Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
File: O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json)
Hash identifier: e5gTG2cRAhbPD9OnOdxO/yaf8MEU82WzojDipvV5/Ks=
Subject key identifier: DD:B9:E7:F2:B7:4F:98:41:15:94:75:A3:DA:F2:68:EB:7B:B6:F2:76
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Certificate issuer: /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial: 0196BD1265ABBC4582482D302E61D898781D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
Manifest number: 02C5
Signing time: Sun 11 May 2025 02:00:21 +0000
Manifest this update: Sun 11 May 2025 02:00:21 +0000
Manifest next update: Mon 12 May 2025 02:00:21 +0000
Files and hashes: 1: 7-AQ6OnvZ4yiBI8g8iZcgy53KzA.roa (hash: cTRZ7K6oUrn2Rqx5R/D6Zllm9PmQV/y/ARWXdG55cmE=)
2: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: PJgAku4JISuQCiX+nDAayM6IegB1ZWtapyeOwRgJbxc=)
3: YOqzdqJgWVyd_2LgxM2J8gMVqBI.roa (hash: va3bKDhWKpgZL3Z4ed7EIl2pjSDDXrOal9gvmMpvSE0=)
4: aBnhuCyVg4pVl4Cu-1q0sSCGSow.roa (hash: VQIqr/RAqzgxu4SPZE6Psd9Jss+IRfVZ1r0b7rL29Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:65:ab:bc:45:82:48:2d:30:2e:61:d8:98:78:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
Validity
Not Before: May 11 02:00:21 2025 GMT
Not After : May 12 02:00:21 2025 GMT
Subject: CN=ddb9e7f2b74f9841159475a3daf268eb7bb6f276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:90:b4:86:f1:ef:cb:e5:58:87:3d:75:fc:69:
9e:62:6b:f6:b6:61:f9:36:98:b3:b8:8b:55:3a:22:
80:d4:81:bc:f4:fc:36:57:8d:79:8e:7c:12:43:f3:
b3:48:e4:13:e7:4a:68:c9:9a:35:00:74:f5:d7:ff:
44:b8:2f:62:4b:9b:fa:8b:c4:5e:5d:14:e3:28:67:
d0:d0:6e:a7:d8:04:cb:6e:12:31:7f:9b:22:0b:8a:
64:a3:76:55:b7:07:c3:df:e1:03:06:34:bc:33:1f:
a2:81:1b:f6:ba:04:ca:50:89:cf:95:f6:58:0d:59:
0f:2a:13:23:ad:fa:44:c1:9f:25:39:16:d6:89:34:
c2:09:07:0a:7e:39:18:f4:e9:7d:ac:e0:93:c5:f7:
9e:d9:60:3c:5a:ec:c8:b2:3b:b5:8b:7e:0a:25:e4:
49:47:11:8c:31:32:8e:16:6b:9f:0c:0d:24:f8:24:
86:71:3b:14:dd:60:70:f9:15:67:83:68:4d:73:20:
63:9b:13:29:32:07:f2:e2:db:66:57:06:f1:b8:7e:
9e:e2:67:0f:9d:d4:76:0c:e5:d9:54:af:97:cd:5c:
8f:93:c5:0d:dc:de:4e:13:0e:32:9e:9f:2e:4d:c3:
b0:b4:36:af:fe:db:a7:3f:30:e2:50:41:bf:bc:7c:
c3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B9:E7:F2:B7:4F:98:41:15:94:75:A3:DA:F2:68:EB:7B:B6:F2:76
X509v3 Authority Key Identifier:
keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:29:fd:fb:dc:ab:be:ad:3f:ab:0f:c9:ef:d9:c5:c7:56:b4:
