Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
File: osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft (raw, json)
Hash identifier: HkF9V+dP+F9coikeefXpbVuS0BfbdEXuri9Odlzgifk=
Subject key identifier: 63:2E:5A:1D:79:6B:43:A2:FE:44:E7:19:48:D7:56:A6:7A:23:F0:00
Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
Certificate issuer: /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Certificate serial: 0196B28F632DBD811693A119781CAADCF8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 01:01:03 +0000
Manifest this update: Fri 09 May 2025 01:01:03 +0000
Manifest next update: Sat 10 May 2025 01:01:03 +0000
Files and hashes: 1: T1KxzYg5ki8jROBXHnXsuuF1Usc.roa (hash: pSMvp0rn5YAkLffVlSaMpmmw60CI4RpSAuDI1ZJ7Bys=)
2: osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl (hash: d+ChQXKapECRsoRHCcj8aKOC1iZBwEmctaXb28DN/2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:8f:63:2d:bd:81:16:93:a1:19:78:1c:aa:dc:f8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Validity
Not Before: May 9 01:01:03 2025 GMT
Not After : May 10 01:01:03 2025 GMT
Subject: CN=632e5a1d796b43a2fe44e71948d756a67a23f000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:b8:9f:d9:4e:c0:d3:d2:41:7a:45:f0:43:
26:b3:d0:d0:05:da:06:73:b3:a1:d4:1b:2c:5c:c2:
01:62:8f:b9:8f:40:dd:d0:a0:2b:45:97:e5:ed:bc:
2f:f4:e0:e4:c3:80:00:9c:85:e8:2a:6e:50:e3:46:
9f:92:80:5d:81:0d:7e:fb:94:08:ee:db:6e:94:d6:
ba:46:18:62:2c:0e:9e:7f:f0:16:d3:a5:7e:1d:fa:
06:cb:90:2b:4a:0f:25:9a:bf:a2:63:20:ed:48:3f:
37:12:4f:01:47:bc:a8:4b:44:5c:b9:f2:fa:c5:de:
20:57:f4:b3:bd:c4:a4:15:ad:8c:50:d1:fc:15:50:
1e:dc:0b:83:64:33:00:d6:41:72:1f:81:1e:fe:e3:
60:ad:cf:f5:c6:4a:b0:09:e9:07:1b:ed:f5:86:e6:
99:fa:7f:a3:2a:60:da:94:0e:75:f3:9e:e4:f5:d8:
63:a5:bf:40:86:5d:6f:27:8c:af:1d:1a:f1:dc:1d:
39:f2:44:28:d5:48:cf:00:d7:70:c9:ae:83:54:87:
ec:7c:91:26:84:41:ec:e9:4a:e1:2f:af:ff:d7:86:
bb:9b:99:9a:62:30:b6:d7:cd:5b:c0:a0:7f:e8:7a:
26:af:18:1a:88:45:cd:83:1a:8f:15:77:d9:26:ce:
09:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2E:5A:1D:79:6B:43:A2:FE:44:E7:19:48:D7:56:A6:7A:23:F0:00
X509v3 Authority Key Identifier:
keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6e:c0:2c:51:18:98:36:bc:44:ec:2e:22:74:61:2c:05:ac:
ee:d0:d3:52:9a:70:dd:18:ad:bd:e5:2a:0e:26:75:32:f3:4d:
1c:59:88:d9:89:06:30:aa:9c:19:32:92:87:3d:52:b9:22:04:
47:01:de:03:87:e9:1e:f5:a0:15:70:a6:b9:cf:19:4b:b5:1b:
8f:d9:d3:14:16:53:89:e1:13:ac:1b:48:4e:da:ba:85:db:66:
4b:4e:d7:1a:27:b7:f5:50:8f:a6:bb:48:a7:40:31:d5:aa:d6:
05:d4:b2:73:78:75:cb:2c:8b:6f:ac:1a:cb:6b:e7:cd:bc:20:
b8:e0:80:98:6f:2a:96:9b:21:b8:12:41:9c:de:f3:7f:69:a1:
a1:1e:04:7d:6e:38:cf:29:b1:17:89:00:1b:e6:24:e7:7e:bf:
b5:10:6d:1e:9f:8e:42:53:43:55:14:f1:47:cb:9c:b8:df:30:
cd:83:c5:1d:95:08:97:b5:04:1b:60:28:97:67:20:55:7f:c5:
c8:26:aa:72:43:72:8d:65:aa:84:65:ad:b4:fb:86:25:e5:d8:
9e:4d:1e:20:c6:f5:87:04:32:a6:dd:92:c6:01:d1:7e:8a:22:
27:df:5b:f4:cd:35:d1:fc:c1:1a:e7:fd:f5:fc:8f:f0:67:06:
fc:48:ec:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZayj2MtvYEWk6EZeByq3PjjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyY2JlOWFiYTFmZjc1NjRkOTEzZWQ3ODY3MmUzMzcxYjdm
MzU4MjQwHhcNMjUwNTA5MDEwMTAzWhcNMjUwNTEwMDEwMTAzWjAzMTEwLwYDVQQD
Eyg2MzJlNWExZDc5NmI0M2EyZmU0NGU3MTk0OGQ3NTZhNjdhMjNmMDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMi4n9lOwNPSQXpF8EMms9DQBdoG
c7Oh1BssXMIBYo+5j0Dd0KArRZfl7bwv9ODkw4AAnIXoKm5Q40afkoBdgQ1++5QI
7ttulNa6RhhiLA6ef/AW06V+HfoGy5ArSg8lmr+iYyDtSD83Ek8BR7yoS0RcufL6
xd4gV/SzvcSkFa2MUNH8FVAe3AuDZDMA1kFyH4Ee/uNgrc/1xkqwCekHG+31huaZ
+n+jKmDalA51857k9dhjpb9Ahl1vJ4yvHRrx3B058kQo1UjPANdwya6DVIfsfJEm
hEHs6UrhL6//14a7m5maYjC2181bwKB/6HomrxgaiEXNgxqPFXfZJs4JdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMuWh15a0Oi/kTnGUjXVqZ6I/AAMB8GA1UdIwQY
MBaAFKLL6auh/3Vk2RPteGcuM3G381gkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3N2cHE2SF9kV1RaRS0xNFp5NHpjYmZ6V0NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80MDhlODMtNTMwZC00NDYyLWIxYzkt
ZGYzMjRjNGM2ZWVkLzEvb3N2cHE2SF9kV1RaRS0xNFp5NHpjYmZ6V0NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS80MDhlODMtNTMwZC00NDYyLWIxYzktZGYzMjRjNGM2ZWVk
LzEvb3N2cHE2SF9kV1RaRS0xNFp5NHpjYmZ6V0NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApG7ALFEY
mDa8ROwuInRhLAWs7tDTUppw3RitveUqDiZ1MvNNHFmI2YkGMKqcGTKShz1SuSIE
RwHeA4fpHvWgFXCmuc8ZS7Ubj9nTFBZTieETrBtITtq6hdtmS07XGie39VCPprtI
p0Ax1arWBdSyc3h1yyyLb6way2vnzbwguOCAmG8qlpshuBJBnN7zf2mhoR4EfW44
zymxF4kAG+Yk536/tRBtHp+OQlNDVRTxR8ucuN8wzYPFHZUIl7UEG2Aol2cgVX/F
yCaqckNyjWWqhGWttPuGJeXYnk0eIMb1hwQypt2SxgHRfooiJ99b9M010fzBGuf9
9fyP8GcG/Ejs1g==
-----END CERTIFICATE-----
Generated at Fri May 9 07:22:55 2025 by rpki-client