Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
File: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft (raw, json)
Hash identifier: D2kxPwKAcKEaUk7XgUYzxid2yn0hGrtgnNCMO9gl+MQ=
Subject key identifier: F9:AE:3F:CC:E0:CA:0C:5D:B7:75:38:EC:A2:F2:6F:E7:57:FE:90:5D
Authority key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
Certificate issuer: /CN=afa929be73491acd99d590372a52b815fa1f23f5
Certificate serial: 0196568103647ED333AFBF485288F604658F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
Manifest number: 105B
Signing time: Mon 21 Apr 2025 04:00:17 +0000
Manifest this update: Mon 21 Apr 2025 04:00:17 +0000
Manifest next update: Tue 22 Apr 2025 04:00:17 +0000
Files and hashes: 1: Qm0v2QB0N6w8qGQL8ta92rDkpA0.roa (hash: aEK3PYUQq1E1pzkJ/CLkmP6YwUe047cyT3qoeHQ2dn8=)
2: dS8Rkw8dzyED62hL_7OXnHLvH04.roa (hash: qEmro5fJia38aDC86kQ3vNKBrJLyPDYdvwDe7Qknl6I=)
3: jIx4n0qvGCMbvZ4nZHfe7AlAvc4.roa (hash: PbvVUSgN0dLFWz6bc4odaxxggERGNNwAo8M1AiayrEs=)
4: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl (hash: TZwTPVyRRlr6PeB7RokEY0zyxDDN1ok8K+kisItd8uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:03:64:7e:d3:33:af:bf:48:52:88:f6:04:65:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa929be73491acd99d590372a52b815fa1f23f5
Validity
Not Before: Apr 21 04:00:17 2025 GMT
Not After : Apr 22 04:00:17 2025 GMT
Subject: CN=f9ae3fcce0ca0c5db77538eca2f26fe757fe905d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4b:70:b3:03:e1:ec:26:b2:d2:4d:cb:db:d8:
ad:e7:68:c0:26:95:e7:67:7f:4d:ea:c2:08:9d:58:
d2:f8:28:f6:d8:6a:b8:eb:c7:97:06:0f:1c:76:ec:
c5:cc:7e:3b:d2:d7:3e:75:c5:56:a4:06:d7:be:fa:
f0:75:40:1a:76:b6:10:e4:86:ad:f7:3d:9c:c2:52:
12:97:21:36:ea:3f:4a:6c:a7:be:4e:ca:b6:43:8f:
15:73:55:48:45:38:8e:dc:12:40:39:21:c7:2f:9b:
94:72:3c:96:39:85:79:c0:e0:80:df:96:92:42:cc:
ca:b6:aa:4d:bd:b5:3b:21:9d:52:17:de:69:4b:91:
97:30:74:5b:96:bb:a8:ac:3c:be:a0:94:ae:e2:3e:
63:d9:e5:21:bf:ad:77:32:11:ab:ec:aa:06:63:cc:
9a:7f:3e:ad:51:04:e9:a0:d7:46:aa:f8:6b:be:43:
c5:b3:9f:8b:67:59:ac:c5:a7:3f:89:6c:b9:ce:f6:
a3:49:af:68:22:f6:e4:63:eb:a5:40:b6:05:17:3e:
86:32:24:8b:20:59:48:9f:04:51:a7:75:80:1a:27:
12:fd:05:0e:0a:23:01:0e:67:38:50:ea:82:9d:16:
be:03:11:58:99:f8:00:f2:e0:40:84:af:bb:b4:70:
c4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AE:3F:CC:E0:CA:0C:5D:B7:75:38:EC:A2:F2:6F:E7:57:FE:90:5D
