Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
File: 6lUOVOR2bVdl0PPQYd8ddNpViXM.mft (raw, json)
Hash identifier: U1HsBza2FEq0LveiZBAyfowKAjtkrGh4gVBSNwHqTnM=
Subject key identifier: 4F:88:72:DD:FE:56:9F:E8:61:F6:EF:8F:14:BE:99:1A:D0:67:B4:24
Authority key identifier: EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73
Certificate issuer: /CN=ea550e54e4766d5765d0f3d061df1d74da558973
Certificate serial: 0196ACFA7488CA379E6642613E91C7BD2D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
Manifest number: 0C7C
Signing time: Wed 07 May 2025 23:00:16 +0000
Manifest this update: Wed 07 May 2025 23:00:16 +0000
Manifest next update: Thu 08 May 2025 23:00:16 +0000
Files and hashes: 1: 6lUOVOR2bVdl0PPQYd8ddNpViXM.crl (hash: rLfYwachWRsznIUyyek478JFbBQNZ5fn2D/+puIBklU=)
2: SOLF2PkE720JgjOdf1KwRyDMoVU.roa (hash: xFpd4K6CQn8K2Nx3S7ipIBzbB30czEVkqtv2sS8du2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:fa:74:88:ca:37:9e:66:42:61:3e:91:c7:bd:2d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea550e54e4766d5765d0f3d061df1d74da558973
Validity
Not Before: May 7 23:00:16 2025 GMT
Not After : May 8 23:00:16 2025 GMT
Subject: CN=4f8872ddfe569fe861f6ef8f14be991ad067b424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:d7:53:3b:45:c7:17:bf:a8:c2:8a:b5:2d:
a2:59:cb:8a:4a:5c:e4:b0:76:f9:f4:c8:ac:a4:e5:
31:6e:7b:24:03:1b:fb:75:34:32:09:1f:e5:4d:a2:
1b:ef:9c:81:54:b3:8a:39:27:38:c4:9e:42:59:c2:
8c:8b:08:62:3e:7b:57:cd:1f:a8:6a:94:6a:de:cf:
e6:de:0e:74:27:95:86:dc:f9:b0:3f:d9:02:60:9f:
d0:c7:32:d1:8b:08:d9:d1:73:4f:e6:cf:b1:75:cf:
5e:be:f3:a4:26:d7:4b:f3:ab:73:b7:47:82:b7:79:
42:04:ef:af:f8:07:af:75:a5:89:e5:94:eb:79:de:
11:93:e0:e1:af:9b:57:d7:7d:2b:b7:43:fb:d7:09:
10:00:c7:61:76:72:f6:f2:5d:5c:79:ed:6d:82:7c:
96:70:a4:a5:c5:b2:a3:1a:0f:34:a8:21:fc:42:f3:
97:50:8a:96:43:36:7c:f8:33:f8:9a:c2:b3:7b:4a:
12:bf:d5:bf:92:3d:f9:f7:cc:75:51:67:70:e9:da:
48:58:e0:45:4c:5d:28:dd:ce:a5:86:aa:94:cd:3f:
6a:15:1f:6e:4e:81:33:74:19:9a:d1:3b:36:3d:b2:
c2:c0:b7:20:35:5d:e1:76:fc:f5:97:39:9a:a6:1d:
2f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:88:72:DD:FE:56:9F:E8:61:F6:EF:8F:14:BE:99:1A:D0:67:B4:24
X509v3 Authority Key Identifier:
keyid:EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:64:62:fa:e9:8c:73:8d:5a:25:ae:a8:e2:d5:8e:7d:15:57:
e1:9d:2f:17:6c:3a:14:c0:fd:0e:4b:2a:43:fa:3e:26:fd:45:
