Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
File: OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft (raw, json)
Hash identifier: OtreGJ1mHwGtOKF4jYy3g60k7r9ezLsCKcURZXGspV8=
Subject key identifier: B6:93:BC:8C:F6:2D:44:63:46:9A:66:42:0F:3F:3A:C6:42:FA:2A:67
Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582
Certificate serial: 0196C34BD40FFF1365DDFDDB8ACB49A874FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
Manifest number: 0BCD
Signing time: Mon 12 May 2025 07:00:48 +0000
Manifest this update: Mon 12 May 2025 07:00:48 +0000
Manifest next update: Tue 13 May 2025 07:00:48 +0000
Files and hashes: 1: Gn-kDrXRDHHv43q56kRDHjj8q1w.roa (hash: Tu0d5Ny8jllovtj2b3OGyqwDSE7dzSUuYk4aE5120L8=)
2: OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl (hash: AOdjwAn8VseWgaoiWljBM0Cn1m2SmWTrRyPwy+bzuuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:d4:0f:ff:13:65:dd:fd:db:8a:cb:49:a8:74:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389755423f832a528c93136110f0fe4b10453582
Validity
Not Before: May 12 07:00:48 2025 GMT
Not After : May 13 07:00:48 2025 GMT
Subject: CN=b693bc8cf62d4463469a66420f3f3ac642fa2a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a4:d6:e7:ee:c6:9d:7a:f3:3b:05:fb:72:3e:
ec:3e:99:ce:30:94:66:90:f8:59:d1:92:f3:bd:ab:
09:16:fe:64:1c:f7:60:09:89:65:4a:d8:43:ea:60:
a1:b6:da:eb:9f:08:fd:43:52:51:13:95:00:fa:88:
35:f0:5c:cc:2e:7e:af:7d:26:b3:d5:f7:9d:62:61:
b5:01:ab:2d:b3:e0:35:a1:44:d3:46:e7:f0:a9:7c:
04:10:f7:26:c2:e1:6d:69:fa:15:76:74:43:dc:b3:
0d:f3:b8:81:74:80:ab:4f:b5:0a:25:a1:db:08:a6:
93:10:b8:85:dd:10:14:18:9e:04:b8:a1:b4:ef:c5:
54:7a:14:de:a1:7e:8f:74:82:f6:c0:95:74:cf:c4:
85:44:30:6a:a4:6c:89:24:52:ac:e0:03:f6:68:07:
bb:65:da:b5:5b:c8:b6:a2:d8:b3:87:40:fc:94:25:
f0:0d:8d:ae:96:e5:93:8a:d1:1b:3d:ad:bd:87:38:
11:ca:33:72:2b:e1:fb:70:f1:7f:2c:9d:d6:5a:56:
5f:ae:36:4d:c5:c1:0e:12:a3:0c:31:7d:62:ba:a2:
c7:8d:cd:08:02:cb:5a:3e:b9:82:0b:39:45:05:26:
a7:70:70:d4:1c:48:a2:90:33:3c:1c:34:ae:31:bc:
37:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:93:BC:8C:F6:2D:44:63:46:9A:66:42:0F:3F:3A:C6:42:FA:2A:67
X509v3 Authority Key Identifier:
keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4e:ec:2d:ed:2e:cc:03:09:7c:56:97:ff:58:46:97:aa:40:
69:3f:b9:df:4c:04:b5:f1:2b:a8:43:25:37:1b:e1:ec:36:ee:
