Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
File: f0OdlCQm_Gc7J5zJirNf29fql_U.mft (raw, json)
Hash identifier: clNMbeDT46O8bHWQiHwlSrfIp6tjrbWaFlCtvi6I3hg=
Subject key identifier: 6D:DD:9F:BD:05:11:68:D4:33:4B:4B:26:38:E6:4B:07:CA:2B:E3:E6
Authority key identifier: 7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
Certificate issuer: /CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Certificate serial: 0196BE5C43ACC7566802281DD4875A837D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
Manifest number: 10CC
Signing time: Sun 11 May 2025 08:00:39 +0000
Manifest this update: Sun 11 May 2025 08:00:39 +0000
Manifest next update: Mon 12 May 2025 08:00:39 +0000
Files and hashes: 1: a7d8hNkNtlXljnH2m0docaTzG3k.roa (hash: q9e8wKrMSBg+y8Ryx5GLGY7FYsS8+BQXj+N/+pi34ag=)
2: f0OdlCQm_Gc7J5zJirNf29fql_U.crl (hash: cqOVSj/TVavosD93zYwSwArfZ1Pb14V0KfNLJPlEnHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:43:ac:c7:56:68:02:28:1d:d4:87:5a:83:7d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Validity
Not Before: May 11 08:00:39 2025 GMT
Not After : May 12 08:00:39 2025 GMT
Subject: CN=6ddd9fbd051168d4334b4b2638e64b07ca2be3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:5f:53:c9:a4:ee:23:f1:69:26:7f:40:00:
4f:83:43:2e:0e:24:13:3a:c2:9a:6e:4d:64:4b:7b:
17:1b:ab:d1:0f:1c:ab:83:71:5b:eb:c6:6b:74:d4:
81:a1:cd:ca:5b:23:8d:a2:5d:30:6c:2d:be:5e:6c:
d8:20:ab:bc:d4:2c:9a:e6:33:1f:51:65:4e:ab:04:
b3:cd:5e:1a:6d:33:0b:7b:14:70:3a:98:3c:7c:75:
d5:d2:eb:83:0b:1e:2d:da:aa:b9:67:94:bb:4e:86:
07:02:fe:7a:a8:48:d1:5f:09:34:40:c7:ab:8d:21:
62:17:a3:df:e7:8e:e7:08:f2:be:3c:b5:a7:90:5b:
bb:6e:4f:01:8b:5f:ca:92:cb:9b:65:3d:3e:9b:17:
3a:60:46:0c:ed:e0:55:b7:ed:f1:f6:b2:3a:bd:26:
7d:8f:17:5b:24:ff:5b:1d:1e:d3:d1:39:a8:ba:45:
4d:22:5d:93:f7:68:2f:41:70:3d:f5:e7:f1:d3:b8:
3d:72:31:2e:df:89:83:f4:0c:17:87:64:56:86:ef:
4e:48:da:4b:0c:85:88:be:b6:e8:7d:41:dc:df:6c:
44:c7:e1:6c:26:60:b6:67:3e:cf:ee:94:1b:22:57:
ff:b4:6e:f8:8c:8c:ba:e9:51:04:45:2b:a2:37:f2:
76:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DD:9F:BD:05:11:68:D4:33:4B:4B:26:38:E6:4B:07:CA:2B:E3:E6
X509v3 Authority Key Identifier:
keyid:7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6c:49:d6:e7:71:8e:b2:35:4b:13:00:2c:d1:a8:30:47:8e:
59:ee:f1:11:7f:74:4c:d1:14:01:29:73:40:f4:72:35:4e:fd:
