Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json)
Hash identifier: groKwZYwyRvq+cHZ4P2U7MxvfgGVa1GlBJZZ+Ym2OIQ=
Subject key identifier: 5E:58:AD:FD:07:90:37:EB:63:51:AE:76:59:08:DC:81:D6:23:37:F6
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial: 0196BB23ECA618CFA8F68074AE359D7A22CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
Manifest number: 148B
Signing time: Sat 10 May 2025 17:00:15 +0000
Manifest this update: Sat 10 May 2025 17:00:15 +0000
Manifest next update: Sun 11 May 2025 17:00:15 +0000
Files and hashes: 1: XK1HmfxcdTbRAdHlqNq8V7yYy_A.roa (hash: sq5IFjKXmmj7aEDxsZ6+3DEVQrRJ2eRe1t+cEED93OE=)
2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: Zg4HY2s3+kB5OKGg3fzHlQiA3jNnWTV+nDYLyoUTXzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:23:ec:a6:18:cf:a8:f6:80:74:ae:35:9d:7a:22:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Validity
Not Before: May 10 17:00:15 2025 GMT
Not After : May 11 17:00:15 2025 GMT
Subject: CN=5e58adfd079037eb6351ae765908dc81d62337f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:d2:17:b1:47:90:47:1c:dc:db:2e:1f:fe:
5c:97:57:4e:f5:ad:d1:ad:c2:e0:4c:1d:c7:dc:76:
2c:88:5a:b0:f6:c8:08:99:3a:f3:38:7b:02:f3:9c:
9a:f7:74:11:8c:b1:51:0d:3c:13:dc:1b:fb:80:2f:
98:c9:72:fe:56:d7:eb:ca:33:a3:85:7e:8a:27:d2:
f6:0b:ce:9a:cb:89:64:23:c2:ed:a9:b8:34:0c:50:
4e:ff:83:04:64:dd:a4:5e:e1:2c:51:f7:e7:95:66:
bc:44:19:ce:c7:6c:72:86:e5:9b:3d:64:94:4c:e0:
c6:e2:8a:be:6c:04:a2:87:d9:51:67:92:a6:17:53:
01:f6:7b:7d:63:cc:fc:ea:78:e1:5b:83:28:c7:e0:
47:68:ab:b8:0b:d5:9c:82:63:06:9d:5f:e2:89:83:
b0:7b:9e:fc:69:2b:dd:5f:c1:a4:fc:38:80:0d:49:
6e:bc:e6:85:39:0d:34:3e:8d:b8:e7:b4:af:83:b8:
4e:fd:30:04:ad:2f:17:b2:7e:16:17:ae:05:e5:76:
6f:c0:a9:1b:1f:63:a1:03:bf:18:dc:56:b1:0a:20:
61:6b:a6:7c:40:3d:98:1a:8a:e7:73:bc:71:86:8f:
39:fe:d7:3e:53:25:c0:c0:5c:a1:f2:88:09:da:89:
5d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:58:AD:FD:07:90:37:EB:63:51:AE:76:59:08:DC:81:D6:23:37:F6
X509v3 Authority Key Identifier:
keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c3:94:fc:90:2e:3e:45:ab:24:b9:24:2a:85:09:f4:6e:e1:
f4:3c:74:b4:9a:67:ef:34:c0:20:2c:da:56:1e:86:15:86:b3:
12:e8:b4:39:84:4c:0a:ba:c6:80:ae:88:35:3b:44:58:5e:5a:
d1:f1:9e:c3:c1:c7:ea:f7:68:e8:ec:a8:98:c5:d3:88:cb:e7:
cf:03:e5:49:3f:19:8b:3e:27:5d:d0:4a:e7:5d:c4:95:5f:b6:
38:f2:61:90:e7:8c:75:4e:95:8a:e9:ff:6b:35:e2:81:61:a1:
08:88:55:88:b2:dc:49:d3:5a:5d:9b:62:b7:37:29:e0:57:f9:
fe:d5:6e:08:dd:b2:44:11:4e:37:e9:8b:7c:2a:66:c0:0a:2d:
6c:bf:e3:45:ae:65:3c:e3:70:9a:bc:fe:99:15:c1:fe:7c:08:
e7:fe:f5:db:22:e5:c4:d3:78:b6:c2:fe:63:49:d2:ac:30:45:
b4:42:f8:c3:f5:a1:1a:4d:e3:51:c1:9f:06:ab:24:03:82:ae:
50:bd:02:13:8c:e2:ba:0f:39:78:d6:0c:c1:2f:d3:58:e2:fb:
63:b4:df:67:1f:0b:10:44:9e:72:48:e7:06:b3:3b:e2:2a:7e:
3b:a6:46:49:2d:19:bb:9a:fc:6e:3d:28:86:2f:ae:10:9f:b7:
bf:2b:57:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7I+ymGM+o9oB0rjWdeiLLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOGUwYWVmMWNkMWU5ZDMyYTYxNmFkZjU4MjQ1YTNhYjg4
YTU1NGIwHhcNMjUwNTEwMTcwMDE1WhcNMjUwNTExMTcwMDE1WjAzMTEwLwYDVQQD
Eyg1ZTU4YWRmZDA3OTAzN2ViNjM1MWFlNzY1OTA4ZGM4MWQ2MjMzN2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9zSF7FHkEcc3NsuH/5cl1dO9a3R
rcLgTB3H3HYsiFqw9sgImTrzOHsC85ya93QRjLFRDTwT3Bv7gC+YyXL+VtfryjOj
hX6KJ9L2C86ay4lkI8Ltqbg0DFBO/4MEZN2kXuEsUffnlWa8RBnOx2xyhuWbPWSU
TODG4oq+bASih9lRZ5KmF1MB9nt9Y8z86njhW4Mox+BHaKu4C9WcgmMGnV/iiYOw
e578aSvdX8Gk/DiADUluvOaFOQ00Po2457Svg7hO/TAErS8Xsn4WF64F5XZvwKkb
H2OhA78Y3FaxCiBha6Z8QD2YGornc7xxho85/tc+UyXAwFyh8ogJ2oldYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5Yrf0HkDfrY1GudlkI3IHWIzf2MB8GA1UdIwQY
MBaAFKCOCu8c0enTKmFq31gkWjq4ilVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYmU3YjQtN2Y0Mi00MjE3LTgxOWIt
MjQ3NjI5MWQ3MGVlLzEvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zYmU3YjQtN2Y0Mi00MjE3LTgxOWItMjQ3NjI5MWQ3MGVl
LzEvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8OU/JAu
PkWrJLkkKoUJ9G7h9Dx0tJpn7zTAICzaVh6GFYazEui0OYRMCrrGgK6INTtEWF5a
0fGew8HH6vdo6OyomMXTiMvnzwPlST8Ziz4nXdBK513ElV+2OPJhkOeMdU6Viun/
azXigWGhCIhViLLcSdNaXZtitzcp4Ff5/tVuCN2yRBFON+mLfCpmwAotbL/jRa5l
PONwmrz+mRXB/nwI5/712yLlxNN4tsL+Y0nSrDBFtEL4w/WhGk3jUcGfBqskA4Ku
UL0CE4ziug85eNYMwS/TWOL7Y7TfZx8LEESeckjnBrM74ip+O6ZGSS0Zu5r8bj0o
hi+uEJ+3vytXCg==
-----END CERTIFICATE-----
Generated at Sat May 10 19:46:50 2025 by rpki-client