Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
File: oiw84jcbnyHFfgw6V4fZWnNctQA.mft (raw, json)
Hash identifier: goZpYJtuJX6To2Doc4iH9CJ0shcOp1d4N5KWs2D7lk8=
Subject key identifier: F1:E6:58:6A:1E:C8:13:A0:D5:3D:0D:5C:25:5B:D1:25:FD:A5:0A:1B
Authority key identifier: A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
Certificate issuer: /CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Certificate serial: 0196C4CBFE7477B9D25A7B30356802FA8947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
Manifest number: 0F32
Signing time: Mon 12 May 2025 14:00:25 +0000
Manifest this update: Mon 12 May 2025 14:00:25 +0000
Manifest next update: Tue 13 May 2025 14:00:25 +0000
Files and hashes: 1: U4H4DXiB1R3t2sbazcIxIzp8LJM.roa (hash: d9YRAg9H/qZYSSHmjXFBkp2EkGuj36QH5Z/4fdmKOEA=)
2: oiw84jcbnyHFfgw6V4fZWnNctQA.crl (hash: 93l11fCjkz+3pEupJpPWHodnLl0bqxiR1mpHO6lK7dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cb:fe:74:77:b9:d2:5a:7b:30:35:68:02:fa:89:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Validity
Not Before: May 12 14:00:25 2025 GMT
Not After : May 13 14:00:25 2025 GMT
Subject: CN=f1e6586a1ec813a0d53d0d5c255bd125fda50a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:81:77:72:5f:9e:48:87:e0:fd:8a:11:e9:8f:
bb:5c:51:e3:90:b4:07:1b:22:05:8e:f9:32:24:d5:
ed:13:e3:81:7d:37:2d:69:62:b9:b8:3a:8a:2a:6c:
7a:11:15:41:39:77:47:7a:8e:03:50:04:8e:18:ca:
ac:f0:cd:df:09:eb:dd:cc:52:2b:e2:21:cc:11:d6:
0b:49:77:b3:46:5e:4d:7d:fd:db:5b:42:48:26:61:
03:d6:de:15:ea:55:1b:98:1c:fa:1c:d6:38:3d:47:
2e:69:62:85:de:67:89:3e:aa:c4:ca:5a:6c:b8:a2:
ce:36:ed:e4:3a:70:b8:8b:f9:80:1a:ce:07:38:e2:
13:6f:b2:1a:f6:07:5e:51:ab:44:9f:84:22:b1:a3:
9b:68:c5:e8:e9:22:ee:fe:59:d9:3a:92:29:5d:e7:
98:ab:87:90:40:8d:2c:16:4c:0d:e9:9e:85:9e:e1:
f8:e2:86:bf:6c:df:a4:cc:72:08:f8:91:4f:aa:70:
4d:4d:75:6d:35:df:28:a5:7c:30:98:01:b1:52:58:
41:78:ba:7a:ae:30:95:48:ad:d7:cb:34:0a:cf:2a:
f3:35:5b:dd:30:36:55:e4:a3:c9:7d:7d:8f:90:3f:
0c:0c:ea:06:6b:be:31:fd:40:03:f9:d8:7a:e6:38:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E6:58:6A:1E:C8:13:A0:D5:3D:0D:5C:25:5B:D1:25:FD:A5:0A:1B
X509v3 Authority Key Identifier:
keyid:A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4f:24:96:83:e5:e9:67:d3:b2:81:a2:4f:8a:34:d5:fc:2d:
78:3a:70:89:96:88:f7:4f:8e:8f:a6:57:0f:a3:2d:ef:dd:19:
