Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
File: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft (raw, json)
Hash identifier: 9SIuNMdVfhGwCF1pdGZr8OEDCKKUZ/+kxXAz5Id4Aug=
Subject key identifier: 4C:58:F2:80:20:A8:AD:47:EF:85:C5:A9:2D:74:5E:F5:AC:03:16:4D
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Certificate issuer: /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial: 0196C5A84CF46EFA7E7AB8A4B8F891CD90D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
Manifest number: 0E3B
Signing time: Mon 12 May 2025 18:01:03 +0000
Manifest this update: Mon 12 May 2025 18:01:03 +0000
Manifest next update: Tue 13 May 2025 18:01:03 +0000
Files and hashes: 1: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl (hash: wg+FaG6sZiqfXz5FX+KxLNQ1vg3sC/07Mmb64jQbG8w=)
2: HOKH-4cqRMA_yXERkwbNDzuMfg0.roa (hash: BxrSjj1tg8yper8hXCVO7HyCIeXNMBvlZBpIdnV+E/w=)
3: q-7o-VTmQktM6CANooQxHGpfUPs.roa (hash: nkRO+yCLAt1MadmnWmx2ah2ZlpvxH2J3hDHN33uCuqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:4c:f4:6e:fa:7e:7a:b8:a4:b8:f8:91:cd:90:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
Validity
Not Before: May 12 18:01:03 2025 GMT
Not After : May 13 18:01:03 2025 GMT
Subject: CN=4c58f28020a8ad47ef85c5a92d745ef5ac03164d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:1d:00:5e:ee:6e:0d:a6:cd:b8:3c:6a:46:
59:df:88:ef:90:ff:43:c6:4b:ec:3c:0b:89:76:b4:
1a:1a:95:fc:1d:eb:51:e6:0d:04:e6:c5:1b:f9:fc:
ba:48:50:48:c6:f4:76:62:f5:62:85:a9:08:0f:62:
9d:a3:5d:9b:69:61:40:10:56:a7:ac:13:33:d3:7c:
d1:6c:60:de:df:e8:98:1c:81:0f:49:27:08:66:d9:
e0:96:17:03:d4:b1:14:46:51:77:02:8a:14:a9:b8:
af:20:62:28:b6:e3:8b:6c:4c:89:be:6d:3c:a4:f5:
96:95:ee:5d:b6:7f:3f:a6:4c:7d:29:24:ba:d7:be:
2d:d2:f7:06:2a:a0:e5:86:f7:73:dc:e1:4c:65:b2:
45:e9:eb:38:0a:ad:04:79:54:d4:fd:5c:95:eb:ea:
e9:6d:6d:4e:e6:92:23:a6:df:19:30:22:2a:c6:03:
1c:a4:6f:30:e3:f9:c9:09:73:97:28:d9:53:14:ca:
b0:cd:07:7e:2c:95:91:39:1b:6f:77:9d:66:2e:93:
98:de:2e:4e:9f:2b:ab:79:41:13:48:8a:bf:ae:a1:
f2:84:01:74:91:5c:75:7a:f0:23:a4:fe:40:f1:99:
47:6b:44:d3:d0:87:a5:18:0d:e5:b5:25:d0:c2:56:
93:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:58:F2:80:20:A8:AD:47:EF:85:C5:A9:2D:74:5E:F5:AC:03:16:4D
X509v3 Authority Key Identifier:
keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:92:32:16:55:92:49:60:e3:ba:d3:97:00:0a:6a:30:7a:21:
