Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
File: S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json)
Hash identifier: bBYRr+3IZsLc18im2DtCj8D3Kdw+T4peeL00Oj7VL0s=
Subject key identifier: FA:4F:89:0D:4D:FF:0A:30:3C:5C:8B:7A:F4:C2:EA:60:5D:5C:99:51
Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
Certificate issuer: /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Certificate serial: 019644E8930C2A9E236E56BFCCDC2BAC03B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
Manifest number: 0C2E
Signing time: Thu 17 Apr 2025 18:00:14 +0000
Manifest this update: Thu 17 Apr 2025 18:00:14 +0000
Manifest next update: Fri 18 Apr 2025 18:00:14 +0000
Files and hashes: 1: 07VM5GQDyy0wcSk66eg9Nc4GYr0.roa (hash: tZR04Bh0g3Sbqjc1Ej/IqbvRwZJEdNyq0qHOrpzegq8=)
2: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: rRauv0ikgO0aJtIkVJtajaxBROO5xyoQnoorlTj1e0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:93:0c:2a:9e:23:6e:56:bf:cc:dc:2b:ac:03:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Validity
Not Before: Apr 17 18:00:14 2025 GMT
Not After : Apr 18 18:00:14 2025 GMT
Subject: CN=fa4f890d4dff0a303c5c8b7af4c2ea605d5c9951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1d:72:db:33:0b:af:77:83:92:8a:38:81:be:
b4:fa:3e:4f:b6:78:74:fe:19:c3:b5:89:59:0d:79:
e5:d5:65:16:07:b3:25:52:2f:a7:ab:ac:a4:33:76:
2e:97:5a:30:e9:0f:e2:79:f7:7c:c9:fe:20:95:84:
c4:8e:a5:f1:32:ef:4a:d0:d4:38:67:2b:07:dd:82:
72:fb:ef:c3:fe:3a:10:f1:91:12:46:90:57:61:1d:
c5:2c:ee:75:22:b4:f8:1d:2d:ab:79:1c:5e:e7:fd:
b0:3c:34:9e:3e:4d:cb:19:55:a6:22:ba:5a:85:f8:
63:1c:85:76:59:7b:51:f7:bc:ac:d0:4a:7d:a1:18:
3d:7c:a2:f2:2b:5d:99:e5:1f:36:20:2c:72:f1:04:
da:43:e4:ab:d2:9d:4e:59:8a:9e:a9:61:59:f7:9b:
d1:f9:44:60:0e:d8:d2:04:3e:85:26:be:18:0a:7c:
d9:d8:0d:0f:40:27:e2:c8:67:a7:2b:1d:98:81:86:
3b:97:29:6f:e1:4f:21:72:5a:91:46:74:93:dd:4f:
c4:6a:11:50:3a:cf:0d:2c:7c:2e:0b:20:6e:2c:11:
e0:6e:eb:15:ba:cb:37:d6:50:0b:3c:b1:aa:51:ec:
a0:fc:ce:0c:98:61:af:df:14:73:8d:a7:02:f4:fd:
d2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4F:89:0D:4D:FF:0A:30:3C:5C:8B:7A:F4:C2:EA:60:5D:5C:99:51
X509v3 Authority Key Identifier:
keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9b:11:08:6d:e0:dd:22:df:d3:10:d5:cf:3d:a9:ef:b1:89:
ed:78:d5:b2:07:89:10:bd:6b:aa:22:4f:de:38:97:e8:c4:77:
b5:38:39:6a:50:e3:15:40:16:46:1a:27:88:3c:f7:cc:5f:0c:
ae:4c:fd:be:5d:93:b5:8e:1a:7d:2e:bf:b3:b0:5d:71:33:ed:
b3:c5:c8:3b:ea:69:14:56:35:29:77:54:8c:aa:00:c5:cb:44:
b3:74:fc:2a:4a:c5:45:e4:22:f9:ec:ef:5f:fd:42:4f:9b:b1:
ef:72:25:9f:74:05:10:66:9d:64:60:11:54:6e:6e:36:a5:a9:
6a:38:24:cd:0f:6a:d5:bd:0f:2a:48:2c:f3:21:84:0b:19:2e:
3c:72:1d:19:e4:72:54:38:93:14:04:cd:0e:7e:c3:98:d1:91:
b1:74:5e:eb:e0:81:72:25:a9:7a:ed:c2:98:77:3c:a2:f3:03:
d2:a3:2a:5b:46:c3:ad:5a:e2:8d:89:6c:dd:02:a8:d8:a8:20:
e4:4d:0e:98:d6:24:9c:69:09:88:bc:02:f7:5c:eb:01:1f:69:
74:04:e3:95:f5:f1:5c:ca:75:5b:f6:a3:2c:70:7e:b8:4f:2d:
f2:94:79:2f:13:c5:ba:0b:af:4a:8e:ea:64:ba:f1:53:1d:1b:
b1:77:67:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZE6JMMKp4jbla/zNwrrAO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYWZmNDhhZDExNDViMTAwYzc4M2ZiN2FmYjZmMzAyOGJk
OGYzNGUwHhcNMjUwNDE3MTgwMDE0WhcNMjUwNDE4MTgwMDE0WjAzMTEwLwYDVQQD
EyhmYTRmODkwZDRkZmYwYTMwM2M1YzhiN2FmNGMyZWE2MDVkNWM5OTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh1y2zMLr3eDkoo4gb60+j5Ptnh0
/hnDtYlZDXnl1WUWB7MlUi+nq6ykM3Yul1ow6Q/iefd8yf4glYTEjqXxMu9K0NQ4
ZysH3YJy++/D/joQ8ZESRpBXYR3FLO51IrT4HS2reRxe5/2wPDSePk3LGVWmIrpa
hfhjHIV2WXtR97ys0Ep9oRg9fKLyK12Z5R82ICxy8QTaQ+Sr0p1OWYqeqWFZ95vR
+URgDtjSBD6FJr4YCnzZ2A0PQCfiyGenKx2YgYY7lylv4U8hclqRRnST3U/EahFQ
Os8NLHwuCyBuLBHgbusVuss31lALPLGqUeyg/M4MmGGv3xRzjacC9P3SUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpPiQ1N/wowPFyLevTC6mBdXJlRMB8GA1UdIwQY
MBaAFEuv9IrRFFsQDHg/t6+28wKL2PNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMt
YmZlYjdjZWEyMDlkLzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMtYmZlYjdjZWEyMDlk
LzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJsRCG3g
3SLf0xDVzz2p77GJ7XjVsgeJEL1rqiJP3jiX6MR3tTg5alDjFUAWRhoniDz3zF8M
rkz9vl2TtY4afS6/s7BdcTPts8XIO+ppFFY1KXdUjKoAxctEs3T8KkrFReQi+ezv
X/1CT5ux73Iln3QFEGadZGARVG5uNqWpajgkzQ9q1b0PKkgs8yGECxkuPHIdGeRy
VDiTFATNDn7DmNGRsXRe6+CBciWpeu3CmHc8ovMD0qMqW0bDrVrijYls3QKo2Kgg
5E0OmNYknGkJiLwC91zrAR9pdATjlfXxXMp1W/ajLHB+uE8t8pR5LxPFuguvSo7q
ZLrxUx0bsXdnZg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:37:27 2025 by rpki-client