Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
File: 6QUkmbAAPqDurqJCYzjDTgv4_c8.mft (raw, json)
Hash identifier: WfMp1DiyEl9KSWbBibfo+rpY4qj5WA9/Sgga7jkjEsE=
Subject key identifier: 47:5C:9B:58:CB:16:6B:84:82:FC:13:C3:77:6D:7C:18:93:3E:1E:8D
Authority key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
Certificate issuer: /CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Certificate serial: 0196CF4FC63E76C77D38F01D9B89C0DCC353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
Manifest number: 0928
Signing time: Wed 14 May 2025 15:00:33 +0000
Manifest this update: Wed 14 May 2025 15:00:33 +0000
Manifest next update: Thu 15 May 2025 15:00:33 +0000
Files and hashes: 1: 53gBiMV-U5T_UTNr_H6y2uJN32c.roa (hash: loF7sBRMOPze87N7XZhvPgafCESVBxbr6i5uTn+lW9k=)
2: 6QUkmbAAPqDurqJCYzjDTgv4_c8.crl (hash: e/iqmrEJNSPujvQ6NUruRZpJWiJcc/qkqh76jxfWBbY=)
3: lUuN68-IxOYTjJomy5kGo9veb00.roa (hash: IB0rOxo9mML04bmfaPFamlA+rNBljWr4GfuyYt2d/RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 13:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:4f:c6:3e:76:c7:7d:38:f0:1d:9b:89:c0:dc:c3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Validity
Not Before: May 14 15:00:33 2025 GMT
Not After : May 15 15:00:33 2025 GMT
Subject: CN=475c9b58cb166b8482fc13c3776d7c18933e1e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:69:8b:f6:2a:94:c2:f0:68:0b:2f:ac:4d:
07:f2:c9:df:a3:cd:d6:d9:cf:15:12:04:86:12:96:
89:2f:df:67:72:dd:af:9d:8d:0a:d1:c6:1f:cd:fe:
e5:a1:56:7f:1c:91:7f:fb:f7:d9:df:45:4f:8d:11:
03:5e:cb:dc:49:3d:42:c4:48:df:db:bc:c8:07:83:
7e:a6:1a:08:0a:ab:e7:f2:48:88:b0:1c:60:98:e3:
1a:76:4b:28:5e:81:1d:50:e8:95:0d:e8:a0:1e:e7:
5c:51:9f:8a:10:3f:24:2b:3a:80:da:db:a6:a9:46:
d8:7b:e6:bf:34:fe:75:d9:a7:bf:44:ed:40:01:e8:
ca:ca:df:80:70:6e:a4:f8:73:c4:ca:7b:4a:d6:80:
04:2b:f7:cd:8e:8f:6f:0b:5a:de:fa:6a:29:a1:45:
39:56:19:44:27:ab:fd:42:5a:60:bd:09:39:cb:82:
83:8f:42:92:30:fe:b3:7e:d1:6d:43:88:84:0e:96:
35:fd:f7:17:09:c7:18:6f:7f:8c:2e:41:a6:a9:c2:
1f:d1:14:ed:ec:55:89:2c:7e:13:d0:2a:2d:db:98:
10:62:d6:01:84:5c:aa:56:92:7d:89:76:6a:87:59:
a2:2c:59:f4:d4:3d:ba:f2:8d:d3:b0:0c:18:59:9a:
dc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5C:9B:58:CB:16:6B:84:82:FC:13:C3:77:6D:7C:18:93:3E:1E:8D
X509v3 Authority Key Identifier:
keyid:E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7a:8c:81:57:d2:c3:a6:5b:1c:25:a6:f5:78:f8:ef:81:e6:
ef:b2:1d:79:47:79:0a:cd:67:38:6e:21:12:08:a3:46:62:6e:
97:26:5a:3e:d3:0e:63:be:98:4e:e1:42:1e:5d:aa:32:94:5e:
4f:32:07:a0:9d:b0:92:7c:94:48:e3:0c:7d:3e:72:26:41:77:
94:e9:dc:e9:78:0d:a1:b3:b5:9d:22:e2:59:8a:ea:13:8b:d1:
3f:b5:3d:4d:af:fc:05:6d:e3:49:55:c9:17:ba:22:8d:1f:1b:
ed:a3:98:a6:bd:d8:56:c3:e7:93:4a:c4:08:ee:f6:45:ea:1f:
3e:7f:33:13:ef:30:53:8a:17:5d:0b:45:32:79:c7:9c:54:3a:
5f:f1:c1:cb:a0:f4:50:9c:88:70:73:eb:4d:0a:91:eb:c5:ed:
72:9a:8c:6f:ac:b9:31:9c:20:57:dc:18:15:c2:64:1f:37:3b:
f7:ad:4a:03:6f:a0:ea:dc:a0:0f:3f:e1:a7:5f:ad:00:27:f5:
0d:39:4f:af:52:1e:30:20:19:a6:47:1f:ea:94:14:36:69:74:
87:a1:7c:84:02:60:6a:0a:6f:e0:38:6e:94:28:cf:31:fb:04:
92:18:8a:36:5e:5b:60:ee:d4:8e:6a:c2:7b:b7:93:ec:de:3d:
59:46:5a:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbPT8Y+dsd9OPAdm4nA3MNTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDUyNDk5YjAwMDNlYTBlZWFlYTI0MjYzMzhjMzRlMGJm
OGZkY2YwHhcNMjUwNTE0MTUwMDMzWhcNMjUwNTE1MTUwMDMzWjAzMTEwLwYDVQQD
Eyg0NzVjOWI1OGNiMTY2Yjg0ODJmYzEzYzM3NzZkN2MxODkzM2UxZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOlpi/YqlMLwaAsvrE0H8snfo83W
2c8VEgSGEpaJL99nct2vnY0K0cYfzf7loVZ/HJF/+/fZ30VPjREDXsvcST1CxEjf
27zIB4N+phoICqvn8kiIsBxgmOMadksoXoEdUOiVDeigHudcUZ+KED8kKzqA2tum
qUbYe+a/NP512ae/RO1AAejKyt+AcG6k+HPEyntK1oAEK/fNjo9vC1re+mopoUU5
VhlEJ6v9QlpgvQk5y4KDj0KSMP6zftFtQ4iEDpY1/fcXCccYb3+MLkGmqcIf0RTt
7FWJLH4T0Cot25gQYtYBhFyqVpJ9iXZqh1miLFn01D268o3TsAwYWZrcuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdcm1jLFmuEgvwTw3dtfBiTPh6NMB8GA1UdIwQY
MBaAFOkFJJmwAD6g7q6iQmM4w04L+P3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFVa21iQUFQcUR1cnFKQ1l6akRUZ3Y0X2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83ODdhOTYtZmIwZC00MzJhLTg0Mjgt
NzEwZWY0NzczMmIwLzEvNlFVa21iQUFQcUR1cnFKQ1l6akRUZ3Y0X2M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83ODdhOTYtZmIwZC00MzJhLTg0MjgtNzEwZWY0NzczMmIw
LzEvNlFVa21iQUFQcUR1cnFKQ1l6akRUZ3Y0X2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHqMgVfS
w6ZbHCWm9Xj474Hm77IdeUd5Cs1nOG4hEgijRmJulyZaPtMOY76YTuFCHl2qMpRe
TzIHoJ2wknyUSOMMfT5yJkF3lOnc6XgNobO1nSLiWYrqE4vRP7U9Ta/8BW3jSVXJ
F7oijR8b7aOYpr3YVsPnk0rECO72ReofPn8zE+8wU4oXXQtFMnnHnFQ6X/HBy6D0
UJyIcHPrTQqR68XtcpqMb6y5MZwgV9wYFcJkHzc7961KA2+g6tygDz/hp1+tACf1
DTlPr1IeMCAZpkcf6pQUNml0h6F8hAJgagpv4DhulCjPMfsEkhiKNl5bYO7UjmrC
e7eT7N49WUZa1A==
-----END CERTIFICATE-----
Generated at Wed May 14 17:15:19 2025 by rpki-client