Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
File: E6D3FD_6IhE0QtyFie4TUuvj2qM.mft (raw, json)
Hash identifier: BvBIprhlaExgkDUvNIgIEiP+89yZ4jP9ZN16MgpD2Xw=
Subject key identifier: 46:E5:BB:D3:1D:8D:B1:3E:F2:6E:10:72:D6:6A:DA:6E:31:67:80:F8
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Certificate issuer: /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial: 01965D27F7BCB23A1729B592A31FCA056927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
Manifest number: 0B67
Signing time: Tue 22 Apr 2025 11:00:22 +0000
Manifest this update: Tue 22 Apr 2025 11:00:22 +0000
Manifest next update: Wed 23 Apr 2025 11:00:22 +0000
Files and hashes: 1: 5rlrSe1HUXIj3_aBpG64a8NmOts.roa (hash: nRWsn8kltCpTHjq/8c/7GOAD+GlBtZhRnZ/ImlddXgU=)
2: E6D3FD_6IhE0QtyFie4TUuvj2qM.crl (hash: mKRkC0EwFFKaXPcsXxwujqosWsJGJ0/yFDLDn30Q6Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:27:f7:bc:b2:3a:17:29:b5:92:a3:1f:ca:05:69:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Validity
Not Before: Apr 22 11:00:22 2025 GMT
Not After : Apr 23 11:00:22 2025 GMT
Subject: CN=46e5bbd31d8db13ef26e1072d66ada6e316780f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:63:47:ff:f7:ec:db:03:8b:fe:83:68:24:ab:
d9:dc:38:c0:35:d0:18:54:11:a4:ff:b1:2a:f0:64:
28:c1:7a:1c:7a:a9:32:5a:eb:89:ac:4d:94:dd:c2:
17:2a:57:21:d6:b6:84:e3:33:3e:8f:ee:0a:d6:be:
be:64:37:b7:e4:15:4c:30:97:70:5c:fa:d7:6b:36:
d6:47:cb:87:9a:34:e9:7f:92:a0:92:86:2c:c1:7e:
e3:01:ee:2e:2d:7e:55:6c:d9:68:0e:a6:4d:ea:5c:
97:e3:39:8d:52:3b:86:d7:4e:11:0d:ce:2e:82:b2:
a3:90:26:4c:10:a8:ed:66:7f:63:23:e7:cd:89:cc:
7a:5b:42:20:01:84:51:93:ba:73:5e:40:d9:5a:0c:
78:38:93:f9:76:98:fb:1f:25:55:2b:08:c3:33:f2:
6c:40:8c:16:cc:c8:e3:6d:df:25:5a:5e:e6:2d:4e:
32:d1:00:cc:b2:f1:12:5b:2a:6d:4b:b6:55:75:f1:
cc:87:cc:c2:4f:aa:d0:aa:77:8d:84:30:cb:39:ba:
87:ef:7e:1e:eb:dd:61:68:4c:10:08:1f:6a:a0:c9:
4b:7c:33:ab:f1:ad:4e:e3:9a:be:fd:2e:39:aa:d5:
20:b7:72:a2:da:6d:03:3a:2c:99:0d:fe:21:cf:9a:
7b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E5:BB:D3:1D:8D:B1:3E:F2:6E:10:72:D6:6A:DA:6E:31:67:80:F8
X509v3 Authority Key Identifier:
keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:36:ac:48:ab:31:36:d9:55:b6:31:97:9e:be:fb:a5:fc:b8:
e5:f9:43:a8:d4:df:a3:f6:bc:29:84:91:e5:18:81:7d:d1:24:
f9:35:6b:9b:0f:17:60:56:84:a1:ef:f7:24:41:55:6a:ae:bf:
