Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier: VtXc5x0Ltbpip4P071J1oB5C9nc4Yx7dw7TR9oCM2VE=
Subject key identifier: 84:E3:0A:EA:E4:E5:B5:BE:24:36:53:2A:A2:65:0C:1E:59:9B:37:C6
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial: 0196BDB785FEDA241AAA269EBD2D065F3EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 05:00:43 +0000
Manifest this update: Sun 11 May 2025 05:00:43 +0000
Manifest next update: Mon 12 May 2025 05:00:43 +0000
Files and hashes: 1: ETzMLJ9E8ekQKvTuSVRndgg_ftE.roa (hash: zxZL9sGsfFQCpFwlHr+nLeuc9weJmZjmaUU+udBc04c=)
2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: roAWW7tJBgyaXMmxd2czNufUK3AB+Mc4iHhck8P0v+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:85:fe:da:24:1a:aa:26:9e:bd:2d:06:5f:3e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Validity
Not Before: May 11 05:00:43 2025 GMT
Not After : May 12 05:00:43 2025 GMT
Subject: CN=84e30aeae4e5b5be2436532aa2650c1e599b37c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:83:67:16:05:08:ff:3b:04:92:22:61:cb:
67:09:98:a4:24:94:17:ce:5d:75:9f:70:15:7e:e9:
42:e0:a2:47:bb:b4:db:db:5b:3f:50:9c:30:2d:b5:
bb:7c:86:65:6a:0a:49:1e:a7:3a:10:84:ff:b5:3d:
95:53:6e:46:a5:54:3d:1d:42:66:07:c2:11:83:a7:
a4:58:cd:39:26:8a:9b:9c:34:44:b1:03:24:3f:da:
71:73:27:2b:5e:62:9e:44:7d:bf:fe:f1:d6:65:ac:
fa:cc:32:93:c5:76:19:49:44:82:57:9d:38:ac:5f:
88:52:a4:f2:a9:ba:c4:dd:ee:a6:1e:6d:ba:4d:41:
df:36:59:fd:57:86:57:83:20:de:ec:91:72:22:41:
24:f6:ad:1a:0f:72:b6:9d:6d:d1:de:47:46:15:58:
7a:b4:b7:57:63:ff:70:d5:64:e2:7f:d4:94:f7:4f:
5b:8d:d8:9e:70:70:97:f6:e8:d6:d9:75:e8:ec:a4:
c0:22:e4:dc:92:75:1a:ea:f4:62:32:8f:ad:f2:39:
45:19:cd:ad:e8:99:15:66:23:83:43:1d:b2:54:97:
84:b7:89:25:6d:ea:57:82:e2:f6:65:e4:e0:12:ea:
bc:51:1d:3c:18:dd:0b:a3:95:a1:0d:29:ba:45:c2:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E3:0A:EA:E4:E5:B5:BE:24:36:53:2A:A2:65:0C:1E:59:9B:37:C6
X509v3 Authority Key Identifier:
keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:99:c1:95:44:43:08:17:9b:64:69:87:7d:36:a4:49:f6:97:
2c:c5:ff:09:14:dd:24:01:e4:27:8b:b8:19:a7:42:dd:fb:26:
89:e3:75:53:99:29:1f:89:85:e8:48:e3:2b:a7:d2:35:1c:0f:
db:c6:d6:43:26:b1:72:35:63:7e:a7:a0:3f:53:a1:ad:91:f6:
86:eb:b0:ac:bb:e3:a8:0c:1b:ea:75:2f:2d:39:ff:55:b4:26:
88:df:3d:8e:23:7f:85:97:9f:6d:69:40:61:45:36:c2:7b:6c:
d6:e4:b0:41:5a:f0:9a:08:39:0a:57:55:42:b7:53:97:e4:89:
c6:7c:bf:b7:02:d8:02:4f:68:95:76:18:d8:0b:fb:7e:93:4f:
40:1a:21:fe:95:ea:65:53:fd:c3:0b:8d:5b:ce:7d:74:5f:43:
a4:2d:89:0e:ee:f8:3f:4b:2b:f2:d3:72:4c:93:82:99:ff:90:
13:e1:68:35:ee:29:57:0b:f6:97:d7:fa:8a:ba:b9:54:78:cd:
7b:f5:ba:c7:a8:69:ed:28:e7:b0:40:d3:78:49:76:88:5a:c7:
f6:c7:b2:ae:57:ab:7b:7f:06:03:69:7a:4c:76:e3:25:d2:b1:
0a:1f:6b:b3:53:45:41:d2:a1:c8:d5:d2:6b:98:18:e9:30:d9:
6b:bc:30:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9t4X+2iQaqiaevS0GXz64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOTRhMWQ4ODFkZDRiZWIyZmQzMWI3NmZhMGQ1ZDU4NWE5
YjIzOGYwHhcNMjUwNTExMDUwMDQzWhcNMjUwNTEyMDUwMDQzWjAzMTEwLwYDVQQD
Eyg4NGUzMGFlYWU0ZTViNWJlMjQzNjUzMmFhMjY1MGMxZTU5OWIzN2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovmDZxYFCP87BJIiYctnCZikJJQX
zl11n3AVfulC4KJHu7Tb21s/UJwwLbW7fIZlagpJHqc6EIT/tT2VU25GpVQ9HUJm
B8IRg6ekWM05JoqbnDREsQMkP9pxcycrXmKeRH2//vHWZaz6zDKTxXYZSUSCV504
rF+IUqTyqbrE3e6mHm26TUHfNln9V4ZXgyDe7JFyIkEk9q0aD3K2nW3R3kdGFVh6
tLdXY/9w1WTif9SU909bjdiecHCX9ujW2XXo7KTAIuTcknUa6vRiMo+t8jlFGc2t
6JkVZiODQx2yVJeEt4klbepXguL2ZeTgEuq8UR08GN0Lo5WhDSm6RcKGNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITjCurk5bW+JDZTKqJlDB5ZmzfGMB8GA1UdIwQY
MBaAFDuUodiB3UvrL9MbdvoNXVhamyOPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTkt
MTYxODc3NmJkYWFlLzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTktMTYxODc3NmJkYWFl
LzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZnBlURD
CBebZGmHfTakSfaXLMX/CRTdJAHkJ4u4GadC3fsmieN1U5kpH4mF6EjjK6fSNRwP
28bWQyaxcjVjfqegP1OhrZH2huuwrLvjqAwb6nUvLTn/VbQmiN89jiN/hZefbWlA
YUU2wnts1uSwQVrwmgg5CldVQrdTl+SJxny/twLYAk9olXYY2Av7fpNPQBoh/pXq
ZVP9wwuNW859dF9DpC2JDu74P0sr8tNyTJOCmf+QE+FoNe4pVwv2l9f6irq5VHjN
e/W6x6hp7SjnsEDTeEl2iFrH9seyrlere38GA2l6THbjJdKxCh9rs1NFQdKhyNXS
a5gY6TDZa7wwJQ==
-----END CERTIFICATE-----
Generated at Sun May 11 06:51:28 2025 by rpki-client