Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
File: a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft (raw, json)
Hash identifier: DeNd1VXFx+VMttO9heyto+0l6NKcFH5aZdcTUQ2x7so=
Subject key identifier: 58:3B:4A:C9:C3:AC:4B:83:C9:D5:7C:78:F2:4E:23:6E:19:29:BE:A8
Authority key identifier: 6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
Certificate issuer: /CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Certificate serial: 01963FC247DA6DF92D7713525AA604B59861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
Manifest number: 090A
Signing time: Wed 16 Apr 2025 18:00:18 +0000
Manifest this update: Wed 16 Apr 2025 18:00:18 +0000
Manifest next update: Thu 17 Apr 2025 18:00:18 +0000
Files and hashes: 1: a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl (hash: O/G6rYbHaxbn20qle7kQ2hAO8wLXed4aTUw+/fP5KiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:47:da:6d:f9:2d:77:13:52:5a:a6:04:b5:98:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Validity
Not Before: Apr 16 18:00:18 2025 GMT
Not After : Apr 17 18:00:18 2025 GMT
Subject: CN=583b4ac9c3ac4b83c9d57c78f24e236e1929bea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:48:b8:f6:55:9a:b1:1e:c7:c7:7e:e1:de:
b8:d1:c1:df:77:b0:08:3a:61:eb:8a:eb:af:4f:80:
10:3e:07:47:43:f8:e9:ca:ba:60:01:97:06:a9:4e:
7f:18:85:be:f7:27:00:c9:9f:7b:9f:9e:d6:35:2a:
9c:cd:a4:d8:42:55:46:c2:ad:34:41:f1:08:3c:fb:
37:e4:cb:99:95:2b:ce:0f:4c:36:05:8a:67:f7:16:
a0:04:c3:5e:02:24:18:4b:6b:84:7c:f1:91:3f:f7:
26:cb:83:4f:6f:3b:93:47:42:02:56:9f:e6:94:99:
51:a4:fb:b1:48:80:54:48:2d:66:d6:40:4c:21:1c:
bf:4e:3e:62:1d:de:d6:06:88:1c:ee:74:3d:3f:e2:
49:2f:02:19:49:a5:41:f1:03:00:57:b3:bb:11:14:
d3:1d:a9:e6:32:1e:63:f1:6f:6e:43:d3:45:a6:ed:
e0:2c:1e:8c:a0:0b:9a:a8:ac:89:cc:b0:55:32:89:
3a:7f:07:b6:78:e9:17:5a:7e:23:b4:fe:1f:0c:c0:
08:8b:16:10:c9:63:8a:9c:64:e9:48:e1:99:c4:a3:
66:93:3a:57:87:5b:4b:6f:a2:51:86:6d:7a:ef:6f:
11:62:8a:92:17:f9:4f:26:89:72:cd:53:a8:61:9b:
b8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3B:4A:C9:C3:AC:4B:83:C9:D5:7C:78:F2:4E:23:6E:19:29:BE:A8
X509v3 Authority Key Identifier:
keyid:6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ef:b3:f6:ab:46:e1:4c:2f:cb:23:25:42:50:9a:23:bd:3f:
1a:5a:f8:db:36:29:c0:bb:d9:50:c7:b5:ef:3c:d3:74:13:8a:
5f:e2:2b:3f:4e:51:18:c6:08:ce:80:fe:66:c3:55:82:b2:44:
85:e4:4b:66:6c:11:67:ef:fb:59:10:e3:cf:73:81:3c:6a:80:
7e:ea:d2:63:e9:82:dd:8b:56:d9:ba:60:9d:d6:1b:a6:83:db:
f7:df:07:e1:2d:f4:d5:a2:70:71:04:97:99:c6:57:b7:c5:fe:
b2:f0:24:4a:b0:e5:98:66:d6:83:17:39:4e:7d:5d:14:84:36:
44:56:81:5f:3b:b9:7d:23:2a:4f:31:bc:a9:8e:d2:a0:88:6d:
8a:61:e0:53:45:de:f5:e7:8f:07:ba:51:1b:e5:f8:82:e4:99:
94:f0:0e:d9:29:c5:5d:b4:4a:61:86:61:c7:22:86:5d:59:40:
8a:b2:b5:91:06:fd:9a:e1:62:1c:9c:28:ce:9a:c4:4c:85:ae:
83:86:4f:55:a0:79:83:ee:78:27:89:ed:3f:45:9a:4e:7f:49:
77:06:ee:f9:e3:07:b6:0d:36:2f:d8:3e:11:dc:46:b3:7f:01:
f0:72:e2:f7:bb:92:0c:84:75:86:aa:d4:30:3a:4c:bf:2d:cf:
3e:41:26:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/wkfabfktdxNSWqYEtZhhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYWEwNWM2ZjhmOWJmZDcwZTNkNDFmZTA1YmFmYzUwZDEy
NTNiZjUwHhcNMjUwNDE2MTgwMDE4WhcNMjUwNDE3MTgwMDE4WjAzMTEwLwYDVQQD
Eyg1ODNiNGFjOWMzYWM0YjgzYzlkNTdjNzhmMjRlMjM2ZTE5MjliZWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDdIuPZVmrEex8d+4d640cHfd7AI
OmHriuuvT4AQPgdHQ/jpyrpgAZcGqU5/GIW+9ycAyZ97n57WNSqczaTYQlVGwq00
QfEIPPs35MuZlSvOD0w2BYpn9xagBMNeAiQYS2uEfPGRP/cmy4NPbzuTR0ICVp/m
lJlRpPuxSIBUSC1m1kBMIRy/Tj5iHd7WBogc7nQ9P+JJLwIZSaVB8QMAV7O7ERTT
HanmMh5j8W9uQ9NFpu3gLB6MoAuaqKyJzLBVMok6fwe2eOkXWn4jtP4fDMAIixYQ
yWOKnGTpSOGZxKNmkzpXh1tLb6JRhm16728RYoqSF/lPJolyzVOoYZu4SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFg7SsnDrEuDydV8ePJOI24ZKb6oMB8GA1UdIwQY
MBaAFGuqBcb4+b/XDj1B/gW6/FDRJTv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTZvRnh2ajV2OWNPUFVILUJicjhVTkVsT19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZjUxMTktNmRjYy00M2EyLThkYWYt
ZjMyMTFkOTE1MjBkLzEvYTZvRnh2ajV2OWNPUFVILUJicjhVTkVsT19VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZjUxMTktNmRjYy00M2EyLThkYWYtZjMyMTFkOTE1MjBk
LzEvYTZvRnh2ajV2OWNPUFVILUJicjhVTkVsT19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApe+z9qtG
4UwvyyMlQlCaI70/Glr42zYpwLvZUMe17zzTdBOKX+IrP05RGMYIzoD+ZsNVgrJE
heRLZmwRZ+/7WRDjz3OBPGqAfurSY+mC3YtW2bpgndYbpoPb998H4S301aJwcQSX
mcZXt8X+svAkSrDlmGbWgxc5Tn1dFIQ2RFaBXzu5fSMqTzG8qY7SoIhtimHgU0Xe
9eePB7pRG+X4guSZlPAO2SnFXbRKYYZhxyKGXVlAirK1kQb9muFiHJwozprETIWu
g4ZPVaB5g+54J4ntP0WaTn9Jdwbu+eMHtg02L9g+EdxGs38B8HLi97uSDIR1hqrU
MDpMvy3PPkEmGw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:43:27 2025 by rpki-client