Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
File: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json)
Hash identifier: CvOqA0Zb5Szrb5Gx2Pap+QzAdKML1435z2+mVwBi2bw=
Subject key identifier: 0E:96:C5:5E:8F:11:D6:39:42:BE:24:78:0D:24:88:73:7D:21:5B:CB
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial: 0196A0F64374B63AF1EF9742F5753E0E1A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
Manifest number: 0986
Signing time: Mon 05 May 2025 15:00:15 +0000
Manifest this update: Mon 05 May 2025 15:00:15 +0000
Manifest next update: Tue 06 May 2025 15:00:15 +0000
Files and hashes: 1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: CNMU1IlpZOGM2/BYNnVgnTVRBXKPImeQ9iLCvetXdro=)
2: my3o3dT-eplM7qhNIqgkY-xUMAU.roa (hash: FEhLISLzUVk+az2cUSg9otpj4LY6SNS67CMNyG2sJTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:43:74:b6:3a:f1:ef:97:42:f5:75:3e:0e:1a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Validity
Not Before: May 5 15:00:15 2025 GMT
Not After : May 6 15:00:15 2025 GMT
Subject: CN=0e96c55e8f11d63942be24780d2488737d215bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:3a:b0:eb:a6:4a:79:af:e5:ea:0b:5f:ed:
74:9c:94:c1:cf:b0:f4:db:a8:ff:51:05:e7:3e:e9:
72:69:25:8e:12:28:0a:9f:89:3f:13:66:82:29:8f:
85:37:22:3f:c5:2c:3f:e8:ea:96:27:f2:eb:48:08:
8a:0d:9b:73:4b:02:27:35:68:b6:92:ec:a4:2d:ae:
4d:e9:b7:fd:66:00:15:b7:2c:5a:6c:4e:6b:f6:64:
6c:10:d0:77:e0:4d:ad:e0:de:c3:c5:d2:6c:49:98:
57:6c:9a:58:d2:7b:4f:75:e7:36:78:77:10:4e:ae:
85:f2:58:e9:be:fc:f8:9f:3f:e5:8a:e2:e4:82:7c:
ae:fd:83:a3:da:1b:cb:78:7b:94:5b:61:e6:db:d1:
04:e4:8f:ad:04:2a:70:94:15:8e:fe:3d:40:28:09:
1d:53:a8:e7:e1:24:e6:13:fd:b2:47:14:a1:f3:32:
36:ff:33:7b:30:4e:dc:e4:14:72:b7:00:e8:c0:76:
24:75:b6:8c:fa:2b:90:86:c1:50:79:d8:5e:cf:0b:
ac:88:e9:f5:99:bd:8a:5a:67:8f:c4:b3:78:e4:d6:
82:ea:47:33:36:26:a6:0d:aa:47:59:ff:e0:be:be:
31:45:df:f8:70:21:77:ff:8f:1f:ef:f6:5f:ee:41:
f4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:96:C5:5E:8F:11:D6:39:42:BE:24:78:0D:24:88:73:7D:21:5B:CB
X509v3 Authority Key Identifier:
keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d9:d9:0f:0d:6d:94:b4:7c:d9:30:10:44:82:fe:cf:37:32:
0a:89:b4:fc:72:ff:40:20:60:03:34:1e:22:85:c2:20:55:7c:
5c:b7:1a:07:da:65:99:62:be:ee:b7:f6:43:8a:1c:fd:d1:b1:
36:fa:8e:72:e8:73:8b:f2:bf:ba:73:75:cb:f2:b6:93:a4:a8:
a1:54:6c:c9:8e:67:cd:80:a1:ab:17:9d:f3:91:67:4b:07:c6:
d4:6c:49:a2:cc:b9:a5:e3:e3:77:14:c9:e1:89:95:9a:af:c5:
c5:cb:4e:35:e2:60:c7:15:8b:5a:14:18:4c:e4:e6:b6:44:24:
f0:e9:c2:20:39:1b:a8:6e:2a:87:29:a1:8f:a7:37:c6:35:dd:
35:15:cc:70:90:81:f1:a2:16:3c:ae:6e:09:40:85:dd:f2:dc:
cd:7b:be:95:63:d3:f4:a5:60:51:b6:cd:32:58:15:3a:6d:f4:
ae:b8:18:bf:5e:cf:65:1b:87:65:81:4b:0d:7a:0d:a1:1a:23:
8a:cb:17:ef:22:a5:80:de:04:54:4f:77:1f:f8:20:2a:95:73:
ed:26:7f:3e:1c:75:81:e3:21:63:c0:0a:ae:a4:e2:65:d0:ae:
6b:4d:99:f7:8d:c3:a7:ae:52:93:09:f7:a7:08:87:b4:fe:dc:
22:8a:37:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZag9kN0tjrx75dC9XU+DhoKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZjk3ODllMWI1OWZhMmYyYzUwY2UxZThlMTJlYjk3NjU1
YmJjZGQwHhcNMjUwNTA1MTUwMDE1WhcNMjUwNTA2MTUwMDE1WjAzMTEwLwYDVQQD
EygwZTk2YzU1ZThmMTFkNjM5NDJiZTI0NzgwZDI0ODg3MzdkMjE1YmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0U6sOumSnmv5eoLX+10nJTBz7D0
26j/UQXnPulyaSWOEigKn4k/E2aCKY+FNyI/xSw/6OqWJ/LrSAiKDZtzSwInNWi2
kuykLa5N6bf9ZgAVtyxabE5r9mRsENB34E2t4N7DxdJsSZhXbJpY0ntPdec2eHcQ
Tq6F8ljpvvz4nz/liuLkgnyu/YOj2hvLeHuUW2Hm29EE5I+tBCpwlBWO/j1AKAkd
U6jn4STmE/2yRxSh8zI2/zN7ME7c5BRytwDowHYkdbaM+iuQhsFQedhezwusiOn1
mb2KWmePxLN45NaC6kczNiamDapHWf/gvr4xRd/4cCF3/48f7/Zf7kH0KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6WxV6PEdY5Qr4keA0kiHN9IVvLMB8GA1UdIwQY
MBaAFNL5eJ4bWfovLFDOHo4S65dlW7zdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGIt
YmM1YWI4MTk4N2YwLzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGItYmM1YWI4MTk4N2Yw
LzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtnZDw1t
lLR82TAQRIL+zzcyCom0/HL/QCBgAzQeIoXCIFV8XLcaB9plmWK+7rf2Q4oc/dGx
NvqOcuhzi/K/unN1y/K2k6SooVRsyY5nzYChqxed85FnSwfG1GxJosy5pePjdxTJ
4YmVmq/FxctONeJgxxWLWhQYTOTmtkQk8OnCIDkbqG4qhymhj6c3xjXdNRXMcJCB
8aIWPK5uCUCF3fLczXu+lWPT9KVgUbbNMlgVOm30rrgYv17PZRuHZYFLDXoNoRoj
issX7yKlgN4EVE93H/ggKpVz7SZ/Phx1geMhY8AKrqTiZdCua02Z943Dp65Skwn3
pwiHtP7cIoo3yA==
-----END CERTIFICATE-----
Generated at Mon May 5 18:42:31 2025 by rpki-client