Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
File: 6kaWPMR52tvjxSI0q5-rqoEi0ls.mft (raw, json)
Hash identifier: TXnQBKPzuqYA11a5rp40/tVZhOGzAfFsRw02g0KYcn0=
Subject key identifier: 71:DB:8E:26:0E:F7:22:BD:4F:FC:28:4F:F6:27:50:45:2D:D5:02:30
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 0196BB5AFB323698D0EC5ED84E82162615E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
Manifest number: 153F
Signing time: Sat 10 May 2025 18:00:23 +0000
Manifest this update: Sat 10 May 2025 18:00:23 +0000
Manifest next update: Sun 11 May 2025 18:00:23 +0000
Files and hashes: 1: 6kaWPMR52tvjxSI0q5-rqoEi0ls.crl (hash: Vrr1PQalcqwcfmAYYjfSGT/do0BmDAXU/n+EQJ6n0Nk=)
2: F_Vpqfvbjxx20g95CeLrBsXvf_k.roa (hash: qNGonkdXf+gHEPyA9PESPfgKfYoSpxpEByMqfe+I7MQ=)
3: GhnDGEgDOhOuu2Bz2p8x9xfrIEk.roa (hash: duB9Io5OhbZEdzVZTqJI4mOgNl+GvHnaKazpl3IdsjA=)
4: S5-7pFac3Ww2rKkOW0pDvjHzO1w.roa (hash: y0paFatbjL3QesVnybDnaaTih+L+bbmSVD8cw6FJ/Tk=)
5: UVXDcefxnIrIyZ-DcfiZ2xkmVp4.roa (hash: HdXYNvSxAlKxxU8cwWq8MmlbJcS+0QbVfw07NS0ZrbY=)
6: b9wkPnLySz-ATLfF0ql-d4ycVn8.roa (hash: 9oUyMaJaRwmTAQVIcoe9p1Xl0C9S5KqKUeBPGeCZniU=)
7: dfoDkPClPolEQln8Wap-qSZl3mA.roa (hash: sAshvvzOYs0TqTXwL2VbwMq6B9+1UxkfXzngIBUZVgs=)
8: vNNjSoCVrZSrdxYzePjoq6gxkng.roa (hash: tERdg9hn/xkrqVt1JcH/usznbLFRttftraLG/JPUhH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5a:fb:32:36:98:d0:ec:5e:d8:4e:82:16:26:15:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: May 10 18:00:23 2025 GMT
Not After : May 11 18:00:23 2025 GMT
Subject: CN=71db8e260ef722bd4ffc284ff62750452dd50230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1c:b9:7b:99:5a:05:38:25:d8:87:90:c4:45:
2b:71:7c:83:40:b0:e1:20:2f:b3:83:a0:42:e5:41:
5f:29:55:93:ea:36:2b:41:b3:9e:34:1e:d3:71:f6:
45:f5:6f:65:84:25:66:d4:ef:9e:29:91:4b:c5:2d:
a5:c9:b1:e9:5a:13:e1:06:12:81:90:43:5f:39:28:
4e:0a:af:7a:95:fb:0e:b6:b3:ed:01:06:34:13:8a:
01:6c:cf:3f:64:08:aa:c6:4f:83:07:58:03:21:0c:
03:4b:fd:82:e1:d3:d6:e7:cc:26:59:cd:b1:8e:f0:
40:97:0f:71:6e:c3:c9:2f:2d:69:eb:43:08:4b:05:
96:4b:eb:6c:49:b1:6a:fa:7d:9c:06:12:13:34:7e:
7e:f5:c9:44:f8:95:01:82:35:cc:35:de:3e:9d:d8:
15:2e:82:e6:7e:a5:cd:dd:61:0a:ca:48:01:c9:e3:
34:ab:14:a9:1a:e1:1c:58:79:c4:26:93:3a:b2:14:
72:f0:74:d3:be:4e:48:fe:5c:6c:1f:56:0a:20:cd:
32:7d:39:fa:0b:8e:dc:9d:58:e5:3e:42:5d:89:5c:
61:6d:6f:ef:a0:8a:99:48:4d:ee:ea:a0:05:73:ab:
be:cd:71:e0:40:41:9c:14:c1:e5:18:16:66:d0:d1:
10:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DB:8E:26:0E:F7:22:BD:4F:FC:28:4F:F6:27:50:45:2D:D5:02:30
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b9:31:99:12:a1:28:10:0e:07:9b:db:80:34:51:b9:eb:2a:
cf:71:a6:cf:96:8f:20:37:a6:3d:32:db:e4:e7:67:47:25:3d:
97:65:dc:1c:30:44:ac:d4:3f:12:88:7a:e6:6a:23:b7:67:2c:
2c:3c:6c:da:3e:58:06:5b:5b:84:f0:e1:08:b4:4f:d8:42:9f:
ee:ac:03:3d:f4:a1:bf:2d:23:2e:72:c4:1b:70:ca:f0:f1:7d:
72:c5:67:b6:db:14:8b:07:58:bf:41:61:52:85:60:37:64:10:
1a:57:7c:a0:1b:e0:24:05:46:b7:ba:9a:0c:c2:dd:5c:b2:18:
ac:51:4c:4e:ba:5f:a8:05:36:1c:9a:ea:4c:58:80:4e:3d:78:
9a:93:aa:78:4c:a4:8d:bc:6b:3c:51:62:4c:4b:05:d3:ac:8c:
72:f9:cc:e8:68:7e:1c:f3:0a:98:13:e8:0b:0d:79:dc:74:75:
05:b0:47:28:4c:f8:b5:f1:7f:cc:87:43:3e:43:e2:bd:d4:8a:
7b:0c:d9:fd:55:0f:d9:45:f1:e3:d2:d4:54:6c:19:e1:8e:79:
39:6e:7f:e1:72:e2:a5:3f:34:d8:72:49:e5:f2:cc:66:b9:56:
2b:9b:f2:bf:d6:96:1a:4a:e0:f4:5c:a6:31:04:38:98:b9:67:
06:f1:43:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7WvsyNpjQ7F7YToIWJhXhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy
MmQyNWIwHhcNMjUwNTEwMTgwMDIzWhcNMjUwNTExMTgwMDIzWjAzMTEwLwYDVQQD
Eyg3MWRiOGUyNjBlZjcyMmJkNGZmYzI4NGZmNjI3NTA0NTJkZDUwMjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohy5e5laBTgl2IeQxEUrcXyDQLDh
IC+zg6BC5UFfKVWT6jYrQbOeNB7TcfZF9W9lhCVm1O+eKZFLxS2lybHpWhPhBhKB
kENfOShOCq96lfsOtrPtAQY0E4oBbM8/ZAiqxk+DB1gDIQwDS/2C4dPW58wmWc2x
jvBAlw9xbsPJLy1p60MISwWWS+tsSbFq+n2cBhITNH5+9clE+JUBgjXMNd4+ndgV
LoLmfqXN3WEKykgByeM0qxSpGuEcWHnEJpM6shRy8HTTvk5I/lxsH1YKIM0yfTn6
C47cnVjlPkJdiVxhbW/voIqZSE3u6qAFc6u+zXHgQEGcFMHlGBZm0NEQlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHbjiYO9yK9T/woT/YnUEUt1QIwMB8GA1UdIwQY
MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt
ZWI1YmM3ZDk3YWEwLzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw
LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrkxmRKh
KBAOB5vbgDRRuesqz3Gmz5aPIDemPTLb5OdnRyU9l2XcHDBErNQ/Eoh65mojt2cs
LDxs2j5YBltbhPDhCLRP2EKf7qwDPfShvy0jLnLEG3DK8PF9csVnttsUiwdYv0Fh
UoVgN2QQGld8oBvgJAVGt7qaDMLdXLIYrFFMTrpfqAU2HJrqTFiATj14mpOqeEyk
jbxrPFFiTEsF06yMcvnM6Gh+HPMKmBPoCw153HR1BbBHKEz4tfF/zIdDPkPivdSK
ewzZ/VUP2UXx49LUVGwZ4Y55OW5/4XLipT802HJJ5fLMZrlWK5vyv9aWGkrg9Fym
MQQ4mLlnBvFDEA==
-----END CERTIFICATE-----
Generated at Sun May 11 01:56:26 2025 by rpki-client