Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
File: 0KOFQs_bHubgdermsQHnu1sUxDY.mft (raw, json)
Hash identifier: gVjaXC7FJEM/eD6L0HBMIMEx1/TDmLcfFsz0j9lHg2Q=
Subject key identifier: 38:1D:2D:9E:AE:A4:A0:93:85:32:21:FC:CD:A8:F1:49:29:20:A5:A8
Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
Certificate issuer: /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Certificate serial: 0196D2BE63297409F5B7D8BB670A36FAC009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
Manifest number: 11D7
Signing time: Thu 15 May 2025 07:00:14 +0000
Manifest this update: Thu 15 May 2025 07:00:14 +0000
Manifest next update: Fri 16 May 2025 07:00:14 +0000
Files and hashes: 1: 0KOFQs_bHubgdermsQHnu1sUxDY.crl (hash: S5WE3Eqc7uvH3h0XMzbl8Zwe1s3/ym67Ryp/jdbprvE=)
2: KrQvju8wsP_1pgegWQDfP_dBbsE.roa (hash: 41ILiMyCbiBXLBStCWRCt8ZnN2evNZdt0aku7rFi6gM=)
3: MT4hr9PSkUajZkci1pWS9v2orok.roa (hash: qezGbt2cfl90iVziKgXNGmy2fO9q+dUTbPbEn9xA5FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:be:63:29:74:09:f5:b7:d8:bb:67:0a:36:fa:c0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Validity
Not Before: May 15 07:00:14 2025 GMT
Not After : May 16 07:00:14 2025 GMT
Subject: CN=381d2d9eaea4a093853221fccda8f1492920a5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:96:d4:9a:6a:2f:86:9c:4a:cc:26:80:e2:
a2:72:c3:96:bf:4c:aa:3a:14:31:32:a6:b6:48:90:
e6:7a:81:1b:33:0b:88:e0:f7:02:22:74:a1:61:ce:
7f:a9:09:8c:58:72:3c:95:f3:28:47:4e:16:d0:7d:
53:3a:a3:28:bc:33:df:e5:06:20:21:60:da:0f:1a:
76:20:14:6f:18:84:f4:07:91:67:33:0b:f2:2a:36:
29:33:70:27:54:01:4c:c2:e2:13:43:5e:65:bb:59:
f8:c2:4a:04:6c:24:35:b4:fc:c1:66:26:e1:36:f4:
2c:a2:15:78:fa:6e:71:89:cf:7e:db:d8:65:cd:f7:
58:10:8f:15:d0:c2:39:70:04:b2:2e:3e:2e:2e:1d:
7c:9b:3f:f9:02:a2:13:12:2f:1d:21:1b:65:45:cb:
7f:3e:b1:36:e4:a9:5f:de:a1:20:4c:36:67:f4:27:
72:f0:8b:34:f1:ee:4b:48:a3:20:a2:9b:bd:23:c4:
af:86:59:2d:25:47:10:f9:4b:ff:d3:1a:dd:2a:b3:
b4:55:dd:33:5d:42:57:7a:0b:05:25:31:20:6d:41:
1d:91:6d:70:87:04:6e:17:f4:d5:1c:6d:f7:f0:80:
5e:9a:8f:a4:92:7a:5e:e0:0f:b5:2a:9b:cf:cc:74:
2c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1D:2D:9E:AE:A4:A0:93:85:32:21:FC:CD:A8:F1:49:29:20:A5:A8
X509v3 Authority Key Identifier:
keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:76:d8:36:f7:90:67:22:db:72:50:74:8f:43:01:fa:75:c8:
bd:05:11:f3:3b:17:35:1a:25:9e:9b:9c:c0:4a:c7:8a:f5:c8:
