Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
File: rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft (raw, json)
Hash identifier: +2LtO/c0V4TEmf6qQOQZON+p3+JcolkrCukKRdUIWVs=
Subject key identifier: 40:22:8C:C1:0F:58:2B:70:BB:DC:D0:42:44:EF:B6:7B:A2:26:DD:D8
Authority key identifier: AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA
Certificate issuer: /CN=acabba0b0052ae7bd349235647a2ed731506ccaa
Certificate serial: 0196AFFC5983AFD2490D33F4980984D0B48E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
Manifest number: 0B6C
Signing time: Thu 08 May 2025 13:01:12 +0000
Manifest this update: Thu 08 May 2025 13:01:12 +0000
Manifest next update: Fri 09 May 2025 13:01:12 +0000
Files and hashes: 1: rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl (hash: uLgGnTD6wrSshTAjzQvvF3lfd/WIPvONVPmV7tNNEl8=)
2: xdJCZN2-B2T_CDkACtSXidGS3do.roa (hash: s0jqLGTlnozuwukxMNuj9trb2i8A2O+cFtDeELQzX9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:59:83:af:d2:49:0d:33:f4:98:09:84:d0:b4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acabba0b0052ae7bd349235647a2ed731506ccaa
Validity
Not Before: May 8 13:01:12 2025 GMT
Not After : May 9 13:01:12 2025 GMT
Subject: CN=40228cc10f582b70bbdcd04244efb67ba226ddd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:47:c3:c5:bf:e7:80:15:88:74:aa:f4:17:
bf:8d:03:55:5b:51:cd:ce:a1:24:9e:30:83:5c:1b:
4e:92:a1:29:33:eb:80:56:3b:72:f7:fe:87:12:8a:
d2:95:30:c5:b3:9d:f1:bd:5a:32:27:8b:63:d2:77:
9e:c2:1c:cd:cc:89:b5:d6:28:02:32:62:ed:34:84:
99:8b:59:77:5a:8f:47:64:3b:a4:b9:86:5b:5d:13:
bf:7a:b4:47:ff:0a:84:5f:52:cf:3e:53:6b:31:59:
9f:f0:0d:bb:28:d1:21:b3:1d:2d:2b:a3:20:6c:78:
c8:9a:58:67:87:20:b9:46:12:71:99:bf:09:89:68:
a7:a7:7c:61:df:b1:d8:c3:67:72:b5:9c:7b:2a:c0:
3a:6f:12:d5:9e:8c:94:b7:bd:30:0a:e7:88:93:1d:
95:ed:be:52:fa:2d:88:4c:1c:4d:50:9c:f1:2b:94:
77:af:55:8f:66:69:67:9d:e3:ab:8e:52:1c:ec:ac:
aa:10:59:ed:c8:18:c7:23:72:0a:29:ac:45:71:95:
5d:97:23:e1:56:66:40:d3:9e:f7:6e:e7:2f:13:fc:
c7:bf:62:91:22:4f:de:ba:ae:ee:36:a4:d2:8f:34:
fb:e9:c3:af:db:12:c3:3c:50:7f:da:f2:a8:13:e3:
e7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:22:8C:C1:0F:58:2B:70:BB:DC:D0:42:44:EF:B6:7B:A2:26:DD:D8
X509v3 Authority Key Identifier:
keyid:AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:51:65:66:ff:d9:01:2e:be:45:53:57:ff:14:ee:a8:c5:7f:
bb:69:8e:85:78:5a:08:21:d5:54:46:4e:62:ed:16:e6:61:a1:
