Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
File: o8B3uDdyoALVxPi5IY7A3H8EDL8.mft (raw, json)
Hash identifier: +cCgnPMWi9IPZ9VRj+eNgS5JcAtdG1LlFJDHH+aYBrI=
Subject key identifier: 79:54:33:40:85:2D:A7:14:C9:05:7A:40:D1:55:18:6F:4E:B8:2B:BA
Authority key identifier: A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
Certificate issuer: /CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Certificate serial: 0196BA7F27E911A4449229D2D782AD763B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 14:00:17 +0000
Manifest this update: Sat 10 May 2025 14:00:17 +0000
Manifest next update: Sun 11 May 2025 14:00:17 +0000
Files and hashes: 1: o8B3uDdyoALVxPi5IY7A3H8EDL8.crl (hash: j1ZX73yattIUiHMFRHSnW6CYUMpniDXRvz+fCyd2hgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:27:e9:11:a4:44:92:29:d2:d7:82:ad:76:3b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Validity
Not Before: May 10 14:00:17 2025 GMT
Not After : May 11 14:00:17 2025 GMT
Subject: CN=79543340852da714c9057a40d155186f4eb82bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:88:57:d2:b0:02:d3:29:ca:63:62:ff:a1:
cc:47:4a:84:b7:e6:dc:04:43:6c:66:9a:a7:93:6a:
9e:97:dc:ba:bc:d4:fb:5c:63:09:55:c0:20:10:5a:
cb:40:32:c4:d1:d4:61:34:99:b7:b9:d1:80:c0:dc:
75:7c:7c:29:e5:2d:8f:25:38:c7:30:38:89:3c:0f:
0e:ca:c6:19:d6:4c:c5:48:6d:d5:d9:13:d2:87:12:
fb:83:7d:3e:5a:06:f0:e5:00:29:bd:03:99:23:a2:
08:42:fb:02:ae:cd:23:2f:6f:8f:33:82:2a:a4:82:
6b:73:a0:2e:dd:ae:db:ab:8d:33:43:9a:da:13:32:
1f:75:91:4a:95:b2:26:f3:6b:95:48:b5:29:c2:44:
55:37:75:ef:83:ed:b9:79:37:53:10:f2:92:9b:42:
1a:1d:76:8a:1d:2a:fa:e0:73:cb:8c:a8:9e:e7:fd:
4b:0c:3a:79:d7:3b:b1:39:ed:bf:58:35:ea:90:73:
45:38:59:9d:97:8f:f2:f5:b5:a3:83:28:3f:66:b7:
e1:ad:ad:88:1b:79:3e:55:7f:8d:72:39:2e:1c:c1:
e9:8a:95:8a:62:ec:85:5f:05:31:1e:b4:a6:7b:1e:
3f:fe:68:17:a3:f6:60:31:55:89:3a:e4:cf:8d:b3:
4e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:54:33:40:85:2D:A7:14:C9:05:7A:40:D1:55:18:6F:4E:B8:2B:BA
X509v3 Authority Key Identifier:
keyid:A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2a:7c:f1:b3:9f:21:3c:f7:09:5a:18:77:ea:c7:b5:83:5c:
10:88:8b:e1:93:e4:39:fb:6a:0b:16:94:9f:67:70:76:ca:27:
18:2b:7d:6b:a1:e0:4e:d1:24:0a:49:56:d2:1a:02:74:d0:8b:
55:91:71:06:20:cc:94:99:24:9b:1a:0a:85:e9:8d:fc:2d:a6:
6d:72:e5:f8:35:c9:d5:d3:b3:d0:0b:fd:f9:bc:65:5e:fc:a7:
1b:21:13:9e:13:c3:4b:0f:4e:4c:90:f9:57:da:e2:55:d4:d5:
46:5b:64:c0:cb:e2:a2:f6:80:a8:81:2b:0b:fa:95:2d:52:5a:
40:bb:67:03:c3:16:ce:48:5e:ee:86:c9:99:b8:1c:15:01:73:
81:48:25:21:11:12:7c:b8:4c:45:fb:e6:25:f1:a6:c6:dc:6e:
21:6d:5d:cf:8f:b9:82:85:9d:a3:2f:e5:04:f2:05:c7:1b:d4:
98:78:a5:d5:62:fa:36:10:b6:1d:36:f4:0c:8c:a9:40:42:0a:
e4:5d:6d:12:7a:f0:59:97:d9:14:0c:10:f0:2a:c8:e2:5b:33:
6b:9b:13:66:92:f5:26:8d:08:82:9c:bd:25:35:d0:3b:a5:81:
c1:d8:59:9a:aa:3e:73:0a:04:03:21:c4:aa:56:09:b7:55:2d:
34:cd:90:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6fyfpEaREkinS14KtdjtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYzA3N2I4Mzc3MmEwMDJkNWM0ZjhiOTIxOGVjMGRjN2Yw
NDBjYmYwHhcNMjUwNTEwMTQwMDE3WhcNMjUwNTExMTQwMDE3WjAzMTEwLwYDVQQD
Eyg3OTU0MzM0MDg1MmRhNzE0YzkwNTdhNDBkMTU1MTg2ZjRlYjgyYmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbaIV9KwAtMpymNi/6HMR0qEt+bc
BENsZpqnk2qel9y6vNT7XGMJVcAgEFrLQDLE0dRhNJm3udGAwNx1fHwp5S2PJTjH
MDiJPA8OysYZ1kzFSG3V2RPShxL7g30+Wgbw5QApvQOZI6IIQvsCrs0jL2+PM4Iq
pIJrc6Au3a7bq40zQ5raEzIfdZFKlbIm82uVSLUpwkRVN3Xvg+25eTdTEPKSm0Ia
HXaKHSr64HPLjKie5/1LDDp51zuxOe2/WDXqkHNFOFmdl4/y9bWjgyg/Zrfhra2I
G3k+VX+NcjkuHMHpipWKYuyFXwUxHrSmex4//mgXo/ZgMVWJOuTPjbNOnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlUM0CFLacUyQV6QNFVGG9OuCu6MB8GA1UdIwQY
MBaAFKPAd7g3cqAC1cT4uSGOwNx/BAy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzhCM3VEZHlvQUxWeFBpNUlZN0EzSDhFREw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mY2ViMDItYjBmMS00OTE3LTg1YzIt
NzA2YWIzZTgzZDFkLzEvbzhCM3VEZHlvQUxWeFBpNUlZN0EzSDhFREw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9mY2ViMDItYjBmMS00OTE3LTg1YzItNzA2YWIzZTgzZDFk
LzEvbzhCM3VEZHlvQUxWeFBpNUlZN0EzSDhFREw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXip88bOf
ITz3CVoYd+rHtYNcEIiL4ZPkOftqCxaUn2dwdsonGCt9a6HgTtEkCklW0hoCdNCL
VZFxBiDMlJkkmxoKhemN/C2mbXLl+DXJ1dOz0Av9+bxlXvynGyETnhPDSw9OTJD5
V9riVdTVRltkwMviovaAqIErC/qVLVJaQLtnA8MWzkhe7obJmbgcFQFzgUglIRES
fLhMRfvmJfGmxtxuIW1dz4+5goWdoy/lBPIFxxvUmHil1WL6NhC2HTb0DIypQEIK
5F1tEnrwWZfZFAwQ8CrI4lsza5sTZpL1Jo0Igpy9JTXQO6WBwdhZmqo+cwoEAyHE
qlYJt1UtNM2Qbw==
-----END CERTIFICATE-----
Generated at Sat May 10 22:25:19 2025 by rpki-client