70:7e:1e:82:f3:13:65:53:df:65:cd:96:c5:1e:13:95:c8:78:
94:bd:c4:6a:06:6e:a6:ec:bd:41:c0:79:98:71:24:ff:d1:01:
38:2f:7f:a2:ab:f8:7d:0a:02:c4:4d:25:38:55:47:78:82:42:
59:bd:ac:d4:b9:00:64:24:89:5e:a6:f8:fe:c7:27:3c:ce:ec:
ae:cc:14:0d:2b:4d:1a:df:f6:b0:11:f6:4d:e7:20:10:22:7b:
b1:0c:25:11:32:1f:7e:86:e7:61:a8:22:11:d0:a0:07:db:d6:
56:25:24:09:68:69:46:0c:ef:ca:91:fc:ab:0f:0b:7c:11:f4:
22:f2:50:bc:a8:52:57:6c:e8:a0:2b:36:9a:1e:32:db:36:bb:
cc:db:22:f2:ed:cd:df:5b:a7:c5:8f:93:fd:32:21:c6:f2:c6:
67:3d:0b:37:f6:cf:09:2f:20:1f:79:60:a3:9a:95:b2:ef:99:
66:14:1a:34:c3:45:e4:ca:55:75:89:0c:86:16:01:83:4d:20:
0a:2e:c7:88:ed:97:21:8c:b0:70:30:2b:2b:e3:1a:1b:5f:61:
47:16:34:08:06:62:62:ad:fe:60:14:90:19:52:90:e6:39:ae:
6e:bf:1d:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9EmWrvEWCSC0wLmHYmHgdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZWZlNTBhNDBmYjE3MzI1NDFlOGE5NzQ1MGFiNWRlNzc0
NzcxZDgwHhcNMjUwNTExMDIwMDIxWhcNMjUwNTEyMDIwMDIxWjAzMTEwLwYDVQQD
EyhkZGI5ZTdmMmI3NGY5ODQxMTU5NDc1YTNkYWYyNjhlYjdiYjZmMjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZC0hvHvy+VYhz11/GmeYmv2tmH5
NpizuItVOiKA1IG89Pw2V415jnwSQ/OzSOQT50poyZo1AHT11/9EuC9iS5v6i8Re
XRTjKGfQ0G6n2ATLbhIxf5siC4pko3ZVtwfD3+EDBjS8Mx+igRv2ugTKUInPlfZY
DVkPKhMjrfpEwZ8lORbWiTTCCQcKfjkY9Ol9rOCTxfee2WA8WuzIsju1i34KJeRJ
RxGMMTKOFmufDA0k+CSGcTsU3WBw+RVng2hNcyBjmxMpMgfy4ttmVwbxuH6e4mcP
ndR2DOXZVK+XzVyPk8UN3N5OEw4ynp8uTcOwtDav/tunPzDiUEG/vHzDxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN255/K3T5hBFZR1o9ryaOt7tvJ2MB8GA1UdIwQY
MBaAFDvv5QpA+xcyVB6Kl0UKtd53R3HYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTy1fbENrRDdGekpVSG9xWFJRcTEzbmRIY2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84ZWY3NDAtMTA1Mi00OWVjLWE0MDkt
ZTYxNTQ5MzExN2QyLzEvTy1fbENrRDdGekpVSG9xWFJRcTEzbmRIY2RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi84ZWY3NDAtMTA1Mi00OWVjLWE0MDktZTYxNTQ5MzExN2Qy
LzEvTy1fbENrRDdGekpVSG9xWFJRcTEzbmRIY2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdyn9+9yr
vq0/qw/J79nFx1a0cH4egvMTZVPfZc2WxR4Tlch4lL3EagZupuy9QcB5mHEk/9EB
OC9/oqv4fQoCxE0lOFVHeIJCWb2s1LkAZCSJXqb4/scnPM7srswUDStNGt/2sBH2
TecgECJ7sQwlETIffobnYagiEdCgB9vWViUkCWhpRgzvypH8qw8LfBH0IvJQvKhS
V2zooCs2mh4y2za7zNsi8u3N31unxY+T/TIhxvLGZz0LN/bPCS8gH3lgo5qVsu+Z
ZhQaNMNF5MpVdYkMhhYBg00gCi7HiO2XIYywcDArK+MaG19hRxY0CAZiYq3+YBSQ
GVKQ5jmubr8daw==
-----END CERTIFICATE-----
Generated at Sun May 11 10:29:15 2025 by rpki-client