
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
File: oU6-xYG-93sycD2LRtMnjBkaKz0.mft (raw, json)
Hash identifier: ygOWvpyyHg5znIwKrX+A4IoTXuIbRyGYayPKD+u4w6Y=
Subject key identifier: F5:0C:7A:22:76:23:2E:46:A3:A5:33:3F:1B:89:64:D7:29:3F:8B:42
Authority key identifier: A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
Certificate issuer: /CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Certificate serial: 0196A955146925144376A3CC065776186803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
Manifest number: 1525
Signing time: Wed 07 May 2025 06:00:47 +0000
Manifest this update: Wed 07 May 2025 06:00:47 +0000
Manifest next update: Thu 08 May 2025 06:00:47 +0000
Files and hashes: 1: oU6-xYG-93sycD2LRtMnjBkaKz0.crl (hash: iLjwzYLkXGnCSJv+IKMkgRagm1wFPrt0Ndtejv3BHmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:55:14:69:25:14:43:76:a3:cc:06:57:76:18:68:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Validity
Not Before: May 7 06:00:47 2025 GMT
Not After : May 8 06:00:47 2025 GMT
Subject: CN=f50c7a2276232e46a3a5333f1b8964d7293f8b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:24:48:a9:c4:1b:44:e9:65:48:15:b8:81:
6b:d6:ca:3f:95:dc:23:c6:16:94:a6:bd:37:23:39:
7b:e9:66:fa:59:ea:c0:1d:ed:3e:c2:6d:49:4c:57:
0a:27:6e:40:02:2e:84:4a:90:f6:2c:b4:6b:7a:e8:
5d:ea:ba:d4:2e:aa:78:6b:73:5d:f5:4d:31:a2:77:
72:71:4a:fa:67:6d:13:5e:31:eb:4d:2e:76:ec:13:
cd:51:03:ba:46:47:52:93:2d:24:57:56:3f:51:6d:
34:b8:39:55:8b:10:d4:7e:9a:a3:dc:e9:21:f6:cf:
6e:fb:60:6d:b2:61:3f:19:99:d0:a3:da:d5:8d:5e:
ba:63:aa:18:11:0d:cd:79:e3:32:4d:55:53:59:15:
0b:36:9b:4b:42:bf:9e:0c:d1:8b:0f:16:7c:fa:04:
df:2d:42:44:88:3c:eb:c8:f2:68:cf:ee:48:cd:47:
9f:ea:1f:ab:e6:45:d6:4a:9a:1f:cd:9a:91:3b:3d:
07:d7:22:c7:f8:29:58:c7:67:5d:9d:ad:45:56:d5:
5b:86:d5:d3:75:19:ed:3a:e3:93:6c:c1:4c:da:12:
3f:69:8e:16:d9:23:ca:b5:0d:3e:58:e2:5b:03:0c:
6a:89:32:cc:c1:8a:9c:ad:dd:f6:27:d9:08:f0:7a:
0c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0C:7A:22:76:23:2E:46:A3:A5:33:3F:1B:89:64:D7:29:3F:8B:42
X509v3 Authority Key Identifier:
keyid:A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2e:4c:a6:b9:7e:12:bb:eb:fc:87:e3:3b:25:fc:a5:ee:09:
b7:40:41:4f:f9:5b:8f:23:d2:af:40:13:56:8f:9d:b9:d5:a4:
3c:60:5d:a6:86:3d:58:be:13:ff:2e:5a:bb:4a:b5:fa:b7:c9:
c7:99:50:57:72:3c:d5:14:29:79:d0:e2:3d:db:b1:65:78:ae:
b9:d7:b6:07:8d:45:ac:93:6e:0d:e2:83:ac:cf:d4:b7:39:c3:
5a:a5:4a:47:fa:0c:6f:5b:29:f5:f7:11:26:cd:1d:a5:aa:1c:
c5:5b:b1:77:2a:af:f7:af:e1:61:65:5a:1e:80:93:79:2a:dd:
82:6e:a8:98:62:80:64:d5:95:93:17:fd:35:34:68:37:04:78:
3e:26:2c:12:fc:f5:0c:25:b3:3a:a9:c4:a8:06:0c:aa:e2:72:
63:2a:f6:87:13:a8:2f:ab:65:95:ca:96:54:b1:00:92:fe:12:
11:15:05:f6:68:c6:13:c7:f6:4b:16:04:03:bf:d7:0b:43:c6:
cb:00:7b:1c:f9:31:4f:0f:e3:29:81:20:f4:f2:69:ab:88:4f:
82:e7:2d:99:5d:5f:03:ad:56:35:11:b1:ea:f5:60:e4:2f:04:
b1:13:1b:39:3f:a8:91:10:99:b6:89:64:94:36:1a:03:49:41:
31:35:5b:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZapVRRpJRRDdqPMBld2GGgDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNGViZWM1ODFiZWY3N2IzMjcwM2Q4YjQ2ZDMyNzhjMTkx
YTJiM2QwHhcNMjUwNTA3MDYwMDQ3WhcNMjUwNTA4MDYwMDQ3WjAzMTEwLwYDVQQD
EyhmNTBjN2EyMjc2MjMyZTQ2YTNhNTMzM2YxYjg5NjRkNzI5M2Y4YjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgAkSKnEG0TpZUgVuIFr1so/ldwj
xhaUpr03Izl76Wb6WerAHe0+wm1JTFcKJ25AAi6ESpD2LLRreuhd6rrULqp4a3Nd
9U0xondycUr6Z20TXjHrTS527BPNUQO6RkdSky0kV1Y/UW00uDlVixDUfpqj3Okh
9s9u+2BtsmE/GZnQo9rVjV66Y6oYEQ3NeeMyTVVTWRULNptLQr+eDNGLDxZ8+gTf
LUJEiDzryPJoz+5IzUef6h+r5kXWSpofzZqROz0H1yLH+ClYx2ddna1FVtVbhtXT
dRntOuOTbMFM2hI/aY4W2SPKtQ0+WOJbAwxqiTLMwYqcrd32J9kI8HoMcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUMeiJ2Iy5Go6UzPxuJZNcpP4tCMB8GA1UdIwQY
MBaAFKFOvsWBvvd7MnA9i0bTJ4wZGis9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1U2LXhZRy05M3N5Y0QyTFJ0TW5qQmthS3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMDExOWYtMmQyNy00YzFiLWJhZGMt
NDFlNGNkY2ZiZDVhLzEvb1U2LXhZRy05M3N5Y0QyTFJ0TW5qQmthS3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMDExOWYtMmQyNy00YzFiLWJhZGMtNDFlNGNkY2ZiZDVh
LzEvb1U2LXhZRy05M3N5Y0QyTFJ0TW5qQmthS3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbC5Mprl+
Ervr/IfjOyX8pe4Jt0BBT/lbjyPSr0ATVo+dudWkPGBdpoY9WL4T/y5au0q1+rfJ
x5lQV3I81RQpedDiPduxZXiuude2B41FrJNuDeKDrM/UtznDWqVKR/oMb1sp9fcR
Js0dpaocxVuxdyqv96/hYWVaHoCTeSrdgm6omGKAZNWVkxf9NTRoNwR4PiYsEvz1
DCWzOqnEqAYMquJyYyr2hxOoL6tllcqWVLEAkv4SERUF9mjGE8f2SxYEA7/XC0PG
ywB7HPkxTw/jKYEg9PJpq4hPguctmV1fA61WNRGx6vVg5C8EsRMbOT+okRCZtolk
lDYaA0lBMTVbQA==
-----END CERTIFICATE-----
Generated at Wed May 7 13:00:28 2025 by rpki-client