Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft
File: OM0kYRn4VtiXOodwvsOf_EejydY.mft (raw, json)
Hash identifier: 5ylb7HBHOtbvFf5cUCGjOyKAlMOQD/sSLrCOjRaebR4=
Subject key identifier: E2:2C:F0:02:1E:19:6B:51:9D:C3:0C:C7:2F:6A:68:F2:61:7A:8C:8F
Authority key identifier: 38:CD:24:61:19:F8:56:D8:97:3A:87:70:BE:C3:9F:FC:47:A3:C9:D6
Certificate issuer: /CN=38cd246119f856d8973a8770bec39ffc47a3c9d6
Certificate serial: 0196CB05504DA91401C19319AE556717E9CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OM0kYRn4VtiXOodwvsOf_EejydY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft
Manifest number: 1538
Signing time: Tue 13 May 2025 19:00:45 +0000
Manifest this update: Tue 13 May 2025 19:00:45 +0000
Manifest next update: Wed 14 May 2025 19:00:45 +0000
Files and hashes: 1: OM0kYRn4VtiXOodwvsOf_EejydY.crl (hash: fR5n9QcVo+pM8MC8fq+nxSHf7Y/b35EFqPO99jP0RT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OM0kYRn4VtiXOodwvsOf_EejydY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:05:50:4d:a9:14:01:c1:93:19:ae:55:67:17:e9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38cd246119f856d8973a8770bec39ffc47a3c9d6
Validity
Not Before: May 13 19:00:45 2025 GMT
Not After : May 14 19:00:45 2025 GMT
Subject: CN=e22cf0021e196b519dc30cc72f6a68f2617a8c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:52:77:04:17:01:f0:17:29:66:ab:4a:7d:ed:
ec:64:22:79:e5:78:ae:d5:72:8f:fc:8c:ea:de:02:
d3:5c:e0:d1:c3:32:2d:2f:b2:92:3a:88:ab:9e:ea:
23:36:9c:c2:c8:5f:0a:e9:58:1a:a5:dc:eb:a7:08:
38:8d:51:1f:50:57:60:a8:bd:f4:c5:ef:a2:6e:c8:
9d:c0:77:6f:23:d0:bc:78:29:89:86:d8:67:7b:8e:
7a:d9:77:b4:ec:d7:ca:4b:3a:5c:c9:75:79:69:93:
a4:c9:61:b8:67:70:c3:2e:13:c0:80:8b:e6:ab:45:
e5:ab:69:bf:0e:4a:10:94:fe:84:38:67:ad:a8:f0:
0c:69:38:3d:33:73:c5:7c:6d:f2:f7:02:e7:25:bf:
10:a5:e4:8e:5b:8b:90:a6:77:fa:91:4e:e4:7c:38:
e1:37:78:97:59:64:5f:be:e3:56:f6:ff:77:c2:b2:
f7:13:a9:31:59:48:a7:a6:ae:f5:7c:f7:4a:6d:c9:
69:de:cb:5a:c8:08:6a:3b:8f:f3:0f:a9:de:37:11:
a5:17:83:95:d7:0c:99:70:32:09:8b:db:52:35:46:
11:69:2b:76:81:9b:25:ef:3a:1e:cf:c2:3b:17:09:
97:6c:64:de:57:85:0a:37:a8:9d:8a:3f:a5:d3:c0:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2C:F0:02:1E:19:6B:51:9D:C3:0C:C7:2F:6A:68:F2:61:7A:8C:8F
X509v3 Authority Key Identifier:
keyid:38:CD:24:61:19:F8:56:D8:97:3A:87:70:BE:C3:9F:FC:47:A3:C9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OM0kYRn4VtiXOodwvsOf_EejydY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:59:4c:ec:7f:27:8b:6e:0b:29:2c:a9:61:87:a2:07:df:39:
