Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: rNRu0rmuBvGfS9Fz3Sbor6E4xIVlinyWnikSsFeCtm8=
Subject key identifier: 87:1F:9C:AD:5A:F2:C0:DE:28:03:30:1E:95:E1:43:B1:32:57:5B:45
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 0196B032E6DAA020C5316B01E042760FFD50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 03CF
Signing time: Thu 08 May 2025 14:00:47 +0000
Manifest this update: Thu 08 May 2025 14:00:47 +0000
Manifest next update: Fri 09 May 2025 14:00:47 +0000
Files and hashes: 1: 5Sdp75UI07U0XNu2tAWSzrc-qpk.roa (hash: SzIYjhnlLWEvz8Z1X0oLYzWFIohoOl7chIuBKt0PdE8=)
2: H1tYgXLLWfPNRsiraZOWsc2ElvQ.roa (hash: EmbP4jLbfudtKgGtKdZDrQ0gORWApQpD2bI92szlr5c=)
3: n41NhtFJXuy7O2MsnhnPAfCr2kE.roa (hash: ArC6Jxqpsmc09lGw1ULuf3dsi0Is5INs5UU1G0NJkHU=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: uv37HqWT0++pk9/ZVl7T/gWANiidbwcpk1I2i+tkg34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:32:e6:da:a0:20:c5:31:6b:01:e0:42:76:0f:fd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: May 8 14:00:47 2025 GMT
Not After : May 9 14:00:47 2025 GMT
Subject: CN=871f9cad5af2c0de2803301e95e143b132575b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:61:74:d1:11:6c:da:f8:a7:66:5a:33:65:76:
7d:8e:bf:07:8e:f8:8b:dc:6a:73:96:b6:d0:28:2e:
cb:53:c0:15:8f:e2:af:9c:f9:a0:12:ae:bb:2b:32:
4d:29:d1:65:d2:ef:c5:ab:3b:3d:9b:cc:08:a4:ad:
46:fe:a2:ad:b1:08:32:b8:bc:05:de:62:d4:c6:3b:
c2:86:8c:41:dd:b5:ae:9a:c8:50:68:63:31:b6:fa:
59:0a:f5:a7:1d:3f:b8:74:fa:b1:97:95:8c:68:fd:
4d:59:e0:2e:60:ab:1f:28:73:a8:82:b0:e9:7e:3a:
54:d2:38:35:28:7b:20:15:e5:60:22:05:32:73:a3:
dc:62:c6:b3:15:89:d5:9f:da:1d:d4:9a:db:fe:de:
77:e4:31:87:52:23:e2:c7:e3:20:a9:10:80:48:c8:
ed:2c:d3:fd:1b:13:75:76:90:57:39:40:14:41:5e:
e8:80:ed:09:88:34:6d:12:4c:53:bc:57:3e:32:4c:
52:62:e4:92:c0:1c:a0:f3:6b:20:e3:de:99:03:33:
54:f2:ec:89:2e:67:00:e4:e8:47:e8:2d:72:c7:ca:
fd:28:a6:f4:03:e8:cd:c6:de:f2:86:6c:10:90:7b:
5e:f7:ba:92:9c:b4:77:0e:50:47:f0:d1:e2:36:dc:
53:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1F:9C:AD:5A:F2:C0:DE:28:03:30:1E:95:E1:43:B1:32:57:5B:45
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8d:3c:66:db:dd:16:45:02:0e:9e:be:b4:65:93:83:dd:10:
9a:9b:c3:31:00:ac:89:e4:16:ee:30:6d:55:25:f8:34:88:1f:
d9:43:d9:93:b7:d9:49:75:e3:e9:38:a9:b9:21:4a:df:41:85:
71:51:40:6f:46:e5:1f:89:96:d5:c0:6d:df:2b:98:ca:ec:e9:
fe:ac:45:ca:c1:74:06:c4:f8:11:eb:ae:2c:26:c3:f5:5c:cb:
69:df:b5:38:9b:02:48:f2:97:c8:02:75:2e:bc:5e:53:96:c6:
d8:3e:55:7d:ad:2b:f0:07:a1:e7:5f:8f:4f:be:4b:61:b1:5d:
c5:03:dd:7e:e7:21:41:cd:dd:b4:2b:4f:7f:1d:f3:a7:4c:d5:
8b:83:e7:b8:c5:14:56:dc:3a:f7:74:05:0e:19:79:4c:fb:64:
ec:cc:83:9f:62:f9:18:08:44:11:4b:43:c8:d1:14:90:37:e8:
b1:bb:df:28:fe:e7:56:01:6f:44:cb:7d:85:02:8a:d4:fe:5e:
dd:c5:04:50:db:56:ff:fd:b7:1e:ed:27:d4:5f:f4:8e:18:25:
56:76:b1:8a:e9:1b:91:59:30:e3:40:46:45:29:37:3b:25:2f:
50:4b:c3:ba:1b:36:b3:26:07:49:3f:f2:4f:44:bc:fd:c0:98:
96:63:b1:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZawMubaoCDFMWsB4EJ2D/1QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExOWIyZDcwMjMzZTBlNWJkZWY2ZGJmYmRhOTE4ODZkMjdi
NmE1YWUwHhcNMjUwNTA4MTQwMDQ3WhcNMjUwNTA5MTQwMDQ3WjAzMTEwLwYDVQQD
Eyg4NzFmOWNhZDVhZjJjMGRlMjgwMzMwMWU5NWUxNDNiMTMyNTc1YjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mF00RFs2vinZlozZXZ9jr8HjviL
3GpzlrbQKC7LU8AVj+KvnPmgEq67KzJNKdFl0u/Fqzs9m8wIpK1G/qKtsQgyuLwF
3mLUxjvChoxB3bWumshQaGMxtvpZCvWnHT+4dPqxl5WMaP1NWeAuYKsfKHOogrDp
fjpU0jg1KHsgFeVgIgUyc6PcYsazFYnVn9od1Jrb/t535DGHUiPix+MgqRCASMjt
LNP9GxN1dpBXOUAUQV7ogO0JiDRtEkxTvFc+MkxSYuSSwByg82sg496ZAzNU8uyJ
LmcA5OhH6C1yx8r9KKb0A+jNxt7yhmwQkHte97qSnLR3DlBH8NHiNtxTVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcfnK1a8sDeKAMwHpXhQ7EyV1tFMB8GA1UdIwQY
MBaAFKGbLXAjPg5b3vbb+9qRiG0ntqWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUt
M2YxYTdjNGY1MWI1LzEvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUtM2YxYTdjNGY1MWI1
LzEvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA408Ztvd
FkUCDp6+tGWTg90QmpvDMQCsieQW7jBtVSX4NIgf2UPZk7fZSXXj6TipuSFK30GF
cVFAb0blH4mW1cBt3yuYyuzp/qxFysF0BsT4EeuuLCbD9VzLad+1OJsCSPKXyAJ1
LrxeU5bG2D5Vfa0r8Aeh51+PT75LYbFdxQPdfuchQc3dtCtPfx3zp0zVi4PnuMUU
Vtw693QFDhl5TPtk7MyDn2L5GAhEEUtDyNEUkDfosbvfKP7nVgFvRMt9hQKK1P5e
3cUEUNtW//23Hu0n1F/0jhglVnaxiukbkVkw40BGRSk3OyUvUEvDuhs2syYHST/y
T0S8/cCYlmOxLw==
-----END CERTIFICATE-----
Generated at Thu May 8 20:45:43 2025 by rpki-client