Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
File: 6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft (raw, json)
Hash identifier: VrF+xGE1VZ6apCAtxnItgBTUuV6thWrICfide8AKnaI=
Subject key identifier: 43:A8:AE:A0:41:C4:26:F2:A4:79:62:7A:21:4B:1E:14:D3:2A:9E:69
Authority key identifier: E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
Certificate issuer: /CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Certificate serial: 019674F9E5E26CDF674CE5E172E2E9019FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
Manifest number: 130A
Signing time: Sun 27 Apr 2025 02:00:56 +0000
Manifest this update: Sun 27 Apr 2025 02:00:56 +0000
Manifest next update: Mon 28 Apr 2025 02:00:56 +0000
Files and hashes: 1: 6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl (hash: ttSa+VQ4OSvWz0exIcptmOuhBVgL/4aMgBdeNCfRu+k=)
2: XMQgiqcPelkjm7gWjsFCVZhyYlw.roa (hash: MplIqGMTS4jdBDFbxET40RGJ8kb7EFW6T8B0/VgkIdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:e5:e2:6c:df:67:4c:e5:e1:72:e2:e9:01:9f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Validity
Not Before: Apr 27 02:00:56 2025 GMT
Not After : Apr 28 02:00:56 2025 GMT
Subject: CN=43a8aea041c426f2a479627a214b1e14d32a9e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:4b:1f:8f:9d:59:33:63:0d:ae:a4:f9:48:
30:50:86:aa:bf:3e:8e:c7:62:f0:b5:da:be:b4:48:
40:4e:76:04:f9:4e:b6:b1:83:aa:c8:a4:5f:f4:18:
51:57:8a:2e:b2:22:14:82:db:3f:a7:09:67:65:77:
7b:e8:e4:4b:4b:4f:60:3a:1f:45:4f:d1:40:21:65:
2b:a1:be:de:c0:65:f6:f3:06:06:fc:c9:2d:6a:8c:
7d:14:da:0e:1c:33:c4:a2:a7:82:01:d2:85:e2:fa:
6b:27:0a:ab:2c:24:4a:59:79:fe:10:d3:0c:98:b0:
18:6e:ca:74:23:74:f4:e0:81:5c:23:87:ab:ed:ff:
f5:ed:de:73:0f:91:f6:a5:90:1f:90:9a:a0:27:23:
c4:58:5b:91:bf:8d:0d:92:38:7c:7f:99:5c:df:c6:
46:bc:72:2d:1f:60:99:2e:45:7a:d4:d0:d1:61:a0:
cc:73:b6:b5:89:d8:15:cc:fc:78:ed:1b:1d:e6:89:
4d:39:e9:9b:04:1b:b5:33:39:30:29:21:08:cb:50:
49:ef:78:a9:17:6c:f3:aa:8e:12:86:ff:64:f2:7f:
03:7d:6a:2c:a1:58:b8:6d:bd:84:68:90:b0:d4:5e:
cc:f0:f5:fd:0e:1f:55:70:b7:57:b9:64:74:b4:30:
38:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A8:AE:A0:41:C4:26:F2:A4:79:62:7A:21:4B:1E:14:D3:2A:9E:69
X509v3 Authority Key Identifier:
keyid:E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b7:87:b8:27:12:66:67:58:6d:90:ca:fe:ea:18:08:36:6e:
8d:c2:a7:3d:cd:7e:10:cd:4b:fd:78:28:1b:ae:54:5f:f2:9a:
cb:75:7a:e2:d5:26:1e:21:b1:b7:05:69:1c:d9:56:c6:e5:b3:
1e:de:85:3c:d4:43:75:8e:f2:4d:e2:4b:65:fe:63:38:c9:8b:
55:9f:0d:2d:0a:4c:c4:0a:9c:6f:d8:0b:7b:fd:7e:75:31:81:
5c:0e:cc:4c:31:19:89:f4:d0:49:d9:80:6e:dd:4e:38:c8:31:
84:1d:ef:5f:1a:ae:f6:80:2f:b9:0e:47:80:79:cd:5f:96:21:
d5:62:01:e7:43:b0:b7:e8:36:d6:6c:b0:6b:da:4b:9c:8c:34:
9e:d4:25:0e:0b:6f:dc:59:3b:ed:37:de:c6:ef:5c:49:54:ac:
72:51:a4:9b:b3:6c:af:b9:26:d0:30:91:c1:b6:07:ad:a7:b6:
75:5e:38:52:2c:ad:a0:3e:b1:8c:49:24:90:59:1a:e2:53:19:
10:73:5b:66:aa:af:6e:a5:43:3a:5d:6e:03:45:4b:10:73:27:
b6:ba:17:5f:1a:f7:35:24:08:8d:d3:4a:1b:ff:9c:09:26:e9:
69:52:87:b9:5c:36:a1:c4:ec:fb:96:26:9c:95:90:f9:f6:74:
ea:58:e0:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0+eXibN9nTOXhcuLpAZ/WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YjFhNmMwNjE0NTVjMDhlOTE0N2IyODFmYzc0MjRjYmM1
NDVmNDEwHhcNMjUwNDI3MDIwMDU2WhcNMjUwNDI4MDIwMDU2WjAzMTEwLwYDVQQD
Eyg0M2E4YWVhMDQxYzQyNmYyYTQ3OTYyN2EyMTRiMWUxNGQzMmE5ZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfJLH4+dWTNjDa6k+UgwUIaqvz6O
x2Lwtdq+tEhATnYE+U62sYOqyKRf9BhRV4ousiIUgts/pwlnZXd76ORLS09gOh9F
T9FAIWUrob7ewGX28wYG/Mktaox9FNoOHDPEoqeCAdKF4vprJwqrLCRKWXn+ENMM
mLAYbsp0I3T04IFcI4er7f/17d5zD5H2pZAfkJqgJyPEWFuRv40Nkjh8f5lc38ZG
vHItH2CZLkV61NDRYaDMc7a1idgVzPx47Rsd5olNOembBBu1MzkwKSEIy1BJ73ip
F2zzqo4Shv9k8n8DfWosoVi4bb2EaJCw1F7M8PX9Dh9VcLdXuWR0tDA4KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOorqBBxCbypHlieiFLHhTTKp5pMB8GA1UdIwQY
MBaAFOmxpsBhRVwI6RR7KB/HQky8VF9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmJHbXdHRkZYQWpwRkhzb0g4ZENUTHhVWDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hZmRmOTUtMjgzNC00ZGNjLWI0MWQt
M2Y5ZjI2NGNlYjIwLzEvNmJHbXdHRkZYQWpwRkhzb0g4ZENUTHhVWDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hZmRmOTUtMjgzNC00ZGNjLWI0MWQtM2Y5ZjI2NGNlYjIw
LzEvNmJHbXdHRkZYQWpwRkhzb0g4ZENUTHhVWDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7eHuCcS
ZmdYbZDK/uoYCDZujcKnPc1+EM1L/XgoG65UX/Kay3V64tUmHiGxtwVpHNlWxuWz
Ht6FPNRDdY7yTeJLZf5jOMmLVZ8NLQpMxAqcb9gLe/1+dTGBXA7MTDEZifTQSdmA
bt1OOMgxhB3vXxqu9oAvuQ5HgHnNX5Yh1WIB50Owt+g21mywa9pLnIw0ntQlDgtv
3Fk77Tfexu9cSVSsclGkm7Nsr7km0DCRwbYHrae2dV44UiytoD6xjEkkkFka4lMZ
EHNbZqqvbqVDOl1uA0VLEHMntroXXxr3NSQIjdNKG/+cCSbpaVKHuVw2ocTs+5Ym
nJWQ+fZ06ljgZA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:52 2025 by rpki-client