Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
File: C6VqvctPbwyGuDLswT9eJJch1vg.mft (raw, json)
Hash identifier: d8i9raYLEjIFZav9CyB5KcKkF4h9zrrjbVZAceOCMRk=
Subject key identifier: 28:EB:BD:3A:77:2B:19:40:DD:4D:67:6D:D2:95:4B:BC:FE:C9:A0:A1
Authority key identifier: 0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8
Certificate issuer: /CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
Certificate serial: 0196C2A6C853B72D94D794D2E5CA1308F0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
Manifest number: 0BDF
Signing time: Mon 12 May 2025 04:00:32 +0000
Manifest this update: Mon 12 May 2025 04:00:32 +0000
Manifest next update: Tue 13 May 2025 04:00:32 +0000
Files and hashes: 1: 10gRzD3VrAGl4bbzZAnzRnZ-9NY.roa (hash: lcACm1XYWQGs+OoRyS5RawPhw9wP7Mmy1MtCSpjZTr8=)
2: C6VqvctPbwyGuDLswT9eJJch1vg.crl (hash: EMNHGc3QndAjOBFgJK+yOm5nrdrNTJ2LuP6UIBuAsOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:c8:53:b7:2d:94:d7:94:d2:e5:ca:13:08:f0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
Validity
Not Before: May 12 04:00:32 2025 GMT
Not After : May 13 04:00:32 2025 GMT
Subject: CN=28ebbd3a772b1940dd4d676dd2954bbcfec9a0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d4:14:a4:a5:e8:a3:c2:db:bf:5e:7e:77:c3:
f9:b8:6a:62:0d:1c:0e:10:33:d4:54:b4:fc:d3:5f:
95:47:98:87:f1:5e:7e:69:c9:52:39:a0:21:87:93:
6a:98:3d:2e:f4:fc:54:9d:bf:f9:51:61:ae:b3:a2:
7e:d5:ff:12:d3:50:d1:16:6a:c4:c7:3a:a1:7a:5f:
ef:55:7e:9f:cf:d2:ab:5d:4e:a1:b1:05:e5:fb:05:
04:31:d7:d4:da:28:3f:cf:46:cc:ab:52:64:dd:da:
19:8c:a5:03:a3:84:81:ff:64:5a:60:38:74:7c:f8:
ee:53:48:fa:9e:ae:bb:64:a0:22:25:e2:21:e1:40:
6b:2a:c5:13:1d:a8:8f:68:19:ed:cd:83:b6:dc:59:
ad:5e:d0:02:4f:3d:52:21:c2:56:6c:aa:06:0f:a9:
79:07:3d:f8:81:b4:8e:78:bb:e6:4f:93:d9:07:4e:
a3:9d:6d:f7:f1:5b:9b:ba:6e:cb:86:d0:ae:0d:d7:
52:fd:ed:0d:c2:a2:77:6a:96:31:bf:87:a9:b7:e4:
37:66:ee:a9:3a:4d:7c:3a:ec:46:3d:1b:42:bb:db:
e0:83:be:f7:cf:53:73:b2:b5:52:03:19:7d:0f:8c:
5d:93:09:82:af:24:e9:cd:a6:6e:26:89:10:18:25:
e6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EB:BD:3A:77:2B:19:40:DD:4D:67:6D:D2:95:4B:BC:FE:C9:A0:A1
X509v3 Authority Key Identifier:
keyid:0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c6:6d:42:93:f5:7b:9d:f5:ea:63:22:eb:7e:66:23:b9:09:
2b:91:cd:6d:19:09:d9:34:0b:79:e9:2d:b8:20:0b:c0:89:74:
5d:6d:fa:b5:64:c8:f7:95:21:0e:32:76:10:f2:22:b8:57:95:
ab:39:02:56:61:48:99:b7:31:1c:36:7c:6c:8d:04:62:a1:7d:
a4:6f:4c:0e:05:0c:58:95:ee:2d:2b:85:65:00:ae:69:03:ed:
44:28:95:e6:9e:ef:b7:75:1b:f1:22:1a:68:0f:65:73:d1:a8:
c6:d8:7d:49:df:ae:e2:6f:75:ba:33:58:1b:84:33:43:12:81:
10:14:cb:31:56:5f:b3:bb:e7:ab:55:a8:26:38:ef:5f:df:6b:
e5:77:39:03:1f:21:e1:52:1c:9e:10:68:3d:72:05:f5:86:2a:
95:0e:3f:b4:d9:2a:8a:a0:1e:8e:f8:3d:c0:8e:ef:45:51:37:
fb:2a:e4:9f:a0:18:ce:17:6e:bc:7f:66:dc:ff:c3:96:a0:7a:
ad:bd:0f:33:e3:e9:3d:88:b0:00:67:b2:9a:f8:5a:75:cb:70:
f5:84:07:af:23:c9:3d:db:2c:17:40:ac:1d:20:98:dd:c5:da:
b6:1e:d3:ff:3f:b9:3b:cd:56:3f:95:ab:39:20:16:47:82:f4:
8e:73:da:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCpshTty2U15TS5coTCPDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYTU2YWJkY2I0ZjZmMGM4NmI4MzJlY2MxM2Y1ZTI0OTcy
MWQ2ZjgwHhcNMjUwNTEyMDQwMDMyWhcNMjUwNTEzMDQwMDMyWjAzMTEwLwYDVQQD
EygyOGViYmQzYTc3MmIxOTQwZGQ0ZDY3NmRkMjk1NGJiY2ZlYzlhMGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNQUpKXoo8Lbv15+d8P5uGpiDRwO
EDPUVLT801+VR5iH8V5+aclSOaAhh5NqmD0u9PxUnb/5UWGus6J+1f8S01DRFmrE
xzqhel/vVX6fz9KrXU6hsQXl+wUEMdfU2ig/z0bMq1Jk3doZjKUDo4SB/2RaYDh0
fPjuU0j6nq67ZKAiJeIh4UBrKsUTHaiPaBntzYO23FmtXtACTz1SIcJWbKoGD6l5
Bz34gbSOeLvmT5PZB06jnW338Vubum7LhtCuDddS/e0NwqJ3apYxv4ept+Q3Zu6p
Ok18OuxGPRtCu9vgg773z1NzsrVSAxl9D4xdkwmCryTpzaZuJokQGCXmRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjrvTp3KxlA3U1nbdKVS7z+yaChMB8GA1UdIwQY
MBaAFAular3LT28Mhrgy7ME/XiSXIdb4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzZWcXZjdFBid3lHdURMc3dUOWVKSmNoMXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83OGE4NjEtYjkxOC00ZWE3LTg4YTgt
NjAzY2IwODM3MTRiLzEvQzZWcXZjdFBid3lHdURMc3dUOWVKSmNoMXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83OGE4NjEtYjkxOC00ZWE3LTg4YTgtNjAzY2IwODM3MTRi
LzEvQzZWcXZjdFBid3lHdURMc3dUOWVKSmNoMXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcZtQpP1
e5316mMi635mI7kJK5HNbRkJ2TQLeektuCALwIl0XW36tWTI95UhDjJ2EPIiuFeV
qzkCVmFImbcxHDZ8bI0EYqF9pG9MDgUMWJXuLSuFZQCuaQPtRCiV5p7vt3Ub8SIa
aA9lc9Goxth9Sd+u4m91ujNYG4QzQxKBEBTLMVZfs7vnq1WoJjjvX99r5Xc5Ax8h
4VIcnhBoPXIF9YYqlQ4/tNkqiqAejvg9wI7vRVE3+yrkn6AYzhduvH9m3P/DlqB6
rb0PM+PpPYiwAGeymvhadctw9YQHryPJPdssF0CsHSCY3cXath7T/z+5O81WP5Wr
OSAWR4L0jnPa0Q==
-----END CERTIFICATE-----
Generated at Mon May 12 07:15:10 2025 by rpki-client