Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
File: 6N8-nLacyliscCotXpE1w7yrcgA.mft (raw, json)
Hash identifier: cNRN80tXe3Rl5OI7u8ELNhZ3kqPiuxdK/uamj/jmd70=
Subject key identifier: 89:07:ED:8F:53:CD:5F:5D:53:66:3F:E4:3D:C3:DA:53:D3:86:8E:79
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Certificate issuer: /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial: 0196C83ACD4E22D6D909DA37A288F53F81AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
Manifest number: 1541
Signing time: Tue 13 May 2025 06:00:18 +0000
Manifest this update: Tue 13 May 2025 06:00:18 +0000
Manifest next update: Wed 14 May 2025 06:00:18 +0000
Files and hashes: 1: 6N8-nLacyliscCotXpE1w7yrcgA.crl (hash: QbmIbI4tWR76UB9pqzUFD3AKkBKqCpBFQEoeFNlz2ZM=)
2: 9EUnRRjK1DPEOpCFHKLbj6DnnwE.roa (hash: 5pOnqwDunio8ibNAPUzfXIZHCC6lmUXt91wi8md1CvM=)
3: gU67SonlohhDi8lWe_MYl6yJJsI.roa (hash: FLpgUzbj974ZgJCetR7gymMI2OHT8rOTBcexSYhxtZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3a:cd:4e:22:d6:d9:09:da:37:a2:88:f5:3f:81:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Validity
Not Before: May 13 06:00:18 2025 GMT
Not After : May 14 06:00:18 2025 GMT
Subject: CN=8907ed8f53cd5f5d53663fe43dc3da53d3868e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:aa:3f:49:37:db:b2:1a:6c:22:3a:6f:9a:
ea:29:56:e5:99:e0:65:57:24:fb:08:f0:8f:3e:f2:
a2:f9:53:50:7a:bd:c1:cb:64:1a:64:b0:20:a8:0f:
04:ea:43:5f:e4:d6:0c:24:eb:6e:0d:21:96:7e:0d:
dd:1b:9a:74:d7:20:91:82:e6:b3:ab:1d:47:7b:2b:
58:c4:17:01:17:b2:72:2c:4c:1b:78:ec:8e:f2:a5:
b8:87:3d:4d:90:ca:25:0a:52:e6:da:f2:6d:c0:30:
04:d8:b7:3f:41:87:22:44:ae:57:1d:a9:11:39:e3:
3c:5e:be:67:4e:0e:69:9b:34:15:bf:14:4c:11:63:
3e:f9:45:19:5e:f7:a6:25:b7:02:98:45:7a:23:e1:
24:49:dc:1d:34:87:7c:61:57:96:ed:6c:da:b3:99:
ba:3d:dd:0f:0b:a3:b9:1a:d6:03:24:59:f7:81:0d:
c8:3c:91:7a:bc:32:76:96:18:14:7c:9b:e4:cc:89:
66:21:26:f0:91:60:ed:ec:58:54:96:1e:c4:01:94:
85:f7:56:1f:eb:da:f7:2e:16:c8:d8:2d:47:45:1a:
1e:cb:b5:2c:2e:c1:75:47:72:1f:d4:8c:a4:81:f8:
18:ad:71:f9:19:bc:02:2f:3f:98:c0:e8:cb:e8:cb:
d0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:07:ED:8F:53:CD:5F:5D:53:66:3F:E4:3D:C3:DA:53:D3:86:8E:79
X509v3 Authority Key Identifier:
keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f9:08:54:45:1b:d9:5e:29:ad:29:2a:c6:5c:37:08:f3:1b:
30:4c:cb:e6:c4:5c:f3:be:c9:4c:66:c1:3b:6c:54:1e:75:29:
