Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
File: G6BsMiNp1EnhdPpzEEezOXI_sB0.mft (raw, json)
Hash identifier: 6ho0lxTrIp8avn0hdg96dB8hgBFaEr/6Di4J1az+qlQ=
Subject key identifier: AC:BF:F4:9A:9A:ED:9B:CB:32:6D:37:CE:C6:15:59:16:D0:2D:9B:AE
Authority key identifier: 1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D
Certificate issuer: /CN=1ba06c322369d449e174fa731047b339723fb01d
Certificate serial: 019655380E628F929A7B3303929694D0C3D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 22:00:59 +0000
Manifest this update: Sun 20 Apr 2025 22:00:59 +0000
Manifest next update: Mon 21 Apr 2025 22:00:59 +0000
Files and hashes: 1: G6BsMiNp1EnhdPpzEEezOXI_sB0.crl (hash: DtLGV0Yj5Mu7chzpQrIBaNWIEStgQzp3hV+7AC/K2QM=)
2: fudzAOYoQEbBVmwmOdYtJovy1uI.roa (hash: QG+JwJM3okPXrIbfWoNTAizNGt25NFUxghJxGtiJeCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:0e:62:8f:92:9a:7b:33:03:92:96:94:d0:c3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba06c322369d449e174fa731047b339723fb01d
Validity
Not Before: Apr 20 22:00:59 2025 GMT
Not After : Apr 21 22:00:59 2025 GMT
Subject: CN=acbff49a9aed9bcb326d37cec6155916d02d9bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:28:79:00:f1:b3:64:45:d1:8e:45:d5:6e:
ce:f9:46:d4:7f:d9:99:92:b9:81:7e:55:d9:4e:d2:
52:8b:79:86:7d:6b:be:c2:b7:71:c2:0d:56:0a:fa:
5b:24:cc:ca:a0:6b:ae:9a:9d:11:d4:2d:69:d2:ec:
ec:d8:0d:98:5c:36:56:fb:57:d9:21:2c:a9:c9:60:
7b:3f:15:9c:a5:54:2a:7d:22:d8:c9:2c:c6:74:b9:
f8:64:d9:86:32:f9:e4:34:88:70:49:44:06:99:9d:
0c:dc:c5:93:a1:a8:78:f5:1c:86:52:47:10:51:fd:
72:5c:e4:aa:7a:cc:13:e4:3e:34:fe:27:94:d2:21:
ca:dc:3c:9b:a5:46:e2:a1:26:81:00:37:dc:88:30:
08:45:fe:2c:62:1f:2e:5f:d9:91:e5:73:35:e0:da:
84:59:56:88:da:77:1c:c2:54:7f:8b:f1:b9:99:63:
9d:35:f5:d4:d3:f8:81:cf:cd:f5:bb:00:6e:a1:a4:
25:d8:93:88:b4:09:43:05:a8:00:38:55:80:ee:23:
9e:f1:b6:84:12:91:b1:fe:d2:79:25:a0:74:85:ae:
94:fc:b2:43:b3:78:2d:d4:2b:84:44:26:c2:4c:8d:
cf:f6:f1:ef:0b:49:bb:d9:74:aa:a7:6e:83:29:67:
75:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BF:F4:9A:9A:ED:9B:CB:32:6D:37:CE:C6:15:59:16:D0:2D:9B:AE
X509v3 Authority Key Identifier:
keyid:1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9a:30:8c:31:dc:3d:8c:c1:3d:53:1d:2d:f7:26:f7:b3:05:
93:83:d7:34:20:d6:88:2a:02:52:a1:cb:f8:63:d8:c1:66:cf:
