Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft
File: 6C8spT8bM9G1NUaiMJXThP8jdwM.mft (raw, json)
Hash identifier: oYc9ZUhvF0iHx9Q0oz4s1EgjIxjcvZqD89AQvwDwwzc=
Subject key identifier: 4A:19:49:BC:39:B1:9B:50:91:8A:D9:B6:CC:E5:2D:D7:76:A0:62:B9
Authority key identifier: E8:2F:2C:A5:3F:1B:33:D1:B5:35:46:A2:30:95:D3:84:FF:23:77:03
Certificate issuer: /CN=e82f2ca53f1b33d1b53546a23095d384ff237703
Certificate serial: 01964FDA4ADDAA4A5849FF562548CAA6B1E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6C8spT8bM9G1NUaiMJXThP8jdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft
Manifest number: 14F6
Signing time: Sat 19 Apr 2025 21:00:28 +0000
Manifest this update: Sat 19 Apr 2025 21:00:28 +0000
Manifest next update: Sun 20 Apr 2025 21:00:28 +0000
Files and hashes: 1: 6C8spT8bM9G1NUaiMJXThP8jdwM.crl (hash: FJYV9c0remuBvIJjOqV5sCNlkkS3nAqQKGm+OzdBldA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6C8spT8bM9G1NUaiMJXThP8jdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:4a:dd:aa:4a:58:49:ff:56:25:48:ca:a6:b1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e82f2ca53f1b33d1b53546a23095d384ff237703
Validity
Not Before: Apr 19 21:00:28 2025 GMT
Not After : Apr 20 21:00:28 2025 GMT
Subject: CN=4a1949bc39b19b50918ad9b6cce52dd776a062b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:40:36:ec:5c:b6:84:aa:35:03:31:6a:2e:17:
7c:34:ba:f5:63:38:6c:45:a9:e2:2d:b4:a7:32:32:
16:bb:83:62:37:15:17:e7:c8:9d:01:5a:db:c5:b8:
b8:58:4b:c9:3e:a1:52:39:07:73:c0:d6:3a:34:b7:
85:6e:aa:cb:a5:a2:c4:61:d4:09:b5:3e:b5:b7:ec:
dd:dd:5c:6e:8d:06:1f:0e:a0:5d:7e:61:d7:e5:3a:
f5:f2:bc:14:7c:3b:69:03:d0:d5:52:4d:e6:44:43:
b5:37:e4:25:c0:d4:b1:f6:ae:49:98:0d:a3:a6:d6:
24:ca:5e:c7:70:a3:e3:96:04:b0:2c:87:3e:98:46:
3d:42:b2:cb:8c:46:29:9f:e0:cf:0b:c6:aa:92:6b:
95:e3:68:ca:8d:4d:a5:3c:d7:2b:51:d3:d7:7b:2d:
3e:a3:b6:5c:b3:05:3e:e2:69:3b:64:ec:dd:99:40:
49:23:84:7a:f5:95:ef:7d:fe:6c:97:3c:6b:84:b0:
ad:56:0a:ff:9b:89:e7:91:8e:cd:5c:67:16:33:85:
09:9d:eb:b5:da:c9:0e:ac:bc:dd:ed:2e:42:5c:a0:
c0:b7:6a:3b:3a:c1:09:11:46:bb:94:b4:7d:ac:ca:
d2:be:8a:12:7a:b9:f8:1a:3f:c5:19:95:ec:2d:f9:
a4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:19:49:BC:39:B1:9B:50:91:8A:D9:B6:CC:E5:2D:D7:76:A0:62:B9
X509v3 Authority Key Identifier:
keyid:E8:2F:2C:A5:3F:1B:33:D1:B5:35:46:A2:30:95:D3:84:FF:23:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6C8spT8bM9G1NUaiMJXThP8jdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9ab12d-d7fe-4881-9fbe-5f9229b261b5/1/6C8spT8bM9G1NUaiMJXThP8jdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:07:66:9c:b1:55:02:b2:87:9f:05:3b:9e:2f:d1:86:f6:1f:
