Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
File: C6C-CUpak9B84Z5GvmL5_85jRYM.mft (raw, json)
Hash identifier: TjFKYRCnBmKQgZgh9UE9vMo9dkt2o3/ElyRW30+F1DM=
Subject key identifier: B9:56:5C:DB:7B:00:83:D9:6A:38:CE:32:31:53:E3:3A:87:A6:AB:9F
Authority key identifier: 0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83
Certificate issuer: /CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
Certificate serial: 01967567BCAC55EA68CCE9DCED2AB7B4AC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
Manifest number: 0BEE
Signing time: Sun 27 Apr 2025 04:00:54 +0000
Manifest this update: Sun 27 Apr 2025 04:00:54 +0000
Manifest next update: Mon 28 Apr 2025 04:00:54 +0000
Files and hashes: 1: C6C-CUpak9B84Z5GvmL5_85jRYM.crl (hash: iZl+NrrTIEanMjAtDam5yzS/CsUMOCSg1KKNIaEocUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:bc:ac:55:ea:68:cc:e9:dc:ed:2a:b7:b4:ac:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
Validity
Not Before: Apr 27 04:00:54 2025 GMT
Not After : Apr 28 04:00:54 2025 GMT
Subject: CN=b9565cdb7b0083d96a38ce323153e33a87a6ab9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:4b:96:a2:66:60:cf:82:05:78:b6:56:c9:
99:3d:08:61:a6:c5:2e:39:2a:db:c5:ee:1d:d3:7c:
c5:5e:db:cd:d0:1a:56:9f:55:62:45:69:d7:09:e4:
8b:b4:93:6c:3b:c3:dd:bb:15:f7:cf:12:4b:34:1e:
6f:ea:1d:46:94:3a:0b:67:b1:9f:ba:61:70:ad:ae:
ce:73:e9:f8:81:21:11:76:62:4a:61:ca:af:c0:21:
71:56:d6:66:31:94:2f:95:38:f3:ce:5f:fc:25:13:
28:ec:82:68:f3:46:74:27:65:21:56:f1:a5:ba:6a:
f7:ab:ea:62:f2:86:6e:14:f5:fa:9f:dc:6b:f7:62:
fe:15:68:65:d1:49:a2:30:bf:77:5c:be:d5:2b:a7:
de:7e:1f:a2:b9:7e:c9:e0:ae:b7:8b:d6:7f:be:30:
58:1b:2a:ae:06:ac:34:b5:d1:97:a1:98:2d:97:3f:
56:61:2b:9c:8d:10:0f:c3:a6:68:0f:5b:f2:de:ad:
7f:8b:0e:39:ff:d0:4a:4e:d0:5d:0d:46:99:8a:14:
1c:37:ed:ca:11:d6:91:5d:af:d4:7c:a9:0b:ab:f4:
7d:2c:46:39:3a:22:04:a1:4b:2e:e7:8c:7d:c5:68:
cd:e1:30:5b:1a:9d:65:d8:6d:92:91:85:bf:6c:c3:
ee:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:56:5C:DB:7B:00:83:D9:6A:38:CE:32:31:53:E3:3A:87:A6:AB:9F
X509v3 Authority Key Identifier:
keyid:0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0d:01:44:bb:2d:0b:60:70:29:cc:ed:06:1d:94:27:44:6f:
d4:d0:9c:0f:fa:7c:2a:73:0b:31:e0:95:e3:aa:a4:4f:3d:a2:
f6:6b:eb:c9:48:fe:89:66:df:d6:b3:d3:cc:46:c8:c2:44:02:
