Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
File: 0HJnvyOylxpHlag--EeKghuvsds.mft (raw, json)
Hash identifier: Dgg+ReZebfnW6XVsz4dee4vGhMLD152IEc+kZglcT60=
Subject key identifier: 0E:00:2A:81:56:79:48:69:9C:70:FF:9A:A9:A1:05:70:BF:E8:58:A5
Authority key identifier: D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
Certificate issuer: /CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Certificate serial: 0196B8FEA8F99553F092C1414588E4D39F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 07:00:19 +0000
Manifest this update: Sat 10 May 2025 07:00:19 +0000
Manifest next update: Sun 11 May 2025 07:00:19 +0000
Files and hashes: 1: 0HJnvyOylxpHlag--EeKghuvsds.crl (hash: 1NIfEIlk7DJsxDafcYgPpqAE4rsmOoED/JFbJHhmUFc=)
2: 2dNcgj6MvN9n_fYFlGVJH7IP5P0.roa (hash: NdXmI8eBdfB68znJPh1CIG8Aqd8Jvbrd0RbmQ639jeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:a8:f9:95:53:f0:92:c1:41:45:88:e4:d3:9f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Validity
Not Before: May 10 07:00:19 2025 GMT
Not After : May 11 07:00:19 2025 GMT
Subject: CN=0e002a81567948699c70ff9aa9a10570bfe858a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2c:a1:75:40:b7:d7:31:8e:3a:37:e9:b8:1c:
a9:fc:07:60:5b:2a:00:63:9b:23:2c:57:76:db:bf:
74:f5:18:49:c3:28:43:95:24:9b:79:b0:a2:a0:db:
7a:01:5e:4a:a2:6a:41:9d:fa:24:d6:23:cb:48:52:
e7:6e:05:53:b9:2d:b9:5f:8e:08:dd:fa:de:46:9c:
75:92:95:a7:43:e8:54:88:f6:81:f0:f8:47:0a:90:
2d:40:08:21:a9:5d:7f:7f:78:f7:0f:1e:bd:65:09:
83:07:64:f7:6d:a0:81:a4:13:0b:de:bb:ab:28:15:
e2:9a:8c:5c:a6:d1:b8:be:67:8d:54:b8:a2:a6:69:
00:a5:2c:bc:20:ad:20:d1:cf:c6:db:03:17:d8:65:
01:f3:ce:67:51:6a:af:b8:62:58:37:c3:2b:e6:c7:
f6:05:f6:4d:a0:dd:41:14:ff:ba:0b:58:c3:ff:8d:
25:c2:b7:48:0a:51:fd:c1:c7:6a:c3:5a:da:78:8d:
16:ee:02:65:70:28:d5:ac:e7:1f:4e:0d:93:51:50:
31:bd:68:0c:ba:d9:d2:d7:49:f8:a7:a7:b1:ed:80:
d0:27:df:3c:92:1e:07:36:b9:a4:38:15:66:7b:4c:
cd:ca:78:53:44:5b:21:22:1e:f0:26:14:ba:cf:0d:
f4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:00:2A:81:56:79:48:69:9C:70:FF:9A:A9:A1:05:70:BF:E8:58:A5
X509v3 Authority Key Identifier:
keyid:D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:36:a0:fe:30:62:f0:1c:c1:58:50:25:7b:ca:84:55:68:0b:
48:f2:02:52:fa:75:4b:76:52:72:98:bc:f4:4e:ba:b2:65:a2:
c0:70:95:54:61:c6:7e:22:f1:86:60:17:11:03:6d:ee:ad:45:
