Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
File: 6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json)
Hash identifier: 8KMV9lEI5MSccyWyUGeM0mk1x3lbAgvxEPtcu92IS54=
Subject key identifier: E9:CF:6E:05:C8:B7:61:E0:A0:6C:53:FF:AC:6E:B7:D9:BE:B9:94:36
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 01965725FDE24FD8DC3B69B44CA3D8C4AC8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
Manifest number: 1514
Signing time: Mon 21 Apr 2025 07:00:29 +0000
Manifest this update: Mon 21 Apr 2025 07:00:29 +0000
Manifest next update: Tue 22 Apr 2025 07:00:29 +0000
Files and hashes: 1: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: QnFRVdjohOukusEMFVJjbVEpsS8HvayZ4E74nmNOQpM=)
2: 8ifx7KKJ18pryNHwF1j4-Fc64gM.roa (hash: VaIkHBJSp4yitHY1eixtkQXqBMvBgkd5WICUJNcd2K8=)
3: BO1ltB2867u60oaiDsy_-XsvL88.roa (hash: N3BRFXxAhwO4FPIhN2IGyHjmICRkpQTCZFJQ4I0pqRI=)
4: FoWNQ1gpwJC_vJTYQPjNq4EOPsk.roa (hash: y3YmRhUlwwI5SoZwTRIclzEsG8VBx6W5icxmsvJXHic=)
5: Q_XBBiAk4qHgl5xyRFCeUl8e3VE.roa (hash: sADh7knGI+0KPR0TD0XBdBdTNm9tN3/eGMw1gHZe2VI=)
6: cPczL7BSG5C-UOorLa44AbTPVd4.roa (hash: iC/fXBJJkXo1CbjOzv3JUUnSB7oUYt0rT8G7YWmNXm4=)
7: jIQE6oG-USVQsaVIsuMgVZrbPS8.roa (hash: tj3eChM7EThfXzNYj4xO6MKRf71fqyAWWs5gIA5ClkU=)
8: nCj-HurrM8I6ZuYeTftMdm0Nisw.roa (hash: f4dhcwMgx6vMMDpRWe3qOH6ZusltLaqZhMj8z/Gm8hQ=)
9: wPWSAuQLoLC84i_wxl8zAMN7M_I.roa (hash: AX93UGQS0hHBTCeSbLVGxtGmi8vpmUf8TykhODf8ipI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:25:fd:e2:4f:d8:dc:3b:69:b4:4c:a3:d8:c4:ac:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Apr 21 07:00:29 2025 GMT
Not After : Apr 22 07:00:29 2025 GMT
Subject: CN=e9cf6e05c8b761e0a06c53ffac6eb7d9beb99436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:de:46:95:32:c8:4c:f2:bf:75:46:01:87:
6d:2d:fe:38:09:4e:bb:6b:69:40:3d:fc:5b:34:c7:
ab:9f:49:23:0f:db:17:f1:87:c2:54:23:6d:ed:38:
82:e8:98:07:a8:d7:7e:5e:56:1c:e3:45:6f:60:65:
56:c5:6d:9e:04:ca:af:58:0e:41:e5:3a:89:e8:90:
ca:61:1b:3b:8d:e0:4c:ad:e5:e8:53:1c:a6:4e:f8:
af:b5:64:08:6f:30:45:43:ec:7e:7a:bd:b6:70:79:
a4:12:0e:8f:51:a7:b0:ef:5a:be:22:e0:54:40:39:
ea:ba:f2:1c:9a:12:36:64:6d:25:94:8b:95:53:83:
92:ba:26:4f:44:0d:f0:93:34:f5:c1:af:a2:70:2f:
78:06:af:62:05:87:2b:8c:3d:00:cf:31:81:af:63:
10:66:5b:98:d3:56:c7:7d:44:ed:d7:2c:8d:9a:1c:
3b:12:1e:0a:d5:a4:f6:0a:7e:ab:93:a0:7e:34:1f:
8c:a4:21:05:c3:e7:cf:a2:4c:1e:63:17:fa:72:43:
e3:20:1d:85:40:5a:99:b4:0c:de:24:42:20:10:01:
