Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
File: ojIkxQF9NOzcKNDPNkQtZb754KA.mft (raw, json)
Hash identifier: L4eMuES4WI+WPDjRiRY2RJ7Cf2lYNgL07mhwdBJb5wo=
Subject key identifier: B1:B9:E1:C2:53:63:BA:D7:E7:12:C1:F5:30:F8:DE:87:59:F3:81:09
Authority key identifier: A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
Certificate issuer: /CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Certificate serial: 0196AF8DE3ACDEC9706523647D640F0B762E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
Manifest number: 1536
Signing time: Thu 08 May 2025 11:00:33 +0000
Manifest this update: Thu 08 May 2025 11:00:33 +0000
Manifest next update: Fri 09 May 2025 11:00:33 +0000
Files and hashes: 1: bEhBHj_5ND7DPkcxJc-eHtfnjVE.roa (hash: q7DP36VzuoeI79R3/z9nukbV52RDnraBhFmpjcuFOJ0=)
2: fUWog8dQyKlZmDz3Jt4aoMe12ZM.roa (hash: m7C2vWzzKK+0unJuovK786RQ7kI+1mqtBwzlHAjE+E0=)
3: ojIkxQF9NOzcKNDPNkQtZb754KA.crl (hash: Mybg++QPOFFaVDTA7So+0xVbmD6PRA0yNhDTl0NHMy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:8d:e3:ac:de:c9:70:65:23:64:7d:64:0f:0b:76:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Validity
Not Before: May 8 11:00:33 2025 GMT
Not After : May 9 11:00:33 2025 GMT
Subject: CN=b1b9e1c25363bad7e712c1f530f8de8759f38109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ca:d9:da:42:64:d5:c2:36:b9:34:a8:2d:b5:
85:5f:3a:04:0c:fc:3a:cb:39:3a:de:f8:fb:1b:c8:
63:cd:ba:ec:9a:cd:c2:70:26:20:70:fa:74:5a:4d:
29:3c:b1:19:30:c3:17:0f:f9:4d:c3:1f:ba:34:d9:
ba:19:b5:cc:ee:19:df:1d:fd:29:f7:cb:cd:0c:54:
da:ad:d8:13:0d:dd:af:39:96:b4:5d:de:f8:c7:04:
a6:1a:c9:c7:dc:98:f4:04:ea:00:ec:cf:f0:b1:47:
e1:f0:32:37:45:35:d7:b3:a3:f2:be:80:c0:27:af:
9a:c4:03:e2:51:36:0e:50:10:eb:9a:98:ed:10:4a:
35:4a:55:4b:28:e4:87:28:f3:18:d7:4d:19:a9:14:
3d:ee:e9:45:23:8f:cc:e1:1d:1d:8c:35:b2:30:b3:
e7:b7:09:4a:d3:62:82:4c:4b:25:dd:07:92:cc:6c:
2e:9a:fd:9b:81:57:f5:de:0e:80:ec:2f:71:2c:9d:
f4:3b:25:1a:b5:d3:c2:d6:f4:95:df:9a:95:21:8b:
a5:34:5c:9c:b4:b0:15:3c:f0:41:45:4b:22:70:2c:
e2:c3:63:ec:09:e0:d7:d9:6a:a6:b1:88:ed:a4:17:
5d:d2:ce:c2:00:93:42:62:00:a3:af:4a:17:58:bf:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B9:E1:C2:53:63:BA:D7:E7:12:C1:F5:30:F8:DE:87:59:F3:81:09
X509v3 Authority Key Identifier:
keyid:A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:99:fd:71:bb:f6:e1:7d:be:6e:88:20:21:85:bc:08:2a:dc:
