Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
File: oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft (raw, json)
Hash identifier: WLWLCT423a3NveNO9w4biQGHVKxoUP8l7bCZNHzGW/Q=
Subject key identifier: 6D:E0:83:1F:11:43:73:48:50:05:A9:DB:34:D9:0E:34:10:75:C9:D1
Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
Certificate issuer: /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Certificate serial: 0196BC6DBB81AEC400F822EC45A1D6B79F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 23:00:30 +0000
Manifest this update: Sat 10 May 2025 23:00:30 +0000
Manifest next update: Sun 11 May 2025 23:00:30 +0000
Files and hashes: 1: QkZZT0OmyPm1U7sUIDpJIndlAn4.roa (hash: 2DQZexpqRbr1zDWnxxG0byMVlPhiUoCIJC9UgWimgPI=)
2: T8KLOt6NPvQjdduRK2LFDHFk-Ow.roa (hash: dmD7G0wa7KStRC2oIGcFu5FuaJHoaquq+ceiOTM5mGE=)
3: oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl (hash: BlkvR7SmZZABFP1dokcnv3lF4FGj/U4u7Oyjnf5ctYc=)
4: uE6sCBGadbkdNjamuV9CVt7KEu0.roa (hash: 1QH+0Q+M4LSSW1D1mW+DBLCOYwkL6R7teXBJDnbRr5c=)
5: yQrnhCAAVRdNwjOPjF1ErzWjUdw.roa (hash: wlIPSP/dxpPek11XcClQXG8X5S1Ifs5kIcm9YTpY8Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:bb:81:ae:c4:00:f8:22:ec:45:a1:d6:b7:9f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Validity
Not Before: May 10 23:00:30 2025 GMT
Not After : May 11 23:00:30 2025 GMT
Subject: CN=6de0831f114373485005a9db34d90e341075c9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:34:93:b2:17:31:2b:62:42:c2:6c:d1:70:e1:
3f:23:13:2d:0f:c4:ae:47:b4:b7:b0:c0:36:e4:a6:
cf:75:57:c7:4a:5f:85:58:55:d6:a0:6e:7c:fe:f1:
05:b6:29:1a:f3:f1:aa:cd:73:0e:6a:ec:0f:c7:c9:
b5:d9:6d:26:2e:8a:97:b8:67:0f:17:c5:65:67:4d:
69:ae:fe:5f:e6:12:58:5b:21:6c:f8:a1:27:8b:e5:
aa:b2:aa:03:81:e2:b7:f4:67:76:40:68:4b:5b:37:
2b:eb:80:35:7e:fa:78:cf:30:0a:1a:ac:f4:07:19:
f9:a5:b7:46:41:fc:24:a7:bc:b5:1e:e6:8d:a4:45:
a3:c9:cc:57:7c:a1:18:74:4e:3b:17:6b:d4:b9:44:
09:1d:1a:40:c3:bd:23:5e:f7:5f:eb:88:27:9f:e5:
26:d8:c9:80:ab:c7:23:63:31:bb:09:3b:7f:ec:d1:
19:20:08:38:68:26:2a:94:e8:4f:77:94:53:9c:4b:
45:44:f7:5b:d1:0f:b0:a9:b5:f7:7e:f6:c1:a9:fc:
00:94:cb:9c:2a:75:ac:2c:2a:a3:55:82:cb:50:56:
f5:06:da:c2:97:3c:59:df:20:58:64:23:35:ec:31:
88:3e:e1:ad:21:31:19:9f:56:51:0b:e3:0e:74:06:
82:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E0:83:1F:11:43:73:48:50:05:A9:DB:34:D9:0E:34:10:75:C9:D1
X509v3 Authority Key Identifier:
keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f5:1f:6b:18:71:82:65:e7:43:c2:79:98:16:5f:54:c5:50:
73:cb:ab:b7:74:2e:d7:db:e6:88:5c:87:69:7a:85:30:08:e9:
f0:70:f8:0c:8b:a2:a0:97:ba:25:6a:f4:e0:50:b4:62:af:d2:
ec:77:d2:63:9e:e4:54:a0:2f:4b:71:99:6d:88:89:16:2e:00:
2c:d7:86:f0:33:09:bc:ec:a7:e0:bc:d0:80:a1:a6:21:43:6e:
5f:59:f2:8b:9e:ac:f9:f9:99:44:74:6d:c9:63:e4:2c:a0:7b:
ba:49:94:01:39:f7:b7:66:1b:41:b3:a3:a6:ac:0b:28:ae:f3:
9e:2c:73:1e:07:57:28:0d:44:85:8c:0a:ab:44:c8:3c:7f:be:
76:3b:9c:b3:ac:ff:41:cf:a0:00:7a:11:04:6f:28:20:d3:b5:
72:81:15:c1:fd:58:b7:0f:16:d3:70:a0:ea:62:c8:0d:c7:da:
30:0a:03:7b:6f:8a:ea:bd:11:c7:d8:46:4f:5e:31:3e:80:29:
af:d4:13:3c:86:55:26:c4:75:da:2b:2d:19:f7:75:42:77:fe:
12:5b:49:3e:00:e9:08:90:40:6e:d8:c8:e5:3a:85:1f:33:17:
50:e6:25:1c:ee:f2:d5:1e:7f:d3:73:dc:51:fd:b2:1e:ca:5c:
0f:3d:a0:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8bbuBrsQA+CLsRaHWt59ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYWZlMWZlZDFmMmI3ZGIyNGEwYzJkMWY2MTAxMDY4NGU5
M2NiZDUwHhcNMjUwNTEwMjMwMDMwWhcNMjUwNTExMjMwMDMwWjAzMTEwLwYDVQQD
Eyg2ZGUwODMxZjExNDM3MzQ4NTAwNWE5ZGIzNGQ5MGUzNDEwNzVjOWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzSTshcxK2JCwmzRcOE/IxMtD8Su
R7S3sMA25KbPdVfHSl+FWFXWoG58/vEFtika8/GqzXMOauwPx8m12W0mLoqXuGcP
F8VlZ01prv5f5hJYWyFs+KEni+WqsqoDgeK39Gd2QGhLWzcr64A1fvp4zzAKGqz0
Bxn5pbdGQfwkp7y1HuaNpEWjycxXfKEYdE47F2vUuUQJHRpAw70jXvdf64gnn+Um
2MmAq8cjYzG7CTt/7NEZIAg4aCYqlOhPd5RTnEtFRPdb0Q+wqbX3fvbBqfwAlMuc
KnWsLCqjVYLLUFb1BtrClzxZ3yBYZCM17DGIPuGtITEZn1ZRC+MOdAaCxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3ggx8RQ3NIUAWp2zTZDjQQdcnRMB8GA1UdIwQY
MBaAFKCv4f7R8rfbJKDC0fYQEGhOk8vVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tfaF90SHl0OXNrb01MUjloQVFhRTZUeTlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zMjAyYWQtN2I0Ni00MjJkLWE0ZDIt
ZWNhNTNhN2Y3NzYyLzEvb0tfaF90SHl0OXNrb01MUjloQVFhRTZUeTlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zMjAyYWQtN2I0Ni00MjJkLWE0ZDItZWNhNTNhN2Y3NzYy
LzEvb0tfaF90SHl0OXNrb01MUjloQVFhRTZUeTlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPUfaxhx
gmXnQ8J5mBZfVMVQc8urt3Qu19vmiFyHaXqFMAjp8HD4DIuioJe6JWr04FC0Yq/S
7HfSY57kVKAvS3GZbYiJFi4ALNeG8DMJvOyn4LzQgKGmIUNuX1nyi56s+fmZRHRt
yWPkLKB7ukmUATn3t2YbQbOjpqwLKK7znixzHgdXKA1EhYwKq0TIPH++djucs6z/
Qc+gAHoRBG8oINO1coEVwf1Ytw8W03Cg6mLIDcfaMAoDe2+K6r0Rx9hGT14xPoAp
r9QTPIZVJsR12istGfd1Qnf+EltJPgDpCJBAbtjI5TqFHzMXUOYlHO7y1R5/03Pc
Uf2yHspcDz2g8Q==
-----END CERTIFICATE-----
Generated at Sun May 11 04:12:21 2025 by rpki-client