Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
File: apN9la67vmK5DyTepNZjFwpmWew.mft (raw, json)
Hash identifier: PdUZ0pi/5xGhRbJHgpqAN8cOvP3EMCZcvtHoSm5QLJs=
Subject key identifier: E6:A1:4C:BE:D4:68:1C:A2:C7:4E:D6:2B:AB:80:73:9D:D0:82:B3:6C
Authority key identifier: 6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC
Certificate issuer: /CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
Certificate serial: 0196507F30DD173E61B6058BCCC5268E07B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
Manifest number: 0BCA
Signing time: Sun 20 Apr 2025 00:00:34 +0000
Manifest this update: Sun 20 Apr 2025 00:00:34 +0000
Manifest next update: Mon 21 Apr 2025 00:00:34 +0000
Files and hashes: 1: apN9la67vmK5DyTepNZjFwpmWew.crl (hash: O4E7nu4FW8q4v2/+5JCIgXL8/jkVWIYWBd+h6iU1PoI=)
2: yLRog1k-iJohsHlS9HFe5cUcYWg.roa (hash: ZlXdhSl4IFvEbzgGzHY+LvPAZzUFdSUq8xFm3+GUTOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:30:dd:17:3e:61:b6:05:8b:cc:c5:26:8e:07:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
Validity
Not Before: Apr 20 00:00:34 2025 GMT
Not After : Apr 21 00:00:34 2025 GMT
Subject: CN=e6a14cbed4681ca2c74ed62bab80739dd082b36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:09:94:73:d3:d2:a2:22:57:2f:64:4b:db:
8d:4c:f6:53:63:0b:d0:5c:66:d4:95:19:68:3a:17:
18:e4:85:ab:91:d8:c5:95:1e:77:83:97:01:59:69:
8d:06:94:9a:26:e8:10:76:e9:38:4b:0e:cc:dd:72:
33:e0:5c:58:45:f1:6e:d3:b9:41:24:af:60:e4:0b:
e4:72:a3:ca:d5:cb:9c:21:50:20:2c:af:e5:ec:c3:
b1:41:4b:39:fc:15:4f:06:fd:ad:b2:5b:c5:0f:07:
d7:30:6d:05:20:73:48:f6:64:b7:69:b9:f9:a7:a6:
46:ba:f9:33:5e:c8:64:49:62:ed:56:94:5b:0e:6a:
1e:9a:26:ae:91:5a:08:41:26:e3:81:26:26:61:1d:
a3:af:d7:0e:48:f2:4c:dc:bd:eb:d4:40:c3:ed:5d:
82:17:c7:fa:82:21:8e:ee:b4:9a:ea:bc:41:4d:57:
ca:fd:5d:74:a5:cb:b8:bd:dd:05:b2:d0:98:ad:b2:
d1:2a:8a:46:62:c1:b1:a5:58:5d:fd:4c:5c:83:bb:
29:54:02:64:e4:d2:f2:23:b6:ef:33:7f:9a:d0:9e:
5d:a4:80:1f:36:38:48:ea:8c:5c:a4:3f:11:a3:6f:
5f:95:16:b1:32:5a:23:83:80:5d:3a:03:6a:85:77:
cb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A1:4C:BE:D4:68:1C:A2:C7:4E:D6:2B:AB:80:73:9D:D0:82:B3:6C
X509v3 Authority Key Identifier:
keyid:6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:95:b0:5d:22:60:15:1d:8d:c0:58:b9:f0:37:63:65:d1:79:
fb:d9:d8:26:b4:dc:a9:2a:15:6e:0b:d2:10:b1:1b:d9:e5:18:
d2:08:59:88:d5:a4:4b:02:1f:7d:cc:37:30:4c:f6:9c:87:63:
fa:08:97:0d:bd:7b:0f:84:68:6e:62:e8:f9:b0:70:7c:df:a2:
7a:af:06:12:c2:c9:66:00:69:57:83:ad:82:76:fd:b5:ac:8f:
b3:ea:dd:55:3d:ff:2e:27:14:8e:e5:15:65:e1:bc:33:d9:0b:
ec:f1:3a:b6:bc:5e:a4:ec:f8:a7:6f:a6:24:e0:1a:03:1b:f8:
be:a3:07:80:df:9b:b7:bd:d6:96:f0:01:ac:9d:61:9e:06:b0:
39:e2:05:03:fc:0c:d7:9c:7f:16:ae:80:21:2a:70:96:c6:22:
4c:5b:ab:4f:7a:b0:30:9a:d8:44:b7:cb:49:61:87:30:9b:46:
e5:a6:cc:e4:97:79:dd:18:56:cd:76:8e:e2:55:60:40:c7:56:
25:29:7f:ba:87:24:15:ab:87:c2:d7:66:5b:27:7c:43:69:6b:
9b:19:88:c1:d5:51:4a:83:b2:05:de:59:65:bb:39:6b:c9:d3:
d2:9c:89:2b:17:d6:15:19:7f:b6:18:13:2a:0b:7d:c4:4f:3a:
23:d4:3c:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQfzDdFz5htgWLzMUmjgewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOTM3ZDk1YWViYmJlNjJiOTBmMjRkZWE0ZDY2MzE3MGE2
NjU5ZWMwHhcNMjUwNDIwMDAwMDM0WhcNMjUwNDIxMDAwMDM0WjAzMTEwLwYDVQQD
EyhlNmExNGNiZWQ0NjgxY2EyYzc0ZWQ2MmJhYjgwNzM5ZGQwODJiMzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyQJlHPT0qIiVy9kS9uNTPZTYwvQ
XGbUlRloOhcY5IWrkdjFlR53g5cBWWmNBpSaJugQduk4Sw7M3XIz4FxYRfFu07lB
JK9g5AvkcqPK1cucIVAgLK/l7MOxQUs5/BVPBv2tslvFDwfXMG0FIHNI9mS3abn5
p6ZGuvkzXshkSWLtVpRbDmoemiaukVoIQSbjgSYmYR2jr9cOSPJM3L3r1EDD7V2C
F8f6giGO7rSa6rxBTVfK/V10pcu4vd0FstCYrbLRKopGYsGxpVhd/Uxcg7spVAJk
5NLyI7bvM3+a0J5dpIAfNjhI6oxcpD8Ro29flRaxMlojg4BdOgNqhXfLLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOahTL7UaByix07WK6uAc53QgrNsMB8GA1UdIwQY
MBaAFGqTfZWuu75iuQ8k3qTWYxcKZlnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXBOOWxhNjd2bUs1RHlUZXBOWmpGd3BtV2V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82YzVjZDItMTkyMC00NTY0LWJjMmMt
OTQxNzdmOGQ4NzdjLzEvYXBOOWxhNjd2bUs1RHlUZXBOWmpGd3BtV2V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS82YzVjZDItMTkyMC00NTY0LWJjMmMtOTQxNzdmOGQ4Nzdj
LzEvYXBOOWxhNjd2bUs1RHlUZXBOWmpGd3BtV2V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpWwXSJg
FR2NwFi58DdjZdF5+9nYJrTcqSoVbgvSELEb2eUY0ghZiNWkSwIffcw3MEz2nIdj
+giXDb17D4RobmLo+bBwfN+ieq8GEsLJZgBpV4Otgnb9tayPs+rdVT3/LicUjuUV
ZeG8M9kL7PE6trxepOz4p2+mJOAaAxv4vqMHgN+bt73WlvABrJ1hngawOeIFA/wM
15x/Fq6AISpwlsYiTFurT3qwMJrYRLfLSWGHMJtG5abM5Jd53RhWzXaO4lVgQMdW
JSl/uockFauHwtdmWyd8Q2lrmxmIwdVRSoOyBd5ZZbs5a8nT0pyJKxfWFRl/thgT
Kgt9xE86I9Q8Xw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:03:35 2025 by rpki-client