Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier: yYF85EsUct+y5Xvfb/OXvCW5N4uczM/jyXAhadYrCUo=
Subject key identifier: E1:CB:9B:A8:A4:3B:B1:05:A5:F0:E1:3A:88:F7:C7:A8:55:FA:D6:71
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 01965838FC35717115B378242B32DFDE4216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number: 0E56
Signing time: Mon 21 Apr 2025 12:00:51 +0000
Manifest this update: Mon 21 Apr 2025 12:00:51 +0000
Manifest next update: Tue 22 Apr 2025 12:00:51 +0000
Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: G06ryHql13IcUz7DRZwAPooba1MDmcblwSeyJeMmdv0=)
2: dxgxd6-xP9JkwgZUnUwpf-WY-Kw.roa (hash: hqOsy5iRYOF259KVMk0QtmelCMMCDmkaOIHQ2ucYLWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:fc:35:71:71:15:b3:78:24:2b:32:df:de:42:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: Apr 21 12:00:51 2025 GMT
Not After : Apr 22 12:00:51 2025 GMT
Subject: CN=e1cb9ba8a43bb105a5f0e13a88f7c7a855fad671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:f3:8e:4f:25:49:1d:cc:5d:96:1d:83:0c:
93:04:35:a1:54:b1:d0:fe:e0:ca:0e:10:78:96:40:
74:0e:fa:c0:4d:1c:72:0d:78:30:ae:31:a0:76:a3:
66:3a:9f:2e:ba:76:be:00:dc:1e:f1:a5:f3:1d:82:
c6:d9:28:03:fa:d6:a7:6c:76:ca:20:b3:e0:a2:b8:
84:84:03:9f:94:66:68:5b:b7:d9:83:46:a0:78:c9:
aa:cb:60:e9:13:65:57:d7:77:f1:d9:99:ce:09:75:
90:68:df:72:b1:a3:ec:42:45:92:f8:35:7f:d2:de:
27:78:c9:ee:14:c9:35:fd:e0:dc:30:60:49:e3:e3:
43:9f:79:96:69:ba:e9:95:9e:b7:7d:4e:74:5c:71:
35:86:a9:4c:78:cb:2a:bd:af:3b:39:85:49:9c:90:
c7:be:e2:82:a3:a2:d2:e4:f0:d8:1d:73:9b:a3:fc:
8c:53:d7:46:84:5e:34:f4:ef:3d:ae:60:59:7b:42:
90:8a:b5:91:bb:ea:eb:43:3c:fa:c4:b2:19:5c:4b:
a6:ec:ba:5f:7f:b3:05:4a:ff:1f:9d:5e:40:50:bb:
5c:48:00:d6:21:0f:30:02:bc:0e:aa:50:f7:83:a6:
a9:33:2d:74:37:62:ab:21:66:85:00:fe:38:53:21:
92:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CB:9B:A8:A4:3B:B1:05:A5:F0:E1:3A:88:F7:C7:A8:55:FA:D6:71
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:13:8e:88:4f:81:cb:f2:ba:26:53:0b:dc:ca:45:31:2f:fc:
c6:e5:06:b0:ba:1e:b6:56:bf:d6:5d:ee:76:09:71:35:d0:82:
f9:73:68:40:44:04:27:37:4e:be:63:6b:51:2a:70:9b:e7:7b:
65:34:d2:fb:9e:e6:14:21:f8:96:2f:f6:72:17:9f:3f:bb:0a:
e2:5d:f6:51:c9:1d:14:88:12:bd:f9:79:e6:6a:b3:27:c7:1a:
cf:77:c1:f2:09:aa:30:04:f2:bd:9c:82:db:93:43:95:79:8e:
ca:05:43:a3:43:72:0e:39:b0:08:14:2d:ae:9c:de:a2:40:2a:
7b:6a:e2:da:d9:b0:2a:c7:3d:ee:0d:f0:b4:00:12:bf:81:f4:
a5:c4:f4:91:89:2d:43:56:a9:5a:6e:b0:89:d7:94:76:e3:f1:
e2:43:ec:21:9f:3e:94:5f:30:f4:d0:d8:2f:44:d5:42:7f:3a:
fd:ef:19:f5:8e:29:31:04:54:90:0d:3c:b5:cf:29:de:32:af:
80:ef:f9:5e:61:40:9a:0f:39:97:eb:b5:15:38:62:21:44:8d:
40:df:c6:20:c1:7d:39:8d:00:6c:a0:fd:f5:0c:b6:79:74:8d:
8b:dd:97:fe:a0:0e:06:b0:4a:96:25:af:db:72:58:4d:cd:5d:
0e:f7:49:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYOPw1cXEVs3gkKzLf3kIWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZTcyNzExMzZiMjFhMTU4YWVmNDA5ZDMwZTJjNjAwMWQ1
YjBkYTkwHhcNMjUwNDIxMTIwMDUxWhcNMjUwNDIyMTIwMDUxWjAzMTEwLwYDVQQD
EyhlMWNiOWJhOGE0M2JiMTA1YTVmMGUxM2E4OGY3YzdhODU1ZmFkNjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqTzjk8lSR3MXZYdgwyTBDWhVLHQ
/uDKDhB4lkB0DvrATRxyDXgwrjGgdqNmOp8uuna+ANwe8aXzHYLG2SgD+tanbHbK
ILPgoriEhAOflGZoW7fZg0ageMmqy2DpE2VX13fx2ZnOCXWQaN9ysaPsQkWS+DV/
0t4neMnuFMk1/eDcMGBJ4+NDn3mWabrplZ63fU50XHE1hqlMeMsqva87OYVJnJDH
vuKCo6LS5PDYHXObo/yMU9dGhF409O89rmBZe0KQirWRu+rrQzz6xLIZXEum7Lpf
f7MFSv8fnV5AULtcSADWIQ8wArwOqlD3g6apMy10N2KrIWaFAP44UyGSzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHLm6ikO7EFpfDhOoj3x6hV+tZxMB8GA1UdIwQY
MBaAFOjnJxE2shoViu9AnTDixgAdWw2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk9jbkVUYXlHaFdLNzBDZE1PTEdBQjFiRGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9jYmY0MjUtYjk1OC00ZTQ5LTljOTYt
ODM1NmQyZDQyNzcxLzEvNk9jbkVUYXlHaFdLNzBDZE1PTEdBQjFiRGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9jYmY0MjUtYjk1OC00ZTQ5LTljOTYtODM1NmQyZDQyNzcx
LzEvNk9jbkVUYXlHaFdLNzBDZE1PTEdBQjFiRGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhOOiE+B
y/K6JlML3MpFMS/8xuUGsLoetla/1l3udglxNdCC+XNoQEQEJzdOvmNrUSpwm+d7
ZTTS+57mFCH4li/2chefP7sK4l32UckdFIgSvfl55mqzJ8caz3fB8gmqMATyvZyC
25NDlXmOygVDo0NyDjmwCBQtrpzeokAqe2ri2tmwKsc97g3wtAASv4H0pcT0kYkt
Q1apWm6wideUduPx4kPsIZ8+lF8w9NDYL0TVQn86/e8Z9Y4pMQRUkA08tc8p3jKv
gO/5XmFAmg85l+u1FThiIUSNQN/GIMF9OY0AbKD99Qy2eXSNi92X/qAOBrBKliWv
23JYTc1dDvdJgw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:18:56 2025 by rpki-client