Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
File: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft (raw, json)
Hash identifier: Bc1FlgdXmjBq7UFjqCDQyeHlMuND1k/o3V02CQLaxug=
Subject key identifier: 98:A7:42:78:84:00:32:FA:6A:CE:6A:31:9B:FC:88:62:24:F0:AD:1D
Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
Certificate issuer: /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Certificate serial: 0196A54150A1B7177CC4418AEBDB0E94A00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
Manifest number: 036D
Signing time: Tue 06 May 2025 11:00:43 +0000
Manifest this update: Tue 06 May 2025 11:00:43 +0000
Manifest next update: Wed 07 May 2025 11:00:43 +0000
Files and hashes: 1: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl (hash: txNSvRs6FgqoVbljWmjrtOgmKtX9tylKrrULGJh+a5I=)
2: waNULbcRhTUiNsANSLGcB4J4itI.roa (hash: 9dW8NgonrZBc4IChXkCIdxerNGPGCgwx9gaoEJblTYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:41:50:a1:b7:17:7c:c4:41:8a:eb:db:0e:94:a0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Validity
Not Before: May 6 11:00:43 2025 GMT
Not After : May 7 11:00:43 2025 GMT
Subject: CN=98a74278840032fa6ace6a319bfc886224f0ad1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:a9:b6:e6:7b:9f:cd:a4:f4:d0:c6:cb:3a:
03:da:64:a8:1b:1b:cb:ec:6e:3a:2e:6c:58:a9:f6:
d5:8c:50:e2:9b:98:64:32:a4:8a:48:20:b7:fd:66:
c4:4a:b0:e4:05:30:0e:b3:ca:aa:1a:8f:61:7f:81:
ba:c7:3f:f2:87:ab:7d:44:2d:f3:f8:e3:a1:41:bd:
d8:5c:45:47:fc:1c:36:5f:60:89:0f:93:a5:e5:77:
9f:7b:12:9c:4a:db:0a:4c:f4:d1:70:0d:c4:04:29:
f0:10:bf:c2:b2:f2:f4:ba:4e:75:87:eb:31:d5:42:
23:86:3c:4a:7e:29:72:ac:f2:71:d0:55:af:ee:bf:
3f:c6:a0:86:b6:b8:58:73:aa:de:ab:8d:2e:fb:28:
04:e0:3f:d0:38:be:af:4c:b7:51:8e:82:94:87:be:
74:5e:2a:88:3c:fe:e2:31:ac:53:fb:ac:67:75:34:
d5:62:c3:31:95:64:6d:28:f1:fe:24:06:e8:5d:e7:
cf:44:9c:b6:fd:1f:56:b6:42:bf:f2:e2:19:1c:a6:
09:03:35:cf:ca:d0:70:0e:8c:02:03:f4:7f:ad:41:
c9:ae:6e:e7:80:09:59:99:79:eb:c2:ca:0d:96:38:
4a:63:01:71:e3:16:0a:00:44:90:28:db:59:80:f1:
b6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A7:42:78:84:00:32:FA:6A:CE:6A:31:9B:FC:88:62:24:F0:AD:1D
X509v3 Authority Key Identifier:
keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:df:ab:a3:3f:ad:41:fd:9d:3c:fc:85:9a:8e:1b:f2:45:d9:
15:c9:10:ae:99:a2:9c:97:3b:50:3e:b4:01:6e:91:8c:6b:a7:
0f:af:27:2e:c7:e5:33:f6:48:14:33:40:a3:ad:f5:9e:20:8c:
83:30:e6:b4:6f:37:29:6c:7e:38:92:71:11:a5:91:9e:f8:ae:
6c:33:12:f6:7a:98:5f:0a:9a:86:06:1d:1c:3a:5c:13:2c:53:
ac:de:a5:cb:f5:7d:6b:df:c4:4a:d8:8a:0a:9c:22:a7:8f:d1:
6a:ab:50:59:84:2d:db:6b:40:de:a7:2f:e4:48:19:52:c8:7e:
0a:d7:46:1e:b8:6a:92:4a:6a:28:fa:c7:fb:e1:88:88:ed:2c:
54:44:ab:77:fd:d3:a4:a6:57:bf:20:ce:a2:fc:f2:db:58:e7:
4a:c3:9a:06:58:4f:3d:d7:4c:71:39:d1:7c:98:96:fa:d8:69:
d9:31:df:90:f7:fa:68:39:cd:00:02:f9:58:64:ea:e4:9f:c8:
37:2b:47:9c:90:f2:bf:1a:40:b8:d7:6d:76:8c:08:5c:40:85:
a9:b7:4f:81:1b:b4:a6:37:1d:1c:9e:45:a8:60:30:d6:87:87:
cd:ee:c6:fa:02:1b:a2:ca:d0:7d:0c:89:62:5d:80:69:a5:70:
b5:30:05:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZalQVChtxd8xEGK69sOlKAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZjg4ZTgyYjM1YTBhZDZkMGZmMzE1NmFmMTMxOWRmYzE2
MmY4ZTgwHhcNMjUwNTA2MTEwMDQzWhcNMjUwNTA3MTEwMDQzWjAzMTEwLwYDVQQD
Eyg5OGE3NDI3ODg0MDAzMmZhNmFjZTZhMzE5YmZjODg2MjI0ZjBhZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuOptuZ7n82k9NDGyzoD2mSoGxvL
7G46LmxYqfbVjFDim5hkMqSKSCC3/WbESrDkBTAOs8qqGo9hf4G6xz/yh6t9RC3z
+OOhQb3YXEVH/Bw2X2CJD5Ol5XefexKcStsKTPTRcA3EBCnwEL/CsvL0uk51h+sx
1UIjhjxKfilyrPJx0FWv7r8/xqCGtrhYc6req40u+ygE4D/QOL6vTLdRjoKUh750
XiqIPP7iMaxT+6xndTTVYsMxlWRtKPH+JAboXefPRJy2/R9WtkK/8uIZHKYJAzXP
ytBwDowCA/R/rUHJrm7ngAlZmXnrwsoNljhKYwFx4xYKAESQKNtZgPG2PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJinQniEADL6as5qMZv8iGIk8K0dMB8GA1UdIwQY
MBaAFGv4joKzWgrW0P8xVq8TGd/BYvjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEt
YmZiZDU2OTRhOTRkLzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEtYmZiZDU2OTRhOTRk
LzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABN+roz+t
Qf2dPPyFmo4b8kXZFckQrpminJc7UD60AW6RjGunD68nLsflM/ZIFDNAo631niCM
gzDmtG83KWx+OJJxEaWRnviubDMS9nqYXwqahgYdHDpcEyxTrN6ly/V9a9/EStiK
Cpwip4/RaqtQWYQt22tA3qcv5EgZUsh+CtdGHrhqkkpqKPrH++GIiO0sVESrd/3T
pKZXvyDOovzy21jnSsOaBlhPPddMcTnRfJiW+thp2THfkPf6aDnNAAL5WGTq5J/I
NytHnJDyvxpAuNdtdowIXECFqbdPgRu0pjcdHJ5FqGAw1oeHze7G+gIbosrQfQyJ
Yl2AaaVwtTAFIA==
-----END CERTIFICATE-----
Generated at Tue May 6 18:50:54 2025 by rpki-client