Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
File: 6GNg24H1BcXpqbWtEKgcZPSoW9I.mft (raw, json)
Hash identifier: fB5apK6hmsxRu+UL7ze563deTl84zCj+KXpRylp3KSA=
Subject key identifier: B3:A7:EE:39:8C:42:99:8F:2A:10:BD:26:08:0C:0A:DB:DC:E1:66:96
Authority key identifier: E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2
Certificate issuer: /CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
Certificate serial: 01965793C5C3FE5B1FF9D059072640CF45BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
Manifest number: 148E
Signing time: Mon 21 Apr 2025 09:00:24 +0000
Manifest this update: Mon 21 Apr 2025 09:00:24 +0000
Manifest next update: Tue 22 Apr 2025 09:00:24 +0000
Files and hashes: 1: 6GNg24H1BcXpqbWtEKgcZPSoW9I.crl (hash: CWtkyb7EmJwkoZ2C4Th2cnvOcxzBKpNdjIzzfIzeD4E=)
2: uADkX3srvSz7h5-6p6oWNf6171A.roa (hash: JFtPLvs27wHExEiH+3v7Jikl9EHdIYjblSR25Lrk4HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:c5:c3:fe:5b:1f:f9:d0:59:07:26:40:cf:45:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
Validity
Not Before: Apr 21 09:00:24 2025 GMT
Not After : Apr 22 09:00:24 2025 GMT
Subject: CN=b3a7ee398c42998f2a10bd26080c0adbdce16696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:03:89:0e:75:94:32:cc:ea:1c:43:11:4e:f4:
d9:e2:5c:1c:8d:08:36:96:66:22:b8:d3:1a:26:73:
1a:e8:24:82:3c:19:c2:50:ee:03:54:9e:c4:d9:40:
c0:96:83:07:31:4b:6c:44:26:4a:e8:e0:17:67:f7:
bc:2e:e9:9e:40:3d:3a:7a:0f:98:bc:2d:b0:39:0c:
99:23:a9:84:2e:ba:84:be:2a:56:fc:98:34:91:69:
9a:69:63:d9:be:74:d5:d0:26:53:a7:33:6f:27:69:
0f:13:69:24:0f:75:64:5e:90:5e:5b:67:fe:eb:0c:
15:e2:f0:31:05:4f:34:ec:24:bd:84:d1:48:40:f4:
49:fa:a7:01:f6:5f:19:ab:4e:13:63:31:36:75:f0:
71:33:9d:b0:87:27:de:ba:66:9c:66:08:c0:be:05:
b8:3c:3b:1f:6e:e3:1d:44:90:a6:eb:54:4a:cd:1b:
13:d9:60:57:8e:13:33:da:a9:6c:18:5b:9d:df:3d:
1c:cd:47:a8:5f:b1:a5:7a:f7:7e:f5:10:d5:9a:4d:
2c:f4:99:9b:2b:b5:8c:07:f4:fd:9b:75:ac:87:62:
74:87:22:85:58:b9:b4:bc:11:09:b1:29:4a:a6:68:
bb:0b:42:1d:4c:b9:ee:e7:d8:88:6c:34:dc:e4:29:
32:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A7:EE:39:8C:42:99:8F:2A:10:BD:26:08:0C:0A:DB:DC:E1:66:96
X509v3 Authority Key Identifier:
keyid:E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:b7:7d:67:d1:29:b6:de:71:e8:1c:7f:72:29:92:a9:d6:20:
e6:30:4a:ef:64:32:79:c1:7a:85:69:49:22:6d:ee:dc:f7:02:
33:6e:f6:dc:e2:79:3e:69:a8:ca:f8:c0:57:51:45:49:ee:f8:
a8:c9:45:ce:6c:6c:01:01:4b:b4:aa:99:4f:2c:75:58:15:e3:
8c:bc:bb:67:6e:7b:8a:df:82:9b:c0:fd:ce:20:2b:1b:ef:05:
f4:42:d9:57:47:1c:a4:e0:60:2d:17:bb:3a:cb:c3:3d:93:79:
f6:75:55:e2:9f:3d:64:25:b7:55:a2:46:14:28:e4:10:dc:1e:
94:d7:eb:fd:f3:1c:19:a6:cc:b6:27:bf:17:24:91:fd:40:a9:
67:2a:49:6a:00:1b:76:58:62:bc:f1:ff:14:4c:01:70:7a:05:
9a:e9:e8:6c:c6:4f:40:58:f9:9e:48:bc:fe:e7:6c:bc:1f:42:
69:1a:bd:32:ca:4b:86:36:9a:ff:38:a9:68:77:a5:79:95:4a:
59:85:27:1c:27:5c:ce:26:5d:25:94:6b:3e:a6:1f:1b:02:95:
3a:b5:03:97:5c:60:cd:1b:00:1b:63:ad:f0:78:4f:5c:94:b3:
68:74:d0:3d:3a:42:70:05:c4:50:71:ef:86:79:f6:ee:a9:b8:
34:1d:a2:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXk8XD/lsf+dBZByZAz0W+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NjM2MGRiODFmNTA1YzVlOWE5YjVhZDEwYTgxYzY0ZjRh
ODViZDIwHhcNMjUwNDIxMDkwMDI0WhcNMjUwNDIyMDkwMDI0WjAzMTEwLwYDVQQD
EyhiM2E3ZWUzOThjNDI5OThmMmExMGJkMjYwODBjMGFkYmRjZTE2Njk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgOJDnWUMszqHEMRTvTZ4lwcjQg2
lmYiuNMaJnMa6CSCPBnCUO4DVJ7E2UDAloMHMUtsRCZK6OAXZ/e8LumeQD06eg+Y
vC2wOQyZI6mELrqEvipW/Jg0kWmaaWPZvnTV0CZTpzNvJ2kPE2kkD3VkXpBeW2f+
6wwV4vAxBU807CS9hNFIQPRJ+qcB9l8Zq04TYzE2dfBxM52whyfeumacZgjAvgW4
PDsfbuMdRJCm61RKzRsT2WBXjhMz2qlsGFud3z0czUeoX7Glevd+9RDVmk0s9Jmb
K7WMB/T9m3Wsh2J0hyKFWLm0vBEJsSlKpmi7C0IdTLnu59iIbDTc5CkyEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOn7jmMQpmPKhC9JggMCtvc4WaWMB8GA1UdIwQY
MBaAFOhjYNuB9QXF6am1rRCoHGT0qFvSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkdOZzI0SDFCY1hwcWJXdEVLZ2NaUFNvVzlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMTc3ZjctNjM0OC00NzQ0LWFkOWMt
NzYxODliZDRhMDQwLzEvNkdOZzI0SDFCY1hwcWJXdEVLZ2NaUFNvVzlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lMTc3ZjctNjM0OC00NzQ0LWFkOWMtNzYxODliZDRhMDQw
LzEvNkdOZzI0SDFCY1hwcWJXdEVLZ2NaUFNvVzlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtrd9Z9Ep
tt5x6Bx/cimSqdYg5jBK72QyecF6hWlJIm3u3PcCM2723OJ5PmmoyvjAV1FFSe74
qMlFzmxsAQFLtKqZTyx1WBXjjLy7Z257it+Cm8D9ziArG+8F9ELZV0ccpOBgLRe7
OsvDPZN59nVV4p89ZCW3VaJGFCjkENwelNfr/fMcGabMtie/FySR/UCpZypJagAb
dlhivPH/FEwBcHoFmunobMZPQFj5nki8/udsvB9CaRq9MspLhjaa/zipaHeleZVK
WYUnHCdcziZdJZRrPqYfGwKVOrUDl1xgzRsAG2Ot8HhPXJSzaHTQPTpCcAXEUHHv
hnn27qm4NB2iHg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:19:19 2025 by rpki-client