Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
File: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft (raw, json)
Hash identifier: QLj5qayBLHOikd2iU4IIPFJAGMoRbKNrcfGEv/KIq1Q=
Subject key identifier: 7A:84:F8:23:8E:1A:FC:73:09:D7:90:E8:0B:CC:41:95:75:48:31:6F
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Certificate issuer: /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial: 0196BE2552824C2B6FE2CEC67909187B4167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 07:00:39 +0000
Manifest this update: Sun 11 May 2025 07:00:39 +0000
Manifest next update: Mon 12 May 2025 07:00:39 +0000
Files and hashes: 1: 46IkgipDtz-gl4yWGt7SVQgrM2Y.roa (hash: xd1tjAJC9B4oABZm0yY50qZfUkL+C2aunMu/YZc9css=)
2: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl (hash: rbSHK45zve6KpJNmW/9ugjLsZJgEWbyNaaMg8WjxhvE=)
3: TJ9h-OeDoNwLJy-bpo2ooNFoYYY.roa (hash: uSX/ck6PKaNlZa7GifLSaPti7K35d8cXLGS+lgOUDKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:52:82:4c:2b:6f:e2:ce:c6:79:09:18:7b:41:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
Validity
Not Before: May 11 07:00:39 2025 GMT
Not After : May 12 07:00:39 2025 GMT
Subject: CN=7a84f8238e1afc7309d790e80bcc41957548316f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:dd:39:56:fc:4b:e7:36:ab:cf:80:37:70:
ae:fb:f9:a8:ed:b3:93:67:2b:c8:19:16:ef:cb:5a:
c1:2b:ec:5e:d1:4b:ea:21:27:0e:0a:1a:1a:a6:5e:
a7:c6:d9:87:05:f4:de:92:ac:62:a5:59:f7:42:d6:
88:19:1a:b5:4b:75:1f:f8:9c:20:02:42:f7:6f:32:
80:48:af:a6:2b:b8:f1:aa:ae:a1:4a:5d:44:5c:7b:
5f:7a:51:43:91:fe:30:64:02:b4:d3:cb:37:35:a3:
a5:f6:b3:53:83:bb:7a:4a:d7:c4:8c:5c:e5:f7:2d:
43:7d:13:5d:1d:df:3d:4c:91:ae:31:e9:d2:16:8f:
56:44:3a:dc:77:a7:ca:54:5f:e1:89:55:9b:91:53:
33:47:46:8c:56:67:ff:eb:fb:3d:b2:78:ab:73:7e:
5f:a2:39:54:1c:eb:dd:d9:ce:ad:38:84:ac:96:d5:
9e:f5:91:90:ef:8b:94:04:c2:f5:41:88:90:cb:4b:
e5:98:a9:a7:e9:6e:f1:40:e1:c9:3e:e6:b3:9e:16:
a6:21:d6:26:20:dd:f7:48:0e:f3:68:5d:e3:ce:d6:
2e:23:c4:d9:f1:52:86:ca:dd:6c:3c:54:9b:dd:9b:
48:4c:0e:e9:80:c0:49:08:59:4c:d8:29:31:24:66:
78:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:84:F8:23:8E:1A:FC:73:09:D7:90:E8:0B:CC:41:95:75:48:31:6F
X509v3 Authority Key Identifier:
keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:74:67:3a:bf:ac:62:ee:d9:f1:f2:6e:d1:a8:e6:d4:ae:04:
2a:4a:c8:58:3f:73:84:e7:8f:a5:f8:20:43:1e:31:ab:fa:9b:
a9:e2:5a:66:5f:96:12:84:af:28:80:b8:e9:ee:b5:d9:4a:35:
e4:11:64:29:43:64:75:6b:56:1d:9c:1e:ce:77:b1:e6:10:2b:
2b:b4:e8:90:6f:46:76:df:37:50:f7:bc:92:50:7e:cb:80:c1:
4b:e5:bb:35:66:d6:eb:45:b2:a6:b9:31:eb:d6:77:84:76:88:
d2:b4:78:98:56:db:5c:ad:2c:e9:4a:93:71:ce:c1:e0:18:ff:
48:ea:2d:45:71:56:bd:e1:9e:97:d2:1f:21:31:7b:f0:f1:b7:
ed:9f:df:77:1e:e1:67:e3:b7:46:8e:69:b6:13:b7:f4:96:c4:
95:44:bb:98:a5:09:48:06:0b:a9:e6:2b:22:fc:34:35:a8:ec:
cb:01:36:e2:3c:8c:35:3c:cb:60:31:f0:e0:38:f4:0c:5c:13:
49:14:3c:13:6d:ed:93:83:d1:2a:9a:9a:e8:4e:73:11:d7:c2:
8f:e0:b5:54:01:9e:4d:2e:21:fe:f7:07:d7:9b:51:15:6e:f2:
af:5e:1c:6d:e8:ce:a5:93:41:3a:f1:6f:a3:d3:00:da:b3:3f:
15:cd:b3:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+JVKCTCtv4s7GeQkYe0FnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzY1NmYyMjAxNTU4OWZmN2NjNjYwNTY4NjdmNjA1ZDgx
NDQ5YmMwHhcNMjUwNTExMDcwMDM5WhcNMjUwNTEyMDcwMDM5WjAzMTEwLwYDVQQD
Eyg3YTg0ZjgyMzhlMWFmYzczMDlkNzkwZTgwYmNjNDE5NTc1NDgzMTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqufdOVb8S+c2q8+AN3Cu+/mo7bOT
ZyvIGRbvy1rBK+xe0UvqIScOChoapl6nxtmHBfTekqxipVn3QtaIGRq1S3Uf+Jwg
AkL3bzKASK+mK7jxqq6hSl1EXHtfelFDkf4wZAK008s3NaOl9rNTg7t6StfEjFzl
9y1DfRNdHd89TJGuMenSFo9WRDrcd6fKVF/hiVWbkVMzR0aMVmf/6/s9snirc35f
ojlUHOvd2c6tOISsltWe9ZGQ74uUBML1QYiQy0vlmKmn6W7xQOHJPuaznhamIdYm
IN33SA7zaF3jztYuI8TZ8VKGyt1sPFSb3ZtITA7pgMBJCFlM2CkxJGZ4zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqE+COOGvxzCdeQ6AvMQZV1SDFvMB8GA1UdIwQY
MBaAFOl2VvIgFVif98xmBWhn9gXYFEm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84ZmEwNTEtNDM1Ny00ZDMxLTg1Mzct
NjgxMmJhYmM1YThiLzEvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84ZmEwNTEtNDM1Ny00ZDMxLTg1MzctNjgxMmJhYmM1YThi
LzEvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXRnOr+s
Yu7Z8fJu0ajm1K4EKkrIWD9zhOePpfggQx4xq/qbqeJaZl+WEoSvKIC46e612Uo1
5BFkKUNkdWtWHZweznex5hArK7TokG9Gdt83UPe8klB+y4DBS+W7NWbW60Wyprkx
69Z3hHaI0rR4mFbbXK0s6UqTcc7B4Bj/SOotRXFWveGel9IfITF78PG37Z/fdx7h
Z+O3Ro5pthO39JbElUS7mKUJSAYLqeYrIvw0NajsywE24jyMNTzLYDHw4Dj0DFwT
SRQ8E23tk4PRKpqa6E5zEdfCj+C1VAGeTS4h/vcH15tRFW7yr14cbejOpZNBOvFv
o9MA2rM/Fc2z4g==
-----END CERTIFICATE-----
Generated at Sun May 11 16:19:26 2025 by rpki-client