Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
File: O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft (raw, json)
Hash identifier: QwCx1CR/cUe0eLcCgqp9LiNvJdRLfm+W174rIWEt/WM=
Subject key identifier: A6:1D:10:6A:95:89:40:BC:40:3E:63:53:CA:45:52:3F:D5:69:5E:41
Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
Certificate issuer: /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Certificate serial: 0196A6F8EAC8B4158B0F21AAC78610865962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
Manifest number: 11AC
Signing time: Tue 06 May 2025 19:00:52 +0000
Manifest this update: Tue 06 May 2025 19:00:52 +0000
Manifest next update: Wed 07 May 2025 19:00:52 +0000
Files and hashes: 1: O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl (hash: ScLzJC0grOUwy7zW8A97xrJLH8sPoKZF/JsuBdCpli0=)
2: OcIpHvqAwT2M9dTBJHDbqY1xej4.roa (hash: gnCvl1Md/DWtZz5X5Y7WYVBP9HfFDhgD11ts2150gvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:f8:ea:c8:b4:15:8b:0f:21:aa:c7:86:10:86:59:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Validity
Not Before: May 6 19:00:52 2025 GMT
Not After : May 7 19:00:52 2025 GMT
Subject: CN=a61d106a958940bc403e6353ca45523fd5695e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:4c:b2:f8:0c:bf:41:6d:a7:0f:c3:4b:7d:
e6:00:d9:9d:97:70:a0:ce:d7:95:83:39:42:92:4d:
8d:74:d0:2a:9a:2e:a7:30:d1:68:a5:06:08:ad:d9:
22:b8:47:9c:06:32:51:6b:27:41:57:ec:34:d1:f5:
80:b8:45:5d:96:e8:24:39:f9:95:ee:b6:0f:ca:a7:
0d:a3:28:da:08:a7:92:80:40:c3:cf:01:fc:0c:95:
11:86:f0:a1:f5:28:f9:51:bb:ce:46:10:95:25:8f:
d4:df:f7:ab:6e:e4:bd:2d:7f:fb:07:50:cb:7d:0d:
7d:32:1b:3a:42:ac:8e:c1:ec:d1:4e:c9:ef:76:cf:
b7:38:87:5a:5c:89:dd:e2:ca:ec:b9:b0:b5:92:d3:
17:c1:8a:17:2c:f8:e9:78:ef:43:77:f8:ed:f1:80:
52:11:e5:97:48:8d:f4:80:08:f3:37:18:0a:f0:f0:
bf:5b:35:d8:95:f9:4e:2a:ef:cc:4c:bf:9c:8b:57:
ab:83:9c:ed:0c:cf:ce:c7:5b:a5:e3:b9:0d:9f:f2:
f7:57:0c:68:c3:fe:09:a4:cf:8c:1d:3a:a3:3d:0e:
91:f1:01:d3:50:03:8e:20:7d:ba:37:6e:ab:65:96:
9f:98:5a:89:73:76:b2:72:5b:a7:3a:13:31:24:8b:
29:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1D:10:6A:95:89:40:BC:40:3E:63:53:CA:45:52:3F:D5:69:5E:41
X509v3 Authority Key Identifier:
keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3b:3f:6a:d2:8b:56:18:6a:6d:9b:5d:5a:32:a6:a0:f2:50:
7d:41:5d:55:8c:64:56:08:bb:59:84:1c:48:3c:80:fe:42:69:
81:55:6e:02:0a:5a:0b:5b:31:3a:8c:a8:d3:1d:4c:a0:2d:9d:
ba:d6:97:4e:27:c7:39:bf:e2:bf:fb:f2:dd:3c:42:43:16:a7:
dc:63:83:b0:20:de:1c:02:69:b1:5c:3b:45:25:09:cc:10:ec:
94:c9:c3:0a:5e:11:bd:da:76:63:cb:b9:4e:da:78:32:fc:e4:
69:91:40:8d:08:10:68:ae:49:44:c8:f5:4f:ef:9c:07:df:01:
ac:7c:dd:f7:94:62:00:e5:bb:7b:1c:95:82:32:71:f8:95:ab:
b1:07:ad:4d:48:60:00:be:81:2e:68:6a:09:ba:42:90:4d:5b:
f0:83:4c:9e:b3:65:1b:1a:94:f2:72:c4:f9:e1:95:b4:ac:17:
2e:c7:b6:27:5f:74:ec:29:d3:fb:20:c8:8f:14:fc:91:34:ed:
c2:32:6f:7a:63:5b:79:f2:27:6c:8b:33:dd:2e:a6:02:73:a5:
60:84:15:a1:5a:43:aa:e2:e9:7f:02:c5:65:94:dc:c6:4c:6d:
8f:ee:60:94:9a:76:f8:e6:50:a8:06:3a:e8:16:e2:a9:a6:09:
38:a2:79:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZam+OrItBWLDyGqx4YQhlliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZDlmYjU3ZjRiMGYyNTNmOWFmODU4MzAzZTZiNDZhNTI5
YzE5NGUwHhcNMjUwNTA2MTkwMDUyWhcNMjUwNTA3MTkwMDUyWjAzMTEwLwYDVQQD
EyhhNjFkMTA2YTk1ODk0MGJjNDAzZTYzNTNjYTQ1NTIzZmQ1Njk1ZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO1MsvgMv0Ftpw/DS33mANmdl3Cg
zteVgzlCkk2NdNAqmi6nMNFopQYIrdkiuEecBjJRaydBV+w00fWAuEVdlugkOfmV
7rYPyqcNoyjaCKeSgEDDzwH8DJURhvCh9Sj5UbvORhCVJY/U3/erbuS9LX/7B1DL
fQ19Mhs6QqyOwezRTsnvds+3OIdaXInd4srsubC1ktMXwYoXLPjpeO9Dd/jt8YBS
EeWXSI30gAjzNxgK8PC/WzXYlflOKu/MTL+ci1erg5ztDM/Ox1ul47kNn/L3Vwxo
w/4JpM+MHTqjPQ6R8QHTUAOOIH26N26rZZafmFqJc3ayclunOhMxJIspSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYdEGqViUC8QD5jU8pFUj/VaV5BMB8GA1UdIwQY
MBaAFDvZ+1f0sPJT+a+FgwPmtGpSnBlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzluN1ZfU3c4bFA1cjRXREEtYTBhbEtjR1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yMDRjZGYtZjZlNy00ODc0LTk4MDIt
NjUwZGQxMzhlNmEyLzEvTzluN1ZfU3c4bFA1cjRXREEtYTBhbEtjR1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8yMDRjZGYtZjZlNy00ODc0LTk4MDItNjUwZGQxMzhlNmEy
LzEvTzluN1ZfU3c4bFA1cjRXREEtYTBhbEtjR1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjs/atKL
VhhqbZtdWjKmoPJQfUFdVYxkVgi7WYQcSDyA/kJpgVVuAgpaC1sxOoyo0x1MoC2d
utaXTifHOb/iv/vy3TxCQxan3GODsCDeHAJpsVw7RSUJzBDslMnDCl4Rvdp2Y8u5
Ttp4MvzkaZFAjQgQaK5JRMj1T++cB98BrHzd95RiAOW7exyVgjJx+JWrsQetTUhg
AL6BLmhqCbpCkE1b8INMnrNlGxqU8nLE+eGVtKwXLse2J1907CnT+yDIjxT8kTTt
wjJvemNbefInbIsz3S6mAnOlYIQVoVpDquLpfwLFZZTcxkxtj+5glJp2+OZQqAY6
6BbiqaYJOKJ5NQ==
-----END CERTIFICATE-----
Generated at Tue May 6 21:00:15 2025 by rpki-client