6e:fb:7e:4f:e2:c0:cd:18:b9:c5:f0:8c:27:6d:dc:8b:37:60:
d4:ca:fb:ab:e6:99:6d:44:14:29:50:11:ac:42:24:b1:26:60:
56:7f:69:7c:9f:2a:4a:96:1d:fd:d4:22:cb:36:db:79:02:79:
44:16:a5:07:e4:c2:b9:fa:bb:39:6c:b3:99:b6:2d:a0:ee:69:
61:fa:61:f0:15:d2:38:6a:0d:31:ad:88:bf:33:f2:b4:5f:e5:
5d:84:54:c0:8e:40:09:d2:9f:a7:6a:fa:2f:66:26:3e:ec:fb:
91:4d:40:17:4e:ab:9e:94:73:99:c4:31:1a:2a:54:7d:33:ad:
3c:da:2e:82:76:35:f8:57:f7:63:46:77:eb:56:dc:dc:02:3a:
f8:e9:0e:2e:1e:46:6e:e1:25:3c:28:fe:28:73:a4:52:66:2c:
74:6f:77:be:d2:e4:85:07:a4:bb:5a:da:4a:7b:79:eb:c6:0f:
a8:5b:8f:bc:b6:21:0c:f2:12:12:47:71:23:12:ac:f9:96:f4:
d9:d3:dd:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4/qj5lVPwksFBRYjk058pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNzI2N2JmMjNiMjk3MWE0Nzk1YTgzZWY4NDc4YTgyMWJh
ZmIxZGIwHhcNMjUwNTEwMDcwMDE5WhcNMjUwNTExMDcwMDE5WjAzMTEwLwYDVQQD
EygwZTAwMmE4MTU2Nzk0ODY5OWM3MGZmOWFhOWExMDU3MGJmZTg1OGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSyhdUC31zGOOjfpuByp/AdgWyoA
Y5sjLFd227909RhJwyhDlSSbebCioNt6AV5KompBnfok1iPLSFLnbgVTuS25X44I
3freRpx1kpWnQ+hUiPaB8PhHCpAtQAghqV1/f3j3Dx69ZQmDB2T3baCBpBML3rur
KBXimoxcptG4vmeNVLiipmkApSy8IK0g0c/G2wMX2GUB885nUWqvuGJYN8Mr5sf2
BfZNoN1BFP+6C1jD/40lwrdIClH9wcdqw1raeI0W7gJlcCjVrOcfTg2TUVAxvWgM
utnS10n4p6ex7YDQJ988kh4HNrmkOBVme0zNynhTRFshIh7wJhS6zw30GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4AKoFWeUhpnHD/mqmhBXC/6FilMB8GA1UdIwQY
MBaAFNByZ78jspcaR5WoPvhHioIbr7HbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEhKbnZ5T3lseHBIbGFnLS1FZUtnaHV2c2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS84ZGI1NzktYzFmYy00MjE1LTkwZjQt
ZjQ2NzNiYTUyYzAwLzEvMEhKbnZ5T3lseHBIbGFnLS1FZUtnaHV2c2RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS84ZGI1NzktYzFmYy00MjE1LTkwZjQtZjQ2NzNiYTUyYzAw
LzEvMEhKbnZ5T3lseHBIbGFnLS1FZUtnaHV2c2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDag/jBi
8BzBWFAle8qEVWgLSPICUvp1S3ZScpi89E66smWiwHCVVGHGfiLxhmAXEQNt7q1F
bvt+T+LAzRi5xfCMJ23cizdg1Mr7q+aZbUQUKVARrEIksSZgVn9pfJ8qSpYd/dQi
yzbbeQJ5RBalB+TCufq7OWyzmbYtoO5pYfph8BXSOGoNMa2IvzPytF/lXYRUwI5A
CdKfp2r6L2YmPuz7kU1AF06rnpRzmcQxGipUfTOtPNougnY1+Ff3Y0Z361bc3AI6
+OkOLh5GbuElPCj+KHOkUmYsdG93vtLkhQeku1raSnt568YPqFuPvLYhDPISEkdx
IxKs+Zb02dPdoA==
-----END CERTIFICATE-----
Generated at Sat May 10 08:57:02 2025 by rpki-client