Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
File: 6mQereGVXdS5B5FrmeAhA57MM-g.mft (raw, json)
Hash identifier: Nhz8e10EQCtjTE8koWDxz9SvEE6uY7t2Zua0DwZuXKc=
Subject key identifier: F6:FF:CC:2E:3D:1F:7B:67:48:95:0B:D5:93:12:C7:FB:18:EE:D3:26
Authority key identifier: EA:64:1E:AD:E1:95:5D:D4:B9:07:91:6B:99:E0:21:03:9E:CC:33:E8
Certificate issuer: /CN=ea641eade1955dd4b907916b99e021039ecc33e8
Certificate serial: 019652A4E4B2687B080F97647089B997B192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 10:01:00 +0000
Manifest this update: Sun 20 Apr 2025 10:01:00 +0000
Manifest next update: Mon 21 Apr 2025 10:01:00 +0000
Files and hashes: 1: 6mQereGVXdS5B5FrmeAhA57MM-g.crl (hash: NFJgZohUGCK5sztGeAN4JXEaQksvStPUhQPkFbLJ1Gg=)
2: yMsvkbq8K0IM2cns7HVpjbtpaM8.roa (hash: TJjLQAcsYRitHc7okesLeLJv1CF6d2BgyzzxAXCqX+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:e4:b2:68:7b:08:0f:97:64:70:89:b9:97:b1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea641eade1955dd4b907916b99e021039ecc33e8
Validity
Not Before: Apr 20 10:01:00 2025 GMT
Not After : Apr 21 10:01:00 2025 GMT
Subject: CN=f6ffcc2e3d1f7b6748950bd59312c7fb18eed326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:e0:19:0c:6d:1c:78:d6:2e:89:42:81:76:
7a:13:02:c8:08:ea:b8:80:e6:46:80:74:b0:38:e1:
6d:23:62:eb:13:df:f4:a8:3a:ff:a9:5a:4a:9f:22:
7b:d0:24:f5:32:ca:98:cd:23:ab:87:d1:d2:1c:dc:
dc:8b:7d:e7:1c:db:8e:2b:2e:c0:64:8b:9a:30:38:
58:ab:08:35:e5:1b:e4:86:1d:66:37:dc:22:02:6a:
53:1a:ae:ba:9e:3c:30:10:e6:35:85:3b:e4:e3:27:
0e:08:bf:91:58:b4:97:ec:d6:12:50:8e:58:cd:c2:
95:98:12:b3:94:51:da:f6:75:f1:e4:20:8c:9a:1c:
8e:bc:7b:ae:f1:11:e4:41:32:4c:26:73:c8:5a:bb:
5a:5b:e9:6f:57:f6:6a:d8:4d:5d:ee:8c:7b:91:ad:
90:58:ca:0d:1e:2d:49:4c:ad:31:fa:53:8d:42:28:
81:eb:79:81:cd:ab:9c:25:4d:74:61:70:65:3b:68:
8d:c1:c3:f2:ab:aa:6c:6f:1d:be:05:3d:70:6c:6d:
b3:05:50:2c:2d:26:ff:38:d8:1a:dd:96:ab:69:11:
7f:e5:8c:7a:26:84:4d:e2:9f:9f:b1:9c:61:89:ab:
37:9b:d4:4e:5b:3f:b5:cf:48:0b:45:9b:67:02:9c:
e1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FF:CC:2E:3D:1F:7B:67:48:95:0B:D5:93:12:C7:FB:18:EE:D3:26
X509v3 Authority Key Identifier:
keyid:EA:64:1E:AD:E1:95:5D:D4:B9:07:91:6B:99:E0:21:03:9E:CC:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:12:e3:f2:c5:d7:28:dd:52:68:01:0a:0a:35:a3:45:26:02:
10:20:7f:75:91:2b:85:56:f8:0a:2e:55:db:83:c8:26:37:a3:
