Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
File: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft (raw, json)
Hash identifier: kcM+q+e84BYeqahUOhwKFr1fahe59xsd/HnVV7mkrxg=
Subject key identifier: 05:95:8C:BB:C2:FE:84:C0:06:1F:96:FB:A1:84:78:17:34:D7:A0:B2
Authority key identifier: E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1
Certificate issuer: /CN=e96a769beca3b1932955158135596365c43c83b1
Certificate serial: 01974DE972E6EC993EB2FBF636603E6156C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
Manifest number: 0CF9
Signing time: Sun 08 Jun 2025 05:00:34 +0000
Manifest this update: Sun 08 Jun 2025 05:00:34 +0000
Manifest next update: Mon 09 Jun 2025 05:00:34 +0000
Files and hashes: 1: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl (hash: uH8in6vgJeGef4y+AZP9kCSXSi15Sel2MQ7e0FAQO1A=)
2: Qt-NHTWPG9Blnlp9KwVRBT4_TNs.roa (hash: iMKB/O68vIbAIcl8B86g//4tQCSnWahP5EtY42n7PM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:72:e6:ec:99:3e:b2:fb:f6:36:60:3e:61:56:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96a769beca3b1932955158135596365c43c83b1
Validity
Not Before: Jun 8 05:00:34 2025 GMT
Not After : Jun 9 05:00:34 2025 GMT
Subject: CN=05958cbbc2fe84c0061f96fba184781734d7a0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:d3:29:00:b6:6a:b8:59:57:d8:96:c5:58:
0e:10:7a:e7:b3:06:da:ce:34:b3:d1:92:71:4e:fe:
6e:7a:6a:f0:1b:29:71:6f:b9:a8:92:25:db:f2:a5:
f4:ff:ce:97:a4:36:f5:cf:86:69:dd:cb:4e:35:83:
8e:de:04:a2:d4:f0:c7:bd:6d:ff:1b:9d:67:1d:c2:
24:bd:07:96:21:b5:85:3e:04:6e:70:f9:87:75:1c:
91:12:34:fd:6c:9f:cf:b4:ad:6c:63:f4:6c:b4:ad:
5e:ea:75:18:f2:f6:fb:51:32:75:28:48:18:c8:73:
59:94:12:63:99:c5:90:2a:06:ef:59:32:dc:31:89:
32:30:d0:b3:bd:c7:c8:3a:7d:01:b7:09:d3:f2:92:
69:ca:81:00:e5:de:62:5c:28:f5:74:6d:36:a0:d2:
e8:08:35:df:f9:c5:bc:4b:7a:42:1b:db:f8:94:11:
7b:d6:64:be:a3:5f:9f:0d:a6:61:d0:b2:de:4a:95:
0c:e9:a9:7a:30:60:8d:de:af:25:56:19:4e:b6:28:
62:17:1a:a3:dd:f9:d5:2a:92:69:ce:d7:b0:92:64:
b8:c5:84:d1:70:6a:d0:f8:28:73:69:63:69:ef:7b:
f0:dd:56:74:ae:ec:e1:3d:cc:05:fa:3f:1b:82:7a:
c9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:95:8C:BB:C2:FE:84:C0:06:1F:96:FB:A1:84:78:17:34:D7:A0:B2
X509v3 Authority Key Identifier:
keyid:E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ad:ff:61:d9:53:68:fa:d2:fb:9e:36:b3:20:4d:0b:45:09:
a8:5a:66:46:bb:75:50:ed:7d:e1:5c:3d:a7:60:80:ec:28:4e:
71:26:2f:85:b8:cd:80:07:74:f8:21:cf:2f:e5:88:2c:cd:19:
d4:84:49:1f:e8:ac:e4:ba:42:cf:a2:42:c0:37:e1:62:98:8e:
f2:22:be:a2:73:ae:39:fd:c3:10:3b:3f:5c:e7:bc:92:98:9d:
31:92:0a:79:10:6b:9e:94:bc:c5:7b:97:9a:67:5d:c9:25:f4:
d1:23:a8:f7:ce:98:87:85:07:e9:25:23:80:af:c9:54:e9:25:
96:6b:37:ed:c5:b5:22:63:40:63:e6:fc:f4:36:1d:95:8b:9c:
65:67:64:fd:fb:6c:72:8f:1a:65:1a:c6:94:e5:89:91:20:c4:
b2:2b:a9:8b:6d:2b:0b:a2:5f:02:7f:6c:33:77:42:ff:e1:d5:
0e:8d:47:d3:e9:46:56:34:3f:bb:f9:c7:a7:ff:01:86:26:eb:
e4:2c:78:aa:33:6a:9e:f4:6a:d1:2a:2b:ae:16:15:cb:51:2c:
06:2c:e9:38:7c:42:62:1e:b7:2f:f2:13:38:a8:8c:23:03:d8:
bf:80:57:71:b6:87:17:50:36:ff:68:2d:8d:7f:a7:28:f9:cb:
76:90:30:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdN6XLm7Jk+svv2NmA+YVbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NmE3NjliZWNhM2IxOTMyOTU1MTU4MTM1NTk2MzY1YzQz
YzgzYjEwHhcNMjUwNjA4MDUwMDM0WhcNMjUwNjA5MDUwMDM0WjAzMTEwLwYDVQQD
EygwNTk1OGNiYmMyZmU4NGMwMDYxZjk2ZmJhMTg0NzgxNzM0ZDdhMGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlTTKQC2arhZV9iWxVgOEHrnswba
zjSz0ZJxTv5uemrwGylxb7mokiXb8qX0/86XpDb1z4Zp3ctONYOO3gSi1PDHvW3/
G51nHcIkvQeWIbWFPgRucPmHdRyREjT9bJ/PtK1sY/RstK1e6nUY8vb7UTJ1KEgY
yHNZlBJjmcWQKgbvWTLcMYkyMNCzvcfIOn0BtwnT8pJpyoEA5d5iXCj1dG02oNLo
CDXf+cW8S3pCG9v4lBF71mS+o1+fDaZh0LLeSpUM6al6MGCN3q8lVhlOtihiFxqj
3fnVKpJpztewkmS4xYTRcGrQ+ChzaWNp73vw3VZ0ruzhPcwF+j8bgnrJrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWVjLvC/oTABh+W+6GEeBc016CyMB8GA1UdIwQY
MBaAFOlqdpvso7GTKVUVgTVZY2XEPIOxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNldwMm0teWpzWk1wVlJXQk5WbGpaY1E4ZzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jYWU5MWItOWUwZS00ZDVjLWFmYzQt
NTUxMThmOGJkNWYyLzEvNldwMm0teWpzWk1wVlJXQk5WbGpaY1E4ZzdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9jYWU5MWItOWUwZS00ZDVjLWFmYzQtNTUxMThmOGJkNWYy
LzEvNldwMm0teWpzWk1wVlJXQk5WbGpaY1E4ZzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtq3/YdlT
aPrS+542syBNC0UJqFpmRrt1UO194Vw9p2CA7ChOcSYvhbjNgAd0+CHPL+WILM0Z
1IRJH+is5LpCz6JCwDfhYpiO8iK+onOuOf3DEDs/XOe8kpidMZIKeRBrnpS8xXuX
mmddySX00SOo986Yh4UH6SUjgK/JVOkllms37cW1ImNAY+b89DYdlYucZWdk/fts
co8aZRrGlOWJkSDEsiupi20rC6JfAn9sM3dC/+HVDo1H0+lGVjQ/u/nHp/8Bhibr
5Cx4qjNqnvRq0SorrhYVy1EsBizpOHxCYh63L/ITOKiMIwPYv4BXcbaHF1A2/2gt
jX+nKPnLdpAw6Q==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:50:01 2025 by rpki-client