Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: s/0ckOsk6nZ36RzjqtXfowtzkZbKppZmvFds86v+EVk=
Subject key identifier: 78:F0:25:AE:D6:FB:A9:F1:14:DB:22:F9:58:88:33:8B:78:76:36:A7
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 0196C0B8779C736633B610786CA0215C0FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 19:00:36 +0000
Manifest this update: Sun 11 May 2025 19:00:36 +0000
Manifest next update: Mon 12 May 2025 19:00:36 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: EkzhvqJNzTpNnyGwJSttTGuLRV+ERvorUFkLePZ2E0c=)
2: d0vd09ijftZxQ36MggmGV19KbF8.roa (hash: qQnSCjOjuDvlDGOH0RwUYDIFq1N35gmrsquQwH69sXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:77:9c:73:66:33:b6:10:78:6c:a0:21:5c:0f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: May 11 19:00:36 2025 GMT
Not After : May 12 19:00:36 2025 GMT
Subject: CN=78f025aed6fba9f114db22f95888338b787636a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:00:73:ae:f8:5b:3d:66:07:72:57:d4:c6:
2c:db:89:fb:f8:2c:04:1b:87:18:f3:40:d5:f1:9d:
e5:66:ea:37:65:e0:23:1d:72:7b:70:01:c4:10:07:
c9:19:b3:93:43:29:c7:09:3f:d3:6a:fc:5c:7f:d3:
cd:a5:f0:90:7d:34:62:85:8c:07:c1:f8:11:6e:a8:
81:52:09:00:65:9e:0a:51:ef:4a:3c:5a:78:1c:1c:
0b:74:e4:50:3d:bf:72:b7:f8:19:8b:00:09:c9:3b:
0e:27:d8:c8:a5:87:8c:8b:54:90:24:72:e3:a6:b4:
f3:29:c4:02:fc:ad:dd:8c:2f:d1:34:7c:ce:64:af:
e2:ca:59:d5:e6:9e:f6:7d:5a:da:91:70:4b:88:47:
ce:42:8a:01:75:72:c0:7f:84:a4:17:ca:84:dc:89:
94:1c:15:c7:4d:28:8f:9d:73:16:13:9c:96:0f:88:
56:3d:71:e6:0a:92:e1:43:1b:6b:d4:83:47:8e:49:
16:ca:ca:96:84:98:ad:d5:29:5e:a8:8c:5f:c2:3c:
4b:d7:7a:d4:29:f0:ae:65:6b:33:a2:57:ea:9a:4f:
1d:c8:ca:3e:ac:b4:16:d7:52:f2:a7:84:ab:4d:6a:
33:50:b9:84:f2:ce:f3:48:5f:da:5d:5f:a3:62:a3:
5c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F0:25:AE:D6:FB:A9:F1:14:DB:22:F9:58:88:33:8B:78:76:36:A7
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b2:df:d6:66:82:af:f8:0b:d4:8f:60:04:5b:b1:73:2c:71:
ba:cc:98:85:3b:8e:91:c9:36:9c:f3:35:50:e5:7a:70:61:37:
33:1a:52:27:5c:cb:d6:41:a8:22:eb:ca:a9:43:4e:92:c9:c3:
e6:03:21:04:14:57:c3:4a:cd:6b:e1:6e:3f:4f:4e:0c:ed:c2:
2b:44:2c:12:23:1c:02:aa:dd:a2:78:d7:37:7e:f2:26:c9:de:
f3:a8:7b:9b:c1:3f:07:dd:dc:79:33:59:dc:10:1d:0b:72:ca:
94:56:f1:bb:ec:52:a5:b9:2b:87:62:a1:85:48:36:f0:da:f3:
04:0a:10:e7:65:07:42:99:95:70:a2:dc:d1:4e:61:10:bf:b4:
66:72:8a:53:87:60:09:9f:80:8d:fc:7f:e6:ab:c8:b6:00:7b:
5b:5e:86:d9:06:da:94:3f:5c:72:0a:47:d6:2f:a6:72:4a:51:
ee:7f:39:9b:74:bd:db:02:f7:4f:7d:39:e8:91:e9:83:41:05:
c8:25:65:1e:12:64:92:bc:16:40:19:dd:61:f4:f0:6b:ba:94:
20:82:69:7e:d7:61:a3:3f:f5:d8:f1:e2:2d:06:ec:15:2f:11:
72:75:72:62:28:16:de:9f:18:f7:05:1e:47:e7:ee:77:2e:0f:
61:da:d2:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAuHecc2YzthB4bKAhXA/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNGRmOWE1NDYwY2JkNDUwYjRlNzUzODAzOTNhODIxZTg1
Yzc0ZDgwHhcNMjUwNTExMTkwMDM2WhcNMjUwNTEyMTkwMDM2WjAzMTEwLwYDVQQD
Eyg3OGYwMjVhZWQ2ZmJhOWYxMTRkYjIyZjk1ODg4MzM4Yjc4NzYzNmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviEAc674Wz1mB3JX1MYs24n7+CwE
G4cY80DV8Z3lZuo3ZeAjHXJ7cAHEEAfJGbOTQynHCT/Tavxcf9PNpfCQfTRihYwH
wfgRbqiBUgkAZZ4KUe9KPFp4HBwLdORQPb9yt/gZiwAJyTsOJ9jIpYeMi1SQJHLj
prTzKcQC/K3djC/RNHzOZK/iylnV5p72fVrakXBLiEfOQooBdXLAf4SkF8qE3ImU
HBXHTSiPnXMWE5yWD4hWPXHmCpLhQxtr1INHjkkWysqWhJit1SleqIxfwjxL13rU
KfCuZWszolfqmk8dyMo+rLQW11Lyp4SrTWozULmE8s7zSF/aXV+jYqNc8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjwJa7W+6nxFNsi+ViIM4t4djanMB8GA1UdIwQY
MBaAFDtN+aVGDL1FC051OAOTqCHoXHTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzAzNXBVWU12VVVMVG5VNEE1T29JZWhjZE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wNDk3NWMtZWY0OS00NzU0LTk2Zjkt
OTgxMmQ3Y2ZkNjk0LzEvTzAzNXBVWU12VVVMVG5VNEE1T29JZWhjZE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wNDk3NWMtZWY0OS00NzU0LTk2ZjktOTgxMmQ3Y2ZkNjk0
LzEvTzAzNXBVWU12VVVMVG5VNEE1T29JZWhjZE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrLf1maC
r/gL1I9gBFuxcyxxusyYhTuOkck2nPM1UOV6cGE3MxpSJ1zL1kGoIuvKqUNOksnD
5gMhBBRXw0rNa+FuP09ODO3CK0QsEiMcAqrdonjXN37yJsne86h7m8E/B93ceTNZ
3BAdC3LKlFbxu+xSpbkrh2KhhUg28NrzBAoQ52UHQpmVcKLc0U5hEL+0ZnKKU4dg
CZ+Ajfx/5qvItgB7W16G2QbalD9ccgpH1i+mckpR7n85m3S92wL3T3056JHpg0EF
yCVlHhJkkrwWQBndYfTwa7qUIIJpftdhoz/12PHiLQbsFS8RcnVyYigW3p8Y9wUe
R+fudy4PYdrS1g==
-----END CERTIFICATE-----
Generated at Sun May 11 22:20:54 2025 by rpki-client