Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: rOlwpUcUcMYpEp7LWP2V2tOi2eNZjGCtAY9/bwGxJoE=
Subject key identifier: 9B:F3:EB:4B:1C:E4:5E:44:FB:06:51:3C:CF:F1:F8:D0:3C:3F:57:BB
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 0196BD499640E0565448362DB3A85039C954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 091D
Signing time: Sun 11 May 2025 03:00:38 +0000
Manifest this update: Sun 11 May 2025 03:00:38 +0000
Manifest next update: Mon 12 May 2025 03:00:38 +0000
Files and hashes: 1: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: CoJ4ePj5+7GlURkGHgd3b/UeuGF5puM5ZAVKliaoNVM=)
2: tlRgtWShtf4NCRA8IRgcZrxGH5w.roa (hash: vWrq/qn4dImxorSwjmmV3lM2Zem99YCBAV/uApBQcww=)
3: xTZoaA-8TmHEI1jMFDvCwHtiXYE.roa (hash: T7GombXt78c9iIE0H6vcNPnQnS19iaCgMsQG50c822A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:96:40:e0:56:54:48:36:2d:b3:a8:50:39:c9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: May 11 03:00:38 2025 GMT
Not After : May 12 03:00:38 2025 GMT
Subject: CN=9bf3eb4b1ce45e44fb06513ccff1f8d03c3f57bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:8a:7e:2c:df:e3:25:f4:70:61:7a:03:0f:
6d:b5:ca:b0:d6:da:6d:c9:50:d1:6f:e2:c3:f9:01:
59:14:4d:60:3d:bc:f9:2d:80:ff:c5:85:de:3e:af:
92:cd:89:26:b5:67:92:72:c2:37:cd:32:56:d2:ed:
8f:e6:2d:ca:09:3b:fc:32:c9:56:d1:ac:73:98:24:
a3:b8:fe:65:0d:16:b5:ac:5c:3f:8e:7a:c9:1f:e6:
96:cc:df:19:3e:c5:e2:e6:41:0c:81:b8:44:7b:02:
c7:0d:f2:df:a5:af:93:a4:02:aa:17:ad:7b:7d:90:
7e:9f:b3:14:78:36:aa:f0:04:9d:76:4d:ed:3f:ca:
5b:c2:8f:0b:12:00:9c:b5:fe:70:5a:53:22:f6:40:
76:52:b1:57:20:a0:68:24:75:33:b4:12:29:7c:12:
3d:17:88:2a:6e:1d:d4:51:fd:ef:60:9c:b0:c5:0f:
55:48:18:12:30:c4:4e:0f:72:fc:d6:4e:92:3d:e8:
dc:4f:b4:d9:03:18:75:86:f8:4d:c9:54:06:14:d4:
a7:a7:0b:1e:28:d7:82:ac:e9:f3:8a:1b:33:23:7c:
48:52:a6:c2:7f:67:e4:b6:fa:4d:ea:54:ec:f4:af:
77:0e:cc:3d:09:03:82:4a:d2:03:b7:0d:fb:b9:76:
b5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F3:EB:4B:1C:E4:5E:44:FB:06:51:3C:CF:F1:F8:D0:3C:3F:57:BB
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:34:fd:3b:91:6c:b0:d4:b8:9f:bb:eb:b5:51:d7:e9:59:de:
4b:5e:1f:07:b3:af:4d:1e:63:bc:08:66:fd:e3:4f:18:c0:13:
31:5c:f8:1a:b0:57:38:65:55:e8:95:4e:10:8a:5d:ea:f8:a9:
03:f2:1b:33:ca:67:d5:22:9a:31:f0:c9:3d:1c:87:6c:3f:c1:
23:a7:b8:eb:7b:dc:7b:e4:b5:14:02:59:ba:f5:76:b5:f0:81:
26:0f:32:e5:15:44:5c:72:24:82:6c:cb:7f:bf:50:3d:bf:cf:
09:06:7e:bc:97:68:a1:7b:b0:73:bd:b1:fa:43:86:8d:03:1e:
66:11:33:ff:9b:d0:8f:36:7f:e3:13:a8:1a:17:f5:d7:ae:56:
b8:0e:5c:c4:73:2e:c0:c8:fe:ea:26:94:4f:4c:2e:6e:79:fe:
98:e2:40:e8:3d:a2:a7:85:a6:ae:23:56:86:a9:a9:1e:95:1f:
63:e5:fc:17:a8:65:83:1e:4a:d8:84:f5:a3:82:41:34:5a:41:
f3:56:7c:36:58:f6:87:53:1d:a8:5c:b5:78:4c:f6:5b:03:a1:
11:26:5c:95:fa:9b:8d:44:b6:d4:02:29:f8:b3:c1:32:95:dc:
6b:12:8d:79:a0:99:55:64:d7:58:77:75:45:2d:58:8c:5c:bc:
79:60:e9:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9SZZA4FZUSDYts6hQOclUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMmI2MThiNTA4ZWMxMzY1MzcyYzJhYTY3NWYzNjAxMjkz
Y2M2MjQwHhcNMjUwNTExMDMwMDM4WhcNMjUwNTEyMDMwMDM4WjAzMTEwLwYDVQQD
Eyg5YmYzZWI0YjFjZTQ1ZTQ0ZmIwNjUxM2NjZmYxZjhkMDNjM2Y1N2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKuKfizf4yX0cGF6Aw9ttcqw1tpt
yVDRb+LD+QFZFE1gPbz5LYD/xYXePq+SzYkmtWeScsI3zTJW0u2P5i3KCTv8MslW
0axzmCSjuP5lDRa1rFw/jnrJH+aWzN8ZPsXi5kEMgbhEewLHDfLfpa+TpAKqF617
fZB+n7MUeDaq8ASddk3tP8pbwo8LEgCctf5wWlMi9kB2UrFXIKBoJHUztBIpfBI9
F4gqbh3UUf3vYJywxQ9VSBgSMMROD3L81k6SPejcT7TZAxh1hvhNyVQGFNSnpwse
KNeCrOnzihszI3xIUqbCf2fktvpN6lTs9K93Dsw9CQOCStIDtw37uXa10QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvz60sc5F5E+wZRPM/x+NA8P1e7MB8GA1UdIwQY
MBaAFKMrYYtQjsE2U3LCqmdfNgEpPMYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZmVkMGQtMGZiMC00NTk4LWIzNjUt
NjUwOTZkYmNhYzMwLzEvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jZmVkMGQtMGZiMC00NTk4LWIzNjUtNjUwOTZkYmNhYzMw
LzEvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzT9O5Fs
sNS4n7vrtVHX6VneS14fB7OvTR5jvAhm/eNPGMATMVz4GrBXOGVV6JVOEIpd6vip
A/IbM8pn1SKaMfDJPRyHbD/BI6e463vce+S1FAJZuvV2tfCBJg8y5RVEXHIkgmzL
f79QPb/PCQZ+vJdooXuwc72x+kOGjQMeZhEz/5vQjzZ/4xOoGhf1165WuA5cxHMu
wMj+6iaUT0wubnn+mOJA6D2ip4WmriNWhqmpHpUfY+X8F6hlgx5K2IT1o4JBNFpB
81Z8Nlj2h1MdqFy1eEz2WwOhESZclfqbjUS21AIp+LPBMpXcaxKNeaCZVWTXWHd1
RS1YjFy8eWDpdg==
-----END CERTIFICATE-----
Generated at Sun May 11 13:32:03 2025 by rpki-client