Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
File: 6RJGEsq9EBwYyTXtIXdaDlxKibc.mft (raw, json)
Hash identifier: odr2OBHrYlVEnHxQfemwWRoRWpZoLtv/71wCAD0jC14=
Subject key identifier: F9:3E:F0:E0:BF:08:62:63:62:24:C8:DB:76:C7:AB:75:AD:4A:D1:FD
Authority key identifier: E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7
Certificate issuer: /CN=e9124612cabd101c18c935ed21775a0e5c4a89b7
Certificate serial: 01964D7DEF60DC5FC577E0632DDB425C36BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
Manifest number: 089F
Signing time: Sat 19 Apr 2025 10:00:20 +0000
Manifest this update: Sat 19 Apr 2025 10:00:20 +0000
Manifest next update: Sun 20 Apr 2025 10:00:20 +0000
Files and hashes: 1: 6RJGEsq9EBwYyTXtIXdaDlxKibc.crl (hash: gTEUHLj16NDWtzdYdusNoOaqEndeurnCCsADi5cFoDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7d:ef:60:dc:5f:c5:77:e0:63:2d:db:42:5c:36:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9124612cabd101c18c935ed21775a0e5c4a89b7
Validity
Not Before: Apr 19 10:00:20 2025 GMT
Not After : Apr 20 10:00:20 2025 GMT
Subject: CN=f93ef0e0bf0862636224c8db76c7ab75ad4ad1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:ea:34:7a:85:cd:b5:cd:80:da:c4:92:b7:
1d:16:4c:f0:22:22:cb:76:22:52:98:90:d2:55:08:
4d:10:4c:03:a4:07:8d:7b:1e:cf:f4:f4:f0:4c:cf:
05:35:e5:8d:1a:d5:20:5b:07:39:f3:9f:f1:6e:5b:
47:4c:88:8b:64:33:a8:ce:98:be:bf:e9:ab:b3:bc:
b5:c0:fb:43:81:aa:d4:39:d1:d1:14:2e:9d:cc:31:
ae:bd:13:13:cf:5d:62:5e:e0:96:20:4f:ab:c5:d1:
de:75:3d:3b:f4:77:15:b2:09:e0:ea:69:31:26:1e:
97:ea:ae:4b:82:39:c3:7b:4e:2f:aa:5e:ed:8b:0e:
92:ec:5d:69:3c:c9:dc:7f:47:40:40:e6:b2:73:82:
d7:e7:63:5f:a8:e2:bf:70:72:d6:32:81:63:4d:57:
a5:73:5e:a5:ec:42:32:c8:f6:08:61:61:fe:02:fa:
f9:9c:98:19:61:35:ec:26:41:42:a5:e7:8c:de:ed:
dd:0c:86:21:c5:f0:a3:dd:6c:ee:ce:2c:e6:e9:dd:
2b:7d:48:9f:c6:a6:82:39:e5:f2:2f:dc:d3:7b:ae:
34:57:44:aa:32:fe:9b:0a:34:ed:a2:8d:fa:e3:66:
f0:0e:74:e5:bc:0e:e1:bf:ca:68:36:f5:5a:a4:e3:
8a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3E:F0:E0:BF:08:62:63:62:24:C8:DB:76:C7:AB:75:AD:4A:D1:FD
X509v3 Authority Key Identifier:
keyid:E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:4f:c1:be:6e:c0:47:30:25:b3:e7:bd:fc:a3:64:7f:32:33:
3c:88:0d:15:d6:e3:bc:c1:71:d5:c9:96:a2:0b:f0:4f:a9:cb:
2b:2c:b4:0f:4b:fe:9c:ce:57:9d:d1:7c:88:2c:7e:56:8c:78:
