Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
File: 6hIZKS2GypY5e4qL0k4IsaiXwaM.mft (raw, json)
Hash identifier: 7FCS4Ru6i5sFCfmVP5G5VJAbFwSWM7K4fcgmlGas8o0=
Subject key identifier: C2:9C:2A:C7:56:0F:BC:21:F0:17:A6:49:EA:12:92:C3:9A:30:7D:24
Authority key identifier: EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3
Certificate issuer: /CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3
Certificate serial: 0196A61D1D715FDBFC7B1D7B13FE035E44F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
Manifest number: 1530
Signing time: Tue 06 May 2025 15:00:48 +0000
Manifest this update: Tue 06 May 2025 15:00:48 +0000
Manifest next update: Wed 07 May 2025 15:00:48 +0000
Files and hashes: 1: 6hIZKS2GypY5e4qL0k4IsaiXwaM.crl (hash: 4Gvh5VYw1KhmAczUaTtb3mgAtYTeFHsKC/HllQyZ848=)
2: quAuk4oARA-zncvhJ5NL9KJVCeU.roa (hash: ItFM8RojPzfJum0retpVKJonKxKfGyoIIi91j+DB94o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:1d:1d:71:5f:db:fc:7b:1d:7b:13:fe:03:5e:44:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3
Validity
Not Before: May 6 15:00:48 2025 GMT
Not After : May 7 15:00:48 2025 GMT
Subject: CN=c29c2ac7560fbc21f017a649ea1292c39a307d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:ac:e3:6e:a7:fb:f3:18:30:b0:78:f8:3b:
c3:35:8e:84:6f:12:eb:06:7f:26:4a:aa:12:86:4d:
9a:29:e0:f1:fd:ab:2e:06:74:c8:de:31:61:dc:f5:
10:31:80:d6:e7:5d:fb:b9:ac:c8:d3:24:4a:09:3d:
83:d2:2c:4b:92:f4:dd:27:a9:7a:48:4c:9a:3b:5c:
ca:0c:fc:f9:45:fa:78:ba:72:70:e5:35:f2:c0:0b:
d0:67:89:19:9c:51:bb:ae:c4:60:36:04:8f:68:84:
d0:41:2b:93:62:2a:1b:c0:52:c0:bb:16:59:be:05:
11:cb:91:79:16:01:4f:60:73:7f:b5:6e:2f:43:bc:
a7:4a:19:aa:01:de:20:1a:28:b2:c1:22:9a:b1:e5:
ce:dd:56:da:d6:c9:e0:58:89:7e:07:d1:61:79:5c:
c5:f1:56:69:45:0f:a6:5f:52:f2:01:44:89:04:dc:
cb:49:74:12:d9:d8:e9:af:e5:e1:08:da:a2:7c:b7:
74:7f:3e:7f:94:d8:c8:06:e8:39:21:6b:79:61:80:
5e:55:c7:66:6d:04:c0:6a:e7:4f:da:31:08:e3:a2:
4d:65:ae:a4:3d:93:12:4f:16:d9:08:e4:8e:65:5d:
43:05:df:e7:91:b4:2a:e3:c8:34:6c:8c:4c:01:3d:
e8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9C:2A:C7:56:0F:BC:21:F0:17:A6:49:EA:12:92:C3:9A:30:7D:24
X509v3 Authority Key Identifier:
keyid:EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5c:fd:11:72:c2:51:e5:05:9c:0f:cc:68:23:a9:93:96:fc:
bf:c4:1a:86:53:3c:2f:90:62:08:36:7f:19:90:d6:70:26:ac:
