Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
File: k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft (raw, json)
Hash identifier: JDjf5oox+qvZITAMIj7+p4tu4wtIZHCqEq4Lg8lK+68=
Subject key identifier: 55:71:47:D4:3F:67:B7:5B:97:16:A3:EC:CB:2F:E3:C0:EA:E6:E2:FD
Authority key identifier: 93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE
Certificate issuer: /CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde
Certificate serial: 01969E2C6A9F40A37C0B063EF5C6974E7A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
Manifest number: 047D
Signing time: Mon 05 May 2025 02:00:33 +0000
Manifest this update: Mon 05 May 2025 02:00:33 +0000
Manifest next update: Tue 06 May 2025 02:00:33 +0000
Files and hashes: 1: 28GUm6MyGmDzZNaWznfWcQv0e_Y.roa (hash: C7L+FDUEfqbFey+e0t8jNl/x+IFvC1I+YVSxl7oinY0=)
2: k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl (hash: jyc4GxVUZkovHK47cozA45kjnshCcyPZEEuDt0AG6S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:6a:9f:40:a3:7c:0b:06:3e:f5:c6:97:4e:7a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde
Validity
Not Before: May 5 02:00:33 2025 GMT
Not After : May 6 02:00:33 2025 GMT
Subject: CN=557147d43f67b75b9716a3eccb2fe3c0eae6e2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:75:bd:cc:13:79:88:5c:0b:c5:00:b9:8c:
ae:70:cf:b5:04:b3:c1:09:56:15:30:c5:e7:7d:72:
39:08:2d:2d:cb:00:fb:e3:bd:e3:e2:88:58:31:76:
7f:a2:fe:40:06:68:75:ef:4d:fa:95:04:70:b1:94:
4a:00:cd:aa:5d:d6:fb:cd:2a:a6:79:49:d9:70:34:
2f:9e:c1:c1:ae:51:0c:8c:c6:01:b2:cd:64:e3:05:
59:99:41:16:82:fd:8f:78:f4:32:a9:e7:1c:34:64:
85:92:07:a8:a9:77:89:29:6a:aa:f5:58:f9:fc:3f:
e9:a4:2c:4f:50:80:64:2b:2d:a4:9d:07:e5:b4:bb:
34:f6:f9:f2:84:c8:06:b9:57:18:ef:e9:c3:b2:1c:
42:2c:df:be:fe:7a:9a:ad:4d:2d:e6:26:3c:b1:59:
03:1d:f5:1e:d8:cc:22:ff:46:20:17:54:d2:ee:1a:
72:e2:0f:62:35:da:0c:2f:9c:1a:aa:42:75:59:1d:
a8:ce:f7:6a:fe:6c:bb:6b:cf:a7:3f:40:c1:6d:61:
0b:85:09:d1:30:9e:1a:e0:e0:26:cf:c2:b1:f2:d0:
5d:30:32:69:0f:9f:0c:9a:a2:a7:fb:11:1a:e5:8f:
90:81:a6:15:1a:4a:70:e8:5c:93:c2:c0:a7:ce:e0:
a2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:71:47:D4:3F:67:B7:5B:97:16:A3:EC:CB:2F:E3:C0:EA:E6:E2:FD
X509v3 Authority Key Identifier:
keyid:93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:fe:9d:65:be:23:ce:15:13:3c:5c:17:93:69:26:66:08:09:
fd:69:02:14:05:06:97:e1:fa:00:24:e6:73:44:74:78:e9:cc:
d9:f4:b8:7c:d2:2a:e6:9a:e6:64:e0:dd:9f:2a:c2:ea:04:0d:
97:3d:3d:b6:f5:2e:84:36:0e:c3:5c:34:40:14:2b:6a:72:71:
d5:5f:b7:20:40:63:ea:3a:70:c5:11:bc:5b:ee:c2:5e:85:04:
f7:d3:c9:11:d4:3c:c0:ef:9b:e7:7f:78:ff:98:a1:96:94:2f:
50:53:3c:04:0e:16:86:83:49:70:78:74:b8:d6:9a:9e:b6:92:
24:2a:9c:7e:5c:b0:39:3a:5e:7a:f2:62:fb:8d:66:b2:11:17:
61:f4:95:d8:b8:9b:85:fb:54:3c:2e:ef:14:03:10:23:33:5e:
08:f2:a5:4f:d3:e5:e3:10:bf:8e:72:26:11:6f:57:48:23:65:
44:b9:91:17:86:55:80:e4:22:7c:74:5b:f5:29:4c:67:c9:28:
b8:28:6c:a3:62:c6:87:dd:67:52:24:ce:ff:78:7e:5c:74:8f:
4c:19:54:e9:86:e9:9f:75:1b:59:f3:4e:49:0a:ba:c3:4a:48:
53:b9:03:9f:d7:29:a0:49:70:cf:dc:7c:42:2a:d2:92:45:79:
ea:7f:1e:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeLGqfQKN8CwY+9caXTnp7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZmExYTFkOTE3YTMwNDE3MzlhMmRlZTBmNDFjY2Y4MGM1
NTRkZGUwHhcNMjUwNTA1MDIwMDMzWhcNMjUwNTA2MDIwMDMzWjAzMTEwLwYDVQQD
Eyg1NTcxNDdkNDNmNjdiNzViOTcxNmEzZWNjYjJmZTNjMGVhZTZlMmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8V1vcwTeYhcC8UAuYyucM+1BLPB
CVYVMMXnfXI5CC0tywD7473j4ohYMXZ/ov5ABmh17036lQRwsZRKAM2qXdb7zSqm
eUnZcDQvnsHBrlEMjMYBss1k4wVZmUEWgv2PePQyqeccNGSFkgeoqXeJKWqq9Vj5
/D/ppCxPUIBkKy2knQfltLs09vnyhMgGuVcY7+nDshxCLN++/nqarU0t5iY8sVkD
HfUe2Mwi/0YgF1TS7hpy4g9iNdoML5waqkJ1WR2ozvdq/my7a8+nP0DBbWELhQnR
MJ4a4OAmz8Kx8tBdMDJpD58MmqKn+xEa5Y+QgaYVGkpw6FyTwsCnzuCiEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVxR9Q/Z7dblxaj7Msv48Dq5uL9MB8GA1UdIwQY
MBaAFJP6Gh2RejBBc5ot7g9BzPgMVU3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva19vYUhaRjZNRUZ6bWkzdUQwSE0tQXhWVGQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jMzlhMDctYTk3My00N2Y4LTliOWYt
ZmVkMjFlZmYyMzM4LzEva19vYUhaRjZNRUZ6bWkzdUQwSE0tQXhWVGQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jMzlhMDctYTk3My00N2Y4LTliOWYtZmVkMjFlZmYyMzM4
LzEva19vYUhaRjZNRUZ6bWkzdUQwSE0tQXhWVGQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlv6dZb4j
zhUTPFwXk2kmZggJ/WkCFAUGl+H6ACTmc0R0eOnM2fS4fNIq5prmZODdnyrC6gQN
lz09tvUuhDYOw1w0QBQranJx1V+3IEBj6jpwxRG8W+7CXoUE99PJEdQ8wO+b5394
/5ihlpQvUFM8BA4WhoNJcHh0uNaanraSJCqcflywOTpeevJi+41mshEXYfSV2Lib
hftUPC7vFAMQIzNeCPKlT9Pl4xC/jnImEW9XSCNlRLmRF4ZVgOQifHRb9SlMZ8ko
uChso2LGh91nUiTO/3h+XHSPTBlU6Ybpn3UbWfNOSQq6w0pIU7kDn9cpoElwz9x8
QirSkkV56n8e5w==
-----END CERTIFICATE-----
Generated at Mon May 5 06:06:58 2025 by rpki-client