Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: mjJDf1xBTCumzbMnDI4Ag4S9n2ewfOcuO4Yae+YPNKE=
Subject key identifier: F0:52:A9:FD:BD:38:A1:74:28:E0:42:F9:24:5C:7A:57:2A:34:46:1F
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 0196A164A6BB32316FC4AEEDB334B147A0B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 1159
Signing time: Mon 05 May 2025 17:00:50 +0000
Manifest this update: Mon 05 May 2025 17:00:50 +0000
Manifest next update: Tue 06 May 2025 17:00:50 +0000
Files and hashes: 1: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: YP8HvNshTdtqzc9bXcoX7dNaS46YrFbieiyLn2Uq/q0=)
2: SkpuG1SShh_Tu0tEsS_zldokzRY.roa (hash: dFYDpE1wahaZPqcUFRinjMxK5eBFUvf/eJm1l8owCY8=)
3: wx1b7wSo3IENdo5aRxstuEb6e_8.roa (hash: Pjk1ZSdAEd1vWaEOWohydmZmcsdRJu6/0hd4TtAw+OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:a6:bb:32:31:6f:c4:ae:ed:b3:34:b1:47:a0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: May 5 17:00:50 2025 GMT
Not After : May 6 17:00:50 2025 GMT
Subject: CN=f052a9fdbd38a17428e042f9245c7a572a34461f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:f3:5e:5e:d9:6e:14:e2:61:d4:b4:11:aa:
ff:da:dc:0e:82:db:d1:a8:93:48:9d:a0:c1:a3:48:
a4:25:18:cb:fa:4f:c7:f0:27:91:ef:00:72:c5:e4:
0f:c0:18:e7:cc:13:7d:db:0c:2e:63:2d:41:26:3d:
e4:dc:f7:7d:22:01:20:53:05:f8:c0:2f:d0:8f:18:
e8:61:5a:8d:2d:d1:cc:70:07:51:19:54:4b:c3:7e:
07:83:c8:ad:91:12:5e:be:c9:a6:6d:92:59:a9:75:
e0:d3:8b:3b:95:ba:1b:6b:71:88:0d:15:a7:70:7d:
38:2f:20:28:6c:18:2c:1a:25:76:07:e9:3c:83:c7:
50:5a:46:27:c2:8f:3e:0c:82:7b:d7:ec:c4:1f:90:
bc:49:25:47:2f:64:34:97:5e:68:e9:b9:91:de:04:
ef:c1:03:66:7a:78:e7:2b:39:7e:29:02:e7:97:53:
63:04:bb:32:93:d0:67:32:d7:f2:8b:ca:74:de:fd:
02:fe:a7:66:32:dc:9c:4d:a9:16:ec:eb:7e:61:29:
4e:79:5d:64:4b:17:9f:a4:61:d6:4e:cd:95:43:e0:
52:ad:37:e8:7b:c6:c3:38:d6:9c:69:d1:f9:c7:fb:
84:a7:e2:ef:e4:b8:18:03:3a:21:ba:58:98:51:a4:
42:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:52:A9:FD:BD:38:A1:74:28:E0:42:F9:24:5C:7A:57:2A:34:46:1F
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:30:67:fa:67:e7:66:83:f9:fc:fd:75:06:0c:f9:9f:98:e9:
4f:26:ae:37:a9:bc:cf:52:8c:b1:9f:2a:55:65:30:a6:70:d9:
ef:dc:07:f3:97:f2:fa:5b:f7:de:0c:8c:95:96:b2:79:1f:11:
c5:ca:c3:f5:f0:53:e1:82:2d:7d:1f:7c:65:66:81:f1:75:dd:
a7:35:54:60:c6:08:fa:63:cd:81:95:ce:06:cc:a6:9c:33:14:
83:01:98:67:7a:96:04:ad:c6:6f:0d:76:0e:e4:f8:d3:a1:13:
58:20:58:82:3c:f7:b7:a7:71:2d:ee:39:2c:b0:9b:c8:26:fa:
cd:80:90:92:50:2f:69:3b:bd:d0:2d:e0:1f:ba:26:46:37:13:
21:47:1c:bc:5e:91:05:bb:b4:e6:48:04:72:e4:44:74:f9:2f:
37:f5:5c:0a:98:5d:a0:40:51:25:4e:23:a3:16:ca:4d:38:b6:
f5:68:68:9f:d3:bf:f0:f0:85:2d:8f:75:09:bb:31:d0:0a:5d:
71:89:32:c9:c5:8f:7a:d9:50:5b:15:fe:01:27:af:4c:1d:48:
e5:5e:ac:52:c7:3e:4f:a5:83:5e:31:a1:0b:83:0e:e6:8d:90:
0b:dd:9b:62:45:be:ba:0d:14:7f:03:06:81:cc:4e:d8:f1:cb:
a5:69:10:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahZKa7MjFvxK7tszSxR6C1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OGU5NjI4NDBjZDMxNjhkZDJlYTM5NmZlNjgxMjc2Mjhh
ZWFjMjcwHhcNMjUwNTA1MTcwMDUwWhcNMjUwNTA2MTcwMDUwWjAzMTEwLwYDVQQD
EyhmMDUyYTlmZGJkMzhhMTc0MjhlMDQyZjkyNDVjN2E1NzJhMzQ0NjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNbzXl7ZbhTiYdS0Ear/2twOgtvR
qJNInaDBo0ikJRjL+k/H8CeR7wByxeQPwBjnzBN92wwuYy1BJj3k3Pd9IgEgUwX4
wC/QjxjoYVqNLdHMcAdRGVRLw34Hg8itkRJevsmmbZJZqXXg04s7lboba3GIDRWn
cH04LyAobBgsGiV2B+k8g8dQWkYnwo8+DIJ71+zEH5C8SSVHL2Q0l15o6bmR3gTv
wQNmenjnKzl+KQLnl1NjBLsyk9BnMtfyi8p03v0C/qdmMtycTakW7Ot+YSlOeV1k
SxefpGHWTs2VQ+BSrTfoe8bDONacadH5x/uEp+Lv5LgYAzohuliYUaRCEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBSqf29OKF0KOBC+SRcelcqNEYfMB8GA1UdIwQY
MBaAFDiOlihAzTFo3S6jlv5oEnYorqwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEt
YzMyMTg0MGMxZmFhLzEvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEtYzMyMTg0MGMxZmFh
LzEvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTBn+mfn
ZoP5/P11Bgz5n5jpTyauN6m8z1KMsZ8qVWUwpnDZ79wH85fy+lv33gyMlZayeR8R
xcrD9fBT4YItfR98ZWaB8XXdpzVUYMYI+mPNgZXOBsymnDMUgwGYZ3qWBK3Gbw12
DuT406ETWCBYgjz3t6dxLe45LLCbyCb6zYCQklAvaTu90C3gH7omRjcTIUccvF6R
Bbu05kgEcuREdPkvN/VcCphdoEBRJU4joxbKTTi29Whon9O/8PCFLY91Cbsx0Apd
cYkyycWPetlQWxX+ASevTB1I5V6sUsc+T6WDXjGhC4MO5o2QC92bYkW+ug0UfwMG
gcxO2PHLpWkQgQ==
-----END CERTIFICATE-----
Generated at Mon May 5 19:34:04 2025 by rpki-client