Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft
File: OmqMuD6zZTfKf_csW07WqNKtpMQ.mft (raw, json)
Hash identifier: YIHpyPe+dxFuAvO40CQexrycrE6ohiHHk0nAxem/NAk=
Subject key identifier: 76:38:4E:B0:E0:68:66:62:39:45:80:9E:8A:A4:C7:0B:35:40:9E:C2
Authority key identifier: 3A:6A:8C:B8:3E:B3:65:37:CA:7F:F7:2C:5B:4E:D6:A8:D2:AD:A4:C4
Certificate issuer: /CN=3a6a8cb83eb36537ca7ff72c5b4ed6a8d2ada4c4
Certificate serial: 0196B522171826009AFC65D603BA140473DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmqMuD6zZTfKf_csW07WqNKtpMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft
Manifest number: 0C90
Signing time: Fri 09 May 2025 13:00:32 +0000
Manifest this update: Fri 09 May 2025 13:00:32 +0000
Manifest next update: Sat 10 May 2025 13:00:32 +0000
Files and hashes: 1: OmqMuD6zZTfKf_csW07WqNKtpMQ.crl (hash: P6ne82yW+sFgclA6LGQQQ4s4VHEPJ2Tbz+sDhTGU9Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmqMuD6zZTfKf_csW07WqNKtpMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:22:17:18:26:00:9a:fc:65:d6:03:ba:14:04:73:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6a8cb83eb36537ca7ff72c5b4ed6a8d2ada4c4
Validity
Not Before: May 9 13:00:32 2025 GMT
Not After : May 10 13:00:32 2025 GMT
Subject: CN=76384eb0e06866623945809e8aa4c70b35409ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:de:5c:16:fd:9d:ce:7c:f5:df:2f:46:ef:
9f:14:21:d4:f2:c6:d8:de:32:f5:b0:7b:5e:12:fe:
8c:29:d8:1c:15:d4:94:c2:3a:2e:11:72:42:85:4c:
6a:ec:eb:96:23:23:79:8d:52:86:3c:3f:c8:a0:b1:
57:94:d5:83:6c:d4:9f:78:7d:1a:44:88:19:a5:25:
28:b1:8b:0b:d7:08:81:64:17:35:45:8b:2b:6b:b4:
e0:47:e1:08:33:b9:11:e0:23:e5:f8:69:ff:4a:d0:
c4:97:c2:98:0b:ea:a1:0d:87:fa:ab:25:82:e0:30:
b1:2f:84:4b:2a:ba:d9:36:59:f9:a7:97:bf:8f:05:
4e:2b:d6:91:a0:5c:18:19:05:87:d2:6a:ec:91:ce:
1a:0e:a8:a2:6e:13:e2:d1:21:d9:4c:3a:85:4f:c8:
73:d7:f7:57:fa:08:8f:8d:2d:0c:4c:60:e7:40:c5:
1e:20:aa:c1:59:f0:c2:df:34:bc:3e:d7:8c:6f:8e:
f7:33:a9:1f:ed:66:33:67:bc:24:7e:69:a0:51:b2:
20:67:d1:c0:5e:2c:c4:2b:3d:d5:fd:45:b7:e7:bb:
09:b9:f9:10:fe:b4:f1:82:91:18:25:0b:c4:8a:30:
7a:1c:e6:cf:95:d5:0e:91:63:8e:b6:ff:76:17:a9:
88:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:38:4E:B0:E0:68:66:62:39:45:80:9E:8A:A4:C7:0B:35:40:9E:C2
X509v3 Authority Key Identifier:
keyid:3A:6A:8C:B8:3E:B3:65:37:CA:7F:F7:2C:5B:4E:D6:A8:D2:AD:A4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmqMuD6zZTfKf_csW07WqNKtpMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1e:ac:fc:29:e4:13:f9:71:1a:7b:ce:1e:78:ad:91:e7:e5:
00:a8:21:2e:bf:a8:50:4b:a5:b5:3d:12:19:92:da:83:fc:e1:
dc:d8:8c:84:e2:49:a9:a0:be:3e:f0:6f:5c:99:bc:e5:47:92:
17:b2:e4:83:b1:63:f5:49:71:16:de:b6:cc:1f:d3:9c:62:fc:
03:75:38:18:2d:bc:e5:16:b5:e2:4f:0f:14:83:82:fc:3b:c8:
01:b4:87:20:70:b6:34:64:c1:33:bf:2b:d6:c9:a9:c5:94:1f:
2c:ef:c5:84:1a:c4:3e:61:9e:26:63:01:e0:aa:b8:84:60:51:
8e:77:23:31:60:9f:a9:9e:5a:99:07:ec:e4:65:d0:e0:79:c4:
d8:b5:89:b9:53:c5:47:9e:f7:ef:53:64:0e:8f:5f:6d:9b:1f:
c8:db:57:d1:ad:07:95:45:2f:6c:76:fa:9c:b0:0d:4a:5a:1f:
cc:b5:58:8f:82:f5:fc:19:0d:9c:d6:c4:3a:0d:74:6c:c0:08:
70:3f:62:8c:d1:4b:b4:3e:46:31:77:0a:26:87:6a:b2:e8:26:
75:b3:d8:7c:fb:e4:cc:cf:02:a7:07:70:f2:06:e9:7e:a8:33:
0d:25:98:e1:d1:97:c2:4d:1f:5f:a5:eb:32:92:31:80:81:b3:
8c:a3:35:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1IhcYJgCa/GXWA7oUBHPcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNmE4Y2I4M2ViMzY1MzdjYTdmZjcyYzViNGVkNmE4ZDJh
ZGE0YzQwHhcNMjUwNTA5MTMwMDMyWhcNMjUwNTEwMTMwMDMyWjAzMTEwLwYDVQQD
Eyg3NjM4NGViMGUwNjg2NjYyMzk0NTgwOWU4YWE0YzcwYjM1NDA5ZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2PeXBb9nc589d8vRu+fFCHU8sbY
3jL1sHteEv6MKdgcFdSUwjouEXJChUxq7OuWIyN5jVKGPD/IoLFXlNWDbNSfeH0a
RIgZpSUosYsL1wiBZBc1RYsra7TgR+EIM7kR4CPl+Gn/StDEl8KYC+qhDYf6qyWC
4DCxL4RLKrrZNln5p5e/jwVOK9aRoFwYGQWH0mrskc4aDqiibhPi0SHZTDqFT8hz
1/dX+giPjS0MTGDnQMUeIKrBWfDC3zS8PteMb473M6kf7WYzZ7wkfmmgUbIgZ9HA
XizEKz3V/UW357sJufkQ/rTxgpEYJQvEijB6HObPldUOkWOOtv92F6mILwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHY4TrDgaGZiOUWAnoqkxws1QJ7CMB8GA1UdIwQY
MBaAFDpqjLg+s2U3yn/3LFtO1qjSraTEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT21xTXVENnpaVGZLZl9jc1cwN1dxTkt0cE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ZjczZDQtNTYwZC00MTkzLWE3YmIt
M2UzN2JhY2RhZTBkLzEvT21xTXVENnpaVGZLZl9jc1cwN1dxTkt0cE1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84ZjczZDQtNTYwZC00MTkzLWE3YmItM2UzN2JhY2RhZTBk
LzEvT21xTXVENnpaVGZLZl9jc1cwN1dxTkt0cE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFB6s/Cnk
E/lxGnvOHnitkeflAKghLr+oUEultT0SGZLag/zh3NiMhOJJqaC+PvBvXJm85UeS
F7Lkg7Fj9UlxFt62zB/TnGL8A3U4GC285Ra14k8PFIOC/DvIAbSHIHC2NGTBM78r
1smpxZQfLO/FhBrEPmGeJmMB4Kq4hGBRjncjMWCfqZ5amQfs5GXQ4HnE2LWJuVPF
R57371NkDo9fbZsfyNtX0a0HlUUvbHb6nLANSlofzLVYj4L1/BkNnNbEOg10bMAI
cD9ijNFLtD5GMXcKJodqsugmdbPYfPvkzM8Cpwdw8gbpfqgzDSWY4dGXwk0fX6Xr
MpIxgIGzjKM1rg==
-----END CERTIFICATE-----
Generated at Fri May 9 16:32:48 2025 by rpki-client