41:71:37:60:03:13:ed:49:54:cb:ad:4b:06:a7:0e:2b:dc:a0:
7c:ed:b2:de:cd:a9:99:aa:79:67:ac:5c:51:b3:74:49:17:f5:
f5:04:e7:3c:c7:7c:63:ed:39:02:1c:05:4d:d3:0c:ed:54:0f:
cd:18:8b:e7:2b:c7:cc:77:c6:63:15:c9:87:33:76:dc:e4:ce:
d1:78:20:e7:0d:d8:87:67:cb:e7:74:c7:a9:71:4a:c6:3e:98:
9d:ff:92:8a:4b:30:1b:c7:bf:cc:c4:8f:c3:73:1e:b4:c8:91:
32:5c:3d:c6:cd:ba:74:df:1c:8a:83:18:1d:f9:1e:af:4b:0c:
f8:5f:21:28:f3:58:6a:60:c9:51:77:26:fe:08:cd:e2:5f:24:
8f:d8:4f:f1:dd:44:ba:d4:35:46:42:bb:48:af:15:2b:36:29:
ec:4a:33:b0:0d:ee:33:de:b7:50:ea:11:82:02:9f:ec:e0:5d:
c2:b1:22:31:93:0a:44:1a:b8:cc:ed:5e:b1:8f:16:7e:a6:22:
49:9f:dc:c9:5e:3a:d4:36:16:25:83:27:b3:16:0c:3e:aa:8d:
3c:93:1c:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZas+nSIyjeeZkJhPpHHvS1xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNTUwZTU0ZTQ3NjZkNTc2NWQwZjNkMDYxZGYxZDc0ZGE1
NTg5NzMwHhcNMjUwNTA3MjMwMDE2WhcNMjUwNTA4MjMwMDE2WjAzMTEwLwYDVQQD
Eyg0Zjg4NzJkZGZlNTY5ZmU4NjFmNmVmOGYxNGJlOTkxYWQwNjdiNDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwETXUztFxxe/qMKKtS2iWcuKSlzk
sHb59MispOUxbnskAxv7dTQyCR/lTaIb75yBVLOKOSc4xJ5CWcKMiwhiPntXzR+o
apRq3s/m3g50J5WG3PmwP9kCYJ/QxzLRiwjZ0XNP5s+xdc9evvOkJtdL86tzt0eC
t3lCBO+v+AevdaWJ5ZTred4Rk+Dhr5tX130rt0P71wkQAMdhdnL28l1cee1tgnyW
cKSlxbKjGg80qCH8QvOXUIqWQzZ8+DP4msKze0oSv9W/kj3598x1UWdw6dpIWOBF
TF0o3c6lhqqUzT9qFR9uToEzdBma0Ts2PbLCwLcgNV3hdvz1lzmaph0vkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+Ict3+Vp/oYfbvjxS+mRrQZ7QkMB8GA1UdIwQY
MBaAFOpVDlTkdm1XZdDz0GHfHXTaVYlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmxVT1ZPUjJiVmRsMFBQUVlkOGRkTnBWaVhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OGY2MzctMzEyMS00MGY3LWI3OGYt
OWM5ZjIwOTAzMjlhLzEvNmxVT1ZPUjJiVmRsMFBQUVlkOGRkTnBWaVhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82OGY2MzctMzEyMS00MGY3LWI3OGYtOWM5ZjIwOTAzMjlh
LzEvNmxVT1ZPUjJiVmRsMFBQUVlkOGRkTnBWaVhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGRi+umM
c41aJa6o4tWOfRVX4Z0vF2w6FMD9DksqQ/o+Jv1FQXE3YAMT7UlUy61LBqcOK9yg
fO2y3s2pmap5Z6xcUbN0SRf19QTnPMd8Y+05AhwFTdMM7VQPzRiL5yvHzHfGYxXJ
hzN23OTO0Xgg5w3Yh2fL53THqXFKxj6Ynf+SikswG8e/zMSPw3MetMiRMlw9xs26
dN8cioMYHfker0sM+F8hKPNYamDJUXcm/gjN4l8kj9hP8d1EutQ1RkK7SK8VKzYp
7EozsA3uM963UOoRggKf7OBdwrEiMZMKRBq4zO1esY8WfqYiSZ/cyV461DYWJYMn
sxYMPqqNPJMcfA==
-----END CERTIFICATE-----
Generated at Thu May 8 02:16:58 2025 by rpki-client