Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft
File: 6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft (raw, json)
Hash identifier: F35i0sPCCRy99VTTmWn/uQmYm2iVYqrrAvw9OVTN+kQ=
Subject key identifier: 73:8B:0F:6A:6B:58:10:77:B9:65:B8:FE:CC:48:A1:9D:0A:E4:B8:D0
Authority key identifier: EA:35:52:FC:45:A3:66:40:9B:9F:C7:BD:96:13:A5:9F:1F:E0:6E:4D
Certificate issuer: /CN=ea3552fc45a366409b9fc7bd9613a59f1fe06e4d
Certificate serial: 0196D4089A4A3028A4BD6908E59F9D822C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft
Manifest number: 094C
Signing time: Thu 15 May 2025 13:00:55 +0000
Manifest this update: Thu 15 May 2025 13:00:55 +0000
Manifest next update: Fri 16 May 2025 13:00:55 +0000
Files and hashes: 1: 6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl (hash: uF3OVLPc0FDP3nyQceGUAHjfqZKrivXl+os5iI4NJRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:08:9a:4a:30:28:a4:bd:69:08:e5:9f:9d:82:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3552fc45a366409b9fc7bd9613a59f1fe06e4d
Validity
Not Before: May 15 13:00:55 2025 GMT
Not After : May 16 13:00:55 2025 GMT
Subject: CN=738b0f6a6b581077b965b8fecc48a19d0ae4b8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9e:9d:08:de:5e:55:3f:74:1b:c4:6a:e5:c7:
76:cc:15:a0:90:f4:18:3e:3b:19:e5:70:8a:b8:fb:
39:8c:d0:45:eb:68:db:75:ef:60:ed:e5:b5:28:65:
c1:21:24:33:df:57:cc:ca:6f:a3:79:f6:dd:3c:70:
58:83:cf:ea:04:88:8e:88:08:1b:7d:0f:1d:a2:0c:
80:b0:6d:76:4c:c3:0d:dd:42:21:a1:c6:aa:91:69:
55:4f:6f:86:cb:d8:4b:26:a9:69:e5:a4:74:9f:24:
30:f7:c8:29:5b:34:5f:c9:cb:02:1f:6b:30:5d:03:
fd:f9:21:70:84:6e:21:93:36:67:0d:4d:33:93:55:
38:0c:ba:82:56:3b:21:f7:c9:77:18:67:8b:06:31:
70:f4:5c:c6:ec:f2:ac:45:39:1c:e3:5e:33:63:6e:
4a:b2:b7:0d:b0:aa:5b:fa:71:47:59:23:b0:c3:73:
e0:db:f9:7c:46:0f:9d:c8:45:6c:75:e6:62:da:df:
0f:b8:b4:93:9f:d2:36:85:09:10:df:8c:f6:44:bc:
b1:7a:39:2d:76:ee:de:e4:c3:dc:2b:99:0c:e2:58:
01:06:95:ff:c3:04:f3:a5:bf:54:1d:f9:94:53:5c:
9c:70:99:f4:c8:ac:40:7d:63:dc:99:10:a6:e3:95:
f1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8B:0F:6A:6B:58:10:77:B9:65:B8:FE:CC:48:A1:9D:0A:E4:B8:D0
X509v3 Authority Key Identifier:
keyid:EA:35:52:FC:45:A3:66:40:9B:9F:C7:BD:96:13:A5:9F:1F:E0:6E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:17:da:46:ae:9f:1e:e0:9c:c3:99:15:71:0d:d9:0f:97:cd:
b8:fa:21:85:02:c3:14:ed:cd:d7:10:fb:de:ec:85:97:26:e3:
88:ed:1d:08:8b:5c:98:52:4e:46:f2:2c:87:c5:ad:a3:5f:a3:
39:30:9f:2f:88:3e:cc:ec:2f:bb:be:31:8c:0c:72:46:3d:53:
7e:5e:38:7d:91:0d:d8:41:9f:82:b6:b8:69:f5:b6:5c:7b:7f:
c3:50:69:7b:f8:7d:6d:a1:18:92:eb:c5:36:1a:96:bc:3a:0e:
7c:41:d5:d2:d7:b9:9c:dc:93:3f:db:00:0e:aa:4c:38:d9:61:
9b:22:b2:7b:90:46:35:2b:f9:d7:13:e7:cf:1e:0d:ab:c5:a5:
fb:75:41:45:45:62:98:36:2c:e3:12:af:db:97:38:a1:70:08:
9d:b6:eb:c5:55:d6:62:34:d8:63:f7:2e:08:de:a7:5a:90:66:
e0:6f:34:d6:34:09:ba:8f:ee:63:33:1b:84:e8:c4:97:12:7a:
83:39:a4:1f:9b:11:b6:aa:2d:93:af:c3:f6:bf:7c:e7:f1:80:
15:a4:74:94:e2:1e:79:0a:05:b4:8a:4b:1f:ed:b1:bb:83:2a:
6d:2d:db:6c:9f:dd:54:bd:77:fc:c9:0b:cb:57:01:b9:4a:5e:
be:3d:46:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbUCJpKMCikvWkI5Z+dgiyAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMzU1MmZjNDVhMzY2NDA5YjlmYzdiZDk2MTNhNTlmMWZl
MDZlNGQwHhcNMjUwNTE1MTMwMDU1WhcNMjUwNTE2MTMwMDU1WjAzMTEwLwYDVQQD
Eyg3MzhiMGY2YTZiNTgxMDc3Yjk2NWI4ZmVjYzQ4YTE5ZDBhZTRiOGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3p6dCN5eVT90G8Rq5cd2zBWgkPQY
PjsZ5XCKuPs5jNBF62jbde9g7eW1KGXBISQz31fMym+jefbdPHBYg8/qBIiOiAgb
fQ8dogyAsG12TMMN3UIhocaqkWlVT2+Gy9hLJqlp5aR0nyQw98gpWzRfycsCH2sw
XQP9+SFwhG4hkzZnDU0zk1U4DLqCVjsh98l3GGeLBjFw9FzG7PKsRTkc414zY25K
srcNsKpb+nFHWSOww3Pg2/l8Rg+dyEVsdeZi2t8PuLSTn9I2hQkQ34z2RLyxejkt
du7e5MPcK5kM4lgBBpX/wwTzpb9UHfmUU1yccJn0yKxAfWPcmRCm45Xx5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOLD2prWBB3uWW4/sxIoZ0K5LjQMB8GA1UdIwQY
MBaAFOo1UvxFo2ZAm5/HvZYTpZ8f4G5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmpWU19FV2paa0NibjhlOWxoT2xueF9nYmswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82MjhkYTYtODMyNS00YzI1LTk4Mzct
ZDQxYzNlM2MzNTU1LzEvNmpWU19FV2paa0NibjhlOWxoT2xueF9nYmswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82MjhkYTYtODMyNS00YzI1LTk4MzctZDQxYzNlM2MzNTU1
LzEvNmpWU19FV2paa0NibjhlOWxoT2xueF9nYmswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBfaRq6f
HuCcw5kVcQ3ZD5fNuPohhQLDFO3N1xD73uyFlybjiO0dCItcmFJORvIsh8Wto1+j
OTCfL4g+zOwvu74xjAxyRj1Tfl44fZEN2EGfgra4afW2XHt/w1Bpe/h9baEYkuvF
NhqWvDoOfEHV0te5nNyTP9sADqpMONlhmyKye5BGNSv51xPnzx4Nq8Wl+3VBRUVi
mDYs4xKv25c4oXAInbbrxVXWYjTYY/cuCN6nWpBm4G801jQJuo/uYzMbhOjElxJ6
gzmkH5sRtqotk6/D9r985/GAFaR0lOIeeQoFtIpLH+2xu4MqbS3bbJ/dVL13/MkL
y1cBuUpevj1GEQ==
-----END CERTIFICATE-----
Generated at Thu May 15 23:26:53 2025 by rpki-client