
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
File: 6TGKUZjc0_ysJJgFU4XZryEQprQ.mft (raw, json)
Hash identifier: g+udX/vEAshdzbhdh7O4G68FyDVdgtIzXMT/lvAytrs=
Subject key identifier: 72:37:28:C9:7E:4D:4A:83:58:C7:57:8E:86:E3:48:43:85:0D:0D:C1
Authority key identifier: E9:31:8A:51:98:DC:D3:FC:AC:24:98:05:53:85:D9:AF:21:10:A6:B4
Certificate issuer: /CN=e9318a5198dcd3fcac2498055385d9af2110a6b4
Certificate serial: 01967831623F17298E8D937428E241F801F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
Manifest number: 0459
Signing time: Sun 27 Apr 2025 17:00:24 +0000
Manifest this update: Sun 27 Apr 2025 17:00:24 +0000
Manifest next update: Mon 28 Apr 2025 17:00:24 +0000
Files and hashes: 1: 1-BVKVQFCRlMAcE96pNTNBcbIG7s.roa (hash: JOxbdIeMTOyk9ZAjY/swAEcMqcgzzQjrBDhzF90m3Vs=)
2: 3ZU7hgqFBvs-JOWJ6E4MEbiA2bk.roa (hash: /NMweqecvh0z4jYnenJq1VRlGwr+MOCXPTrSyQD9fMA=)
3: 6TGKUZjc0_ysJJgFU4XZryEQprQ.crl (hash: m8nMlPVCbpWC1Vp74LG+SKgmTaSaLkHfAef9FUu3stY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:62:3f:17:29:8e:8d:93:74:28:e2:41:f8:01:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9318a5198dcd3fcac2498055385d9af2110a6b4
Validity
Not Before: Apr 27 17:00:24 2025 GMT
Not After : Apr 28 17:00:24 2025 GMT
Subject: CN=723728c97e4d4a8358c7578e86e34843850d0dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fc:cc:71:fc:c2:2e:14:d4:6c:c6:c3:be:7d:
b7:67:a6:de:55:ad:bf:3e:1c:2c:28:48:ca:e7:18:
e4:67:2a:84:a1:a6:80:2b:3d:8c:d0:22:b0:dd:de:
dd:50:0c:4b:6d:e0:2c:a4:06:33:b6:db:f0:b3:26:
37:aa:b3:b7:04:3b:09:86:d3:a4:0e:04:c2:74:0f:
c7:0c:87:3b:b6:8f:7f:46:0a:0c:65:bf:6e:fa:ac:
bc:06:91:15:ef:44:49:c8:ad:b0:df:2c:c7:98:23:
61:e8:8c:87:b9:e7:ce:23:59:7a:40:d8:56:3a:ff:
5b:c3:ec:f8:89:5d:eb:db:ed:f7:53:c0:70:77:60:
9f:03:85:24:10:0d:13:45:ea:b8:ff:c0:5a:14:bb:
3d:54:7e:5d:44:1a:f5:31:27:10:c7:43:ed:a5:70:
df:d5:6a:3e:2d:3c:8b:8f:b8:2b:91:2a:77:c7:68:
fc:7f:1a:d8:db:8d:7b:b9:88:d9:46:dd:f4:f4:b8:
90:46:3c:19:6f:38:7c:e1:89:28:b0:ef:e0:0d:11:
80:bb:7d:3d:15:ea:f1:7f:e3:ff:4d:a5:15:fd:99:
fa:57:87:d8:41:e8:29:8e:56:45:1b:b2:31:a9:96:
ba:6e:d9:7b:2f:a8:6a:27:10:17:9f:ea:63:c6:03:
a7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:37:28:C9:7E:4D:4A:83:58:C7:57:8E:86:E3:48:43:85:0D:0D:C1
X509v3 Authority Key Identifier:
keyid:E9:31:8A:51:98:DC:D3:FC:AC:24:98:05:53:85:D9:AF:21:10:A6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ed:a7:30:c9:57:a4:9e:77:a6:55:76:ac:be:76:98:a2:92:
b2:a3:0f:af:fd:ae:7f:59:a7:42:c4:30:8d:0a:2f:75:8e:59:
dc:54:6d:b8:f8:28:d7:6b:35:7f:43:e5:f5:13:a7:75:a3:cf:
96:50:86:88:84:95:b6:6b:5f:b1:81:15:55:9c:36:95:66:9d:
6f:02:3f:a9:1e:ea:92:bb:a6:b7:0c:6d:df:b1:df:1c:83:0a:
5f:82:c5:13:34:c8:3b:ef:82:28:7b:ec:22:5b:c6:0e:da:0f:
00:18:e6:fe:14:0d:16:f8:45:49:1f:41:42:0a:c1:16:ac:e4:
75:09:56:14:6f:1b:0f:33:bb:4b:ac:26:ce:58:84:65:a8:ed:
a2:41:ab:07:1a:49:63:f1:66:b1:c0:11:bc:c9:7f:d9:e8:44:
d0:9b:75:ab:a1:50:02:df:04:92:bd:97:ff:81:17:1a:11:80:
65:77:1f:d6:4f:23:8d:86:56:f6:aa:11:f4:e8:e4:af:79:ac:
ea:61:60:7a:8b:f3:46:e6:c8:5d:41:0b:28:39:22:2d:f6:4b:
3d:4b:ed:dd:59:9f:6e:12:03:6f:14:03:88:eb:83:90:02:c1:
b4:15:0b:92:fc:ad:bc:08:82:71:16:0a:d3:75:15:cb:e1:15:
86:1b:66:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4MWI/FymOjZN0KOJB+AH4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MzE4YTUxOThkY2QzZmNhYzI0OTgwNTUzODVkOWFmMjEx
MGE2YjQwHhcNMjUwNDI3MTcwMDI0WhcNMjUwNDI4MTcwMDI0WjAzMTEwLwYDVQQD
Eyg3MjM3MjhjOTdlNGQ0YTgzNThjNzU3OGU4NmUzNDg0Mzg1MGQwZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/zMcfzCLhTUbMbDvn23Z6beVa2/
PhwsKEjK5xjkZyqEoaaAKz2M0CKw3d7dUAxLbeAspAYzttvwsyY3qrO3BDsJhtOk
DgTCdA/HDIc7to9/RgoMZb9u+qy8BpEV70RJyK2w3yzHmCNh6IyHuefOI1l6QNhW
Ov9bw+z4iV3r2+33U8Bwd2CfA4UkEA0TReq4/8BaFLs9VH5dRBr1MScQx0PtpXDf
1Wo+LTyLj7grkSp3x2j8fxrY2417uYjZRt309LiQRjwZbzh84YkosO/gDRGAu309
Ferxf+P/TaUV/Zn6V4fYQegpjlZFG7IxqZa6btl7L6hqJxAXn+pjxgOnqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHI3KMl+TUqDWMdXjobjSEOFDQ3BMB8GA1UdIwQY
MBaAFOkxilGY3NP8rCSYBVOF2a8hEKa0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRHS1VaamMwX3lzSkpnRlU0WFpyeUVRcHJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iNjY3YWEtYzQxNS00YmJjLWFkNGMt
YzMzNzdjMWUzYTJkLzEvNlRHS1VaamMwX3lzSkpnRlU0WFpyeUVRcHJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iNjY3YWEtYzQxNS00YmJjLWFkNGMtYzMzNzdjMWUzYTJk
LzEvNlRHS1VaamMwX3lzSkpnRlU0WFpyeUVRcHJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANO2nMMlX
pJ53plV2rL52mKKSsqMPr/2uf1mnQsQwjQovdY5Z3FRtuPgo12s1f0Pl9ROndaPP
llCGiISVtmtfsYEVVZw2lWadbwI/qR7qkrumtwxt37HfHIMKX4LFEzTIO++CKHvs
IlvGDtoPABjm/hQNFvhFSR9BQgrBFqzkdQlWFG8bDzO7S6wmzliEZajtokGrBxpJ
Y/FmscARvMl/2ehE0Jt1q6FQAt8Ekr2X/4EXGhGAZXcf1k8jjYZW9qoR9Ojkr3ms
6mFgeovzRubIXUELKDkiLfZLPUvt3VmfbhIDbxQDiOuDkALBtBULkvytvAiCcRYK
03UVy+EVhhtmyQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:03:05 2025 by rpki-client