e8:f9:8a:a2:15:d4:7e:42:14:e8:87:a9:01:20:8f:1d:0a:5d:
0a:0d:23:a1:23:ba:0a:4b:cb:f4:9d:6b:5a:ba:65:78:1c:dc:
83:60:61:ae:7f:48:cb:fc:df:4f:66:02:1d:f5:5c:a3:fd:e4:
22:6f:a8:d6:99:58:73:71:18:df:51:3f:a7:f1:e5:6b:04:22:
86:4e:91:32:24:59:5c:da:34:13:39:e6:43:6b:ce:5e:b5:c1:
28:d7:0c:98:db:18:44:b5:44:04:87:cb:c2:46:ac:42:1d:33:
df:0f:df:02:23:47:4f:82:3d:c8:39:83:33:75:17:9f:49:cf:
61:b3:d0:93:41:17:f5:d3:f9:17:4e:12:5d:15:26:49:d4:1d:
60:dc:66:1f:93:c2:76:53:55:ac:04:29:00:aa:83:bd:c0:30:
6c:40:a7:77:15:04:1a:8b:9a:ea:82:d0:88:07:f6:d0:9f:de:
2b:f7:cf:0a:6f:02:0c:97:d5:b0:1d:3f:27:d4:df:2f:19:a6:
e3:b6:8e:d5:ee:6f:6d:df:b0:19:34:5c:cd:8f:3d:c7:8f:81:
95:1a:4e:dd:b6:29:84:21:1b:b7:01:05:a8:c9:96:9b:6a:ef:
bc:4f:5b:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZavjeOs3slwZSNkfWQPC3YuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMzIyNGM1MDE3ZDM0ZWNkYzI4ZDBjZjM2NDQyZDY1YmVm
OWUwYTAwHhcNMjUwNTA4MTEwMDMzWhcNMjUwNTA5MTEwMDMzWjAzMTEwLwYDVQQD
EyhiMWI5ZTFjMjUzNjNiYWQ3ZTcxMmMxZjUzMGY4ZGU4NzU5ZjM4MTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58rZ2kJk1cI2uTSoLbWFXzoEDPw6
yzk63vj7G8hjzbrsms3CcCYgcPp0Wk0pPLEZMMMXD/lNwx+6NNm6GbXM7hnfHf0p
98vNDFTardgTDd2vOZa0Xd74xwSmGsnH3Jj0BOoA7M/wsUfh8DI3RTXXs6PyvoDA
J6+axAPiUTYOUBDrmpjtEEo1SlVLKOSHKPMY100ZqRQ97ulFI4/M4R0djDWyMLPn
twlK02KCTEsl3QeSzGwumv2bgVf13g6A7C9xLJ30OyUatdPC1vSV35qVIYulNFyc
tLAVPPBBRUsicCziw2PsCeDX2WqmsYjtpBdd0s7CAJNCYgCjr0oXWL+BHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLG54cJTY7rX5xLB9TD43odZ84EJMB8GA1UdIwQY
MBaAFKIyJMUBfTTs3CjQzzZELWW++eCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yMjdkMTQtZDc1MS00NTczLTk5MTkt
ZmVjOGE4MGVkMjMzLzEvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yMjdkMTQtZDc1MS00NTczLTk5MTktZmVjOGE4MGVkMjMz
LzEvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5n9cbv2
4X2+boggIYW8CCrc6PmKohXUfkIU6IepASCPHQpdCg0joSO6CkvL9J1rWrpleBzc
g2Bhrn9Iy/zfT2YCHfVco/3kIm+o1plYc3EY31E/p/HlawQihk6RMiRZXNo0Eznm
Q2vOXrXBKNcMmNsYRLVEBIfLwkasQh0z3w/fAiNHT4I9yDmDM3UXn0nPYbPQk0EX
9dP5F04SXRUmSdQdYNxmH5PCdlNVrAQpAKqDvcAwbECndxUEGoua6oLQiAf20J/e
K/fPCm8CDJfVsB0/J9TfLxmm47aO1e5vbd+wGTRczY89x4+BlRpO3bYphCEbtwEF
qMmWm2rvvE9b6g==
-----END CERTIFICATE-----
Generated at Thu May 8 16:44:48 2025 by rpki-client