Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
File: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft (raw, json)
Hash identifier: THvWcQgW1ElodP9HUEA6glJ3oQWW6S1Ted8AP6Nppks=
Subject key identifier: E4:DA:A6:BB:BD:94:7B:0A:E8:C1:CB:BC:1B:7F:6C:C2:8F:1B:9E:66
Authority key identifier: 38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
Certificate issuer: /CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Certificate serial: 0196B4B4894FB95BE91CB3AD3795700CF4BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 11:00:52 +0000
Manifest this update: Fri 09 May 2025 11:00:52 +0000
Manifest next update: Sat 10 May 2025 11:00:52 +0000
Files and hashes: 1: BnrxL-Ur42kihA32O4JXiXZBN8E.roa (hash: au6tBTrdwYycWLV+cOCZ8jXfmlb22WJOhmDS5f3OYxY=)
2: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl (hash: MysvN9A0uGxtjDLK3kSGrPsZJf961CUESRwj0A4jy1w=)
3: eMQhZAA1BBjlcx0eTkggms08VQo.roa (hash: xi+ujT09IBX2cdfgWniCY7aqnXMFDpXhE7QErRO6YQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:b4:89:4f:b9:5b:e9:1c:b3:ad:37:95:70:0c:f4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Validity
Not Before: May 9 11:00:52 2025 GMT
Not After : May 10 11:00:52 2025 GMT
Subject: CN=e4daa6bbbd947b0ae8c1cbbc1b7f6cc28f1b9e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ce:2b:03:2f:30:7e:1f:9f:0d:5f:e7:9c:ff:
be:09:8a:3b:70:78:a6:bb:41:5c:42:f9:1b:43:53:
f7:a8:55:fa:46:13:ff:de:48:ea:2b:2b:a7:6d:2a:
4b:54:31:fa:48:ab:a2:e0:f1:04:ef:ba:12:ca:27:
08:97:d9:60:34:a3:fb:bb:9e:62:f1:cd:7b:8c:01:
41:91:3a:eb:a4:de:a6:05:79:2d:f9:08:6d:3e:a9:
8a:48:d9:63:4a:19:69:27:e7:62:43:75:0e:8a:db:
d4:c9:2b:c2:cd:57:0c:28:1f:d8:c7:a2:d1:d2:9d:
d1:cd:84:97:16:36:63:7b:f1:bd:35:39:cb:e0:cd:
de:33:ee:83:dc:11:d4:0a:d2:ea:2c:53:d0:91:02:
e5:86:7d:c1:38:3c:d0:5a:36:c4:5a:2e:df:64:e5:
22:ed:67:dd:30:19:2e:60:43:98:68:f5:d4:63:80:
f2:55:51:1b:2a:09:4f:1a:12:da:05:03:5d:2d:db:
f1:d5:dd:b6:6e:44:84:78:dd:17:75:55:cf:17:87:
75:16:4f:85:3b:64:d2:f6:55:5c:a2:22:33:27:c0:
5f:52:cc:59:89:f0:c7:0e:b8:d2:b9:4c:46:cb:74:
72:e5:27:65:27:7f:21:ae:d4:7a:71:2a:8f:fc:06:
fd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DA:A6:BB:BD:94:7B:0A:E8:C1:CB:BC:1B:7F:6C:C2:8F:1B:9E:66
X509v3 Authority Key Identifier:
keyid:38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a4:24:ee:f2:a8:ac:01:29:13:b4:03:88:03:38:e5:b9:9f:
77:a4:1c:ae:25:85:8d:ed:9c:c3:13:cf:31:70:cf:35:c1:9d:
be:26:2a:0e:76:a9:a5:b4:be:14:dd:8d:50:07:f1:1f:82:ca:
ee:76:8f:f8:c4:9c:d3:b0:c9:4f:79:98:b5:fd:7f:fb:3a:e7:
88:fb:71:40:1b:9b:f4:31:1a:7a:24:09:f5:30:9b:8c:f9:cf:
43:b9:cf:fb:ab:20:e5:85:96:90:31:d1:92:d7:5c:f2:39:64:
da:8a:f2:0e:dd:98:9b:ad:0d:08:c6:74:70:23:f1:eb:e7:8d:
ef:2e:5d:54:30:b0:42:cb:70:c7:35:07:ba:3f:88:a6:9b:16:
cc:3d:78:94:97:8e:14:28:68:be:86:6f:3e:be:ad:91:7f:f5:
51:6a:a4:20:18:11:6d:69:1a:74:8f:59:21:0b:4c:52:ac:dd:
c6:7a:84:f3:68:f1:ff:98:93:cb:84:be:6d:e2:d3:4e:13:bb:
c9:db:a0:29:29:e3:c0:e0:37:be:11:7b:d7:65:c6:41:48:59:
e7:d7:97:33:93:89:f2:48:f0:2f:5e:67:a9:66:72:bb:51:5d:
d9:1d:a3:9c:fc:22:41:10:36:87:e4:c1:bb:d7:91:fc:03:7f:
2c:58:c6:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa0tIlPuVvpHLOtN5VwDPS9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NTIwNmFjMDhkODQwYzI4YmY0YWM1Njg5OWYyYTI4Zjhm
ZGNjYzUwHhcNMjUwNTA5MTEwMDUyWhcNMjUwNTEwMTEwMDUyWjAzMTEwLwYDVQQD
EyhlNGRhYTZiYmJkOTQ3YjBhZThjMWNiYmMxYjdmNmNjMjhmMWI5ZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3s4rAy8wfh+fDV/nnP++CYo7cHim
u0FcQvkbQ1P3qFX6RhP/3kjqKyunbSpLVDH6SKui4PEE77oSyicIl9lgNKP7u55i
8c17jAFBkTrrpN6mBXkt+QhtPqmKSNljShlpJ+diQ3UOitvUySvCzVcMKB/Yx6LR
0p3RzYSXFjZje/G9NTnL4M3eM+6D3BHUCtLqLFPQkQLlhn3BODzQWjbEWi7fZOUi
7WfdMBkuYEOYaPXUY4DyVVEbKglPGhLaBQNdLdvx1d22bkSEeN0XdVXPF4d1Fk+F
O2TS9lVcoiIzJ8BfUsxZifDHDrjSuUxGy3Ry5SdlJ38hrtR6cSqP/Ab9sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTapru9lHsK6MHLvBt/bMKPG55mMB8GA1UdIwQY
MBaAFDhSBqwI2EDCi/SsVomfKij4/czFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0ZJR3JBallRTUtMOUt4V2laOHFLUGo5ek1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mOTU5NjktNjdlZi00MDhlLWE3NDMt
ZTFlYjc5ODk5MjQyLzEvT0ZJR3JBallRTUtMOUt4V2laOHFLUGo5ek1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9mOTU5NjktNjdlZi00MDhlLWE3NDMtZTFlYjc5ODk5MjQy
LzEvT0ZJR3JBallRTUtMOUt4V2laOHFLUGo5ek1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6Qk7vKo
rAEpE7QDiAM45bmfd6QcriWFje2cwxPPMXDPNcGdviYqDnappbS+FN2NUAfxH4LK
7naP+MSc07DJT3mYtf1/+zrniPtxQBub9DEaeiQJ9TCbjPnPQ7nP+6sg5YWWkDHR
ktdc8jlk2oryDt2Ym60NCMZ0cCPx6+eN7y5dVDCwQstwxzUHuj+IppsWzD14lJeO
FChovoZvPr6tkX/1UWqkIBgRbWkadI9ZIQtMUqzdxnqE82jx/5iTy4S+beLTThO7
ydugKSnjwOA3vhF712XGQUhZ59eXM5OJ8kjwL15nqWZyu1Fd2R2jnPwiQRA2h+TB
u9eR/AN/LFjGlQ==
-----END CERTIFICATE-----
Generated at Fri May 9 20:48:47 2025 by rpki-client