Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
File: 6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft (raw, json)
Hash identifier: hlLhLmueGgavDs6wVxq1zllof7tNGjBwvTaaY5veBtA=
Subject key identifier: A4:1E:6D:B2:BD:37:07:56:19:9B:42:5B:D8:7C:64:44:1D:EB:72:6D
Authority key identifier: EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
Certificate issuer: /CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Certificate serial: 01951210A473DA6499EFABB54920D8599AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 04:00:35 +0000
Manifest this update: Mon 17 Feb 2025 04:00:35 +0000
Manifest next update: Tue 18 Feb 2025 04:00:35 +0000
Files and hashes: 1: 6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl (hash: Asd4eIoZukEVNynXOByE22sCO7nQ2gZSDcLbQYTcLDs=)
2: f1F0WxdJkw--IIYJ2pRVkM2V08g.roa (hash: PCXGQz19PbylWHQsw2l6MBgGvmv6YISk0m8qSQkolpM=)
3: weaxMACIysGRPOx39bRJCpdcHEI.roa (hash: coOLOg3eMCLKMHx7Lq6/lTx44QSsHYUGPWnve3Ptlmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:a4:73:da:64:99:ef:ab:b5:49:20:d8:59:9a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Validity
Not Before: Feb 17 04:00:35 2025 GMT
Not After : Feb 18 04:00:35 2025 GMT
Subject: CN=a41e6db2bd370756199b425bd87c64441deb726d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:f6:8d:9e:de:5e:d0:80:02:7f:8f:78:62:
2c:8b:f8:ad:2e:6b:3d:4f:6f:34:9f:c0:26:30:40:
0e:1a:6d:58:18:8a:4c:07:f6:57:05:d8:14:1d:88:
dc:b5:c2:af:63:02:d9:5d:a2:a9:c7:c7:2c:93:d8:
e1:10:36:0c:a5:d5:21:40:f7:2b:4d:f5:bc:b3:07:
ae:28:53:b0:02:04:49:49:ed:72:0b:1f:8e:94:d5:
b9:1d:a5:c4:53:16:3d:83:50:09:26:fb:67:27:5f:
79:20:77:c8:cb:9c:f7:fb:40:f1:0b:fb:c0:bb:41:
7d:b7:84:c8:a1:19:98:a8:6a:59:0c:00:6d:1a:6a:
58:ba:dc:45:e2:9e:ae:41:19:66:f2:17:d6:9e:db:
21:1c:fb:f7:f4:1f:cc:09:94:75:55:0d:07:b4:9a:
f5:a1:8d:e2:87:00:ba:db:0e:ab:33:98:a2:aa:25:
36:cb:f1:16:a3:62:87:60:54:8a:87:18:8f:ae:67:
71:e5:2a:f3:f1:5a:bf:f8:3c:96:b3:4d:ed:b5:c7:
7d:98:93:d3:5b:d8:22:42:f3:b7:90:bf:b9:ac:0b:
b0:ef:98:34:0a:e4:29:6d:8a:af:8f:b9:2b:7d:46:
4b:81:64:90:ec:3f:9b:4a:b8:d8:71:0f:67:3b:5c:
99:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1E:6D:B2:BD:37:07:56:19:9B:42:5B:D8:7C:64:44:1D:EB:72:6D
X509v3 Authority Key Identifier:
keyid:EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8a:01:91:dd:4e:60:21:bf:8b:08:0b:eb:88:aa:6e:bf:0a:
