Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json)
Hash identifier: T4sfUGn+PAyUcdX8APjKK/ShnAQYiJVL6ZV2+nUmLhY=
Subject key identifier: 6E:1B:D8:86:FF:B9:96:85:7A:E0:07:94:4C:AA:A8:5D:C8:0D:4C:89
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial: 0196BDEE9D9D5B69084552AF771B52C8AF67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
Manifest number: 0D23
Signing time: Sun 11 May 2025 06:00:53 +0000
Manifest this update: Sun 11 May 2025 06:00:53 +0000
Manifest next update: Mon 12 May 2025 06:00:53 +0000
Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: T3cI5mH5c8Xd4SoHB6m9gQ95gX36qIQbnhYwKidGt8k=)
2: _Zj7OokHAndWw-2CyHBYUS9Xdjk.roa (hash: ZjJEypsxwCO3RggJNbx1PBjZWJ0rbE6YHt0gcpOxjCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:9d:9d:5b:69:08:45:52:af:77:1b:52:c8:af:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Validity
Not Before: May 11 06:00:53 2025 GMT
Not After : May 12 06:00:53 2025 GMT
Subject: CN=6e1bd886ffb996857ae007944caaa85dc80d4c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:6f:7b:6b:08:3b:64:47:80:85:24:f4:8b:
9c:18:e3:5a:55:26:d0:3b:b1:7c:9e:50:e1:a1:87:
53:59:6e:4a:ca:34:41:c3:8c:33:3c:10:9d:5f:89:
57:b9:75:8f:80:b6:b8:8a:75:a6:17:59:72:7c:22:
46:28:0f:64:22:60:18:21:f4:43:e7:45:5f:a8:67:
e6:51:70:07:bd:f7:0b:55:74:4c:ab:31:1f:bc:93:
31:17:b7:aa:01:53:d1:f1:c1:3c:41:eb:d1:a4:1f:
81:88:59:04:57:9e:a2:86:20:e1:0e:fc:d3:b6:96:
d0:9f:ea:bb:f1:0d:4b:e3:5e:f2:1d:eb:6f:fb:75:
49:b3:c2:9d:23:3b:ce:50:66:82:dd:05:99:1c:19:
aa:2e:55:bf:2f:d1:11:e5:60:00:7d:98:d4:8e:d5:
2b:d5:48:1f:d9:0b:26:f6:b8:50:06:69:75:42:02:
73:d9:ff:32:73:e0:df:4e:04:f5:da:30:d2:f9:87:
74:73:36:e2:c0:fe:c3:8c:3f:d5:e4:2b:18:83:35:
db:7f:1f:09:70:f0:4c:a1:c9:1b:ed:cc:57:4f:c3:
8a:27:bf:1c:81:d6:fa:90:f5:21:3b:a3:48:8f:0c:
74:4a:13:a2:9e:f1:e7:3d:88:fb:f4:70:eb:1b:e3:
e5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1B:D8:86:FF:B9:96:85:7A:E0:07:94:4C:AA:A8:5D:C8:0D:4C:89
X509v3 Authority Key Identifier:
keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e6:8a:3c:a9:d1:dd:51:13:bc:b6:51:43:b5:dc:af:d3:5f:
f4:3d:c4:42:f4:d3:98:88:9e:a2:89:5c:6e:28:ab:01:f2:1f:
97:81:ad:cd:75:09:54:50:42:4e:a3:25:92:fe:a8:84:f5:d3:
97:a4:14:6f:db:32:fa:ce:0b:26:59:4e:7e:18:32:92:8e:5a:
49:26:06:04:ed:48:cf:b5:82:67:bf:4e:1c:e6:26:24:36:65:
11:96:c0:a2:09:19:04:ba:aa:66:f2:a6:35:a5:76:54:33:85:
ba:de:8c:18:63:a3:20:35:8f:dd:7f:51:42:62:17:f1:51:55:
c0:59:38:86:d8:a2:0b:1b:bd:eb:e3:37:34:40:a9:c6:be:64:
4f:69:3f:a8:c6:71:e2:56:2f:5d:0d:ed:35:6d:42:5d:88:40:
22:6f:b8:e3:64:52:26:cc:5e:47:43:b5:45:39:be:16:31:e2:
9b:74:06:a3:a4:10:b1:bc:7a:37:9d:80:08:d2:7f:82:00:8e:
13:1e:8b:58:7b:fb:3b:84:70:f0:d6:c9:c4:d3:46:4e:d2:65:
36:f9:e5:7e:0d:a0:de:20:d2:44:25:a3:fd:fa:d3:1d:3d:fc:
d7:8c:1c:53:bd:fd:61:88:43:9c:b1:c2:dd:6f:20:90:40:d3:
2e:b8:d3:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa97p2dW2kIRVKvdxtSyK9nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWE0ZGFlM2U5OTRmZDlmZTdiZTc0MzNlNDJmOTZmNjcx
NTkzNzgwHhcNMjUwNTExMDYwMDUzWhcNMjUwNTEyMDYwMDUzWjAzMTEwLwYDVQQD
Eyg2ZTFiZDg4NmZmYjk5Njg1N2FlMDA3OTQ0Y2FhYTg1ZGM4MGQ0Yzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBtve2sIO2RHgIUk9IucGONaVSbQ
O7F8nlDhoYdTWW5KyjRBw4wzPBCdX4lXuXWPgLa4inWmF1lyfCJGKA9kImAYIfRD
50VfqGfmUXAHvfcLVXRMqzEfvJMxF7eqAVPR8cE8QevRpB+BiFkEV56ihiDhDvzT
tpbQn+q78Q1L417yHetv+3VJs8KdIzvOUGaC3QWZHBmqLlW/L9ER5WAAfZjUjtUr
1Ugf2Qsm9rhQBml1QgJz2f8yc+DfTgT12jDS+Yd0czbiwP7DjD/V5CsYgzXbfx8J
cPBMockb7cxXT8OKJ78cgdb6kPUhO6NIjwx0ShOinvHnPYj79HDrG+PlIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4b2Ib/uZaFeuAHlEyqqF3IDUyJMB8GA1UdIwQY
MBaAFDrqTa4+mU/Z/nvnQz5C+W9nFZN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zMjU3ZDktM2ZiOC00Y2RmLTk4YWEt
OTNlOTQwM2ViMDE5LzEvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zMjU3ZDktM2ZiOC00Y2RmLTk4YWEtOTNlOTQwM2ViMDE5
LzEvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOaKPKnR
3VETvLZRQ7Xcr9Nf9D3EQvTTmIieoolcbiirAfIfl4GtzXUJVFBCTqMlkv6ohPXT
l6QUb9sy+s4LJllOfhgyko5aSSYGBO1Iz7WCZ79OHOYmJDZlEZbAogkZBLqqZvKm
NaV2VDOFut6MGGOjIDWP3X9RQmIX8VFVwFk4htiiCxu96+M3NECpxr5kT2k/qMZx
4lYvXQ3tNW1CXYhAIm+442RSJsxeR0O1RTm+FjHim3QGo6QQsbx6N52ACNJ/ggCO
Ex6LWHv7O4Rw8NbJxNNGTtJlNvnlfg2g3iDSRCWj/frTHT3814wcU739YYhDnLHC
3W8gkEDTLrjT5Q==
-----END CERTIFICATE-----
Generated at Sun May 11 08:36:36 2025 by rpki-client