Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
File: Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft (raw, json)
Hash identifier: pZOrJEKzyYX65pJhCoGjHZ6Z/DpUa2WyR3W83aXfqkU=
Subject key identifier: 0A:7B:71:03:B0:55:80:95:FC:5B:1E:DB:21:A4:BD:47:17:83:96:61
Authority key identifier: 21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
Certificate issuer: /CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Certificate serial: 0196BA7F827499550109C87C152B47C562F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 14:00:40 +0000
Manifest this update: Sat 10 May 2025 14:00:40 +0000
Manifest next update: Sun 11 May 2025 14:00:40 +0000
Files and hashes: 1: Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl (hash: 7kHgLvnPKIjlgoTVk3LFdWICqm9kLAKhVe82hEwbiYE=)
2: ZUnY6DcgMFOkn5YPuY63h16XVew.roa (hash: j75VTgwm6ax4o8jG9UYWYEtlaoF5sYfNI7iKEcRNxJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:82:74:99:55:01:09:c8:7c:15:2b:47:c5:62:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Validity
Not Before: May 10 14:00:40 2025 GMT
Not After : May 11 14:00:40 2025 GMT
Subject: CN=0a7b7103b0558095fc5b1edb21a4bd4717839661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:31:7f:bf:11:f8:3e:b0:f0:ae:60:40:55:
b9:9f:c8:4c:e0:bf:a7:ce:5c:2e:9f:c3:a2:45:d4:
28:b0:6d:c9:85:36:90:27:bb:fa:b3:f3:ae:e5:41:
d6:f4:a7:5a:c1:0c:6e:94:27:04:92:e3:d0:9a:f8:
a3:58:ac:31:ac:cb:f8:60:52:1d:e8:c5:e7:47:8c:
85:71:f7:72:32:b1:92:a4:7e:e3:e3:92:f1:39:30:
c6:d8:86:97:36:c9:9f:03:39:30:ed:86:7c:52:2f:
11:22:86:8c:ff:a3:b9:79:4a:98:e7:0b:ac:d1:ce:
1f:43:d0:ae:be:e6:0c:e9:f3:41:e1:85:43:f9:c6:
f9:07:95:1e:11:de:ce:6e:2b:71:31:0d:8b:46:15:
00:cc:ba:b6:33:1f:73:c1:c7:45:61:ab:e0:04:84:
63:5d:a4:f0:1e:32:62:73:67:04:76:dd:9d:ad:e9:
51:05:c1:7d:94:c9:a6:1a:8a:25:a2:48:e3:d9:db:
9e:bb:12:57:20:b4:63:44:9e:30:dc:d9:7f:c6:af:
10:c7:44:02:4b:a1:0f:4f:7c:df:0f:39:d4:ff:9a:
46:82:26:7c:a2:c9:b4:4e:cc:83:ec:50:21:8e:11:
ad:b5:2b:8f:cc:eb:fc:21:73:1f:47:bd:8d:2c:52:
f6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7B:71:03:B0:55:80:95:FC:5B:1E:DB:21:A4:BD:47:17:83:96:61
X509v3 Authority Key Identifier:
keyid:21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e0:62:b7:6c:dc:7d:33:09:92:43:08:94:fd:2c:f0:fe:0f:
ed:dc:1a:a1:ab:db:22:57:0a:9b:36:7f:b3:0c:d4:76:f7:61:
1b:4e:de:c1:03:7a:5f:c9:ef:c6:4d:7f:82:b9:da:17:f0:84:
3c:1e:f7:04:ea:80:7f:39:1e:65:3d:cb:c7:9d:6f:55:2a:5c:
82:f1:1a:90:6f:a2:66:74:7b:c6:1b:8b:e7:64:c8:c2:e0:17:
cc:57:41:cc:2c:34:c7:b3:2e:aa:17:57:1d:c2:b3:00:d4:70:
6d:bb:dc:be:59:8d:39:98:4e:17:2b:4a:f6:ad:23:b1:51:8b:
89:c5:c6:da:ae:16:b2:46:eb:69:11:f1:19:4d:39:05:51:84:
98:8b:b4:1e:6a:bc:ea:71:6e:3c:e8:76:c0:f4:85:4a:16:1e:
de:57:63:9a:cf:40:dd:a7:01:8e:72:e4:90:9e:7d:f5:50:cd:
1d:b4:15:82:85:0e:63:69:96:2a:66:55:79:83:8c:32:7e:df:
2a:b7:8d:9d:2d:7b:68:4e:dd:19:39:40:5b:91:2b:f2:84:a3:
b9:40:d7:29:33:73:f5:fb:7f:83:68:8d:dd:dd:04:6c:f5:c2:
65:74:ad:77:28:47:ad:a6:cb:6c:75:cf:8a:1f:ed:37:59:9d:
c3:26:a8:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6f4J0mVUBCch8FStHxWL0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYWEyOGRlMjFiYzkxZjM5ZGJmMmQwMTJmZDU1MmQyMmQw
ZjVhYWEwHhcNMjUwNTEwMTQwMDQwWhcNMjUwNTExMTQwMDQwWjAzMTEwLwYDVQQD
EygwYTdiNzEwM2IwNTU4MDk1ZmM1YjFlZGIyMWE0YmQ0NzE3ODM5NjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgcxf78R+D6w8K5gQFW5n8hM4L+n
zlwun8OiRdQosG3JhTaQJ7v6s/Ou5UHW9KdawQxulCcEkuPQmvijWKwxrMv4YFId
6MXnR4yFcfdyMrGSpH7j45LxOTDG2IaXNsmfAzkw7YZ8Ui8RIoaM/6O5eUqY5wus
0c4fQ9CuvuYM6fNB4YVD+cb5B5UeEd7ObitxMQ2LRhUAzLq2Mx9zwcdFYavgBIRj
XaTwHjJic2cEdt2drelRBcF9lMmmGoolokjj2dueuxJXILRjRJ4w3Nl/xq8Qx0QC
S6EPT3zfDznU/5pGgiZ8osm0TsyD7FAhjhGttSuPzOv8IXMfR72NLFL2wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAp7cQOwVYCV/Fse2yGkvUcXg5ZhMB8GA1UdIwQY
MBaAFCGqKN4hvJHznb8tAS/VUtItD1qqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWFvbzNpRzhrZk9kdnkwQkw5VlMwaTBQV3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82M2E1YmItMjRkMC00ZGI5LWI1MTAt
Zjk5NzNjNTc2YjAzLzEvSWFvbzNpRzhrZk9kdnkwQkw5VlMwaTBQV3FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS82M2E1YmItMjRkMC00ZGI5LWI1MTAtZjk5NzNjNTc2YjAz
LzEvSWFvbzNpRzhrZk9kdnkwQkw5VlMwaTBQV3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeBit2zc
fTMJkkMIlP0s8P4P7dwaoavbIlcKmzZ/swzUdvdhG07ewQN6X8nvxk1/grnaF/CE
PB73BOqAfzkeZT3Lx51vVSpcgvEakG+iZnR7xhuL52TIwuAXzFdBzCw0x7MuqhdX
HcKzANRwbbvcvlmNOZhOFytK9q0jsVGLicXG2q4WskbraRHxGU05BVGEmIu0Hmq8
6nFuPOh2wPSFShYe3ldjms9A3acBjnLkkJ599VDNHbQVgoUOY2mWKmZVeYOMMn7f
KreNnS17aE7dGTlAW5Er8oSjuUDXKTNz9ft/g2iN3d0EbPXCZXStdyhHrabLbHXP
ih/tN1mdwyaoag==
-----END CERTIFICATE-----
Generated at Sat May 10 22:03:43 2025 by rpki-client