83:84:3b:75:cb:44:a5:23:f7:85:63:46:dc:21:1c:b5:41:70:
0e:f0:fc:d8:9c:1c:96:dd:c7:c9:10:a3:97:35:e4:3c:ed:0d:
5c:aa:24:ce:dd:a3:87:8e:12:07:72:b8:fe:45:dd:97:80:ed:
4e:d2:74:0f:c6:e9:ab:fd:fc:3d:b2:f2:a9:6d:8c:07:f8:7e:
0a:8b:a4:e6:11:11:ea:91:40:47:b9:c4:0b:93:18:02:49:1c:
95:ff:8b:53:76:3e:48:e0:e7:f4:22:41:42:d2:ef:f2:c3:57:
7a:99:7d:f4:28:44:0c:c8:23:f0:45:1c:0b:6d:e5:e2:97:42:
ce:2a:89:07:af:11:b2:af:94:e5:91:3b:65:84:f2:cc:b6:35:
52:7f:1a:92:e9:87:8b:48:16:9d:50:9c:fd:1a:7a:00:da:a5:
db:50:5f:bf:1b:2f:66:e0:5c:ce:34:c1:92:50:0d:48:65:c3:
97:ac:1b:73:54:8d:a6:c3:45:25:1b:2b:e9:13:12:f1:b2:7c:
cd:df:a7:a8:0b:a0:47:70:dc:2d:34:dd:04:01:1c:32:4f:27:
80:88:eb:d0:ea:fe:8a:48:d9:fd:95:0f:08:48:52:bd:3d:83:
c5:62:80:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEKRz2mSZ76u1SSDYWZqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMjJmNGZiOTU1ZDc5ZjA5M2Q3ZTg3YjE4MmMzNDQwYWM0
YmUwNmMwHhcNMjUwMjE3MDQwMDM1WhcNMjUwMjE4MDQwMDM1WjAzMTEwLwYDVQQD
EyhhNDFlNmRiMmJkMzcwNzU2MTk5YjQyNWJkODdjNjQ0NDFkZWI3MjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzv2jZ7eXtCAAn+PeGIsi/itLms9
T280n8AmMEAOGm1YGIpMB/ZXBdgUHYjctcKvYwLZXaKpx8csk9jhEDYMpdUhQPcr
TfW8sweuKFOwAgRJSe1yCx+OlNW5HaXEUxY9g1AJJvtnJ195IHfIy5z3+0DxC/vA
u0F9t4TIoRmYqGpZDABtGmpYutxF4p6uQRlm8hfWntshHPv39B/MCZR1VQ0HtJr1
oY3ihwC62w6rM5iiqiU2y/EWo2KHYFSKhxiPrmdx5Srz8Vq/+DyWs03ttcd9mJPT
W9giQvO3kL+5rAuw75g0CuQpbYqvj7krfUZLgWSQ7D+bSrjYcQ9nO1yZhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQebbK9NwdWGZtCW9h8ZEQd63JtMB8GA1UdIwQY
MBaAFOoi9PuVXXnwk9foexgsNECsS+BsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmlMMC01VmRlZkNUMS1oN0dDdzBRS3hMNEd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9mYzgwMzctMmI3Yy00MWZjLTlkYmYt
OTNkMWZiNzJkMzgzLzEvNmlMMC01VmRlZkNUMS1oN0dDdzBRS3hMNEd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9mYzgwMzctMmI3Yy00MWZjLTlkYmYtOTNkMWZiNzJkMzgz
LzEvNmlMMC01VmRlZkNUMS1oN0dDdzBRS3hMNEd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYoBkd1O
YCG/iwgL64iqbr8Kg4Q7dctEpSP3hWNG3CEctUFwDvD82Jwclt3HyRCjlzXkPO0N
XKokzt2jh44SB3K4/kXdl4DtTtJ0D8bpq/38PbLyqW2MB/h+Couk5hER6pFAR7nE
C5MYAkkclf+LU3Y+SODn9CJBQtLv8sNXepl99ChEDMgj8EUcC23l4pdCziqJB68R
sq+U5ZE7ZYTyzLY1Un8akumHi0gWnVCc/Rp6ANql21BfvxsvZuBczjTBklANSGXD
l6wbc1SNpsNFJRsr6RMS8bJ8zd+nqAugR3DcLTTdBAEcMk8ngIjr0Or+ikjZ/ZUP
CEhSvT2DxWKAYQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:14 2025 by rpki-client