68:94:60:32:10:52:ec:0e:0b:e6:bc:f5:50:f8:e0:4b:85:97:
5c:4c:92:5e:45:36:63:02:46:b6:c4:68:19:e3:0d:9a:ab:2c:
0a:aa:9b:3a:3f:ce:86:2f:94:a2:75:c2:d9:11:9a:27:b5:75:
c1:5f:f9:c3:9f:09:4e:cc:ed:d9:ed:99:da:3c:58:51:c2:4a:
6f:fd:a6:12:62:29:ff:2d:5e:62:a5:c3:f7:88:87:91:d6:a3:
50:be:a9:37:ad:25:c6:fc:b4:72:3f:9b:b9:e6:d5:d4:ad:01:
a6:da:64:ca:22:dd:8e:7d:1c:40:37:0f:2c:8f:7c:a9:05:fe:
d9:00:34:fe:83:8c:f9:8a:39:75:d5:65:3a:5d:1f:79:51:e4:
83:c5:ec:80:a5:be:ff:fa:36:eb:a9:50:7d:f2:f9:b1:ee:38:
57:00:e2:29:9b:fa:cc:0f:fd:0d:46:ae:46:c7:f2:db:51:50:
9e:9f:f9:c2:f0:2a:b7:26:a6:1f:f2:2d:b8:14:2e:61:27:ec:
92:cd:30:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1Z7ysVepozOnc7Sq3tKxuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYTBiZTA5NGE1YTkzZDA3Y2UxOWU0NmJlNjJmOWZmY2U2
MzQ1ODMwHhcNMjUwNDI3MDQwMDU0WhcNMjUwNDI4MDQwMDU0WjAzMTEwLwYDVQQD
EyhiOTU2NWNkYjdiMDA4M2Q5NmEzOGNlMzIzMTUzZTMzYTg3YTZhYjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygxLlqJmYM+CBXi2VsmZPQhhpsUu
OSrbxe4d03zFXtvN0BpWn1ViRWnXCeSLtJNsO8PduxX3zxJLNB5v6h1GlDoLZ7Gf
umFwra7Oc+n4gSERdmJKYcqvwCFxVtZmMZQvlTjzzl/8JRMo7IJo80Z0J2UhVvGl
umr3q+pi8oZuFPX6n9xr92L+FWhl0UmiML93XL7VK6fefh+iuX7J4K63i9Z/vjBY
GyquBqw0tdGXoZgtlz9WYSucjRAPw6ZoD1vy3q1/iw45/9BKTtBdDUaZihQcN+3K
EdaRXa/UfKkLq/R9LEY5OiIEoUsu54x9xWjN4TBbGp1l2G2SkYW/bMPuSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlWXNt7AIPZajjOMjFT4zqHpqufMB8GA1UdIwQY
MBaAFAugvglKWpPQfOGeRr5i+f/OY0WDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzZDLUNVcGFrOUI4NFo1R3ZtTDVfODVqUllNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lOTE1MmEtMWJmNi00NjA5LWI2NDEt
YmZjYWIzMmRhZmM2LzEvQzZDLUNVcGFrOUI4NFo1R3ZtTDVfODVqUllNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lOTE1MmEtMWJmNi00NjA5LWI2NDEtYmZjYWIzMmRhZmM2
LzEvQzZDLUNVcGFrOUI4NFo1R3ZtTDVfODVqUllNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQ0BRLst
C2BwKcztBh2UJ0Rv1NCcD/p8KnMLMeCV46qkTz2i9mvryUj+iWbf1rPTzEbIwkQC
aJRgMhBS7A4L5rz1UPjgS4WXXEySXkU2YwJGtsRoGeMNmqssCqqbOj/Ohi+UonXC
2RGaJ7V1wV/5w58JTszt2e2Z2jxYUcJKb/2mEmIp/y1eYqXD94iHkdajUL6pN60l
xvy0cj+buebV1K0BptpkyiLdjn0cQDcPLI98qQX+2QA0/oOM+Yo5ddVlOl0feVHk
g8XsgKW+//o266lQffL5se44VwDiKZv6zA/9DUauRsfy21FQnp/5wvAqtyamH/It
uBQuYSfsks0wDw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:05:53 2025 by rpki-client