Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
File: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft (raw, json)
Hash identifier: 9BIwAstOvaY3OiBQCmPG5bluL3CNzDWrsT6Ml+Jjaos=
Subject key identifier: AA:FD:7C:38:A2:B0:A9:6F:B6:5F:55:C4:C9:01:AA:E5:28:E7:96:92
Authority key identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
Certificate issuer: /CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Certificate serial: 0196BFA5E72ED2EC32C0228659FC57AE5EFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 14:00:42 +0000
Manifest this update: Sun 11 May 2025 14:00:42 +0000
Manifest next update: Mon 12 May 2025 14:00:42 +0000
Files and hashes: 1: 7rbCLoXWYly-2n7W-2TuSkBBMV8.roa (hash: SrTY3jKnRzrFELEhX/LwQ/2tjPUOB7vnlEoMlBte4mA=)
2: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl (hash: zOaemro04TU9NefLPMqhJlDs3tj29b1Yq3OYTHYYwlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:e7:2e:d2:ec:32:c0:22:86:59:fc:57:ae:5e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Validity
Not Before: May 11 14:00:42 2025 GMT
Not After : May 12 14:00:42 2025 GMT
Subject: CN=aafd7c38a2b0a96fb65f55c4c901aae528e79692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:67:5f:f4:79:54:7a:9e:7b:61:cd:34:31:29:
8e:52:79:b9:f0:e2:1b:db:e3:05:46:50:74:46:87:
15:2d:6e:2e:74:a0:31:78:88:af:80:5f:9f:f1:36:
f4:fb:16:3f:3d:70:f3:5a:28:0f:c8:19:3b:3d:72:
ed:72:06:03:1f:ec:63:1d:ee:ec:7b:c2:8b:da:22:
17:aa:b0:da:82:b4:3f:0c:a9:37:6a:f9:60:1e:44:
6e:1a:25:ce:82:15:1f:41:48:91:4e:51:6e:56:89:
84:74:9f:23:35:df:6a:5e:95:84:db:8b:b0:1c:52:
6a:e3:44:71:2e:54:10:ba:a6:8e:fe:46:7e:18:43:
c3:a5:60:32:ea:ce:1d:90:55:a3:44:6c:9b:56:6e:
de:3e:7c:9c:8d:2c:ae:71:34:ce:a5:17:e1:97:09:
ae:90:d4:50:b9:1c:75:a2:5a:17:92:e5:5e:c5:d5:
83:7e:e8:dd:88:55:45:61:de:81:7d:90:db:d0:99:
af:54:9a:05:85:a8:d0:b9:1d:c4:d9:9b:27:a2:8d:
a8:6c:bc:6b:29:4c:7f:35:cc:4e:18:73:69:42:14:
a0:dc:fd:b8:e4:17:cf:af:0d:87:bb:15:41:6a:36:
34:5d:95:65:50:6f:b7:16:a5:4d:97:e2:85:a7:5a:
65:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FD:7C:38:A2:B0:A9:6F:B6:5F:55:C4:C9:01:AA:E5:28:E7:96:92
X509v3 Authority Key Identifier:
keyid:FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:63:2a:17:8f:f3:a1:37:12:4b:73:5e:6e:f2:d7:39:5d:b7:
a3:36:78:f7:1a:ea:2b:5b:63:c0:3d:ef:31:f8:18:08:86:6a:
3e:8b:3e:53:80:a5:ad:a0:4f:97:b8:16:55:2a:20:bc:c6:64:
55:cd:64:02:e0:f9:bd:e5:6a:6d:ed:e6:2f:7e:41:48:5d:cd:
14:15:f6:6f:bd:f7:76:49:9a:ca:33:f6:54:fa:c9:5d:e5:08:
9f:04:a5:1d:61:4a:aa:31:7e:06:31:79:e2:c3:76:c7:28:e3:
10:84:a8:28:fb:fa:e6:1d:ed:8e:f3:37:40:b7:9e:ed:95:10:
d8:07:7c:0b:6d:3b:b8:53:b9:7f:29:22:ca:83:a3:06:39:1d:
56:06:ca:bb:92:2b:0d:ae:e6:ba:66:99:8c:cf:5f:fd:2a:f2:
8c:ce:7c:a4:cb:aa:47:c5:5d:8e:7d:4b:e1:03:66:36:c4:28:
82:3e:ee:b4:30:2b:50:b8:3a:fb:ad:9d:0d:ae:a3:34:4a:39:
e0:18:55:aa:07:70:29:15:3f:1b:68:d0:08:bc:15:49:62:22:
74:0e:7a:8b:f2:e9:e1:fa:76:6c:dc:2c:81:e5:f4:17:af:68:
46:12:dc:aa:f3:54:29:d7:04:13:ca:28:fe:5d:95:45:b9:57:
b2:b6:0c:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/pecu0uwywCKGWfxXrl78MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZWUzMjI3OWMxNmRhY2RiNTM0OWYxYjg3YzU3ZDc0YzUw
ZWE1MzkwHhcNMjUwNTExMTQwMDQyWhcNMjUwNTEyMTQwMDQyWjAzMTEwLwYDVQQD
EyhhYWZkN2MzOGEyYjBhOTZmYjY1ZjU1YzRjOTAxYWFlNTI4ZTc5NjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGdf9HlUep57Yc00MSmOUnm58OIb
2+MFRlB0RocVLW4udKAxeIivgF+f8Tb0+xY/PXDzWigPyBk7PXLtcgYDH+xjHe7s
e8KL2iIXqrDagrQ/DKk3avlgHkRuGiXOghUfQUiRTlFuVomEdJ8jNd9qXpWE24uw
HFJq40RxLlQQuqaO/kZ+GEPDpWAy6s4dkFWjRGybVm7ePnycjSyucTTOpRfhlwmu
kNRQuRx1oloXkuVexdWDfujdiFVFYd6BfZDb0JmvVJoFhajQuR3E2Zsnoo2obLxr
KUx/NcxOGHNpQhSg3P245BfPrw2HuxVBajY0XZVlUG+3FqVNl+KFp1pl5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKr9fDiisKlvtl9VxMkBquUo55aSMB8GA1UdIwQY
MBaAFPzuMiecFtrNtTSfG4fFfXTFDqU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX080eUo1d1cyczIxTko4Ymg4VjlkTVVPcFRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mNjA1MDItMjcwNC00ODM0LTlkNjgt
MzA0NjZkZWMzOTA1LzEvX080eUo1d1cyczIxTko4Ymg4VjlkTVVPcFRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9mNjA1MDItMjcwNC00ODM0LTlkNjgtMzA0NjZkZWMzOTA1
LzEvX080eUo1d1cyczIxTko4Ymg4VjlkTVVPcFRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmMqF4/z
oTcSS3NebvLXOV23ozZ49xrqK1tjwD3vMfgYCIZqPos+U4ClraBPl7gWVSogvMZk
Vc1kAuD5veVqbe3mL35BSF3NFBX2b733dkmayjP2VPrJXeUInwSlHWFKqjF+BjF5
4sN2xyjjEISoKPv65h3tjvM3QLee7ZUQ2Ad8C207uFO5fykiyoOjBjkdVgbKu5Ir
Da7mumaZjM9f/SryjM58pMuqR8Vdjn1L4QNmNsQogj7utDArULg6+62dDa6jNEo5
4BhVqgdwKRU/G2jQCLwVSWIidA56i/Lp4fp2bNwsgeX0F69oRhLcqvNUKdcEE8oo
/l2VRblXsrYMlA==
-----END CERTIFICATE-----
Generated at Sun May 11 23:03:52 2025 by rpki-client