71:ae:45:b1:06:59:01:e2:09:53:ed:cd:66:9c:76:f6:25:cc:
9b:a8:3c:21:33:53:08:78:b5:63:d7:35:35:32:4b:6b:5d:72:
45:54:ad:ab:e6:23:df:2a:73:3b:a8:7c:0a:66:e9:ad:99:eb:
f6:0e:be:6c:d5:47:c6:e2:d0:af:ea:78:fd:aa:99:65:5f:0e:
9c:c4:e5:aa:e9:33:d1:a3:aa:4b:63:a0:c2:13:d0:e1:15:d3:
8d:c1:c3:15:44:6b:70:b4:0c:95:c9:3d:71:02:da:eb:c1:05:
16:a5:f1:ca:69:61:bb:9a:b2:cf:84:e2:0b:30:23:a4:a5:4d:
4d:f7:a3:a6:1a:3a:9e:45:d1:41:ee:b3:ee:53:93:d2:32:d0:
67:cb:9a:92:0d:e0:cb:df:46:ee:31:71:4d:11:c3:5f:55:4b:
20:ef:3f:a9:f2:b6:91:84:82:f4:60:7d:c9:aa:c0:de:e8:51:
23:a1:43:51:27:6f:5b:3c:f6:20:1d:18:9d:f5:74:3f:f5:0a:
84:60:59:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZdJ/e8sjoXKbWSox/KBWknMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYTBmNzE0M2ZmYTIyMTEzNDQyZGM4NTg5ZWUxMzUyZWJl
M2RhYTMwHhcNMjUwNDIyMTEwMDIyWhcNMjUwNDIzMTEwMDIyWjAzMTEwLwYDVQQD
Eyg0NmU1YmJkMzFkOGRiMTNlZjI2ZTEwNzJkNjZhZGE2ZTMxNjc4MGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GNH//fs2wOL/oNoJKvZ3DjANdAY
VBGk/7Eq8GQowXoceqkyWuuJrE2U3cIXKlch1raE4zM+j+4K1r6+ZDe35BVMMJdw
XPrXazbWR8uHmjTpf5KgkoYswX7jAe4uLX5VbNloDqZN6lyX4zmNUjuG104RDc4u
grKjkCZMEKjtZn9jI+fNicx6W0IgAYRRk7pzXkDZWgx4OJP5dpj7HyVVKwjDM/Js
QIwWzMjjbd8lWl7mLU4y0QDMsvESWyptS7ZVdfHMh8zCT6rQqneNhDDLObqH734e
691haEwQCB9qoMlLfDOr8a1O45q+/S45qtUgt3Ki2m0DOiyZDf4hz5p7xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEblu9MdjbE+8m4QctZq2m4xZ4D4MB8GA1UdIwQY
MBaAFBOg9xQ/+iIRNELchYnuE1Lr49qjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTZEM0ZEXzZJaEUwUXR5RmllNFRVdXZqMnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi80NDNmODctNGFlMC00MTk4LWJjYjgt
MTA0YTMzNDM3NjY1LzEvRTZEM0ZEXzZJaEUwUXR5RmllNFRVdXZqMnFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi80NDNmODctNGFlMC00MTk4LWJjYjgtMTA0YTMzNDM3NjY1
LzEvRTZEM0ZEXzZJaEUwUXR5RmllNFRVdXZqMnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDasSKsx
NtlVtjGXnr77pfy45flDqNTfo/a8KYSR5RiBfdEk+TVrmw8XYFaEoe/3JEFVaq6/
ca5FsQZZAeIJU+3NZpx29iXMm6g8ITNTCHi1Y9c1NTJLa11yRVStq+Yj3ypzO6h8
CmbprZnr9g6+bNVHxuLQr+p4/aqZZV8OnMTlqukz0aOqS2OgwhPQ4RXTjcHDFURr
cLQMlck9cQLa68EFFqXxymlhu5qyz4TiCzAjpKVNTfejpho6nkXRQe6z7lOT0jLQ
Z8uakg3gy99G7jFxTRHDX1VLIO8/qfK2kYSC9GB9yarA3uhRI6FDUSdvWzz2IB0Y
nfV0P/UKhGBZeg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:39:07 2025 by rpki-client