68:aa:10:d4:a5:b4:21:8d:40:38:1a:ef:ce:ba:24:dd:71:8d:
98:7e:55:a2:c7:2c:d5:f6:58:d2:8b:6f:2f:30:2d:f7:80:8e:
bc:a8:f8:24:69:5d:61:0e:f1:52:28:44:f2:8f:38:40:1c:2d:
8e:b9:d1:40:24:8d:12:5c:28:5d:7b:fd:03:72:7f:14:23:fa:
37:52:72:b2:0d:70:d3:60:64:d4:61:db:b1:b6:24:de:15:a8:
71:18:e9:09:5e:38:1b:05:27:7d:28:9e:5a:17:c1:ba:9e:46:
40:2a:c2:6d:48:ae:05:98:f1:48:44:7b:65:d5:9c:ed:64:96:
83:4a:4e:82:d5:a6:f0:21:83:16:b2:bf:f1:99:3e:96:c1:63:
db:31:df:76:ac:5e:c4:9d:76:dc:fa:a3:b9:a5:48:31:a3:19:
6f:7d:33:cc:3f:b1:cb:27:6b:c8:f8:e4:3f:84:2a:ca:fc:71:
e6:af:f1:03:5a:a1:00:e3:f5:fd:d1:4e:b3:82:dc:87:b4:0e:
ef:cd:5f:3f:f2:1f:2a:0b:22:28:6e:a0:9b:a0:49:0b:0d:5a:
73:b9:46:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZav/FmDr9JJDTP0mAmE0LSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYWJiYTBiMDA1MmFlN2JkMzQ5MjM1NjQ3YTJlZDczMTUw
NmNjYWEwHhcNMjUwNTA4MTMwMTEyWhcNMjUwNTA5MTMwMTEyWjAzMTEwLwYDVQQD
Eyg0MDIyOGNjMTBmNTgyYjcwYmJkY2QwNDI0NGVmYjY3YmEyMjZkZGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgZHw8W/54AViHSq9Be/jQNVW1HN
zqEknjCDXBtOkqEpM+uAVjty9/6HEorSlTDFs53xvVoyJ4tj0neewhzNzIm11igC
MmLtNISZi1l3Wo9HZDukuYZbXRO/erRH/wqEX1LPPlNrMVmf8A27KNEhsx0tK6Mg
bHjImlhnhyC5RhJxmb8JiWinp3xh37HYw2dytZx7KsA6bxLVnoyUt70wCueIkx2V
7b5S+i2ITBxNUJzxK5R3r1WPZmlnneOrjlIc7KyqEFntyBjHI3IKKaxFcZVdlyPh
VmZA0573bucvE/zHv2KRIk/euq7uNqTSjzT76cOv2xLDPFB/2vKoE+PnQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAijMEPWCtwu9zQQkTvtnuiJt3YMB8GA1UdIwQY
MBaAFKyrugsAUq5700kjVkei7XMVBsyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckt1NkN3QlNybnZUU1NOV1I2THRjeFVHektvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85M2RiZTctZGIyZi00YzM1LWIwYTct
ZTViNDk5NDdlZDA3LzEvckt1NkN3QlNybnZUU1NOV1I2THRjeFVHektvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85M2RiZTctZGIyZi00YzM1LWIwYTctZTViNDk5NDdlZDA3
LzEvckt1NkN3QlNybnZUU1NOV1I2THRjeFVHektvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFFlZv/Z
AS6+RVNX/xTuqMV/u2mOhXhaCCHVVEZOYu0W5mGhaKoQ1KW0IY1AOBrvzrok3XGN
mH5Voscs1fZY0otvLzAt94COvKj4JGldYQ7xUihE8o84QBwtjrnRQCSNElwoXXv9
A3J/FCP6N1Jysg1w02Bk1GHbsbYk3hWocRjpCV44GwUnfSieWhfBup5GQCrCbUiu
BZjxSER7ZdWc7WSWg0pOgtWm8CGDFrK/8Zk+lsFj2zHfdqxexJ123PqjuaVIMaMZ
b30zzD+xyydryPjkP4Qqyvxx5q/xA1qhAOP1/dFOs4Lch7QO781fP/IfKgsiKG6g
m6BJCw1ac7lGLA==
-----END CERTIFICATE-----
Generated at Thu May 8 15:04:20 2025 by rpki-client