28:43:a8:28:60:2d:05:72:b7:22:c5:a0:41:5a:91:cb:38:41:
59:16:68:17:a4:25:bc:8f:64:03:ef:d0:47:ff:03:50:62:a5:
38:23:15:fc:19:25:b9:39:ac:78:9b:48:b2:44:ba:95:a2:4f:
23:36:41:b8:0f:2b:4c:0c:d9:06:a9:d2:07:75:cc:a5:47:16:
67:5c:d4:89:f2:8e:a1:3d:aa:5c:65:8a:93:de:4b:81:7b:91:
28:65:56:52:2d:64:d8:4e:38:74:cd:47:04:76:a5:76:98:77:
89:c3:d3:b7:05:d0:d3:02:ed:9f:82:22:2e:73:16:45:57:af:
1c:f2:fe:ed:a9:92:b3:2c:1e:de:47:9e:b2:18:0d:3a:06:ca:
df:70:82:be:4a:09:77:b2:95:1b:75:dc:63:cc:8b:1b:e8:be:
9c:fd:e8:b0:94:86:20:79:c4:4e:18:3c:df:50:b5:3d:5b:d2:
93:0f:a1:18:2e:3b:a5:df:82:36:be:64:4a:3e:8a:b6:41:cb:
f9:2d:85:41:81:d2:7c:84:df:da:5d:46:fe:99:1b:41:fc:61:
82:23:87:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDS9QP/xNl3f3bistJqHT9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OTc1NTQyM2Y4MzJhNTI4YzkzMTM2MTEwZjBmZTRiMTA0
NTM1ODIwHhcNMjUwNTEyMDcwMDQ4WhcNMjUwNTEzMDcwMDQ4WjAzMTEwLwYDVQQD
EyhiNjkzYmM4Y2Y2MmQ0NDYzNDY5YTY2NDIwZjNmM2FjNjQyZmEyYTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26TW5+7GnXrzOwX7cj7sPpnOMJRm
kPhZ0ZLzvasJFv5kHPdgCYllSthD6mChttrrnwj9Q1JRE5UA+og18FzMLn6vfSaz
1fedYmG1Aasts+A1oUTTRufwqXwEEPcmwuFtafoVdnRD3LMN87iBdICrT7UKJaHb
CKaTELiF3RAUGJ4EuKG078VUehTeoX6PdIL2wJV0z8SFRDBqpGyJJFKs4AP2aAe7
Zdq1W8i2otizh0D8lCXwDY2uluWTitEbPa29hzgRyjNyK+H7cPF/LJ3WWlZfrjZN
xcEOEqMMMX1iuqLHjc0IAstaPrmCCzlFBSancHDUHEiikDM8HDSuMbw3XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaTvIz2LURjRppmQg8/OsZC+ipnMB8GA1UdIwQY
MBaAFDiXVUI/gypSjJMTYRDw/ksQRTWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0pkVlFqLURLbEtNa3hOaEVQRC1TeEJGTllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9kOWI1OTYtNjAxZS00NDI2LWE0Mjgt
NDY5NTdiZDg4NjBkLzEvT0pkVlFqLURLbEtNa3hOaEVQRC1TeEJGTllJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9kOWI1OTYtNjAxZS00NDI2LWE0MjgtNDY5NTdiZDg4NjBk
LzEvT0pkVlFqLURLbEtNa3hOaEVQRC1TeEJGTllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcU7sLe0u
zAMJfFaX/1hGl6pAaT+530wEtfErqEMlNxvh7DbuKEOoKGAtBXK3IsWgQVqRyzhB
WRZoF6QlvI9kA+/QR/8DUGKlOCMV/BkluTmseJtIskS6laJPIzZBuA8rTAzZBqnS
B3XMpUcWZ1zUifKOoT2qXGWKk95LgXuRKGVWUi1k2E44dM1HBHaldph3icPTtwXQ
0wLtn4IiLnMWRVevHPL+7amSsywe3keeshgNOgbK33CCvkoJd7KVG3XcY8yLG+i+
nP3osJSGIHnEThg831C1PVvSkw+hGC47pd+CNr5kSj6KtkHL+S2FQYHSfITf2l1G
/pkbQfxhgiOHzw==
-----END CERTIFICATE-----
Generated at Mon May 12 13:35:13 2025 by rpki-client