de:25:a2:8d:7a:46:c0:86:83:dc:0b:15:af:45:95:b8:12:ac:
aa:9e:2b:c5:06:ff:58:7c:86:70:63:fa:fd:88:89:a0:62:1c:
5a:88:2f:fa:af:71:3d:0a:60:2c:01:99:f6:7b:ab:36:80:76:
41:25:3e:95:63:da:99:93:dc:2b:3d:48:e9:cc:f6:df:16:39:
5e:99:af:be:a5:15:ea:e8:b4:c9:3a:6b:01:03:78:54:53:29:
70:44:ae:d9:3e:d1:68:24:be:50:96:53:f3:f5:51:56:4f:9f:
fa:6f:2d:a4:ce:68:b6:c3:c6:7d:fb:d5:86:95:2f:58:ac:4f:
09:fd:41:e9:10:34:39:6c:91:ae:87:a4:5e:b7:76:99:00:3f:
ce:82:7c:ca:9d:01:04:67:a4:92:e4:e4:1d:4a:3d:ff:9a:9a:
5b:9a:40:33:db:17:60:c9:25:d5:9e:34:44:c5:93:32:d1:36:
9d:f7:2d:6c:59:19:61:64:2a:28:9c:98:4d:1d:73:5a:ba:42:
9a:a0:c1:34:68:94:a4:85:f1:15:22:5b:59:d0:b1:ff:77:47:
c5:69:36:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIOs1OItbZCdo3ooj1P4GqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZGYzZTljYjY5Y2NhNThhYzcwMmEyZDVlOTEzNWMzYmNh
YjcyMDAwHhcNMjUwNTEzMDYwMDE4WhcNMjUwNTE0MDYwMDE4WjAzMTEwLwYDVQQD
Eyg4OTA3ZWQ4ZjUzY2Q1ZjVkNTM2NjNmZTQzZGMzZGE1M2QzODY4ZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs86qP0k327IabCI6b5rqKVblmeBl
VyT7CPCPPvKi+VNQer3By2QaZLAgqA8E6kNf5NYMJOtuDSGWfg3dG5p01yCRguaz
qx1HeytYxBcBF7JyLEwbeOyO8qW4hz1NkMolClLm2vJtwDAE2Lc/QYciRK5XHakR
OeM8Xr5nTg5pmzQVvxRMEWM++UUZXvemJbcCmEV6I+EkSdwdNId8YVeW7Wzas5m6
Pd0PC6O5GtYDJFn3gQ3IPJF6vDJ2lhgUfJvkzIlmISbwkWDt7FhUlh7EAZSF91Yf
69r3LhbI2C1HRRoey7UsLsF1R3If1IykgfgYrXH5GbwCLz+YwOjL6MvQHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkH7Y9TzV9dU2Y/5D3D2lPTho55MB8GA1UdIwQY
MBaAFOjfPpy2nMpYrHAqLV6RNcO8q3IAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk44LW5MYWN5bGlzY0NvdFhwRTF3N3lyY2dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lNWRmZTItYTk2Ny00NzEyLWJlZTYt
MzIxODdlMjQ4ODlmLzEvNk44LW5MYWN5bGlzY0NvdFhwRTF3N3lyY2dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9lNWRmZTItYTk2Ny00NzEyLWJlZTYtMzIxODdlMjQ4ODlm
LzEvNk44LW5MYWN5bGlzY0NvdFhwRTF3N3lyY2dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/kIVEUb
2V4prSkqxlw3CPMbMEzL5sRc877JTGbBO2xUHnUp3iWijXpGwIaD3AsVr0WVuBKs
qp4rxQb/WHyGcGP6/YiJoGIcWogv+q9xPQpgLAGZ9nurNoB2QSU+lWPamZPcKz1I
6cz23xY5XpmvvqUV6ui0yTprAQN4VFMpcESu2T7RaCS+UJZT8/VRVk+f+m8tpM5o
tsPGffvVhpUvWKxPCf1B6RA0OWyRroekXrd2mQA/zoJ8yp0BBGekkuTkHUo9/5qa
W5pAM9sXYMkl1Z40RMWTMtE2nfctbFkZYWQqKJyYTR1zWrpCmqDBNGiUpIXxFSJb
WdCx/3dHxWk2CQ==
-----END CERTIFICATE-----
Generated at Tue May 13 09:09:48 2025 by rpki-client