Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json)
Hash identifier: 9i3gBdsDHTxBHzbGLden1ynf2/fQ/BWPbsxGTPHXnx0=
Subject key identifier: F7:8D:B0:E3:02:4E:ED:F1:DD:69:EF:9E:A2:5A:05:52:38:7D:56:A2
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial: 0196CCF3E54FBC4E0124E3D854DFD12BD2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
Manifest number: 04DA
Signing time: Wed 14 May 2025 04:00:58 +0000
Manifest this update: Wed 14 May 2025 04:00:58 +0000
Manifest next update: Thu 15 May 2025 04:00:58 +0000
Files and hashes: 1: BUjnCPWRRlnhzGZmJFZRagR9_kE.roa (hash: QCJM8w/4aW0x9oxrvQqCjEA9QybbDdyrx3mZya2V08E=)
2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: 2/30fUTfCOu2yk4uJPEXUVAKW1NhdmRWYkU9ZMhYcwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f3:e5:4f:bc:4e:01:24:e3:d8:54:df:d1:2b:d2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Validity
Not Before: May 14 04:00:58 2025 GMT
Not After : May 15 04:00:58 2025 GMT
Subject: CN=f78db0e3024eedf1dd69ef9ea25a0552387d56a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:74:5c:01:f6:1a:eb:d3:cf:58:0a:61:ab:7e:
cf:ab:76:a6:17:72:e0:7e:10:e9:1e:ab:9a:cb:e8:
6f:eb:80:c3:62:ef:be:90:97:e4:26:75:87:88:25:
2e:b6:ce:50:5a:93:59:e9:a9:e2:a7:0e:a2:0e:1e:
c9:6b:03:fb:c6:8a:b8:d9:36:10:17:80:76:4a:c5:
ef:86:a5:2e:09:20:22:53:5f:30:e1:bd:56:17:80:
8f:d4:96:b9:b3:be:9b:1e:2f:44:61:4e:4a:0c:a5:
e0:ef:62:b1:4c:01:d9:f0:43:75:8e:7d:6c:ab:62:
5a:f9:f7:35:8b:78:66:28:16:d6:15:95:78:d4:6e:
37:2f:ec:cb:e6:8e:94:56:1e:da:8f:bf:e4:98:0f:
45:5d:22:0e:08:ec:47:46:c7:2a:77:e9:16:a8:b5:
d4:08:db:39:69:8b:ff:19:8a:5b:76:be:8c:e5:85:
29:66:c7:87:c7:3f:97:95:10:d7:ef:7e:3b:f5:05:
b6:8c:ab:da:bc:a8:79:26:1c:39:80:92:7c:f9:d5:
f3:4c:27:46:d5:b2:a9:9b:b9:66:21:00:ef:32:53:
e0:f2:11:ab:2f:b2:f2:e1:31:28:20:f2:cd:8b:4f:
44:38:5d:75:af:c9:34:23:45:ad:4e:79:ec:49:d6:
2a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8D:B0:E3:02:4E:ED:F1:DD:69:EF:9E:A2:5A:05:52:38:7D:56:A2
X509v3 Authority Key Identifier:
keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b8:c1:e6:bc:4b:ad:3c:76:f5:6b:a7:ce:75:20:de:6b:f4:
49:f9:cd:1b:43:44:68:15:6c:5d:89:b7:10:de:96:06:0c:3e:
ac:f3:48:23:72:63:2e:2b:7a:45:42:ec:44:c9:26:92:ec:a7:
d8:69:6e:99:76:58:4f:30:78:88:ba:36:2d:75:91:f5:84:d6:
ce:32:7c:3d:68:64:86:db:ea:fe:5a:8a:a0:c6:87:11:08:51:
5c:c6:7b:82:97:28:21:88:10:3d:cd:ab:33:d6:5d:f7:01:bb:
01:76:e7:2b:ce:9a:a3:46:68:38:c1:eb:1f:90:f2:dd:a0:31:
7b:0a:ea:4f:2d:5d:7d:6e:64:a6:81:5d:30:0b:55:62:03:88:
c7:18:ed:63:4a:71:19:ed:76:13:12:c3:e2:36:15:a7:86:5c:
02:b3:b1:12:4a:d7:cd:8e:d5:76:54:0c:b3:b2:4d:f7:ed:af:
5a:c8:62:93:da:0b:8e:2f:d4:cf:95:49:4b:6e:88:57:2b:19:
1c:b8:80:cd:bd:62:5a:0b:82:44:8b:86:cb:8d:0b:5c:f7:75:
6a:9a:ad:67:d7:98:b3:85:52:97:8c:db:95:94:29:86:3e:77:
31:49:c6:0e:c9:23:84:26:76:5c:99:01:dd:dd:c4:67:08:4e:
46:ef:ac:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbM8+VPvE4BJOPYVN/RK9LYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNWIxOTYzODYxMWYzZTFmNzY0NGE3ZTNiYjcxZDBjYTM3
NDkxOWUwHhcNMjUwNTE0MDQwMDU4WhcNMjUwNTE1MDQwMDU4WjAzMTEwLwYDVQQD
EyhmNzhkYjBlMzAyNGVlZGYxZGQ2OWVmOWVhMjVhMDU1MjM4N2Q1NmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XRcAfYa69PPWAphq37Pq3amF3Lg
fhDpHquay+hv64DDYu++kJfkJnWHiCUuts5QWpNZ6anipw6iDh7JawP7xoq42TYQ
F4B2SsXvhqUuCSAiU18w4b1WF4CP1Ja5s76bHi9EYU5KDKXg72KxTAHZ8EN1jn1s
q2Ja+fc1i3hmKBbWFZV41G43L+zL5o6UVh7aj7/kmA9FXSIOCOxHRscqd+kWqLXU
CNs5aYv/GYpbdr6M5YUpZseHxz+XlRDX73479QW2jKvavKh5Jhw5gJJ8+dXzTCdG
1bKpm7lmIQDvMlPg8hGrL7Ly4TEoIPLNi09EOF11r8k0I0WtTnnsSdYqYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeNsOMCTu3x3WnvnqJaBVI4fVaiMB8GA1UdIwQY
MBaAFKFbGWOGEfPh92RKfju3HQyjdJGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYt
MTI1MTg0MjlmYTYzLzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYtMTI1MTg0MjlmYTYz
LzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7jB5rxL
rTx29WunznUg3mv0SfnNG0NEaBVsXYm3EN6WBgw+rPNII3JjLit6RULsRMkmkuyn
2GlumXZYTzB4iLo2LXWR9YTWzjJ8PWhkhtvq/lqKoMaHEQhRXMZ7gpcoIYgQPc2r
M9Zd9wG7AXbnK86ao0ZoOMHrH5Dy3aAxewrqTy1dfW5kpoFdMAtVYgOIxxjtY0px
Ge12ExLD4jYVp4ZcArOxEkrXzY7VdlQMs7JN9+2vWshik9oLji/Uz5VJS26IVysZ
HLiAzb1iWguCRIuGy40LXPd1apqtZ9eYs4VSl4zblZQphj53MUnGDskjhCZ2XJkB
3d3EZwhORu+siQ==
-----END CERTIFICATE-----
Generated at Wed May 14 09:25:01 2025 by rpki-client