Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
File: l6A46SAR7iaAaKFRfSRM4iwmVU0.mft (raw, json)
Hash identifier: H3UsGSOO0bzd15OrNSM0KOYof65VN0K2i+6H7dQESOo=
Subject key identifier: 8D:B4:05:D4:4A:FC:C2:D1:04:6F:C4:58:6B:F7:7F:60:D1:B8:79:2E
Authority key identifier: 97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
Certificate issuer: /CN=97a038e92011ee268068a1517d244ce22c26554d
Certificate serial: 0196447B53E7C900AF8C8BEB809BD552E9A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
Manifest number: 0860
Signing time: Thu 17 Apr 2025 16:00:55 +0000
Manifest this update: Thu 17 Apr 2025 16:00:55 +0000
Manifest next update: Fri 18 Apr 2025 16:00:55 +0000
Files and hashes: 1: l6A46SAR7iaAaKFRfSRM4iwmVU0.crl (hash: fOQrFvxXPPMuaeFt+wDEuyKPc6xGauLWh4T2Z8tyyN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7b:53:e7:c9:00:af:8c:8b:eb:80:9b:d5:52:e9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97a038e92011ee268068a1517d244ce22c26554d
Validity
Not Before: Apr 17 16:00:55 2025 GMT
Not After : Apr 18 16:00:55 2025 GMT
Subject: CN=8db405d44afcc2d1046fc4586bf77f60d1b8792e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:87:51:b3:3e:8d:a3:12:cd:0f:3e:b8:72:
cd:c3:80:ad:e9:bb:30:68:58:99:83:d9:50:77:84:
f5:83:18:01:06:4d:69:d0:5b:c3:47:10:ab:1b:64:
ad:19:56:ff:25:47:f2:39:27:9a:c2:d6:0d:bd:ea:
48:b6:13:df:c8:0c:fb:ee:6e:c8:42:6f:ab:34:72:
82:fb:b3:c5:b4:c2:2a:fb:68:54:0a:51:87:51:97:
97:4b:a7:4d:11:e3:a0:24:f9:1a:7e:77:26:a6:33:
cb:e8:f8:c8:19:65:e3:a4:7e:be:70:a3:79:6b:f7:
ad:45:1f:70:2e:62:4c:8b:d1:7f:74:7e:2f:ae:f7:
83:33:70:d5:34:62:c0:b9:37:d4:d9:1f:e7:d2:b4:
5e:0b:be:bc:26:77:1e:d8:8a:35:48:30:0a:df:6b:
61:28:5c:66:28:04:f2:18:67:c2:32:ca:69:bc:24:
57:b0:c2:f4:c5:1f:00:10:3f:76:6d:45:fc:12:08:
70:26:d5:f5:61:cc:f6:bc:e9:46:51:39:4d:e3:d4:
ba:2a:50:cd:a2:c8:24:f6:c9:96:e2:38:44:f5:a9:
b6:86:30:e6:a3:a1:52:a0:a1:d5:ac:9f:6d:28:d4:
a9:67:7a:fa:41:e3:62:e3:d1:bf:39:fb:27:2c:88:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B4:05:D4:4A:FC:C2:D1:04:6F:C4:58:6B:F7:7F:60:D1:B8:79:2E
X509v3 Authority Key Identifier:
keyid:97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:45:52:79:04:4a:b3:a5:96:f2:54:79:91:40:19:b1:35:62:
47:d0:2f:f2:41:0e:d7:70:11:6e:eb:65:c2:85:cf:9c:eb:bb:
5c:dc:cb:ef:32:3d:0b:42:7a:f1:dc:e8:18:d0:d6:22:70:47:
