Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
File: OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft (raw, json)
Hash identifier: wRBbER57qJdKAieIgnOrPorZQOtFtBxrsMMyOoEYBE8=
Subject key identifier: CE:3E:00:C1:82:08:E7:F5:39:1D:DF:9A:C3:78:E0:C2:D5:31:A4:9E
Authority key identifier: 38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
Certificate issuer: /CN=38f23798b67393e4039e3f9555e214d6737c1351
Certificate serial: 0196C0B8C4DA05E26840890AAF2AE65F92FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 19:00:56 +0000
Manifest this update: Sun 11 May 2025 19:00:56 +0000
Manifest next update: Mon 12 May 2025 19:00:56 +0000
Files and hashes: 1: OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl (hash: hIG/QbBHk9sX1/grUloBfzc+tuS2ExihzfxLe/ltTdc=)
2: Vpoq5ZpSGDP-ZXCmZlKnhArAK_Q.roa (hash: 38YyvusiUhw1DBRUCOnZouY1Y0JBlQCEkMbtx6PZeK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:c4:da:05:e2:68:40:89:0a:af:2a:e6:5f:92:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f23798b67393e4039e3f9555e214d6737c1351
Validity
Not Before: May 11 19:00:56 2025 GMT
Not After : May 12 19:00:56 2025 GMT
Subject: CN=ce3e00c18208e7f5391ddf9ac378e0c2d531a49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:35:4c:2f:69:45:33:ad:62:97:ef:77:75:
13:40:0a:25:68:6f:4a:78:17:22:5b:c1:d0:9a:c3:
59:92:1c:71:ac:d7:a3:69:41:7f:a2:29:44:e4:97:
79:a2:30:c4:b0:d8:e2:59:78:17:9a:a8:18:6b:01:
c3:0c:17:56:3f:07:51:b0:b7:fc:84:b1:11:f9:53:
66:45:06:65:26:43:cd:39:d9:c7:1f:00:e5:0e:9c:
c6:ae:df:4a:9c:de:38:4a:8e:cb:ce:93:7b:bd:24:
0d:8c:f8:ee:9a:0f:3a:74:dc:b1:4e:b7:c0:c8:59:
6c:c4:f4:fe:e2:96:f0:e2:d5:3f:82:27:50:79:d6:
c2:ec:7f:94:4d:ec:b7:f4:18:e5:5e:89:17:a5:c1:
cc:ff:cf:9d:0e:59:7d:f6:3f:8e:51:c5:bc:2f:04:
33:2b:85:1a:35:57:21:2b:97:3f:b0:ff:20:40:20:
7a:35:84:78:e1:e1:6a:41:88:f3:f0:c9:25:11:f2:
b0:e4:8b:ac:1b:1b:f4:25:3c:1a:59:1a:09:7d:a2:
35:b7:ad:72:27:64:93:54:b9:74:7c:c7:ae:b9:4c:
9a:df:77:1f:50:16:f5:aa:41:31:d0:14:b3:af:1d:
4f:5a:0b:d1:59:5b:a7:5c:18:cf:b6:75:bf:7f:61:
80:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3E:00:C1:82:08:E7:F5:39:1D:DF:9A:C3:78:E0:C2:D5:31:A4:9E
X509v3 Authority Key Identifier:
keyid:38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:92:d3:e5:42:dd:5d:28:87:77:14:ba:45:1f:6b:28:4e:38:
6e:87:7b:bb:6d:75:6f:44:55:5a:60:9e:2f:05:51:7f:47:7a:
0a:c3:ae:ee:10:40:6d:65:40:c4:c0:20:0e:40:fc:18:71:d7:
ec:cf:1d:f9:61:3a:82:f9:5b:44:7d:c2:fb:6d:cc:dc:5a:47:
7f:c3:1c:cb:f2:ee:e1:fe:27:b8:ab:e2:30:cb:ff:f9:e2:07:
cc:13:d2:39:27:d1:36:81:bd:ee:99:a3:d2:52:ec:36:da:8a:
f4:d9:04:be:7b:73:fe:bf:05:7d:bf:d7:67:29:91:24:16:8f:
93:a2:34:9a:9e:6c:fa:81:fe:f6:7e:e6:0d:20:f2:96:82:40:
3e:65:df:a7:99:25:4f:e7:4b:8f:fe:c5:29:72:13:fb:12:5f:
0e:1a:d2:34:d3:1b:96:ca:bf:62:39:51:52:0f:20:a0:8e:5b:
da:bd:22:2a:00:b2:d1:4d:5c:9f:59:75:71:0d:7d:0d:ae:11:
ac:3b:86:76:89:c0:62:c8:fc:a6:9f:e5:69:12:bb:09:a6:38:
44:a0:04:00:95:28:94:fe:91:f9:ba:90:95:d1:6e:0f:04:c1:
46:94:8f:88:cc:ed:22:ef:16:2c:11:3c:b9:58:e8:6b:95:41:
77:e3:dd:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAuMTaBeJoQIkKryrmX5L9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZjIzNzk4YjY3MzkzZTQwMzllM2Y5NTU1ZTIxNGQ2NzM3
YzEzNTEwHhcNMjUwNTExMTkwMDU2WhcNMjUwNTEyMTkwMDU2WjAzMTEwLwYDVQQD
EyhjZTNlMDBjMTgyMDhlN2Y1MzkxZGRmOWFjMzc4ZTBjMmQ1MzFhNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsao1TC9pRTOtYpfvd3UTQAolaG9K
eBciW8HQmsNZkhxxrNejaUF/oilE5Jd5ojDEsNjiWXgXmqgYawHDDBdWPwdRsLf8
hLER+VNmRQZlJkPNOdnHHwDlDpzGrt9KnN44So7LzpN7vSQNjPjumg86dNyxTrfA
yFlsxPT+4pbw4tU/gidQedbC7H+UTey39BjlXokXpcHM/8+dDll99j+OUcW8LwQz
K4UaNVchK5c/sP8gQCB6NYR44eFqQYjz8MklEfKw5IusGxv0JTwaWRoJfaI1t61y
J2STVLl0fMeuuUya33cfUBb1qkEx0BSzrx1PWgvRWVunXBjPtnW/f2GAbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4+AMGCCOf1OR3fmsN44MLVMaSeMB8GA1UdIwQY
MBaAFDjyN5i2c5PkA54/lVXiFNZzfBNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1BJM21MWnprLVFEbmotVlZlSVUxbk44RTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85YWI0YzktMGMxMC00NjcxLWJkZDQt
NzMwZmNkMGU1ZGNhLzEvT1BJM21MWnprLVFEbmotVlZlSVUxbk44RTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy85YWI0YzktMGMxMC00NjcxLWJkZDQtNzMwZmNkMGU1ZGNh
LzEvT1BJM21MWnprLVFEbmotVlZlSVUxbk44RTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5LT5ULd
XSiHdxS6RR9rKE44bod7u211b0RVWmCeLwVRf0d6CsOu7hBAbWVAxMAgDkD8GHHX
7M8d+WE6gvlbRH3C+23M3FpHf8Mcy/Lu4f4nuKviMMv/+eIHzBPSOSfRNoG97pmj
0lLsNtqK9NkEvntz/r8Ffb/XZymRJBaPk6I0mp5s+oH+9n7mDSDyloJAPmXfp5kl
T+dLj/7FKXIT+xJfDhrSNNMblsq/YjlRUg8goI5b2r0iKgCy0U1cn1l1cQ19Da4R
rDuGdonAYsj8pp/laRK7CaY4RKAEAJUolP6R+bqQldFuDwTBRpSPiMztIu8WLBE8
uVjoa5VBd+PdLw==
-----END CERTIFICATE-----
Generated at Mon May 12 02:00:02 2025 by rpki-client