0c:f7:d2:cb:88:0b:e0:31:a6:67:f6:bc:85:fa:8b:d1:c9:74:
1e:ec:0a:05:be:6f:08:54:a2:72:df:cf:f6:f1:f6:c9:74:6f:
a7:5d:46:73:37:45:26:d8:34:e3:3f:be:85:cc:05:e0:76:83:
41:74:49:9b:eb:08:6f:fe:57:6c:e0:a3:8a:65:70:61:dd:0a:
41:34:08:9f:45:c5:49:cf:14:a3:de:e0:42:a3:41:58:25:ea:
b7:9f:1f:d9:ea:74:4e:19:35:ba:48:d1:a4:ac:4a:e0:7c:80:
f2:a7:fb:ba:bc:6f:c4:42:01:46:77:8d:0e:1c:59:30:a8:4d:
4c:7f:45:fc:18:0b:9f:6c:47:da:22:c4:42:a2:a0:30:5b:94:
a4:f4:63:d6:49:99:cd:06:43:b1:28:99:13:96:72:75:af:2e:
6e:4c:73:6e:78:1d:e4:57:c6:2c:2f:4d:a4:48:78:fb:44:be:
e5:ef:c6:5d:47:33:d6:d4:a7:86:6d:0e:3f:0b:5c:e9:69:0e:
cb:81:d1:df:cf:b0:29:06:27:cd:ea:6e:9a:2f:88:5b:c0:14:
07:67:a0:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSpOSyaHsID5dkcIm5l7GSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNjQxZWFkZTE5NTVkZDRiOTA3OTE2Yjk5ZTAyMTAzOWVj
YzMzZTgwHhcNMjUwNDIwMTAwMTAwWhcNMjUwNDIxMTAwMTAwWjAzMTEwLwYDVQQD
EyhmNmZmY2MyZTNkMWY3YjY3NDg5NTBiZDU5MzEyYzdmYjE4ZWVkMzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO/gGQxtHHjWLolCgXZ6EwLICOq4
gOZGgHSwOOFtI2LrE9/0qDr/qVpKnyJ70CT1MsqYzSOrh9HSHNzci33nHNuOKy7A
ZIuaMDhYqwg15Rvkhh1mN9wiAmpTGq66njwwEOY1hTvk4ycOCL+RWLSX7NYSUI5Y
zcKVmBKzlFHa9nXx5CCMmhyOvHuu8RHkQTJMJnPIWrtaW+lvV/Zq2E1d7ox7ka2Q
WMoNHi1JTK0x+lONQiiB63mBzaucJU10YXBlO2iNwcPyq6psbx2+BT1wbG2zBVAs
LSb/ONga3ZaraRF/5Yx6JoRN4p+fsZxhias3m9ROWz+1z0gLRZtnApzh2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPb/zC49H3tnSJUL1ZMSx/sY7tMmMB8GA1UdIwQY
MBaAFOpkHq3hlV3UuQeRa5ngIQOezDPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm1RZXJlR1ZYZFM1QjVGcm1lQWhBNTdNTS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83Mzc2NGQtZjI1MC00ZTNkLWJiNmYt
MjFjNGM2ZDZiNmNiLzEvNm1RZXJlR1ZYZFM1QjVGcm1lQWhBNTdNTS1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS83Mzc2NGQtZjI1MC00ZTNkLWJiNmYtMjFjNGM2ZDZiNmNi
LzEvNm1RZXJlR1ZYZFM1QjVGcm1lQWhBNTdNTS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhLj8sXX
KN1SaAEKCjWjRSYCECB/dZErhVb4Ci5V24PIJjejDPfSy4gL4DGmZ/a8hfqL0cl0
HuwKBb5vCFSict/P9vH2yXRvp11GczdFJtg04z++hcwF4HaDQXRJm+sIb/5XbOCj
imVwYd0KQTQIn0XFSc8Uo97gQqNBWCXqt58f2ep0Thk1ukjRpKxK4HyA8qf7urxv
xEIBRneNDhxZMKhNTH9F/BgLn2xH2iLEQqKgMFuUpPRj1kmZzQZDsSiZE5Zyda8u
bkxzbngd5FfGLC9NpEh4+0S+5e/GXUcz1tSnhm0OPwtc6WkOy4HR38+wKQYnzepu
mi+IW8AUB2egNA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:30:33 2025 by rpki-client