Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json)
Hash identifier: gZHubEVXXGZrQsrb6CQRsWmDWYS7Cnn3f0Co96SZukM=
Subject key identifier: 7D:CE:C7:87:B3:E0:D9:89:66:2F:EE:DB:E0:E9:F2:E7:7B:FC:7A:74
Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Certificate serial: 0196B0D7A64B88E18A2A3FC4A0BD217290BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
Manifest number: 035A
Signing time: Thu 08 May 2025 17:00:44 +0000
Manifest this update: Thu 08 May 2025 17:00:44 +0000
Manifest next update: Fri 09 May 2025 17:00:44 +0000
Files and hashes: 1: L2QPsEXXxjypDuteGOkuNir3lUA.roa (hash: mcJaTh3VxTTNDuoHtoju+OCGdo4jk9ztR2/hlQRPaNY=)
2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: h4s2ltaKFc4Os/lgqk/DQh4gKYOxcm7vHXVDouAQwos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:a6:4b:88:e1:8a:2a:3f:c4:a0:bd:21:72:90:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Validity
Not Before: May 8 17:00:44 2025 GMT
Not After : May 9 17:00:44 2025 GMT
Subject: CN=7dcec787b3e0d989662feedbe0e9f2e77bfc7a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0a:31:42:95:4d:f7:f9:74:ab:e7:e8:d5:f4:
c1:8a:99:08:3d:af:06:d3:dc:12:3a:4d:44:84:a3:
76:65:68:20:f2:71:19:de:e3:bf:03:11:85:7e:24:
5b:5d:19:3a:68:fe:cf:98:01:d1:c5:34:14:55:eb:
63:cf:e5:7e:db:6f:87:5d:bd:4e:11:f1:a5:c0:74:
68:4c:88:7f:a4:41:4c:cb:3d:26:de:ab:6f:ce:65:
61:96:7f:00:cd:ec:cf:48:e0:ff:a2:9c:9d:d6:d0:
f2:3a:c6:cf:f2:35:ff:c1:4d:68:44:3c:24:61:e8:
6a:c2:43:15:a4:b4:28:07:b5:ca:2c:e5:76:97:ce:
bf:c6:79:67:2c:fc:72:eb:71:10:34:12:35:9b:55:
db:2c:45:2a:39:7b:6a:b4:32:33:d4:54:c5:5f:c0:
bf:f6:de:52:a9:aa:45:7f:22:77:1f:e7:a5:2d:57:
57:d6:a0:84:5e:f4:e8:c7:11:62:91:79:09:36:ca:
73:b4:9b:e4:84:15:00:4b:40:7b:e0:05:70:cb:1f:
53:d3:ea:d8:8e:87:0e:6d:83:7e:93:52:37:75:32:
f4:e8:eb:3c:31:f9:8f:71:b5:df:2b:8b:a1:ea:1d:
7a:03:e4:1c:b1:fc:03:d9:5b:f7:46:98:75:86:d7:
c9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CE:C7:87:B3:E0:D9:89:66:2F:EE:DB:E0:E9:F2:E7:7B:FC:7A:74
X509v3 Authority Key Identifier:
keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b1:dc:65:de:4a:25:20:88:b2:7b:97:8b:65:2e:33:07:69:
8e:53:94:45:cd:a0:43:93:06:7c:fa:56:36:db:e5:cd:4d:a6:
f0:3d:7c:99:98:e2:30:83:02:8f:ef:42:81:94:8d:85:02:62:
11:cf:9e:1f:82:ab:23:59:2a:b9:99:d5:40:6b:19:94:cf:31:
3f:4e:83:32:12:d3:dd:ad:d2:7b:f4:f3:87:2a:58:e0:5d:78:
24:6f:be:d6:85:c3:8b:e8:c2:f0:b2:b1:6d:7b:e6:3e:6d:1a:
bb:90:1a:44:81:d5:d2:65:72:7a:d1:5a:15:a5:20:ac:5d:f7:
24:f8:9f:79:d0:e5:55:10:24:46:a5:a9:36:34:9b:a4:67:05:
b6:bf:4c:64:32:ee:5e:46:ba:6c:7a:c4:5d:44:b4:76:ef:ee:
a0:47:3a:92:7a:1a:f3:a7:50:1b:26:02:fd:6f:71:63:25:c0:
0a:46:17:30:69:c6:58:87:5e:fb:91:d0:09:f0:46:bf:0b:ba:
ab:3e:57:87:57:b2:b7:43:3b:f2:19:b3:1a:98:ee:46:60:0b:
8b:c8:44:eb:ce:2e:72:9d:23:dc:ab:f2:ad:7e:cb:50:a6:8d:
9e:52:76:8c:7f:23:4a:29:37:f2:64:70:54:c4:f5:ee:64:62:
46:1b:c4:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaw16ZLiOGKKj/EoL0hcpC+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZGM2Y2QzMzM0ZTAyNjkwMzIyMzczYzNiNTA2ZTQxODRm
YWVjN2YwHhcNMjUwNTA4MTcwMDQ0WhcNMjUwNTA5MTcwMDQ0WjAzMTEwLwYDVQQD
Eyg3ZGNlYzc4N2IzZTBkOTg5NjYyZmVlZGJlMGU5ZjJlNzdiZmM3YTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgoxQpVN9/l0q+fo1fTBipkIPa8G
09wSOk1EhKN2ZWgg8nEZ3uO/AxGFfiRbXRk6aP7PmAHRxTQUVetjz+V+22+HXb1O
EfGlwHRoTIh/pEFMyz0m3qtvzmVhln8AzezPSOD/opyd1tDyOsbP8jX/wU1oRDwk
YehqwkMVpLQoB7XKLOV2l86/xnlnLPxy63EQNBI1m1XbLEUqOXtqtDIz1FTFX8C/
9t5SqapFfyJ3H+elLVdX1qCEXvToxxFikXkJNspztJvkhBUAS0B74AVwyx9T0+rY
jocObYN+k1I3dTL06Os8MfmPcbXfK4uh6h16A+QcsfwD2Vv3Rph1htfJzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3Ox4ez4NmJZi/u2+Dp8ud7/Hp0MB8GA1UdIwQY
MBaAFKDcbNMzTgJpAyI3PDtQbkGE+ux/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jMDFmOTAtZDBmYS00OTc2LWIxYzAt
ZDFmZjc1YTdhMzVjLzEvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9jMDFmOTAtZDBmYS00OTc2LWIxYzAtZDFmZjc1YTdhMzVj
LzEvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbHcZd5K
JSCIsnuXi2UuMwdpjlOURc2gQ5MGfPpWNtvlzU2m8D18mZjiMIMCj+9CgZSNhQJi
Ec+eH4KrI1kquZnVQGsZlM8xP06DMhLT3a3Se/TzhypY4F14JG++1oXDi+jC8LKx
bXvmPm0au5AaRIHV0mVyetFaFaUgrF33JPifedDlVRAkRqWpNjSbpGcFtr9MZDLu
Xka6bHrEXUS0du/uoEc6knoa86dQGyYC/W9xYyXACkYXMGnGWIde+5HQCfBGvwu6
qz5Xh1eyt0M78hmzGpjuRmALi8hE684ucp0j3KvyrX7LUKaNnlJ2jH8jSik38mRw
VMT17mRiRhvEmA==
-----END CERTIFICATE-----
Generated at Thu May 8 20:47:49 2025 by rpki-client