Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
File: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json)
Hash identifier: yn8zGBVEqC/f6P1AsZFz7KWfUaiowsnHb8bzQcZR0Eg=
Subject key identifier: 6D:B1:7F:A1:52:B5:A8:A5:2B:DB:57:D6:BE:5A:75:F3:38:E7:3D:7B
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Certificate issuer: /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial: 01974DE9AF69BE3C9C7AC9B985C1A7C00D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
Manifest number: 10AF
Signing time: Sun 08 Jun 2025 05:00:49 +0000
Manifest this update: Sun 08 Jun 2025 05:00:49 +0000
Manifest next update: Mon 09 Jun 2025 05:00:49 +0000
Files and hashes: 1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: 0riOQmscBfvdo+TSMBJ/2GLTuDnOq2by7YD9lr8sXJE=)
2: WX9ifdPc509PIWH1MshzaQ9gKs4.roa (hash: N2NEfXL50JrESYal+4AtaFkCctqevfpLSA3CNFTMaFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:af:69:be:3c:9c:7a:c9:b9:85:c1:a7:c0:0d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Validity
Not Before: Jun 8 05:00:49 2025 GMT
Not After : Jun 9 05:00:49 2025 GMT
Subject: CN=6db17fa152b5a8a52bdb57d6be5a75f338e73d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:72:bf:60:66:8e:18:e7:3b:82:81:20:cd:
9b:40:1d:60:d4:af:9b:ac:ea:73:85:89:4b:30:01:
b6:9f:6b:e8:1a:b0:73:bd:55:da:c0:32:97:6b:f9:
e0:eb:19:e4:c6:93:08:94:aa:3c:98:84:1d:2d:dd:
f8:b6:d8:be:9e:67:45:e8:f7:5d:a3:ae:ed:b2:fb:
73:95:9e:12:f4:8d:3d:3d:7e:93:d3:bf:e2:c1:aa:
e0:5a:c3:f7:f8:01:b2:ed:7a:85:26:2d:c2:24:27:
57:e0:ff:b5:ee:57:4e:ae:ef:4c:de:63:db:df:c9:
08:d8:9d:0b:d1:e3:13:e6:4b:fd:dc:7d:0c:f2:ed:
06:8c:8e:ac:09:21:a4:11:9f:e4:c8:dc:f9:4b:aa:
64:82:58:58:64:ad:75:ad:ed:59:14:44:2e:a9:9a:
15:75:f4:fc:32:4c:c9:6e:1a:84:0d:e0:d9:ef:4b:
f5:5a:7e:d7:0b:59:c9:12:d9:6d:e1:7f:ee:9a:c8:
65:98:2c:0a:a8:c7:12:bc:c1:f3:e1:8f:a6:01:2a:
cb:f0:87:6a:ee:82:fa:9c:60:a6:16:43:da:bc:39:
a2:4d:b1:97:fd:65:af:65:1b:6e:a3:0a:67:8c:2d:
41:7e:68:e3:79:fd:14:a9:6f:4f:55:30:e2:df:c7:
d3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B1:7F:A1:52:B5:A8:A5:2B:DB:57:D6:BE:5A:75:F3:38:E7:3D:7B
X509v3 Authority Key Identifier:
keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3a:c4:c8:99:3a:63:b2:cb:02:d8:56:84:6c:1e:26:0a:44:
68:0d:68:ae:4c:bc:6e:79:00:42:e3:f4:bd:5a:0f:a1:31:07:
d9:6f:39:28:9d:61:65:68:7b:20:86:44:46:37:08:b4:7f:07:
42:cb:3b:41:8d:7d:ee:38:3e:be:b9:88:7e:be:e1:eb:aa:65:
e1:61:15:83:21:88:d8:88:90:8f:25:8c:58:33:01:94:e9:ac:
72:12:76:0a:87:58:53:bf:23:0e:97:9d:d7:e4:49:28:79:d4:
26:b3:f0:cf:68:37:07:6f:b7:64:ca:6c:41:da:87:d6:9d:7c:
ca:c9:dc:d2:c6:4d:93:f0:3d:a3:1f:aa:bd:0f:2d:22:ca:1b:
2d:ca:4d:fd:b0:cd:60:02:f2:78:be:79:6c:89:8c:b7:73:68:
e4:f9:1b:6c:23:71:7b:de:0c:37:43:6d:a8:d6:4d:30:29:af:
c2:01:e1:31:e3:22:ed:3a:2b:9d:0d:da:1a:b4:b1:49:e4:bd:
14:da:e0:ac:ce:5b:83:3b:f4:f0:c5:6b:a4:15:56:98:11:fc:
29:4f:d4:0c:2a:65:2b:58:ce:32:34:d7:c5:3b:6f:aa:56:61:
5b:a7:29:30:c3:51:a5:74:cd:37:9a:6c:e9:b2:fa:f2:54:d0:
f1:c8:f1:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdN6a9pvjycesm5hcGnwA2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOWRiMGM1YjJkOTYxMGVmNTg2ZTk3ZmJhMWZjYTg3NTAw
NmYzZGEwHhcNMjUwNjA4MDUwMDQ5WhcNMjUwNjA5MDUwMDQ5WjAzMTEwLwYDVQQD
Eyg2ZGIxN2ZhMTUyYjVhOGE1MmJkYjU3ZDZiZTVhNzVmMzM4ZTczZDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzlyv2BmjhjnO4KBIM2bQB1g1K+b
rOpzhYlLMAG2n2voGrBzvVXawDKXa/ng6xnkxpMIlKo8mIQdLd34tti+nmdF6Pdd
o67tsvtzlZ4S9I09PX6T07/iwargWsP3+AGy7XqFJi3CJCdX4P+17ldOru9M3mPb
38kI2J0L0eMT5kv93H0M8u0GjI6sCSGkEZ/kyNz5S6pkglhYZK11re1ZFEQuqZoV
dfT8MkzJbhqEDeDZ70v1Wn7XC1nJEtlt4X/umshlmCwKqMcSvMHz4Y+mASrL8Idq
7oL6nGCmFkPavDmiTbGX/WWvZRtuowpnjC1Bfmjjef0UqW9PVTDi38fT5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2xf6FStailK9tX1r5adfM45z17MB8GA1UdIwQY
MBaAFOGdsMWy2WEO9Ybpf7ofyodQBvPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82Yjc4YTUtNGM1Yy00MzgzLTg3ZmQt
MGNmNzRiZTMwM2ZmLzEvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82Yjc4YTUtNGM1Yy00MzgzLTg3ZmQtMGNmNzRiZTMwM2Zm
LzEvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTrEyJk6
Y7LLAthWhGweJgpEaA1orky8bnkAQuP0vVoPoTEH2W85KJ1hZWh7IIZERjcItH8H
Qss7QY197jg+vrmIfr7h66pl4WEVgyGI2IiQjyWMWDMBlOmschJ2CodYU78jDped
1+RJKHnUJrPwz2g3B2+3ZMpsQdqH1p18ysnc0sZNk/A9ox+qvQ8tIsobLcpN/bDN
YALyeL55bImMt3No5PkbbCNxe94MN0NtqNZNMCmvwgHhMeMi7TornQ3aGrSxSeS9
FNrgrM5bgzv08MVrpBVWmBH8KU/UDCplK1jOMjTXxTtvqlZhW6cpMMNRpXTNN5ps
6bL68lTQ8cjxow==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:32:40 2025 by rpki-client