Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
File: Onb8XJAQtBEZymjca5lQul_3Mn4.mft (raw, json)
Hash identifier: ytFMqnvq5dukbIerpxj6Rc6XvUvlvmCGzDKysdwhwjA=
Subject key identifier: 2F:C1:F6:10:56:CD:AE:3D:81:B9:B3:C2:8A:59:39:46:19:3C:91:04
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial: 0196A051B127E7F70588493153ED9F1D6F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
Manifest number: 0F01
Signing time: Mon 05 May 2025 12:00:30 +0000
Manifest this update: Mon 05 May 2025 12:00:30 +0000
Manifest next update: Tue 06 May 2025 12:00:30 +0000
Files and hashes: 1: Onb8XJAQtBEZymjca5lQul_3Mn4.crl (hash: YOcZdkJQUAv9cVjZyjamH3zQs9TcavOZeOCbWOScqTY=)
2: aLeS6kJNMMsXR_fWm4nfBJc0RbY.roa (hash: 2eZg5Esd5JZxUzRdKZEfMd9ilMWbL+Zmx8dFdFF5esA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:b1:27:e7:f7:05:88:49:31:53:ed:9f:1d:6f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Validity
Not Before: May 5 12:00:30 2025 GMT
Not After : May 6 12:00:30 2025 GMT
Subject: CN=2fc1f61056cdae3d81b9b3c28a593946193c9104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b2:1b:d4:bf:d1:e1:e6:99:c5:40:cf:ac:d9:
7d:db:e6:58:cc:b6:ed:5e:4f:97:e6:b7:e5:c7:3b:
9d:f5:b8:1a:1d:0a:1c:d7:08:5f:25:fa:f6:31:7e:
df:07:d9:92:9a:82:34:c9:95:ba:78:4c:cd:f3:59:
ef:da:01:54:6b:dc:3d:1e:5a:6d:5b:07:04:8a:d7:
b2:20:99:61:2e:8f:6f:40:ca:a3:a1:92:4a:39:69:
af:37:67:f2:c0:ae:2c:19:fd:19:c1:da:a2:4d:38:
7d:fa:89:39:06:e4:b1:3e:da:10:b2:2f:a1:5d:a0:
45:26:f8:cd:28:0e:14:7f:46:9c:ba:23:53:67:88:
38:64:9e:c1:4e:9b:77:e2:49:16:04:50:5c:a1:03:
18:26:52:92:b0:a5:cf:01:7b:c7:49:3a:8c:a5:0b:
46:b5:e3:41:aa:e1:4d:b3:f8:ee:69:43:27:c7:be:
49:53:21:13:b7:98:5b:fe:2f:09:e5:49:ba:5e:6b:
21:c2:a1:52:73:7f:f9:7d:99:7c:90:b9:88:79:10:
d8:b1:66:7f:5b:5e:21:ff:5f:3b:95:20:5c:5f:84:
f0:dd:9c:8f:0f:d1:0b:72:74:50:69:47:31:9f:74:
63:50:1b:d0:d9:3f:cc:44:08:52:e9:72:a6:6c:48:
f1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C1:F6:10:56:CD:AE:3D:81:B9:B3:C2:8A:59:39:46:19:3C:91:04
X509v3 Authority Key Identifier:
keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:74:75:69:15:52:2c:35:cf:d3:d4:a4:14:98:92:2f:b5:fa:
a6:a2:c7:7c:8d:7a:6b:c0:e8:49:ed:32:a0:d5:b5:0b:5c:fd:
e2:9f:60:e9:7e:d6:08:da:9a:cb:a2:8d:68:2c:e6:51:bd:29:
45:ce:c3:15:4d:8e:84:d5:90:ea:8c:3b:c5:de:1d:77:fb:51:
c6:64:ed:9d:de:0c:a7:ac:41:d6:d9:0c:27:c7:e3:3b:17:6b:
b9:b7:14:15:44:65:bc:41:26:70:58:53:15:9c:77:e5:8b:cd:
e9:7c:cd:11:18:6b:c5:4e:27:8a:cb:f8:c2:8e:cd:8d:01:01:
fd:50:ef:60:19:76:f6:6b:7e:f7:4a:03:60:44:8e:b9:6c:a1:
db:43:a8:f1:a9:22:40:e5:a0:5c:64:3e:28:03:61:f0:7c:19:
5a:59:d9:a8:aa:5f:6c:22:79:cb:b8:bb:db:73:25:c7:37:b0:
b5:93:cb:22:57:9a:09:c2:15:4f:3d:4a:6e:32:16:e6:ca:0b:
55:3b:30:18:f6:44:23:8e:d5:5f:21:2c:44:96:91:4f:48:9d:
6d:68:84:ce:a0:e0:e1:93:b6:52:b2:0b:43:74:02:70:a3:eb:
ba:a9:5c:53:26:e4:7a:d3:71:cb:92:45:bf:8f:1f:f0:41:25:
b3:0a:a6:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagUbEn5/cFiEkxU+2fHW9qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNzZmYzVjOTAxMGI0MTExOWNhNjhkYzZiOTk1MGJhNWZm
NzMyN2UwHhcNMjUwNTA1MTIwMDMwWhcNMjUwNTA2MTIwMDMwWjAzMTEwLwYDVQQD
EygyZmMxZjYxMDU2Y2RhZTNkODFiOWIzYzI4YTU5Mzk0NjE5M2M5MTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LIb1L/R4eaZxUDPrNl92+ZYzLbt
Xk+X5rflxzud9bgaHQoc1whfJfr2MX7fB9mSmoI0yZW6eEzN81nv2gFUa9w9Hlpt
WwcEiteyIJlhLo9vQMqjoZJKOWmvN2fywK4sGf0ZwdqiTTh9+ok5BuSxPtoQsi+h
XaBFJvjNKA4Uf0acuiNTZ4g4ZJ7BTpt34kkWBFBcoQMYJlKSsKXPAXvHSTqMpQtG
teNBquFNs/juaUMnx75JUyETt5hb/i8J5Um6XmshwqFSc3/5fZl8kLmIeRDYsWZ/
W14h/187lSBcX4Tw3ZyPD9ELcnRQaUcxn3RjUBvQ2T/MRAhS6XKmbEjxZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/B9hBWza49gbmzwopZOUYZPJEEMB8GA1UdIwQY
MBaAFDp2/FyQELQRGcpo3GuZULpf9zJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2Qt
YmRmYTdjNGY4YjBhLzEvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2QtYmRmYTdjNGY4YjBh
LzEvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3R1aRVS
LDXP09SkFJiSL7X6pqLHfI16a8DoSe0yoNW1C1z94p9g6X7WCNqay6KNaCzmUb0p
Rc7DFU2OhNWQ6ow7xd4dd/tRxmTtnd4Mp6xB1tkMJ8fjOxdrubcUFURlvEEmcFhT
FZx35YvN6XzNERhrxU4nisv4wo7NjQEB/VDvYBl29mt+90oDYESOuWyh20Oo8aki
QOWgXGQ+KANh8HwZWlnZqKpfbCJ5y7i723MlxzewtZPLIleaCcIVTz1KbjIW5soL
VTswGPZEI47VXyEsRJaRT0idbWiEzqDg4ZO2UrILQ3QCcKPruqlcUybketNxy5JF
v48f8EElswqmLA==
-----END CERTIFICATE-----
Generated at Mon May 5 16:17:15 2025 by rpki-client