d1:1d:39:27:46:4b:12:e4:c9:3c:bc:b1:90:f0:38:
48:b6:6f:4b:97:cf:2f:c3:28:11:7e:c0:cc:91:5e:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CF:6E:05:C8:B7:61:E0:A0:6C:53:FF:AC:6E:B7:D9:BE:B9:94:36
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1f:e0:a4:ef:78:00:f5:aa:41:43:ab:45:55:0f:27:ee:0c:
1e:ac:cc:c3:3c:7b:eb:a4:19:02:e4:99:54:9a:c0:c0:57:51:
5d:02:a8:ee:1e:a7:85:0c:b4:ca:6e:65:cf:be:51:1d:e0:e4:
80:71:c1:82:6d:ab:ff:09:cd:4b:a0:e5:d6:f3:2e:35:bc:e8:
25:04:7e:30:cf:bc:3e:2d:0e:cc:f1:71:57:3a:81:f4:12:12:
79:72:b6:26:6e:10:58:3d:39:71:a7:8f:ca:69:4c:e7:d1:7d:
4f:e3:dc:70:7f:71:d2:7a:40:e2:ce:ae:f5:96:a2:c7:4f:5f:
b2:41:06:03:f3:83:92:56:f5:34:c5:0a:a1:67:83:88:77:cd:
5c:09:d6:87:42:de:cf:06:44:6a:62:3c:bf:3f:f7:08:5e:04:
c3:84:f5:95:66:46:9a:a4:87:0a:8a:2a:8e:44:be:8d:4b:92:
1e:69:4e:81:68:3e:ff:2c:cf:4a:5f:a3:e2:8e:2d:57:fa:5a:
8a:b1:82:08:e8:8c:bd:e9:2c:b7:03:37:b1:15:8b:42:aa:c7:
f7:b0:8b:b4:cf:eb:7a:7a:95:87:bb:29:77:98:49:4f:b9:e8:
4e:4e:00:14:98:d6:2d:71:86:0a:97:95:44:73:09:c5:07:ba:
a4:e4:5b:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXJf3iT9jcO2m0TKPYxKyOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy
M2UzZGIwHhcNMjUwNDIxMDcwMDI5WhcNMjUwNDIyMDcwMDI5WjAzMTEwLwYDVQQD
EyhlOWNmNmUwNWM4Yjc2MWUwYTA2YzUzZmZhYzZlYjdkOWJlYjk5NDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz/eRpUyyEzyv3VGAYdtLf44CU67
a2lAPfxbNMern0kjD9sX8YfCVCNt7TiC6JgHqNd+XlYc40VvYGVWxW2eBMqvWA5B
5TqJ6JDKYRs7jeBMreXoUxymTvivtWQIbzBFQ+x+er22cHmkEg6PUaew71q+IuBU
QDnquvIcmhI2ZG0llIuVU4OSuiZPRA3wkzT1wa+icC94Bq9iBYcrjD0AzzGBr2MQ
ZluY01bHfUTt1yyNmhw7Eh4K1aT2Cn6rk6B+NB+MpCEFw+fPokweYxf6ckPjIB2F
QFqZtAzeJEIgEAHRHTknRksS5Mk8vLGQ8DhItm9Ll88vwygRfsDMkV4DcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnPbgXIt2HgoGxT/6xut9m+uZQ2MB8GA1UdIwQY
MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt
YTg3MWVjYzIxMmE2LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2
LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnR/gpO94
APWqQUOrRVUPJ+4MHqzMwzx766QZAuSZVJrAwFdRXQKo7h6nhQy0ym5lz75RHeDk
gHHBgm2r/wnNS6Dl1vMuNbzoJQR+MM+8Pi0OzPFxVzqB9BISeXK2Jm4QWD05caeP
ymlM59F9T+PccH9x0npA4s6u9Zaix09fskEGA/ODklb1NMUKoWeDiHfNXAnWh0Le
zwZEamI8vz/3CF4Ew4T1lWZGmqSHCooqjkS+jUuSHmlOgWg+/yzPSl+j4o4tV/pa
irGCCOiMvekstwM3sRWLQqrH97CLtM/renqVh7spd5hJT7noTk4AFJjWLXGGCpeV
RHMJxQe6pORbhg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:54:51 2025 by rpki-client