ac:61:9d:02:ce:7d:b1:10:4b:78:9c:2b:c6:cd:01:1d:ab:c8:
07:96:cf:a6:b6:a4:f0:96:91:de:9f:dd:a6:7e:a6:ac:ec:0f:
6f:5c:01:5b:ff:48:32:4c:87:06:7e:8a:5f:83:f7:40:d4:d9:
64:aa:cb:a8:01:97:94:a9:01:99:9e:85:c2:83:de:ad:8d:b1:
80:2a:ef:72:f7:4e:cf:5e:b8:da:8d:8e:ca:ee:66:06:5f:6a:
52:d4:42:60:76:55:a7:40:61:09:3f:7e:2d:e8:ac:d3:e6:d8:
0d:48:2a:09:c1:c2:f7:ef:34:d4:97:8b:aa:90:b1:d8:04:66:
c8:c6:17:80:e9:71:4a:a2:6b:7e:4b:1f:ee:bd:11:73:b7:14:
54:c0:15:3c:b4:a4:87:bd:e2:40:fb:35:c6:09:82:0c:cd:86:
76:68:1f:02:3a:cb:e7:58:47:72:f8:a8:55:92:5d:d9:43:75:
bf:ec:36:ff:f8:5c:5e:0a:7a:7f:d9:b7:46:9c:ec:42:dd:5e:
eb:c5:63:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEe1PnyQCvjIvrgJvVUumkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YTAzOGU5MjAxMWVlMjY4MDY4YTE1MTdkMjQ0Y2UyMmMy
NjU1NGQwHhcNMjUwNDE3MTYwMDU1WhcNMjUwNDE4MTYwMDU1WjAzMTEwLwYDVQQD
Eyg4ZGI0MDVkNDRhZmNjMmQxMDQ2ZmM0NTg2YmY3N2Y2MGQxYjg3OTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj6HUbM+jaMSzQ8+uHLNw4Ct6bsw
aFiZg9lQd4T1gxgBBk1p0FvDRxCrG2StGVb/JUfyOSeawtYNvepIthPfyAz77m7I
Qm+rNHKC+7PFtMIq+2hUClGHUZeXS6dNEeOgJPkafncmpjPL6PjIGWXjpH6+cKN5
a/etRR9wLmJMi9F/dH4vrveDM3DVNGLAuTfU2R/n0rReC768Jnce2Io1SDAK32th
KFxmKATyGGfCMsppvCRXsML0xR8AED92bUX8EghwJtX1Ycz2vOlGUTlN49S6KlDN
osgk9smW4jhE9am2hjDmo6FSoKHVrJ9tKNSpZ3r6QeNi49G/OfsnLIhvDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI20BdRK/MLRBG/EWGv3f2DRuHkuMB8GA1UdIwQY
MBaAFJegOOkgEe4mgGihUX0kTOIsJlVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDZBNDZTQVI3aWFBYUtGUmZTUk00aXdtVlUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZmZkMmYtY2ZlYi00NWE4LThkZWYt
ODUyYjZkOGMwMmUyLzEvbDZBNDZTQVI3aWFBYUtGUmZTUk00aXdtVlUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81ZmZkMmYtY2ZlYi00NWE4LThkZWYtODUyYjZkOGMwMmUy
LzEvbDZBNDZTQVI3aWFBYUtGUmZTUk00aXdtVlUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0VSeQRK
s6WW8lR5kUAZsTViR9Av8kEO13ARbutlwoXPnOu7XNzL7zI9C0J68dzoGNDWInBH
rGGdAs59sRBLeJwrxs0BHavIB5bPprak8JaR3p/dpn6mrOwPb1wBW/9IMkyHBn6K
X4P3QNTZZKrLqAGXlKkBmZ6FwoPerY2xgCrvcvdOz1642o2Oyu5mBl9qUtRCYHZV
p0BhCT9+Leis0+bYDUgqCcHC9+801JeLqpCx2ARmyMYXgOlxSqJrfksf7r0Rc7cU
VMAVPLSkh73iQPs1xgmCDM2GdmgfAjrL51hHcvioVZJd2UN1v+w2//hcXgp6f9m3
RpzsQt1e68VjZw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:22:24 2025 by rpki-client