8e:f8:f1:37:46:33:f8:c2:e9:9d:6f:25:93:0a:8b:68:88:54:
b8:4d:69:8c:b1:cb:31:7b:7b:f5:82:bc:4c:1f:5e:57:cb:5f:
2a:05:f6:a6:6d:26:f0:3c:b2:4d:06:e4:e9:08:63:e9:a1:ae:
fe:4d:bd:c7:a9:db:95:bf:f6:fa:b1:c4:1a:1f:d9:a7:84:ed:
93:eb:1f:d5:18:24:84:be:5f:d3:4f:d0:a6:b4:20:1d:0c:98:
c7:46:e7:14:15:68:86:ee:fe:a4:58:a2:c5:90:51:23:c5:94:
05:b5:6f:73:8c:56:38:b1:de:23:a3:85:86:68:01:ba:09:10:
04:c2:56:9f:b8:b1:cd:ca:6e:72:19:ac:ad:35:40:1a:dd:ff:
7c:a5:35:27:a9:0f:75:f3:4e:5a:77:2a:ce:2f:74:2c:02:35:
cf:ad:42:e9:ee:41:81:cf:7e:0d:15:83:af:2d:85:8d:2c:12:
dc:93:f1:f4:ad:0f:60:f7:29:ee:21:61:2a:be:7f:49:15:c1:
51:38:93:13:b2:d1:31:e1:73:ec:80:1f:ff:58:66:ef:b3:45:
e0:1d:53:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEy/50d7nSWnswNWgC+olHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMmMzY2UyMzcxYjlmMjFjNTdlMGMzYTU3ODdkOTVhNzM1
Y2I1MDAwHhcNMjUwNTEyMTQwMDI1WhcNMjUwNTEzMTQwMDI1WjAzMTEwLwYDVQQD
EyhmMWU2NTg2YTFlYzgxM2EwZDUzZDBkNWMyNTViZDEyNWZkYTUwYTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YF3cl+eSIfg/YoR6Y+7XFHjkLQH
GyIFjvkyJNXtE+OBfTctaWK5uDqKKmx6ERVBOXdHeo4DUASOGMqs8M3fCevdzFIr
4iHMEdYLSXezRl5Nff3bW0JIJmED1t4V6lUbmBz6HNY4PUcuaWKF3meJPqrEylps
uKLONu3kOnC4i/mAGs4HOOITb7Ia9gdeUatEn4QisaObaMXo6SLu/lnZOpIpXeeY
q4eQQI0sFkwN6Z6FnuH44oa/bN+kzHII+JFPqnBNTXVtNd8opXwwmAGxUlhBeLp6
rjCVSK3XyzQKzyrzNVvdMDZV5KPJfX2PkD8MDOoGa74x/UAD+dh65jhqLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHmWGoeyBOg1T0NXCVb0SX9pQobMB8GA1UdIwQY
MBaAFKIsPOI3G58hxX4MOleH2VpzXLUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2l3ODRqY2JueUhGZmd3NlY0ZlpXbk5jdFFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81MDZlYzgtMTUwZi00Mjc1LWFjMDUt
MDUzOTNmMmIzYTQ3LzEvb2l3ODRqY2JueUhGZmd3NlY0ZlpXbk5jdFFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81MDZlYzgtMTUwZi00Mjc1LWFjMDUtMDUzOTNmMmIzYTQ3
LzEvb2l3ODRqY2JueUhGZmd3NlY0ZlpXbk5jdFFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo08kloPl
6WfTsoGiT4o01fwteDpwiZaI90+Oj6ZXD6Mt790ZjvjxN0Yz+MLpnW8lkwqLaIhU
uE1pjLHLMXt79YK8TB9eV8tfKgX2pm0m8DyyTQbk6Qhj6aGu/k29x6nblb/2+rHE
Gh/Zp4Ttk+sf1RgkhL5f00/QprQgHQyYx0bnFBVohu7+pFiixZBRI8WUBbVvc4xW
OLHeI6OFhmgBugkQBMJWn7ixzcpuchmsrTVAGt3/fKU1J6kPdfNOWncqzi90LAI1
z61C6e5Bgc9+DRWDry2FjSwS3JPx9K0PYPcp7iFhKr5/SRXBUTiTE7LRMeFz7IAf
/1hm77NF4B1TzA==
-----END CERTIFICATE-----
Generated at Mon May 12 18:39:32 2025 by rpki-client