltHTGFSSzRZ5bj8Zk8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAaOpnwM6q72gZh0omNf/FkPwb3aMB8GA1UdIwQY
MBaAFCOntZPIBKaD8Mj6PtqTNa+SqJBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9kZGY1NTktNDMzYi00MDhmLWE1YjIt
M2ZiNWFkZGU2MDQwLzEvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9kZGY1NTktNDMzYi00MDhmLWE1YjItM2ZiNWFkZGU2MDQw
LzEvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxucoCDW
KBNLSgGHQYHKlXD0t5dQOly02z+0s2/Tn+r1kieKNRJSrr5OHfaCGtoBinlWa1VU
tTe/27t+QcSHtP4/vpva7KpYG1U38tA7u+PJnNAJbHqgbyFQRz7ueTBHjMHHEl1G
r8OPvOiQSqiqkPjNTXixTYj5npjXrAyvqnySoSh+z1w3v2/DhJgL8Xl3qep61+6q
v5It98AiOJVJQ1NDhrk6iomba2cOif98oqv45DfJzGfwUarF5WUCD93OfM8HBgBa
IbdQWBp2Nz9Cw14p4n8ZKlb1JD4/uQaUAFaM2WceCH4RGZevauHae8SCjrHZOIv0
+MIf+W83RSSk8Q==
-----END CERTIFICATE-----
Generated at Sun May 4 07:03:40 2025 by rpki-client