62:23:48:90:db:82:66:3c:3d:ff:37:94:78:2e:0d:c9:df:03:
0f:fb:00:39:7b:56:9f:53:94:07:2e:59:fc:b3:3e:d6:ae:31:
e8:f2:ed:f2:20:3d:71:be:43:7a:06:9e:17:50:08:7c:90:fb:
09:ae:37:d9:69:15:dd:29:b8:5f:67:5c:44:f8:23:d4:c4:f9:
03:c6:20:93:3e:91:36:96:e0:eb:a6:2f:48:54:5e:0f:40:64:
49:3b:b2:ab:44:ca:4c:08:05:36:5c:26:c3:69:9c:cc:d6:5c:
ab:0f:55:6c:2c:6b:04:43:30:22:66:b9:a0:c4:4c:4f:9a:03:
d8:a6:97:fd:b0:c5:27:16:a2:10:a6:bc:d8:2d:dd:9e:7b:9a:
23:ff:9a:3f:44:1b:11:c5:bb:86:92:f8:75:2d:c2:fe:c2:8a:
db:3a:29:17:2c:cd:4a:fd:0e:c9:e3:f4:34:b5:1f:84:e5:6f:
7e:63:09:98:45:32:f3:59:5a:cb:1a:ec:b8:6a:9a:c6:2b:ad:
8f:ba:67:51:48:7d:f2:0c:b2:2d:8c:da:9f:d3:41:70:d1:63:
fb:60:38:03:33:ec:10:98:1c:a8:f1:b9:44:b4:15:d1:94:a9:
b3:07:cd:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZP2krdqkpYSf9WJUjKprHjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MmYyY2E1M2YxYjMzZDFiNTM1NDZhMjMwOTVkMzg0ZmYy
Mzc3MDMwHhcNMjUwNDE5MjEwMDI4WhcNMjUwNDIwMjEwMDI4WjAzMTEwLwYDVQQD
Eyg0YTE5NDliYzM5YjE5YjUwOTE4YWQ5YjZjY2U1MmRkNzc2YTA2MmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkA27Fy2hKo1AzFqLhd8NLr1Yzhs
RaniLbSnMjIWu4NiNxUX58idAVrbxbi4WEvJPqFSOQdzwNY6NLeFbqrLpaLEYdQJ
tT61t+zd3VxujQYfDqBdfmHX5Tr18rwUfDtpA9DVUk3mREO1N+QlwNSx9q5JmA2j
ptYkyl7HcKPjlgSwLIc+mEY9QrLLjEYpn+DPC8aqkmuV42jKjU2lPNcrUdPXey0+
o7ZcswU+4mk7ZOzdmUBJI4R69ZXvff5slzxrhLCtVgr/m4nnkY7NXGcWM4UJneu1
2skOrLzd7S5CXKDAt2o7OsEJEUa7lLR9rMrSvooSern4Gj/FGZXsLfmkJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoZSbw5sZtQkYrZtszlLdd2oGK5MB8GA1UdIwQY
MBaAFOgvLKU/GzPRtTVGojCV04T/I3cDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkM4c3BUOGJNOUcxTlVhaU1KWFRoUDhqZHdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85YWIxMmQtZDdmZS00ODgxLTlmYmUt
NWY5MjI5YjI2MWI1LzEvNkM4c3BUOGJNOUcxTlVhaU1KWFRoUDhqZHdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS85YWIxMmQtZDdmZS00ODgxLTlmYmUtNWY5MjI5YjI2MWI1
LzEvNkM4c3BUOGJNOUcxTlVhaU1KWFRoUDhqZHdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQdmnLFV
ArKHnwU7ni/RhvYfYiNIkNuCZjw9/zeUeC4Nyd8DD/sAOXtWn1OUBy5Z/LM+1q4x
6PLt8iA9cb5DegaeF1AIfJD7Ca432WkV3Sm4X2dcRPgj1MT5A8Ygkz6RNpbg66Yv
SFReD0BkSTuyq0TKTAgFNlwmw2mczNZcqw9VbCxrBEMwIma5oMRMT5oD2KaX/bDF
JxaiEKa82C3dnnuaI/+aP0QbEcW7hpL4dS3C/sKK2zopFyzNSv0OyeP0NLUfhOVv
fmMJmEUy81layxrsuGqaxiutj7pnUUh98gyyLYzan9NBcNFj+2A4AzPsEJgcqPG5
RLQV0ZSpswfNKQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:50:06 2025 by rpki-client