X509v3 Authority Key Identifier:
keyid:AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:60:29:69:25:c0:ea:db:99:c6:f1:86:5a:8a:6a:d0:60:c7:
8e:ce:2e:5a:d9:e4:2f:02:f3:cd:f2:55:88:a3:3a:34:39:58:
bd:b2:df:b9:81:ef:21:2b:dc:27:2c:4c:bf:ff:3a:f7:6b:71:
fc:20:c0:85:70:1b:c8:b5:79:84:68:45:88:1e:45:43:cf:c3:
1a:e0:f6:7c:09:f3:6a:eb:75:93:cb:64:5a:f5:c3:c8:ea:94:
f8:9b:8e:96:84:87:e6:20:e9:f5:04:ff:dd:1e:7c:20:7c:53:
53:1f:75:44:f1:d2:8d:b0:09:e8:e5:ef:6c:ee:b2:80:bd:f7:
55:53:0b:ba:6a:e6:ab:e0:67:77:be:cc:c9:9d:0c:47:de:4d:
d6:35:4c:10:78:0b:df:9f:a2:6e:51:a1:0a:52:24:15:ab:da:
44:92:0a:38:1b:0b:14:47:4a:77:6f:59:16:2f:9c:51:7a:40:
b4:78:7b:54:f0:3a:27:49:8f:97:ae:da:ba:2a:04:08:82:40:
38:98:6c:36:0d:33:ed:e6:fd:38:c9:19:0c:a2:05:fb:c3:78:
2a:e3:c0:4c:86:41:35:f5:be:4a:38:0c:24:1b:2f:22:5f:2e:
94:e4:e6:1d:ab:34:41:dc:59:7b:42:fa:ec:2b:4a:bc:83:df:
70:1f:c9:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWgQNkftMzr79IUoj2BGWPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYTkyOWJlNzM0OTFhY2Q5OWQ1OTAzNzJhNTJiODE1ZmEx
ZjIzZjUwHhcNMjUwNDIxMDQwMDE3WhcNMjUwNDIyMDQwMDE3WjAzMTEwLwYDVQQD
EyhmOWFlM2ZjY2UwY2EwYzVkYjc3NTM4ZWNhMmYyNmZlNzU3ZmU5MDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0twswPh7Cay0k3L29it52jAJpXn
Z39N6sIInVjS+Cj22Gq468eXBg8cduzFzH470tc+dcVWpAbXvvrwdUAadrYQ5Iat
9z2cwlISlyE26j9KbKe+Tsq2Q48Vc1VIRTiO3BJAOSHHL5uUcjyWOYV5wOCA35aS
QszKtqpNvbU7IZ1SF95pS5GXMHRblruorDy+oJSu4j5j2eUhv613MhGr7KoGY8ya
fz6tUQTpoNdGqvhrvkPFs5+LZ1msxac/iWy5zvajSa9oIvbkY+ulQLYFFz6GMiSL
IFlInwRRp3WAGicS/QUOCiMBDmc4UOqCnRa+AxFYmfgA8uBAhK+7tHDEGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmuP8zgygxdt3U47KLyb+dX/pBdMB8GA1UdIwQY
MBaAFK+pKb5zSRrNmdWQNypSuBX6HyP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yNjk0ZjgtZmExZi00YzgxLTgzMTIt
M2I2ZjFiZGY0MTJhLzEvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8yNjk0ZjgtZmExZi00YzgxLTgzMTItM2I2ZjFiZGY0MTJh
LzEvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmApaSXA
6tuZxvGGWopq0GDHjs4uWtnkLwLzzfJViKM6NDlYvbLfuYHvISvcJyxMv/8692tx
/CDAhXAbyLV5hGhFiB5FQ8/DGuD2fAnzaut1k8tkWvXDyOqU+JuOloSH5iDp9QT/
3R58IHxTUx91RPHSjbAJ6OXvbO6ygL33VVMLumrmq+Bnd77MyZ0MR95N1jVMEHgL
35+iblGhClIkFavaRJIKOBsLFEdKd29ZFi+cUXpAtHh7VPA6J0mPl67auioECIJA
OJhsNg0z7eb9OMkZDKIF+8N4KuPATIZBNfW+SjgMJBsvIl8ulOTmHas0QdxZe0L6
7CtKvIPfcB/JJg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:34 2025 by rpki-client