3a:d1:23:ef:cc:96:1e:41:43:61:c9:09:29:35:84:ce:5d:9c:
66:47:e5:2e:4f:89:d5:9f:30:d1:9c:f9:20:fd:f6:1c:f9:28:
1d:ed:a9:02:89:d1:2d:bd:fc:09:39:bf:da:38:92:05:f5:37:
0f:c1:53:c5:26:1c:0c:44:c3:14:f7:a3:f6:59:45:33:e7:47:
2e:50:e2:eb:04:28:f7:64:af:d9:77:50:c2:39:9f:f3:e8:dc:
1a:53:57:40:2e:8a:9c:46:70:ba:3e:a7:b8:5b:c6:26:75:22:
33:cd:32:ee:c4:14:84:f6:77:db:05:88:1a:cd:bf:13:7e:ed:
8b:e6:f5:57:57:1e:85:1f:85:a4:44:b9:62:f5:71:f8:40:7c:
0b:b5:32:8e:00:a2:b5:c0:26:28:fa:b7:b6:af:bb:f2:7f:30:
c1:3c:ca:22:45:25:e5:65:f1:a1:9b:62:84:45:87:fa:3e:1e:
d3:58:6b:9e:3e:2b:e6:86:a0:37:bc:04:ab:c6:7d:e1:a3:ca:
d9:d2:16:a0:15:9d:85:e5:d0:0f:51:a5:3a:57:6a:62:fb:8e:
34:83:5e:87:51:63:b3:fc:a6:a8:7a:fe:65:5a:d4:87:94:36:
c0:55:31:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFqEz0bvp+erikuPiRzZDVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYjlhMTU3ZTEyYTJlZjcxN2QxMzIzMWFmMDZmZDg1NDU0
YjMxNTEwHhcNMjUwNTEyMTgwMTAzWhcNMjUwNTEzMTgwMTAzWjAzMTEwLwYDVQQD
Eyg0YzU4ZjI4MDIwYThhZDQ3ZWY4NWM1YTkyZDc0NWVmNWFjMDMxNjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfwdAF7ubg2mzbg8akZZ34jvkP9D
xkvsPAuJdrQaGpX8HetR5g0E5sUb+fy6SFBIxvR2YvVihakID2Kdo12baWFAEFan
rBMz03zRbGDe3+iYHIEPSScIZtnglhcD1LEURlF3AooUqbivIGIotuOLbEyJvm08
pPWWle5dtn8/pkx9KSS6174t0vcGKqDlhvdz3OFMZbJF6es4Cq0EeVTU/VyV6+rp
bW1O5pIjpt8ZMCIqxgMcpG8w4/nJCXOXKNlTFMqwzQd+LJWRORtvd51mLpOY3i5O
nyureUETSIq/rqHyhAF0kVx1evAjpP5A8ZlHa0TT0IelGA3ltSXQwlaT0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExY8oAgqK1H74XFqS10XvWsAxZNMB8GA1UdIwQY
MBaAFOq5oVfhKi73F9EyMa8G/YVFSzFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnJtaFYtRXFMdmNYMFRJeHJ3YjloVVZMTVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80ZGI3NzAtZDdmNS00YmNiLWJhNDQt
ODU3NzEyNzIwYTM1LzEvNnJtaFYtRXFMdmNYMFRJeHJ3YjloVVZMTVZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80ZGI3NzAtZDdmNS00YmNiLWJhNDQtODU3NzEyNzIwYTM1
LzEvNnJtaFYtRXFMdmNYMFRJeHJ3YjloVVZMTVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJIyFlWS
SWDjutOXAApqMHohOtEj78yWHkFDYckJKTWEzl2cZkflLk+J1Z8w0Zz5IP32HPko
He2pAonRLb38CTm/2jiSBfU3D8FTxSYcDETDFPej9llFM+dHLlDi6wQo92Sv2XdQ
wjmf8+jcGlNXQC6KnEZwuj6nuFvGJnUiM80y7sQUhPZ32wWIGs2/E37ti+b1V1ce
hR+FpES5YvVx+EB8C7UyjgCitcAmKPq3tq+78n8wwTzKIkUl5WXxoZtihEWH+j4e
01hrnj4r5oagN7wEq8Z94aPK2dIWoBWdheXQD1GlOldqYvuONINeh1Fjs/ymqHr+
ZVrUh5Q2wFUxfQ==
-----END CERTIFICATE-----
Generated at Mon May 12 22:18:27 2025 by rpki-client