bd:6d:6d:1f:f8:d2:a2:5f:8d:95:dd:d2:81:2d:51:20:90:59:
85:bb:df:d0:44:5f:3c:ad:79:8a:85:bc:89:26:39:a9:db:ae:
88:3a:4e:4a:a7:94:98:b4:08:5b:66:63:ac:cd:3e:0a:a4:1a:
c2:ed:0f:ab:45:06:33:2b:18:b7:b2:ce:38:ee:42:2c:0a:21:
3b:f6:65:e6:73:c0:57:27:bc:5e:9b:42:f4:86:fe:e1:25:e3:
dc:71:f3:c8:5d:12:88:de:7e:52:ce:a2:74:06:30:e9:bb:eb:
85:13:5e:bd:45:76:ac:4a:ba:12:cb:63:98:c0:ec:76:34:21:
10:f2:c5:8d:59:1a:ab:de:d5:58:e4:d0:57:12:b4:93:34:78:
be:fe:c9:19:58:40:fd:31:02:3f:1c:71:b7:95:4e:28:2e:86:
1b:82:1a:90:c4:b9:b0:5a:94:87:cb:73:3b:11:2b:33:3c:12:
f0:ce:c6:3b:f9:da:2b:de:5b:f8:40:51:20:29:f4:1b:6a:2e:
7c:35:f7:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfe9g3F/Fd+BjLdtCXDa+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MTI0NjEyY2FiZDEwMWMxOGM5MzVlZDIxNzc1YTBlNWM0
YTg5YjcwHhcNMjUwNDE5MTAwMDIwWhcNMjUwNDIwMTAwMDIwWjAzMTEwLwYDVQQD
EyhmOTNlZjBlMGJmMDg2MjYzNjIyNGM4ZGI3NmM3YWI3NWFkNGFkMWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEbqNHqFzbXNgNrEkrcdFkzwIiLL
diJSmJDSVQhNEEwDpAeNex7P9PTwTM8FNeWNGtUgWwc585/xbltHTIiLZDOozpi+
v+mrs7y1wPtDgarUOdHRFC6dzDGuvRMTz11iXuCWIE+rxdHedT079HcVsgng6mkx
Jh6X6q5LgjnDe04vql7tiw6S7F1pPMncf0dAQOayc4LX52NfqOK/cHLWMoFjTVel
c16l7EIyyPYIYWH+Avr5nJgZYTXsJkFCpeeM3u3dDIYhxfCj3Wzuzizm6d0rfUif
xqaCOeXyL9zTe640V0SqMv6bCjTtoo3642bwDnTlvA7hv8poNvVapOOKjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPk+8OC/CGJjYiTI23bHq3WtStH9MB8GA1UdIwQY
MBaAFOkSRhLKvRAcGMk17SF3Wg5cSom3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlJKR0VzcTlFQndZeVRYdElYZGFEbHhLaWJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9kNzI2MjgtMmQzNy00YzlmLWIxZjMt
YzFkODQ1NzA4YTZiLzEvNlJKR0VzcTlFQndZeVRYdElYZGFEbHhLaWJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9kNzI2MjgtMmQzNy00YzlmLWIxZjMtYzFkODQ1NzA4YTZi
LzEvNlJKR0VzcTlFQndZeVRYdElYZGFEbHhLaWJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgU/Bvm7A
RzAls+e9/KNkfzIzPIgNFdbjvMFx1cmWogvwT6nLKyy0D0v+nM5XndF8iCx+Vox4
vW1tH/jSol+Nld3SgS1RIJBZhbvf0ERfPK15ioW8iSY5qduuiDpOSqeUmLQIW2Zj
rM0+CqQawu0Pq0UGMysYt7LOOO5CLAohO/Zl5nPAVye8XptC9Ib+4SXj3HHzyF0S
iN5+Us6idAYw6bvrhRNevUV2rEq6EstjmMDsdjQhEPLFjVkaq97VWOTQVxK0kzR4
vv7JGVhA/TECPxxxt5VOKC6GG4IakMS5sFqUh8tzOxErMzwS8M7GO/naK95b+EBR
ICn0G2oufDX3mQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:01:53 2025 by rpki-client