62:37:43:ed:50:c2:d8:74:b7:ad:09:8c:4e:ab:7a:09:32:9c:
b4:44:a0:25:44:33:5c:e7:2b:20:72:67:65:23:77:39:c6:1f:
b4:18:31:31:07:c9:26:64:a8:4d:be:9d:39:09:1e:0e:b2:9a:
39:93:45:e2:f9:ba:c7:78:f6:df:e8:13:93:e5:1a:42:e2:67:
f9:f4:e6:e7:a6:d2:8c:08:ff:d9:a4:ea:55:de:2c:ab:88:09:
d7:4e:cd:ac:2d:03:9c:d1:cb:af:82:9c:65:7b:e7:dc:d3:13:
b1:38:f7:f2:54:97:96:5a:31:cf:15:12:90:6f:58:f5:01:fb:
d0:d3:14:2a:b5:31:eb:02:71:f0:e1:ba:b6:01:ad:94:3f:ea:
9f:6e:47:8c:dd:4e:9c:96:6f:98:be:b4:73:82:58:56:89:27:
58:47:51:1e:e4:66:b0:3d:fb:a3:c8:9d:22:cc:9a:f5:e3:69:
c1:11:82:6f:71:3b:4b:6b:3b:ad:91:68:c2:04:29:07:c6:03:
98:22:39:30:8b:c2:e4:c3:a6:d4:8c:33:ad:34:72:7a:04:df:
34:05:98:89:cb:d8:35:7a:66:31:14:c2:c1:08:24:4f:78:2d:
1e:62:e7:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLBVBNqRQBwZMZrlVnF+nLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4Y2QyNDYxMTlmODU2ZDg5NzNhODc3MGJlYzM5ZmZjNDdh
M2M5ZDYwHhcNMjUwNTEzMTkwMDQ1WhcNMjUwNTE0MTkwMDQ1WjAzMTEwLwYDVQQD
EyhlMjJjZjAwMjFlMTk2YjUxOWRjMzBjYzcyZjZhNjhmMjYxN2E4YzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllJ3BBcB8BcpZqtKfe3sZCJ55Xiu
1XKP/Izq3gLTXODRwzItL7KSOoirnuojNpzCyF8K6Vgapdzrpwg4jVEfUFdgqL30
xe+ibsidwHdvI9C8eCmJhthne4562Xe07NfKSzpcyXV5aZOkyWG4Z3DDLhPAgIvm
q0Xlq2m/DkoQlP6EOGetqPAMaTg9M3PFfG3y9wLnJb8QpeSOW4uQpnf6kU7kfDjh
N3iXWWRfvuNW9v93wrL3E6kxWUinpq71fPdKbclp3stayAhqO4/zD6neNxGlF4OV
1wyZcDIJi9tSNUYRaSt2gZsl7zoez8I7FwmXbGTeV4UKN6idij+l08B9IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIs8AIeGWtRncMMxy9qaPJheoyPMB8GA1UdIwQY
MBaAFDjNJGEZ+FbYlzqHcL7Dn/xHo8nWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT00wa1lSbjRWdGlYT29kd3ZzT2ZfRWVqeWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85NjU5NWUtZTM2YS00MDUxLTg0NTMt
OGZjZDUzZDQzMWQ1LzEvT00wa1lSbjRWdGlYT29kd3ZzT2ZfRWVqeWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC85NjU5NWUtZTM2YS00MDUxLTg0NTMtOGZjZDUzZDQzMWQ1
LzEvT00wa1lSbjRWdGlYT29kd3ZzT2ZfRWVqeWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFlM7H8n
i24LKSypYYeiB985YjdD7VDC2HS3rQmMTqt6CTKctESgJUQzXOcrIHJnZSN3OcYf
tBgxMQfJJmSoTb6dOQkeDrKaOZNF4vm6x3j23+gTk+UaQuJn+fTm56bSjAj/2aTq
Vd4sq4gJ107NrC0DnNHLr4KcZXvn3NMTsTj38lSXlloxzxUSkG9Y9QH70NMUKrUx
6wJx8OG6tgGtlD/qn25HjN1OnJZvmL60c4JYVoknWEdRHuRmsD37o8idIsya9eNp
wRGCb3E7S2s7rZFowgQpB8YDmCI5MIvC5MOm1IwzrTRyegTfNAWYicvYNXpmMRTC
wQgkT3gtHmLnnw==
-----END CERTIFICATE-----
Generated at Wed May 14 04:41:11 2025 by rpki-client