ea:d4:b3:f9:c1:94:6c:da:3b:bb:01:8a:e8:fd:47:9b:05:43:
ff:ae:61:1f:28:25:55:9c:0c:a5:d1:2f:7e:66:71:81:5d:33:
35:f2:5b:6b:dd:59:46:66:c5:b7:8e:ea:ea:81:77:5e:f5:5c:
ad:34:f4:a5:42:7a:6a:63:10:86:0d:5c:6f:7e:09:e6:d9:41:
6b:51:1f:ca:87:b2:48:2f:09:ad:0a:3d:43:6a:5a:2b:e5:f7:
41:76:1c:f5:2a:35:d0:b9:33:71:38:c6:27:d3:5c:75:39:e4:
25:03:10:e2:a9:52:a5:9c:43:bd:41:59:1b:06:23:2c:7b:bd:
fa:ec:3f:df:67:37:cc:60:45:aa:f5:03:65:d1:cd:20:26:06:
67:d9:7d:dc:2f:e2:6f:95:80:3f:61:b6:82:06:31:92:c0:89:
e5:94:31:98:35:85:c4:4c:ef:92:ea:04:94:ce:87:8a:bc:24:
0d:c6:4f:26:1d:33:84:f7:32:98:d8:02:65:4f:98:ff:a7:55:
53:bd:38:a0:54:07:e4:78:7c:78:a5:15:43:ae:95:65:ea:0b:
b4:2b:ea:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVOA5ij5KaezMDkpaU0MPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTA2YzMyMjM2OWQ0NDllMTc0ZmE3MzEwNDdiMzM5NzIz
ZmIwMWQwHhcNMjUwNDIwMjIwMDU5WhcNMjUwNDIxMjIwMDU5WjAzMTEwLwYDVQQD
EyhhY2JmZjQ5YTlhZWQ5YmNiMzI2ZDM3Y2VjNjE1NTkxNmQwMmQ5YmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLIoeQDxs2RF0Y5F1W7O+UbUf9mZ
krmBflXZTtJSi3mGfWu+wrdxwg1WCvpbJMzKoGuump0R1C1p0uzs2A2YXDZW+1fZ
ISypyWB7PxWcpVQqfSLYySzGdLn4ZNmGMvnkNIhwSUQGmZ0M3MWToah49RyGUkcQ
Uf1yXOSqeswT5D40/ieU0iHK3DybpUbioSaBADfciDAIRf4sYh8uX9mR5XM14NqE
WVaI2nccwlR/i/G5mWOdNfXU0/iBz831uwBuoaQl2JOItAlDBagAOFWA7iOe8baE
EpGx/tJ5JaB0ha6U/LJDs3gt1CuERCbCTI3P9vHvC0m72XSqp26DKWd1xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKy/9Jqa7ZvLMm03zsYVWRbQLZuuMB8GA1UdIwQY
MBaAFBugbDIjadRJ4XT6cxBHszlyP7AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZCc01pTnAxRW5oZFBwekVFZXpPWElfc0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kY2VhMmEtNzM2MC00NzA3LWE1MTgt
Mjk2YzQyMjI5Zjg2LzEvRzZCc01pTnAxRW5oZFBwekVFZXpPWElfc0IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kY2VhMmEtNzM2MC00NzA3LWE1MTgtMjk2YzQyMjI5Zjg2
LzEvRzZCc01pTnAxRW5oZFBwekVFZXpPWElfc0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpowjDHc
PYzBPVMdLfcm97MFk4PXNCDWiCoCUqHL+GPYwWbP6tSz+cGUbNo7uwGK6P1HmwVD
/65hHyglVZwMpdEvfmZxgV0zNfJba91ZRmbFt47q6oF3XvVcrTT0pUJ6amMQhg1c
b34J5tlBa1EfyoeySC8JrQo9Q2paK+X3QXYc9So10LkzcTjGJ9NcdTnkJQMQ4qlS
pZxDvUFZGwYjLHu9+uw/32c3zGBFqvUDZdHNICYGZ9l93C/ib5WAP2G2ggYxksCJ
5ZQxmDWFxEzvkuoElM6HirwkDcZPJh0zhPcymNgCZU+Y/6dVU704oFQH5Hh8eKUV
Q66VZeoLtCvq4Q==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:05:55 2025 by rpki-client