Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
File: 6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json)
Hash identifier: bdEpMWp31h8iS/9389WgPmaj7YhUjxxCzHdHjh+JVjI=
Subject key identifier: 7B:9B:F2:83:37:28:71:F7:C0:CA:83:E0:BF:2B:6E:45:36:AF:B4:BC
Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
Certificate issuer: /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Certificate serial: 019653495C76B7B31519D98174175121FD60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
Manifest number: 082F
Signing time: Sun 20 Apr 2025 13:00:38 +0000
Manifest this update: Sun 20 Apr 2025 13:00:38 +0000
Manifest next update: Mon 21 Apr 2025 13:00:38 +0000
Files and hashes: 1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: 9f8k0Uz6mvu1YqAzIkSqgpvEtHBGeffAA81Mx870M1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:5c:76:b7:b3:15:19:d9:81:74:17:51:21:fd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Validity
Not Before: Apr 20 13:00:38 2025 GMT
Not After : Apr 21 13:00:38 2025 GMT
Subject: CN=7b9bf283372871f7c0ca83e0bf2b6e4536afb4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ec:86:3e:7f:12:d2:d3:e1:04:28:42:86:fe:
b0:9a:d0:36:c6:aa:db:30:3c:4f:02:49:7e:c8:bb:
5c:3c:45:41:8e:73:02:10:50:b2:cf:cb:a8:3d:e5:
18:c7:64:a4:ab:13:71:1a:82:4e:70:f4:e5:dd:1b:
80:3f:d2:4c:a8:85:39:c1:04:74:54:d9:7b:9e:54:
38:e7:0c:b6:48:23:b0:fa:fd:c2:95:96:28:05:37:
5a:fb:15:8a:e1:d4:bf:76:a5:ea:45:62:fd:3e:6e:
ca:7d:a2:37:c3:1d:2d:4f:ce:e7:48:2a:65:5f:ea:
96:5f:18:6d:66:96:0b:f5:76:e8:bb:d3:31:4b:e7:
3b:ea:13:3d:8b:ab:2f:81:92:da:87:33:d0:3e:0f:
db:e4:ce:d9:38:c6:88:34:74:4c:41:f3:5d:f3:c6:
01:7d:13:e7:6e:cf:d3:cc:86:79:3e:b1:0b:73:6d:
93:dc:3b:ab:f0:3a:a6:00:1a:1b:19:a1:a5:02:f6:
8f:bd:8f:4c:d2:47:40:15:5b:10:87:9a:f5:27:69:
87:44:40:f7:82:ed:22:f9:47:b2:8b:46:31:00:57:
0f:e9:32:f9:94:be:74:e7:36:fc:fd:8a:9f:b2:30:
b0:23:bd:ab:91:e4:75:f0:2f:f0:2d:61:4a:9e:c9:
32:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9B:F2:83:37:28:71:F7:C0:CA:83:E0:BF:2B:6E:45:36:AF:B4:BC
X509v3 Authority Key Identifier:
keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:22:29:f7:08:73:e9:e7:b7:bd:f3:b0:c5:46:5b:bf:99:93:
32:95:59:88:44:8f:a7:81:a3:7e:f6:7a:17:f1:08:da:88:cb:
34:46:3d:ab:5b:53:d6:00:01:19:68:20:2b:45:86:0b:f7:ae:
d3:01:ee:bf:e3:18:f0:42:f3:0a:d8:3f:f1:0c:6c:f0:91:b0:
5f:df:20:ae:4d:c9:93:08:97:17:bc:a2:28:c3:d9:b4:c9:81:
72:5d:bb:ba:d0:a6:68:34:94:c3:76:35:97:53:d8:63:76:2e:
0d:b0:aa:69:6e:2b:4d:9f:c3:35:b3:a2:58:8a:8b:ff:84:4a:
4c:4d:e5:e4:aa:aa:31:ad:ba:1e:13:17:93:1c:8a:41:69:ef:
9f:e0:83:f5:cb:7c:54:6a:ef:6d:7c:99:c6:f8:d4:77:e8:2f:
1e:58:17:09:6f:c1:cc:02:fd:8b:af:23:16:19:57:bf:f2:a5:
22:4e:0e:68:79:6e:e5:94:b5:46:57:e7:f7:2f:cf:aa:42:7e:
7a:98:76:fd:55:ca:3a:42:7a:53:13:76:d1:7a:c6:16:6f:79:
82:1d:10:5c:68:d0:30:4e:b3:54:47:d5:44:a0:e0:be:33:ef:
97:1f:82:9e:22:46:f2:ac:4b:68:f5:7f:41:dc:3a:6e:39:b0:
d7:ae:81:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTSVx2t7MVGdmBdBdRIf1gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5M2RjZTg1MGNiMjYyN2E1MmJkZjRiOTkzNGExMTI4OGNi
NmQyNzcwHhcNMjUwNDIwMTMwMDM4WhcNMjUwNDIxMTMwMDM4WjAzMTEwLwYDVQQD
Eyg3YjliZjI4MzM3Mjg3MWY3YzBjYTgzZTBiZjJiNmU0NTM2YWZiNGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOyGPn8S0tPhBChChv6wmtA2xqrb
MDxPAkl+yLtcPEVBjnMCEFCyz8uoPeUYx2SkqxNxGoJOcPTl3RuAP9JMqIU5wQR0
VNl7nlQ45wy2SCOw+v3ClZYoBTda+xWK4dS/dqXqRWL9Pm7KfaI3wx0tT87nSCpl
X+qWXxhtZpYL9Xbou9MxS+c76hM9i6svgZLahzPQPg/b5M7ZOMaINHRMQfNd88YB
fRPnbs/TzIZ5PrELc22T3Dur8DqmABobGaGlAvaPvY9M0kdAFVsQh5r1J2mHRED3
gu0i+Ueyi0YxAFcP6TL5lL505zb8/YqfsjCwI72rkeR18C/wLWFKnskyGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHub8oM3KHH3wMqD4L8rbkU2r7S8MB8GA1UdIwQY
MBaAFOk9zoUMsmJ6Ur30uZNKESiMttJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlQzT2hReXlZbnBTdmZTNWswb1JLSXkyMG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kNGYyZTgtZDYxOS00ODY5LTk4ZTMt
ZjVlOTM2NDY2OThlLzEvNlQzT2hReXlZbnBTdmZTNWswb1JLSXkyMG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9kNGYyZTgtZDYxOS00ODY5LTk4ZTMtZjVlOTM2NDY2OThl
LzEvNlQzT2hReXlZbnBTdmZTNWswb1JLSXkyMG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWyIp9whz
6ee3vfOwxUZbv5mTMpVZiESPp4GjfvZ6F/EI2ojLNEY9q1tT1gABGWggK0WGC/eu
0wHuv+MY8ELzCtg/8Qxs8JGwX98grk3JkwiXF7yiKMPZtMmBcl27utCmaDSUw3Y1
l1PYY3YuDbCqaW4rTZ/DNbOiWIqL/4RKTE3l5KqqMa26HhMXkxyKQWnvn+CD9ct8
VGrvbXyZxvjUd+gvHlgXCW/BzAL9i68jFhlXv/KlIk4OaHlu5ZS1Rlfn9y/PqkJ+
eph2/VXKOkJ6UxN20XrGFm95gh0QXGjQME6zVEfVRKDgvjPvlx+CniJG8qxLaPV/
Qdw6bjmw166Bmg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:38:23 2025 by rpki-client