Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft
File: 6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft (raw, json)
Hash identifier: dot+cq9fpWFwWaIou+aJs4q64J2GeGcCyMXJxzfHqnw=
Subject key identifier: 01:E5:DD:F3:E0:E7:0E:86:F1:2A:B8:2C:76:7D:B2:27:BB:36:EC:DD
Authority key identifier: E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59
Certificate issuer: /CN=e979403cd68c98df738e31062903a0b322600b59
Certificate serial: 01965982E3CCBF81371D062647A9B8AD073E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft
Manifest number: A8
Signing time: Mon 21 Apr 2025 18:01:12 +0000
Manifest this update: Mon 21 Apr 2025 18:01:12 +0000
Manifest next update: Tue 22 Apr 2025 18:01:12 +0000
Files and hashes: 1: 6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl (hash: NCqTKdEKekyZ/wxwHuYv7VFwhYMKyOBRlHaOFGR6UxU=)
2: F2xZ9QgRce67ga9Jmar4OMuLjGo.roa (hash: bnt8ZsENPOXky7xH9NrByc19Ki/WFnxkHvhWkRdi1JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:e3:cc:bf:81:37:1d:06:26:47:a9:b8:ad:07:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e979403cd68c98df738e31062903a0b322600b59
Validity
Not Before: Apr 21 18:01:12 2025 GMT
Not After : Apr 22 18:01:12 2025 GMT
Subject: CN=01e5ddf3e0e70e86f12ab82c767db227bb36ecdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f9:b3:c6:ce:18:e9:7c:9d:df:36:33:0f:3a:
4d:22:78:b2:f0:29:6d:1d:27:28:cf:97:28:f2:84:
65:6f:f7:c8:b4:5f:5a:fb:8e:ef:ae:da:0b:ae:39:
40:cd:6e:8d:f2:13:b2:b0:d5:bc:81:93:7b:72:14:
a6:07:44:9d:a5:f0:c3:34:49:40:9d:3f:73:5a:7e:
16:0e:ee:a3:bb:a6:0c:e5:ff:a4:9e:75:e5:d7:f8:
f5:09:32:08:a4:3c:35:e6:79:0a:ac:b4:ab:1f:fc:
c3:8f:6f:55:1f:26:40:b0:a4:b7:f5:5a:ab:b2:a2:
6c:a4:1d:05:16:9a:8a:4a:da:53:9c:c7:f7:d2:6d:
1f:9f:84:de:4e:5f:77:9b:a0:07:9b:ed:42:a3:68:
61:df:4c:07:e7:b9:ca:12:7d:97:37:3c:6f:25:3c:
e8:1b:61:4b:17:59:0a:21:67:f6:8a:cb:ca:a0:15:
d7:6a:24:5e:53:0b:28:df:9b:8c:04:67:5f:60:01:
80:1c:03:2f:65:67:77:ec:38:f2:cc:da:f9:27:f3:
3a:37:a2:32:50:e5:55:a1:42:d0:70:ba:91:a6:ca:
3a:80:71:a0:95:13:85:65:37:e2:89:fb:9b:9c:0d:
cc:1a:27:f7:b3:f5:e1:c0:1c:d5:d6:62:8c:da:3d:
8b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E5:DD:F3:E0:E7:0E:86:F1:2A:B8:2C:76:7D:B2:27:BB:36:EC:DD
X509v3 Authority Key Identifier:
keyid:E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4b:9c:9c:4b:ed:6d:6b:2d:e5:11:8b:0b:9e:08:f4:58:d2:
bc:3d:44:0a:76:9a:42:bf:ff:49:0f:6e:91:ba:f8:ca:37:bf:
8a:bb:29:46:de:22:8a:fb:4f:e2:13:53:8e:f0:40:4e:f0:d4:
1b:1c:25:96:4a:81:79:c3:82:1f:39:62:c3:3f:8e:69:a0:4f:
67:c8:67:7b:16:9c:af:59:dc:6c:82:5d:0f:f0:dc:ef:b1:e5:
80:b5:26:53:74:8c:f4:98:f1:97:19:4e:8d:c8:37:c0:af:20:
5a:4d:23:a0:6a:d0:82:53:b4:d2:e1:40:5a:64:a0:44:eb:98:
d0:bf:bd:b7:55:ad:55:12:b8:4b:34:3c:25:b6:0a:4d:d0:13:
31:fc:eb:7f:e7:7f:16:e7:6f:c6:01:b2:3c:62:63:7f:6f:93:
8c:52:6a:de:b4:c9:d1:ef:46:05:b5:1a:12:07:91:2a:de:b9:
4c:97:92:5a:13:3e:57:38:c7:6a:40:69:c5:77:79:10:c9:87:
e2:10:54:51:1d:8c:dd:7e:36:03:c0:89:3e:0d:da:ac:77:47:
82:41:a5:a9:be:be:19:58:1a:66:3b:ba:66:79:32:08:f6:7f:
83:94:eb:3f:e0:91:fc:52:14:97:81:8c:ec:30:b7:ff:85:2b:
af:a8:04:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZguPMv4E3HQYmR6m4rQc+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5Nzk0MDNjZDY4Yzk4ZGY3MzhlMzEwNjI5MDNhMGIzMjI2
MDBiNTkwHhcNMjUwNDIxMTgwMTEyWhcNMjUwNDIyMTgwMTEyWjAzMTEwLwYDVQQD
EygwMWU1ZGRmM2UwZTcwZTg2ZjEyYWI4MmM3NjdkYjIyN2JiMzZlY2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vmzxs4Y6Xyd3zYzDzpNIniy8Clt
HScoz5co8oRlb/fItF9a+47vrtoLrjlAzW6N8hOysNW8gZN7chSmB0SdpfDDNElA
nT9zWn4WDu6ju6YM5f+knnXl1/j1CTIIpDw15nkKrLSrH/zDj29VHyZAsKS39Vqr
sqJspB0FFpqKStpTnMf30m0fn4TeTl93m6AHm+1Co2hh30wH57nKEn2XNzxvJTzo
G2FLF1kKIWf2isvKoBXXaiReUwso35uMBGdfYAGAHAMvZWd37DjyzNr5J/M6N6Iy
UOVVoULQcLqRpso6gHGglROFZTfiifubnA3MGif3s/XhwBzV1mKM2j2LAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHl3fPg5w6G8Sq4LHZ9sie7NuzdMB8GA1UdIwQY
MBaAFOl5QDzWjJjfc44xBikDoLMiYAtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMDNhOGYtMzY3Zi00Y2ZhLTlhNzgt
ZTgxNjIxYjYxZDY1LzEvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zMDNhOGYtMzY3Zi00Y2ZhLTlhNzgtZTgxNjIxYjYxZDY1
LzEvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0ucnEvt
bWst5RGLC54I9FjSvD1ECnaaQr//SQ9ukbr4yje/irspRt4iivtP4hNTjvBATvDU
GxwllkqBecOCHzliwz+OaaBPZ8hnexacr1ncbIJdD/Dc77HlgLUmU3SM9JjxlxlO
jcg3wK8gWk0joGrQglO00uFAWmSgROuY0L+9t1WtVRK4SzQ8JbYKTdATMfzrf+d/
FudvxgGyPGJjf2+TjFJq3rTJ0e9GBbUaEgeRKt65TJeSWhM+VzjHakBpxXd5EMmH
4hBUUR2M3X42A8CJPg3arHdHgkGlqb6+GVgaZju6ZnkyCPZ/g5TrP+CR/FIUl4GM
7DC3/4Urr6gE/A==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:44:11 2025 by rpki-client