81:26:9d:14:92:db:97:45:ff:c6:8d:ed:a0:39:01:b1:65:ab:
16:27:3c:d7:26:2d:5f:ba:d0:fa:07:af:a8:f9:c9:d2:8e:b6:
94:b8:24:23:65:e1:c6:f9:40:01:0d:b3:77:8d:97:bd:9a:36:
27:9f:11:c7:ac:aa:56:90:6d:e5:b6:65:5f:80:94:8a:b5:a0:
62:3b:a4:d6:4e:2f:e6:0b:a8:3d:39:78:57:74:61:94:b4:c4:
6f:54:f2:f4:96:16:d3:ed:a7:42:5e:36:ac:96:e3:50:ef:21:
1b:c3:44:0b:bc:2a:aa:2c:3c:69:34:c1:96:69:a9:83:09:88:
66:86:29:6f:a3:99:f0:5f:74:25:52:da:27:25:c2:93:9e:54:
c1:25:cb:f6:0f:d3:53:53:87:a2:2d:42:8b:aa:b5:b4:2a:16:
c4:48:4a:6c:40:92:ce:57:6a:59:1f:7f:f7:5c:fd:1b:87:3d:
e5:b7:ae:6c:b2:e6:17:84:69:dd:0c:3c:39:4d:d9:80:57:7d:
ae:ec:f9:10:17:df:61:ef:da:6e:12:f1:d8:9b:00:7b:d8:d1:
e1:a2:3e:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbSvmMpdAn1t9i7Zwo2+sAJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYTM4NTQyY2ZkYjFlZTZlMDc1ZWFlNmIxMDFlN2JiNWIx
NGM0MzYwHhcNMjUwNTE1MDcwMDE0WhcNMjUwNTE2MDcwMDE0WjAzMTEwLwYDVQQD
EygzODFkMmQ5ZWFlYTRhMDkzODUzMjIxZmNjZGE4ZjE0OTI5MjBhNWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeaW1JpqL4acSswmgOKicsOWv0yq
OhQxMqa2SJDmeoEbMwuI4PcCInShYc5/qQmMWHI8lfMoR04W0H1TOqMovDPf5QYg
IWDaDxp2IBRvGIT0B5FnMwvyKjYpM3AnVAFMwuITQ15lu1n4wkoEbCQ1tPzBZibh
NvQsohV4+m5xic9+29hlzfdYEI8V0MI5cASyLj4uLh18mz/5AqITEi8dIRtlRct/
PrE25Klf3qEgTDZn9Cdy8Is08e5LSKMgopu9I8SvhlktJUcQ+Uv/0xrdKrO0Vd0z
XUJXegsFJTEgbUEdkW1whwRuF/TVHG338IBemo+kknpe4A+1KpvPzHQs8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgdLZ6upKCThTIh/M2o8UkpIKWoMB8GA1UdIwQY
MBaAFNCjhULP2x7m4HXq5rEB57tbFMQ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEtPRlFzX2JIdWJnZGVybXNRSG51MXNVeERZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8zZjA0YzktZTZlMS00NTA2LWI4ZmEt
NDBkMTkxMWZhN2YzLzEvMEtPRlFzX2JIdWJnZGVybXNRSG51MXNVeERZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8zZjA0YzktZTZlMS00NTA2LWI4ZmEtNDBkMTkxMWZhN2Yz
LzEvMEtPRlFzX2JIdWJnZGVybXNRSG51MXNVeERZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnbYNveQ
ZyLbclB0j0MB+nXIvQUR8zsXNRolnpucwErHivXIgSadFJLbl0X/xo3toDkBsWWr
Fic81yYtX7rQ+gevqPnJ0o62lLgkI2XhxvlAAQ2zd42XvZo2J58Rx6yqVpBt5bZl
X4CUirWgYjuk1k4v5guoPTl4V3RhlLTEb1Ty9JYW0+2nQl42rJbjUO8hG8NEC7wq
qiw8aTTBlmmpgwmIZoYpb6OZ8F90JVLaJyXCk55UwSXL9g/TU1OHoi1Ci6q1tCoW
xEhKbECSzldqWR9/91z9G4c95beubLLmF4Rp3Qw8OU3ZgFd9ruz5EBffYe/abhLx
2JsAe9jR4aI+CA==
-----END CERTIFICATE-----
Generated at Thu May 15 10:33:04 2025 by rpki-client