a1:e3:58:e4:7f:1f:ef:ea:39:65:74:55:03:ed:b1:32:45:13:
f1:6f:db:c0:4c:17:27:96:4c:3f:80:b6:ae:aa:73:b7:4f:01:
13:de:90:c1:b3:1d:b1:cc:e0:1a:77:87:79:4c:d1:2d:e1:9f:
6f:5f:45:6b:1b:18:26:8e:b3:c2:b0:e5:95:13:e3:7e:f0:0e:
27:0a:03:c4:d1:01:f6:60:27:eb:09:f8:ce:2c:ba:c9:30:c6:
99:c1:0e:27:67:9c:41:98:fd:b8:2a:0c:39:eb:92:f4:b2:3d:
ac:74:42:de:75:c6:5f:cc:7f:05:10:7b:2c:69:57:81:3b:a4:
96:5a:ea:8d:4c:a3:e8:e3:7f:db:90:74:91:f9:60:d7:7d:e3:
73:6d:11:87:bc:35:98:70:8b:ce:99:af:11:d4:d2:09:ca:c9:
91:0e:61:a6:ed:bf:a4:44:78:9f:ed:3e:55:86:a9:47:f2:2f:
d8:e2:87:4f:cd:c7:e8:f5:7c:b2:4f:4e:e5:f1:8c:6f:bb:0c:
d1:0e:2c:04:c9:57:b2:61:aa:0f:d1:e4:b0:1b:bb:9c:2c:6c:
df:9e:a4:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZamHR1xX9v8ex17E/4DXkTwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMTIxOTI5MmQ4NmNhOTYzOTdiOGE4YmQyNGUwOGIxYTg5
N2MxYTMwHhcNMjUwNTA2MTUwMDQ4WhcNMjUwNTA3MTUwMDQ4WjAzMTEwLwYDVQQD
EyhjMjljMmFjNzU2MGZiYzIxZjAxN2E2NDllYTEyOTJjMzlhMzA3ZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYOs426n+/MYMLB4+DvDNY6EbxLr
Bn8mSqoShk2aKeDx/asuBnTI3jFh3PUQMYDW5137uazI0yRKCT2D0ixLkvTdJ6l6
SEyaO1zKDPz5Rfp4unJw5TXywAvQZ4kZnFG7rsRgNgSPaITQQSuTYiobwFLAuxZZ
vgURy5F5FgFPYHN/tW4vQ7ynShmqAd4gGiiywSKaseXO3Vba1sngWIl+B9FheVzF
8VZpRQ+mX1LyAUSJBNzLSXQS2djpr+XhCNqifLd0fz5/lNjIBug5IWt5YYBeVcdm
bQTAaudP2jEI46JNZa6kPZMSTxbZCOSOZV1DBd/nkbQq48g0bIxMAT3oAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKcKsdWD7wh8BemSeoSksOaMH0kMB8GA1UdIwQY
MBaAFOoSGSkthsqWOXuKi9JOCLGol8GjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmhJWktTMkd5cFk1ZTRxTDBrNElzYWlYd2FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9jYmIyZTQtODhjMy00Y2MwLTk2NzUt
Yzk4YTFiZGU2NDc2LzEvNmhJWktTMkd5cFk1ZTRxTDBrNElzYWlYd2FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9jYmIyZTQtODhjMy00Y2MwLTk2NzUtYzk4YTFiZGU2NDc2
LzEvNmhJWktTMkd5cFk1ZTRxTDBrNElzYWlYd2FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1z9EXLC
UeUFnA/MaCOpk5b8v8QahlM8L5BiCDZ/GZDWcCasoeNY5H8f7+o5ZXRVA+2xMkUT
8W/bwEwXJ5ZMP4C2rqpzt08BE96QwbMdsczgGneHeUzRLeGfb19FaxsYJo6zwrDl
lRPjfvAOJwoDxNEB9mAn6wn4ziy6yTDGmcEOJ2ecQZj9uCoMOeuS9LI9rHRC3nXG
X8x/BRB7LGlXgTukllrqjUyj6ON/25B0kflg133jc20Rh7w1mHCLzpmvEdTSCcrJ
kQ5hpu2/pER4n+0+VYapR/Iv2OKHT83H6PV8sk9O5fGMb7sM0Q4sBMlXsmGqD9Hk
sBu7nCxs356kuA==
-----END CERTIFICATE-----
Generated at Tue May 6 23:17:30 2025 by rpki-client