Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier: /TpTjIg2DNpuzPy7Emv2avKOYWGsFE8eYQ63CStfEyQ=
Subject key identifier: C6:18:07:B4:E3:DF:34:33:7D:6A:90:01:FE:C4:24:31:D9:E2:44:A7
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 0196D13E3AB04D958C507BAF234FDD79B73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number: 0FC6
Signing time: Thu 15 May 2025 00:00:38 +0000
Manifest this update: Thu 15 May 2025 00:00:38 +0000
Manifest next update: Fri 16 May 2025 00:00:38 +0000
Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: Tk8ive/pDIY2zkCS7snYdymRCpGHF667t9UgW2O/Kdw=)
2: cp23u9vhlMaqrHKUYwtPPiioz4s.roa (hash: vMJOgdz9BvyEVCpUUDvmbRYIMf8G3KzzC7uWtP3ziOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:3e:3a:b0:4d:95:8c:50:7b:af:23:4f:dd:79:b7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: May 15 00:00:38 2025 GMT
Not After : May 16 00:00:38 2025 GMT
Subject: CN=c61807b4e3df34337d6a9001fec42431d9e244a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:43:ed:a2:24:40:6a:91:85:8c:c9:a1:68:
82:c0:14:62:e5:4f:7e:ff:22:69:21:8e:e4:e2:bb:
22:03:41:e7:90:77:3e:f0:27:9c:f5:49:26:d0:80:
0f:2d:d3:a2:d7:52:a5:53:73:fd:f5:3b:5d:89:ad:
e0:8d:cb:02:c6:d3:32:a5:56:24:51:89:61:97:16:
78:37:40:f4:14:38:e5:87:f4:97:81:ed:e2:2d:b6:
5c:d2:31:e2:39:71:4c:5a:ca:96:39:bd:62:9b:8b:
bc:a9:19:09:3f:70:20:75:13:5e:89:2c:10:f4:21:
e5:c9:85:e4:6f:90:0d:99:95:8a:78:56:0c:0a:a1:
66:a2:2f:35:0e:7e:dd:1c:bc:1d:3a:d7:a6:7b:98:
5d:58:77:06:0f:48:b7:53:69:ef:8b:8c:ae:ec:84:
0c:c3:4c:d7:3a:2e:d0:d7:16:7d:3b:83:c9:0b:0b:
db:e0:7f:f0:3a:a2:4c:1e:13:b2:ae:cf:61:ac:7b:
16:67:68:39:87:c4:ab:17:9f:16:71:bc:3b:5e:5c:
9b:b2:4f:12:c2:4a:a5:6c:bd:0c:2e:e1:0b:9d:9c:
a7:cc:bb:7a:82:ed:6a:4b:1b:6e:71:b4:64:bb:32:
ee:6e:b8:b5:07:d6:a2:81:2b:e5:14:25:18:1d:bb:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:18:07:B4:E3:DF:34:33:7D:6A:90:01:FE:C4:24:31:D9:E2:44:A7
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f9:41:45:0d:3d:31:a1:f4:08:d4:34:4c:a5:fc:df:51:f1:
1d:b1:76:7b:b0:10:1e:7e:12:6b:67:34:0a:cb:8b:03:3a:bd:
b7:f7:fa:86:98:6d:5d:89:4c:c5:9b:fd:89:08:a9:89:18:b9:
0a:b2:dc:92:17:b2:02:a4:c2:7a:3e:bb:30:07:56:4f:cf:15:
6e:a5:e8:b0:e7:54:55:fd:26:dd:53:04:51:17:23:dc:44:a7:
3e:ac:5c:6f:3b:a5:6e:7c:6c:1d:52:16:63:03:94:5e:11:30:
25:fe:40:68:e3:c0:41:08:dd:45:e6:fc:e3:02:3a:49:39:cb:
b1:01:20:1b:dd:e8:b8:ff:62:cb:73:9b:4c:71:61:fd:13:0a:
df:6f:c0:68:bf:48:5b:b0:b4:41:03:cf:70:0e:01:97:ad:90:
f5:dc:1e:1a:9b:63:64:55:d3:5a:78:59:e1:9f:57:58:c7:39:
71:f8:d6:5b:4e:6d:4a:23:9c:a3:c4:ed:7a:27:4f:ac:7a:d9:
70:1f:14:f3:a4:85:c4:9d:02:26:0a:3c:10:8b:03:eb:e9:c3:
ee:9a:4e:50:19:17:fb:98:c4:da:8c:c2:55:fe:59:ea:d0:a8:
42:52:cf:c6:19:eb:8d:e6:5e:23:63:ec:df:1e:32:8e:5a:3b:
e9:53:1a:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbRPjqwTZWMUHuvI0/debc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzZjZWEyYTgwMjIwMzYxMjMxYjZhZmJiYzhjOGNkYWE0
ZmQ1MTcwHhcNMjUwNTE1MDAwMDM4WhcNMjUwNTE2MDAwMDM4WjAzMTEwLwYDVQQD
EyhjNjE4MDdiNGUzZGYzNDMzN2Q2YTkwMDFmZWM0MjQzMWQ5ZTI0NGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvtD7aIkQGqRhYzJoWiCwBRi5U9+
/yJpIY7k4rsiA0HnkHc+8Cec9Ukm0IAPLdOi11KlU3P99Ttdia3gjcsCxtMypVYk
UYlhlxZ4N0D0FDjlh/SXge3iLbZc0jHiOXFMWsqWOb1im4u8qRkJP3AgdRNeiSwQ
9CHlyYXkb5ANmZWKeFYMCqFmoi81Dn7dHLwdOteme5hdWHcGD0i3U2nvi4yu7IQM
w0zXOi7Q1xZ9O4PJCwvb4H/wOqJMHhOyrs9hrHsWZ2g5h8SrF58Wcbw7Xlybsk8S
wkqlbL0MLuELnZynzLt6gu1qSxtucbRkuzLubri1B9aigSvlFCUYHbsCYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYYB7Tj3zQzfWqQAf7EJDHZ4kSnMB8GA1UdIwQY
MBaAFAPGzqKoAiA2EjG2r7vIyM2qT9UXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQt
ZjQ2ZDZhYjNkMzI2LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQtZjQ2ZDZhYjNkMzI2
LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPlBRQ09
MaH0CNQ0TKX831HxHbF2e7AQHn4Sa2c0CsuLAzq9t/f6hphtXYlMxZv9iQipiRi5
CrLckheyAqTCej67MAdWT88VbqXosOdUVf0m3VMEURcj3ESnPqxcbzulbnxsHVIW
YwOUXhEwJf5AaOPAQQjdReb84wI6STnLsQEgG93ouP9iy3ObTHFh/RMK32/AaL9I
W7C0QQPPcA4Bl62Q9dweGptjZFXTWnhZ4Z9XWMc5cfjWW05tSiOco8TteidPrHrZ
cB8U86SFxJ0CJgo8EIsD6+nD7ppOUBkX+5jE2ozCVf5Z6tCoQlLPxhnrjeZeI2Ps
3x4yjlo76VMaIQ==
-----END CERTIFICATE-----
Generated at Thu May 15 05:47:54 2025 by rpki-client