Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
File: aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft (raw, json)
Hash identifier: EKpirfQQPVG8OElo5vUmQM71FnKA+wNtvCEh0meoFWM=
Subject key identifier: 48:C4:52:E5:A9:1C:A8:3F:0C:BC:FB:83:90:18:CC:21:F9:2E:9D:BF
Authority key identifier: 68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
Certificate issuer: /CN=68e078b5181be5fbe914b412a412096bc8d71549
Certificate serial: 0196BE25935EC1405680D00E057BF95E4B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 07:00:55 +0000
Manifest this update: Sun 11 May 2025 07:00:55 +0000
Manifest next update: Mon 12 May 2025 07:00:55 +0000
Files and hashes: 1: IXwdyS86SbDEc5r6DTqF-yyMhKo.roa (hash: MHPw/G9JdYVbN864pG/b/kFkrvcqi5VhnKr+4T0l/48=)
2: aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl (hash: B8V3PIeCoYRwXIfW1BSw7Ihe2v08UTITN3thkomFb0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:93:5e:c1:40:56:80:d0:0e:05:7b:f9:5e:4b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e078b5181be5fbe914b412a412096bc8d71549
Validity
Not Before: May 11 07:00:55 2025 GMT
Not After : May 12 07:00:55 2025 GMT
Subject: CN=48c452e5a91ca83f0cbcfb839018cc21f92e9dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:07:29:b1:c8:26:f0:6a:45:bb:41:cb:a4:
ca:b5:13:ef:9c:55:ad:2d:c3:bc:14:98:ae:c8:b0:
60:fe:be:85:04:32:2c:96:d0:4b:40:59:0e:e6:f7:
65:3b:5e:d8:26:5d:75:86:11:02:6f:fe:f4:5c:3c:
c5:c4:af:a7:9c:70:99:c4:ce:db:67:d6:73:e3:e2:
40:57:7c:aa:cf:79:2f:2b:b7:9b:91:28:9a:c4:cf:
77:d2:7d:37:56:b4:2c:e0:94:de:84:c6:1a:36:79:
14:d5:02:39:f4:ec:3e:03:68:19:5d:24:69:68:18:
ca:f9:95:36:12:4d:65:6c:52:c8:67:5d:3e:7f:ae:
85:14:af:e7:7c:e0:87:a1:e8:71:c9:c2:e2:6f:57:
ad:ea:2d:f5:a9:cd:ee:a5:fc:68:86:59:01:5e:fc:
7d:81:53:3e:4e:51:82:ff:b6:34:bd:2b:df:ff:99:
05:24:c0:e7:e2:da:21:c1:07:6b:ed:0e:57:96:c0:
7e:77:0d:00:eb:05:da:0c:47:56:04:e2:be:72:4c:
a7:a4:32:b3:1f:b8:7d:42:c3:aa:13:8a:b0:86:26:
cf:79:e3:e3:7e:51:d8:46:10:80:a7:76:61:f5:67:
71:f4:22:a1:a6:af:b3:0f:5f:be:8f:d3:93:d1:42:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C4:52:E5:A9:1C:A8:3F:0C:BC:FB:83:90:18:CC:21:F9:2E:9D:BF
X509v3 Authority Key Identifier:
keyid:68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b9:2f:db:42:89:8a:24:c1:50:67:b8:cc:fb:45:bd:9f:d0:
f1:66:56:12:fa:a7:4a:35:43:4e:63:fd:a9:17:18:57:14:d4:
06:35:d7:b4:df:90:7b:cb:63:5a:21:4f:14:1e:bd:10:04:c3:
92:f5:1e:bc:d2:5e:51:d1:ca:6d:80:11:92:97:8d:c9:01:4d:
97:03:8b:f6:02:af:56:92:73:a7:37:2c:d4:cf:7b:35:00:25:
96:07:47:5a:5b:93:d8:68:d4:68:c5:b0:6c:f3:73:e5:a7:14:
98:de:c6:a1:a8:24:ef:be:4a:23:2c:26:87:95:38:63:73:43:
66:54:97:41:cc:0d:f8:71:a9:bd:b3:d3:70:98:f7:c1:43:2b:
89:b1:eb:ea:0f:8c:a0:90:16:ed:09:a3:3f:f5:f8:39:3e:9a:
de:29:89:71:d9:d7:8b:f3:8b:52:ca:8d:a7:9e:93:4e:dd:51:
65:a5:c5:e5:d0:9f:bf:39:c6:b5:ed:0b:23:44:54:74:32:82:
f0:ae:a0:48:0c:77:60:16:fa:ee:8b:1b:27:38:87:47:14:61:
4a:b7:85:e8:83:90:fd:f5:0f:f1:ac:2d:f0:80:4d:98:d3:dc:
c7:0b:64:44:15:74:ee:81:ac:0e:96:41:ac:a6:6b:8c:a9:41:
25:89:f4:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+JZNewUBWgNAOBXv5XksuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZTA3OGI1MTgxYmU1ZmJlOTE0YjQxMmE0MTIwOTZiYzhk
NzE1NDkwHhcNMjUwNTExMDcwMDU1WhcNMjUwNTEyMDcwMDU1WjAzMTEwLwYDVQQD
Eyg0OGM0NTJlNWE5MWNhODNmMGNiY2ZiODM5MDE4Y2MyMWY5MmU5ZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCYHKbHIJvBqRbtBy6TKtRPvnFWt
LcO8FJiuyLBg/r6FBDIsltBLQFkO5vdlO17YJl11hhECb/70XDzFxK+nnHCZxM7b
Z9Zz4+JAV3yqz3kvK7ebkSiaxM930n03VrQs4JTehMYaNnkU1QI59Ow+A2gZXSRp
aBjK+ZU2Ek1lbFLIZ10+f66FFK/nfOCHoehxycLib1et6i31qc3upfxohlkBXvx9
gVM+TlGC/7Y0vSvf/5kFJMDn4tohwQdr7Q5XlsB+dw0A6wXaDEdWBOK+ckynpDKz
H7h9QsOqE4qwhibPeePjflHYRhCAp3Zh9Wdx9CKhpq+zD1++j9OT0UK45QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjEUuWpHKg/DLz7g5AYzCH5Lp2/MB8GA1UdIwQY
MBaAFGjgeLUYG+X76RS0EqQSCWvI1xVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU9CNHRSZ2I1ZnZwRkxRU3BCSUphOGpYRlVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8zMTM5ODgtNmYyMS00NTNlLThlZjQt
ZTY3MWQ5NGIwYTIwLzEvYU9CNHRSZ2I1ZnZwRkxRU3BCSUphOGpYRlVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8zMTM5ODgtNmYyMS00NTNlLThlZjQtZTY3MWQ5NGIwYTIw
LzEvYU9CNHRSZ2I1ZnZwRkxRU3BCSUphOGpYRlVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAurkv20KJ
iiTBUGe4zPtFvZ/Q8WZWEvqnSjVDTmP9qRcYVxTUBjXXtN+Qe8tjWiFPFB69EATD
kvUevNJeUdHKbYARkpeNyQFNlwOL9gKvVpJzpzcs1M97NQAllgdHWluT2GjUaMWw
bPNz5acUmN7Goagk775KIywmh5U4Y3NDZlSXQcwN+HGpvbPTcJj3wUMribHr6g+M
oJAW7QmjP/X4OT6a3imJcdnXi/OLUsqNp56TTt1RZaXF5dCfvznGte0LI0RUdDKC
8K6gSAx3YBb67osbJziHRxRhSreF6IOQ/fUP8awt8IBNmNPcxwtkRBV07oGsDpZB
rKZrjKlBJYn0ZA==
-----END CERTIFICATE-----
Generated at Sun May 11 13:27:48 2025 by rpki-client