Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
File: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft (raw, json)
Hash identifier: 3TgK+jlX72OzTiY0RSJBQxOSRyRpW7XYSbHYJMkNR/Y=
Subject key identifier: F4:65:6E:18:C7:4D:B7:AD:AE:6C:53:B5:CF:19:F2:7A:CF:B3:4D:36
Authority key identifier: D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
Certificate issuer: /CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Certificate serial: 0196D2BED93FF3F6BF0CCFAA6BE50F8AA731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
Manifest number: 0F6A
Signing time: Thu 15 May 2025 07:00:44 +0000
Manifest this update: Thu 15 May 2025 07:00:44 +0000
Manifest next update: Fri 16 May 2025 07:00:44 +0000
Files and hashes: 1: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl (hash: d5Rshen6xQbNhZFjV/bGUWbLlLe7Egpf7TJ5FUZReoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:be:d9:3f:f3:f6:bf:0c:cf:aa:6b:e5:0f:8a:a7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Validity
Not Before: May 15 07:00:44 2025 GMT
Not After : May 16 07:00:44 2025 GMT
Subject: CN=f4656e18c74db7adae6c53b5cf19f27acfb34d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:08:d9:f7:97:59:af:41:8c:ea:83:49:f3:be:
5e:ff:61:01:e6:27:c9:86:71:2f:f5:90:71:fd:40:
be:60:6e:a2:42:1f:0c:f2:2b:db:30:b1:38:d3:60:
92:66:8b:28:72:3d:c7:78:eb:ce:ba:86:85:73:d7:
ff:ba:e2:db:64:d2:ca:4a:01:d8:36:bd:0a:12:18:
06:0e:75:48:33:d6:1b:a9:66:7c:f0:98:71:09:a8:
11:91:56:1d:b4:8d:3e:e1:47:73:a9:90:3c:32:06:
7c:ca:0e:53:df:6a:f3:94:f1:20:62:45:8b:72:d0:
eb:27:ac:51:16:3a:77:e2:dc:1a:9e:91:59:48:ea:
0b:b0:c6:5e:28:e5:69:70:7a:1c:6a:05:64:77:87:
2c:5c:25:d1:22:7f:98:a7:0a:79:9b:95:f2:13:8c:
64:84:8b:ef:db:b6:7d:6d:b1:4f:c1:d9:61:4c:5e:
de:6c:4a:da:bd:28:ce:e3:e1:41:80:aa:58:c6:74:
30:cc:87:84:ce:81:20:49:57:55:45:3e:0b:0b:fb:
38:fa:ce:ed:ae:2e:48:a2:9c:9d:df:00:cd:12:1b:
7b:6b:6b:62:07:0e:7e:17:a0:dc:e7:80:82:8c:09:
34:6f:91:c3:c5:a3:c7:dd:5c:f2:ef:94:e6:41:b4:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:65:6E:18:C7:4D:B7:AD:AE:6C:53:B5:CF:19:F2:7A:CF:B3:4D:36
X509v3 Authority Key Identifier:
keyid:D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:31:6c:c9:dd:83:8c:3b:e6:2b:dd:59:b3:d5:37:4c:ff:32:
6d:dc:58:b6:08:df:40:5a:0c:e5:7b:70:ab:9c:82:8c:44:8e:
d9:58:ca:d4:35:93:59:e8:fd:ac:78:99:7d:e6:05:c7:2a:72:
08:66:31:da:82:36:fe:34:a0:fb:01:e7:73:c6:cb:63:69:f2:
fa:06:f2:79:ab:57:2c:dd:0b:0b:e4:4b:d1:59:0a:f5:7f:9f:
a0:67:dc:34:12:00:fd:fa:38:25:f9:1b:96:49:26:99:ed:28:
22:e9:50:d3:23:04:2a:f8:6b:29:94:2a:e4:dd:a5:2c:ba:43:
62:c4:52:9b:d9:c0:f7:ec:db:e4:a3:58:a9:a4:cf:c9:2f:e1:
c1:f7:c4:66:ab:2d:03:c4:21:5e:3d:0c:a1:70:ac:42:7f:93:
4e:4f:c9:4d:e4:ce:7a:0e:4e:10:b8:d4:7d:01:a3:f4:54:6e:
b8:ab:41:96:97:77:cb:b6:49:cd:05:73:c8:6b:55:63:2b:aa:
45:e6:06:e2:d8:b1:9a:eb:73:14:11:7d:b4:cb:2a:c4:28:7d:
01:4a:00:d4:f2:1b:90:bf:f7:b9:7d:b7:ad:92:83:49:c7:04:
2c:fc:6a:fb:47:86:c9:9b:f0:4f:d2:b3:f0:2e:a5:f6:a4:51:
a8:c3:45:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbSvtk/8/a/DM+qa+UPiqcxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZTg4M2I1YjkyMzY3OGZhMDczMjFmMjVjMThmZjNhMjZj
MjUwZmIwHhcNMjUwNTE1MDcwMDQ0WhcNMjUwNTE2MDcwMDQ0WjAzMTEwLwYDVQQD
EyhmNDY1NmUxOGM3NGRiN2FkYWU2YzUzYjVjZjE5ZjI3YWNmYjM0ZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AjZ95dZr0GM6oNJ875e/2EB5ifJ
hnEv9ZBx/UC+YG6iQh8M8ivbMLE402CSZosocj3HeOvOuoaFc9f/uuLbZNLKSgHY
Nr0KEhgGDnVIM9YbqWZ88JhxCagRkVYdtI0+4UdzqZA8MgZ8yg5T32rzlPEgYkWL
ctDrJ6xRFjp34twanpFZSOoLsMZeKOVpcHocagVkd4csXCXRIn+Ypwp5m5XyE4xk
hIvv27Z9bbFPwdlhTF7ebEravSjO4+FBgKpYxnQwzIeEzoEgSVdVRT4LC/s4+s7t
ri5Iopyd3wDNEht7a2tiBw5+F6Dc54CCjAk0b5HDxaPH3Vzy75TmQbTbUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRlbhjHTbetrmxTtc8Z8nrPs002MB8GA1UdIwQY
MBaAFNTog7W5I2ePoHMh8lwY/zomwlD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU9pRHRia2paNC1nY3lIeVhCal9PaWJDVVBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hMWI1OGEtY2MxYy00ODY1LTkzZGUt
MmQzZWY5YjBhZDIzLzEvMU9pRHRia2paNC1nY3lIeVhCal9PaWJDVVBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9hMWI1OGEtY2MxYy00ODY1LTkzZGUtMmQzZWY5YjBhZDIz
LzEvMU9pRHRia2paNC1nY3lIeVhCal9PaWJDVVBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArjFsyd2D
jDvmK91Zs9U3TP8ybdxYtgjfQFoM5Xtwq5yCjESO2VjK1DWTWej9rHiZfeYFxypy
CGYx2oI2/jSg+wHnc8bLY2ny+gbyeatXLN0LC+RL0VkK9X+foGfcNBIA/fo4Jfkb
lkkmme0oIulQ0yMEKvhrKZQq5N2lLLpDYsRSm9nA9+zb5KNYqaTPyS/hwffEZqst
A8QhXj0MoXCsQn+TTk/JTeTOeg5OELjUfQGj9FRuuKtBlpd3y7ZJzQVzyGtVYyuq
ReYG4tixmutzFBF9tMsqxCh9AUoA1PIbkL/3uX23rZKDSccELPxq+0eGyZvwT9Kz
8C6l9qRRqMNFnA==
-----END CERTIFICATE-----
Generated at Thu May 15 17:13:37 2025 by rpki-client