fd:bd:74:be:bb:45:d7:41:b7:5a:3d:a6:b8:16:a0:7d:61:d9:
37:92:85:7f:1b:d2:67:40:22:8c:06:4d:19:d8:fe:0c:8d:32:
5d:18:ea:ab:23:ac:90:58:41:c1:66:e0:8f:8e:43:1b:3c:c1:
50:08:1e:18:ff:56:ee:ec:18:d5:49:39:90:84:ab:1b:97:42:
2f:2b:9d:3c:d9:04:50:38:b6:6d:3e:ad:90:23:24:30:a9:fa:
c6:08:c9:0c:e5:71:13:9b:2c:1d:5d:f2:bc:3f:71:99:ae:d8:
00:96:b0:3c:d4:8b:77:b9:ef:e3:92:b4:48:16:26:34:b9:87:
6c:20:ca:6e:c0:4b:8e:a8:61:c7:14:a4:fd:01:7b:82:78:6a:
bb:00:fb:2c:9f:73:37:86:aa:34:e3:d5:22:5c:3b:cf:4f:7a:
1f:53:bb:0c:35:7e:89:2f:50:ef:db:53:34:d9:bc:40:c8:de:
e1:8e:3c:17:69:dc:e5:3e:a0:9c:2b:9f:41:d1:56:4c:7d:7c:
3d:28:86:d7:cc:55:97:c7:98:58:89:ce:50:ac:25:bd:91:f0:
83:27:d0:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XEOsx1ZoAigd1Idag31eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNDM5ZDk0MjQyNmZjNjczYjI3OWNjOThhYjM1ZmRiZDdl
YTk3ZjUwHhcNMjUwNTExMDgwMDM5WhcNMjUwNTEyMDgwMDM5WjAzMTEwLwYDVQQD
Eyg2ZGRkOWZiZDA1MTE2OGQ0MzM0YjRiMjYzOGU2NGIwN2NhMmJlM2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgNfU8mk7iPxaSZ/QABPg0MuDiQT
OsKabk1kS3sXG6vRDxyrg3Fb68ZrdNSBoc3KWyONol0wbC2+XmzYIKu81Cya5jMf
UWVOqwSzzV4abTMLexRwOpg8fHXV0uuDCx4t2qq5Z5S7ToYHAv56qEjRXwk0QMer
jSFiF6Pf547nCPK+PLWnkFu7bk8Bi1/KksubZT0+mxc6YEYM7eBVt+3x9rI6vSZ9
jxdbJP9bHR7T0TmoukVNIl2T92gvQXA99efx07g9cjEu34mD9AwXh2RWhu9OSNpL
DIWIvrbofUHc32xEx+FsJmC2Zz7P7pQbIlf/tG74jIy66VEERSuiN/J2ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3dn70FEWjUM0tLJjjmSwfKK+PmMB8GA1UdIwQY
MBaAFH9DnZQkJvxnOyecyYqzX9vX6pf1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjBPZGxDUW1fR2M3SjV6SmlyTmYyOWZxbF9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS82OWEwOWYtNTgwOS00NjU2LWIzNTUt
MTQ2ZjI1NGFjMTMxLzEvZjBPZGxDUW1fR2M3SjV6SmlyTmYyOWZxbF9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS82OWEwOWYtNTgwOS00NjU2LWIzNTUtMTQ2ZjI1NGFjMTMx
LzEvZjBPZGxDUW1fR2M3SjV6SmlyTmYyOWZxbF9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWxJ1udx
jrI1SxMALNGoMEeOWe7xEX90TNEUASlzQPRyNU79/b10vrtF10G3Wj2muBagfWHZ
N5KFfxvSZ0AijAZNGdj+DI0yXRjqqyOskFhBwWbgj45DGzzBUAgeGP9W7uwY1Uk5
kISrG5dCLyudPNkEUDi2bT6tkCMkMKn6xgjJDOVxE5ssHV3yvD9xma7YAJawPNSL
d7nv45K0SBYmNLmHbCDKbsBLjqhhxxSk/QF7gnhquwD7LJ9zN4aqNOPVIlw7z096
H1O7DDV+iS9Q79tTNNm8QMje4Y48F2nc5T6gnCufQdFWTH18PSiG18xVl8eYWInO
UKwlvZHwgyfQ3A==
-----END CERTIFICATE-----
Generated at Sun May 11 13:26:47 2025 by rpki-client