Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
File: b61qcd7-VgoOXCH_u0A4-0EJEpU.mft (raw, json)
Hash identifier: TIzq7pnn7QJomo13YXYx191eSlAFQw49EU0wX6Wu9FQ=
Subject key identifier: E3:54:F7:9D:E1:79:4A:E6:29:22:2A:DF:AD:90:2C:2E:AE:B1:6B:13
Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Certificate issuer: /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Certificate serial: 0196E6B30ADB51ED787FA9C6156233CD0419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
Manifest number: 1549
Signing time: Mon 19 May 2025 04:00:15 +0000
Manifest this update: Mon 19 May 2025 04:00:15 +0000
Manifest next update: Tue 20 May 2025 04:00:15 +0000
Files and hashes: 1: b61qcd7-VgoOXCH_u0A4-0EJEpU.crl (hash: 3XfRrwnkKxWcAIVtp8aZ0or+LyKmPwfHeHSR/JEyoi4=)
2: o-uxsmeV-GDLlYueP7RtZNtRLkY.roa (hash: xd5QoXbqzMFg+YyYmPM0+ODCfAWCU2/7fETeFx+AjCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e6:b3:0a:db:51:ed:78:7f:a9:c6:15:62:33:cd:04:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Validity
Not Before: May 19 04:00:15 2025 GMT
Not After : May 20 04:00:15 2025 GMT
Subject: CN=e354f79de1794ae629222adfad902c2eaeb16b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6a:fc:53:20:f2:e5:76:e0:1b:dd:01:cd:dd:
e6:34:60:80:49:38:6a:49:8f:08:b3:f3:f6:78:f5:
ff:e9:33:5b:ff:32:eb:0e:12:b2:14:fe:3f:0e:8e:
3b:a6:3a:aa:7f:bc:13:be:40:f4:22:b1:d9:18:84:
24:27:5e:91:a7:37:eb:51:97:dd:56:a0:10:39:19:
d6:e7:69:16:b2:ee:88:62:f9:f6:de:a5:78:41:67:
fd:cf:da:20:81:1a:c0:27:2b:e9:66:54:1b:0e:8a:
3a:e4:3c:0c:fe:5d:3c:76:dc:41:3b:10:94:3d:b8:
75:52:da:55:c9:4b:40:e5:e6:82:9b:e3:e3:9e:7b:
59:fc:fc:6a:db:fd:d2:60:cd:55:1b:1b:09:17:8e:
e9:7e:9a:20:6c:99:25:c9:53:65:99:1e:98:4c:1b:
c6:26:b6:56:f7:62:34:85:1c:36:94:3d:fc:44:fc:
82:c5:c8:ac:b0:32:a2:43:31:d9:1c:c0:c1:ee:c2:
01:3c:76:1f:60:6a:46:7d:8e:09:63:c6:62:57:a5:
ee:28:d3:75:7f:fe:1c:09:a9:68:94:f3:ab:67:6f:
81:e6:ed:d6:e5:06:52:0f:2b:7f:c4:2e:87:31:be:
23:62:c9:fc:b0:1f:22:89:31:55:77:25:c2:72:1b:
22:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:54:F7:9D:E1:79:4A:E6:29:22:2A:DF:AD:90:2C:2E:AE:B1:6B:13
X509v3 Authority Key Identifier:
keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:eb:94:0e:96:8b:21:e3:65:6a:ac:c6:19:67:bd:09:a2:80:
04:b1:82:ac:6a:ab:b0:a7:78:8a:95:c4:c4:4b:1e:99:32:6d:
7e:9b:1a:c4:a3:9b:f6:66:92:f1:99:95:43:8a:6f:a2:0d:f5:
65:d5:65:c8:f2:c0:43:b5:ac:7b:e1:bf:bd:b3:a8:41:6a:6e:
ef:e2:68:60:20:71:79:cf:6d:d3:df:7d:77:04:cd:d7:21:b5:
5e:e2:4b:be:43:ac:1e:9b:ce:3b:96:8f:64:e4:04:fc:f9:fd:
8c:62:af:2f:53:4d:e5:61:fa:cc:1f:a4:ad:67:23:04:f3:d2:
39:8e:a7:f5:30:84:51:89:28:76:e2:47:b4:ce:0f:2c:6c:92:
ad:fc:8f:f9:93:7c:42:20:bd:4e:36:92:4d:3a:9d:39:ce:c6:
f4:b2:85:2d:d6:e3:a3:9e:ff:a7:73:00:81:f3:7b:f4:12:ac:
c4:56:78:3a:b3:b8:f1:ab:b9:73:46:a4:84:6a:ca:2a:0b:10:
a4:74:5f:d3:26:49:f3:32:bd:a5:69:aa:2c:c4:a7:76:ae:7f:
62:e5:b7:8c:09:6c:8b:49:5c:a3:9a:e9:20:77:9c:95:72:fe:
01:9f:38:d7:b6:73:58:6b:d1:3c:c7:a9:f4:a0:ff:d3:e1:4e:
da:0a:90:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbmswrbUe14f6nGFWIzzQQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYWQ2YTcxZGVmZTU2MGEwZTVjMjFmZmJiNDAzOGZiNDEw
OTEyOTUwHhcNMjUwNTE5MDQwMDE1WhcNMjUwNTIwMDQwMDE1WjAzMTEwLwYDVQQD
EyhlMzU0Zjc5ZGUxNzk0YWU2MjkyMjJhZGZhZDkwMmMyZWFlYjE2YjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2r8UyDy5XbgG90Bzd3mNGCASThq
SY8Is/P2ePX/6TNb/zLrDhKyFP4/Do47pjqqf7wTvkD0IrHZGIQkJ16RpzfrUZfd
VqAQORnW52kWsu6IYvn23qV4QWf9z9oggRrAJyvpZlQbDoo65DwM/l08dtxBOxCU
Pbh1UtpVyUtA5eaCm+PjnntZ/Pxq2/3SYM1VGxsJF47pfpogbJklyVNlmR6YTBvG
JrZW92I0hRw2lD38RPyCxcissDKiQzHZHMDB7sIBPHYfYGpGfY4JY8ZiV6XuKNN1
f/4cCalolPOrZ2+B5u3W5QZSDyt/xC6HMb4jYsn8sB8iiTFVdyXCchsiQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONU953heUrmKSIq362QLC6usWsTMB8GA1UdIwQY
MBaAFG+tanHe/lYKDlwh/7tAOPtBCRKVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjYxcWNkNy1WZ29PWENIX3UwQTQtMEVKRXBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yOTM2OTgtOTQ5ZC00NjY1LWJhMDct
OGNiNGUyNTNmMTc1LzEvYjYxcWNkNy1WZ29PWENIX3UwQTQtMEVKRXBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yOTM2OTgtOTQ5ZC00NjY1LWJhMDctOGNiNGUyNTNmMTc1
LzEvYjYxcWNkNy1WZ29PWENIX3UwQTQtMEVKRXBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOuUDpaL
IeNlaqzGGWe9CaKABLGCrGqrsKd4ipXExEsemTJtfpsaxKOb9maS8ZmVQ4pvog31
ZdVlyPLAQ7Wse+G/vbOoQWpu7+JoYCBxec9t0999dwTN1yG1XuJLvkOsHpvOO5aP
ZOQE/Pn9jGKvL1NN5WH6zB+krWcjBPPSOY6n9TCEUYkoduJHtM4PLGySrfyP+ZN8
QiC9TjaSTTqdOc7G9LKFLdbjo57/p3MAgfN79BKsxFZ4OrO48au5c0akhGrKKgsQ
pHRf0yZJ8zK9pWmqLMSndq5/YuW3jAlsi0lco5rpIHeclXL+AZ8417ZzWGvRPMep
9KD/0+FO2gqQjw==
-----END CERTIFICATE-----
Generated at Mon May 19 07:06:10 2025 by rpki-client