Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: dIDRNYAkp9dtDpPhm0FRvh6cOasyVlKgPWSbDQjtyNg=
Subject key identifier: 70:FA:72:85:32:BB:51:60:26:2D:29:29:43:A0:B5:EA:63:F8:1E:37
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 0196C0EF56952D36A1048C28E0FDEA220FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 0C7A
Signing time: Sun 11 May 2025 20:00:32 +0000
Manifest this update: Sun 11 May 2025 20:00:32 +0000
Manifest next update: Mon 12 May 2025 20:00:32 +0000
Files and hashes: 1: kJ8USl-CuRMFXzbxSgE8sXBGngw.roa (hash: 2xL/58KHP5Hyj8g6eO0RiATHRjr5bChJ+dvKYUca1tI=)
2: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: u7JL6S5pAmCy4H3fg/4C70dsAyewfWDw2CYgjKKm1YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:56:95:2d:36:a1:04:8c:28:e0:fd:ea:22:0f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: May 11 20:00:32 2025 GMT
Not After : May 12 20:00:32 2025 GMT
Subject: CN=70fa728532bb5160262d292943a0b5ea63f81e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:60:0e:06:65:ea:5d:6d:74:df:3a:fc:23:9a:
c7:05:65:a3:81:bf:30:4d:ad:15:29:36:a5:06:0f:
c4:b6:72:92:fe:7b:52:33:cb:ba:bb:7f:0b:82:ab:
03:ce:d0:89:1c:a3:75:56:3d:50:dd:14:20:83:ad:
36:78:4f:b5:d9:77:d7:06:08:50:4d:61:9c:ce:17:
09:a5:31:4b:12:71:da:a9:7c:2a:a8:e9:79:9d:f7:
ff:a4:92:1a:ef:51:ec:38:16:2a:fe:d3:23:9b:d1:
eb:9c:19:0a:c0:d1:21:00:80:63:4b:10:a4:93:4a:
06:ef:65:27:ba:7b:0f:12:f7:4e:e1:04:ff:8b:e6:
54:63:00:47:fe:a0:4b:f4:54:1f:95:46:af:4b:3f:
02:84:7c:df:fe:51:35:5e:05:28:90:5f:e3:cb:78:
f9:33:93:52:34:68:00:03:59:43:b4:7a:59:1a:e0:
37:6a:85:d5:95:50:75:44:20:4b:78:10:53:44:72:
be:67:b4:e4:da:87:4b:83:9f:c8:eb:5d:49:ba:87:
39:90:3e:0e:2b:b2:37:be:af:a0:b5:05:db:16:32:
26:88:d6:8d:ac:61:5b:ba:04:58:60:9f:17:5c:06:
36:de:5f:46:68:b8:d4:2a:46:d5:47:a4:e9:2f:1c:
5c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FA:72:85:32:BB:51:60:26:2D:29:29:43:A0:B5:EA:63:F8:1E:37
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a7:77:f7:77:1c:d1:d7:00:ed:40:d3:28:f9:be:ad:f7:96:
aa:d6:54:d8:d7:75:df:be:85:95:77:7c:86:ff:20:68:ae:7c:
3b:92:8f:d7:87:92:99:f2:15:dd:79:b2:7f:73:08:4f:c7:b8:
d9:fa:09:a7:78:83:37:dc:fd:b0:f0:a1:aa:b2:67:5e:f2:8d:
a4:0f:0c:bd:cb:9f:d0:3a:dd:26:f5:0c:69:e2:e5:1f:50:fa:
aa:4d:5b:52:d1:91:d6:58:eb:59:e6:1b:b7:ad:d8:b3:96:b5:
78:29:5a:07:bc:43:b7:eb:99:ea:59:80:ef:b6:4f:87:d2:a9:
6b:d5:35:46:a4:54:bf:15:28:90:01:a3:b1:e3:23:f3:27:48:
5f:2c:30:a2:a4:0b:9f:e4:a4:9f:86:e0:13:ac:72:bb:88:ec:
b2:b2:23:35:7c:b0:70:e3:e8:b2:62:0a:68:62:fe:f1:c0:c2:
31:c0:45:a6:ef:b8:e4:3d:18:da:55:a0:92:9c:5e:76:af:75:
1d:38:3d:38:72:c6:24:25:08:91:b6:b7:be:20:b1:8e:41:9b:
bf:ed:7e:c2:64:a3:55:f9:7d:b0:91:75:07:5d:45:5c:b4:c0:
8b:96:7f:e6:d2:72:8f:2f:4a:21:1b:0d:d8:46:53:eb:49:24:
93:2e:59:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbA71aVLTahBIwo4P3qIg/2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhODM4ZjFjYThiZGNkODFjMDRiNmI2NzhlNzliZTYxNGU1
MWIxMTEwHhcNMjUwNTExMjAwMDMyWhcNMjUwNTEyMjAwMDMyWjAzMTEwLwYDVQQD
Eyg3MGZhNzI4NTMyYmI1MTYwMjYyZDI5Mjk0M2EwYjVlYTYzZjgxZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GAOBmXqXW103zr8I5rHBWWjgb8w
Ta0VKTalBg/EtnKS/ntSM8u6u38LgqsDztCJHKN1Vj1Q3RQgg602eE+12XfXBghQ
TWGczhcJpTFLEnHaqXwqqOl5nff/pJIa71HsOBYq/tMjm9HrnBkKwNEhAIBjSxCk
k0oG72UnunsPEvdO4QT/i+ZUYwBH/qBL9FQflUavSz8ChHzf/lE1XgUokF/jy3j5
M5NSNGgAA1lDtHpZGuA3aoXVlVB1RCBLeBBTRHK+Z7Tk2odLg5/I611Juoc5kD4O
K7I3vq+gtQXbFjImiNaNrGFbugRYYJ8XXAY23l9GaLjUKkbVR6TpLxxcrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHD6coUyu1FgJi0pKUOgtepj+B43MB8GA1UdIwQY
MBaAFLqDjxyovc2BwEtrZ455vmFOUbERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzct
MDkzZWI5YTlhYThiLzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzctMDkzZWI5YTlhYThi
LzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEKd393cc
0dcA7UDTKPm+rfeWqtZU2Nd1376FlXd8hv8gaK58O5KP14eSmfIV3Xmyf3MIT8e4
2foJp3iDN9z9sPChqrJnXvKNpA8Mvcuf0DrdJvUMaeLlH1D6qk1bUtGR1ljrWeYb
t63Ys5a1eClaB7xDt+uZ6lmA77ZPh9Kpa9U1RqRUvxUokAGjseMj8ydIXywwoqQL
n+Skn4bgE6xyu4jssrIjNXywcOPosmIKaGL+8cDCMcBFpu+45D0Y2lWgkpxedq91
HTg9OHLGJCUIkba3viCxjkGbv+1+wmSjVfl9sJF1B11FXLTAi5Z/5tJyjy9KIRsN
2EZT60kkky5ZWg==
-----END CERTIFICATE-----
Generated at Mon May 12 04:07:10 2025 by rpki-client