Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json)
Hash identifier: 25XFBIRvAup8JbO8rZdmcDd0LDmO3XVBsoIbjb1Xrik=
Subject key identifier: 41:18:30:24:83:07:8A:53:BD:C3:F6:2A:4A:3A:9F:59:11:78:DC:9D
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial: 0196B5FD9083C5495FFF920E1815B528433E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
Manifest number: 0615
Signing time: Fri 09 May 2025 17:00:15 +0000
Manifest this update: Fri 09 May 2025 17:00:15 +0000
Manifest next update: Sat 10 May 2025 17:00:15 +0000
Files and hashes: 1: 0CQ87gtDkmQ-YdioNl7SCmI2_Jg.roa (hash: vbvFk3kiJv5WUL7DS9QfsY/2+9s/5EIx/LnubRQ+4yA=)
2: OCRKDcURj8xaIImY8cNKFLg3_eE.roa (hash: HUOGD3LHhRpZmpPeYppPKP+b2mI5WdrLoJBrL3wQ2O0=)
3: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: 9hK/ar3cUJYW846lMPyD2Y2ClvMLuB4rK55In+5gkU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:fd:90:83:c5:49:5f:ff:92:0e:18:15:b5:28:43:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Validity
Not Before: May 9 17:00:15 2025 GMT
Not After : May 10 17:00:15 2025 GMT
Subject: CN=4118302483078a53bdc3f62a4a3a9f591178dc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:de:91:29:5a:de:30:08:f7:13:d0:a6:91:
6c:55:ee:0f:a3:56:f7:3c:5f:3f:16:df:13:49:fb:
56:4b:0c:36:f6:81:6d:93:37:eb:a8:f2:d4:96:ec:
b3:43:49:c3:60:1f:8a:aa:b5:f5:35:57:43:1e:14:
32:55:bf:8c:de:b5:87:5b:40:5d:e8:d1:38:ac:1f:
ce:7b:5a:c0:ad:5f:44:97:6d:ba:19:8e:5a:c8:4c:
d4:5d:37:ea:a3:c0:99:aa:1f:a2:7a:f8:de:6f:4b:
ea:8f:3a:4a:d5:37:be:3f:b6:62:09:75:56:4e:65:
f0:7c:05:0c:f0:43:63:45:89:5e:79:ac:2c:00:10:
bc:69:36:e1:77:50:1f:61:f1:2c:27:02:4d:0f:60:
e9:72:31:99:5b:04:8f:70:4b:4e:18:d2:eb:e3:20:
d9:44:8e:56:55:60:68:37:12:6a:d7:96:c9:b6:04:
f9:92:6e:2b:46:29:28:da:da:60:3e:13:87:22:5f:
fe:8f:68:ac:7b:72:82:1b:06:ec:70:5f:ef:4b:de:
e9:0f:f7:06:f1:01:91:b9:50:01:85:0a:12:ab:c7:
da:dd:e1:97:31:f6:fd:c2:df:21:52:f8:bf:b9:c2:
5b:11:4d:fd:a5:03:9a:82:38:3a:93:5e:23:5d:44:
7d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:18:30:24:83:07:8A:53:BD:C3:F6:2A:4A:3A:9F:59:11:78:DC:9D
X509v3 Authority Key Identifier:
keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:46:68:25:ac:5d:b1:4c:2b:7a:81:c1:9f:55:83:3e:75:02:
80:93:bf:e1:be:e8:56:f1:f6:af:80:f4:2c:7b:ca:48:a2:6c:
d9:38:ba:5f:5a:7f:f4:c1:c6:f4:8d:81:14:66:22:08:f1:3d:
4f:d6:2b:73:ed:97:dd:bc:17:34:1b:58:34:96:30:7d:27:5a:
06:7e:11:50:f8:b0:43:6e:a3:66:7f:8a:f5:37:db:dc:f1:ea:
90:8c:1a:9c:d4:94:5d:f2:e7:df:b2:1b:6d:2b:e2:74:92:81:
c7:00:61:f1:3e:68:51:13:d5:85:63:03:7f:85:ab:c7:99:b8:
0f:76:ed:f6:7b:bb:fe:d6:50:76:57:ad:e3:3f:8a:0b:d9:86:
c8:93:1b:07:ff:00:c0:e1:d7:21:f4:c3:88:44:49:77:60:09:
19:17:30:9d:c1:05:a2:7f:12:81:ea:4a:47:71:de:7e:8f:2e:
b8:b2:66:d8:a6:dc:40:86:87:87:30:c9:ac:0e:72:10:17:4e:
81:aa:90:63:42:b7:ed:ea:c7:20:37:94:2b:e3:38:d4:91:89:
f5:c8:25:42:21:f9:7f:43:5a:7e:68:43:b0:c1:79:4a:57:cc:
d0:71:08:f7:8d:a5:a1:45:5b:98:c7:b4:f2:00:0c:e5:59:d8:
4f:3f:0a:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1/ZCDxUlf/5IOGBW1KEM+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYzU2YmRlOTYzZWVmN2MyNTBiYzg0M2M2OTVjYTNmZTA3
ZmJhYzQwHhcNMjUwNTA5MTcwMDE1WhcNMjUwNTEwMTcwMDE1WjAzMTEwLwYDVQQD
Eyg0MTE4MzAyNDgzMDc4YTUzYmRjM2Y2MmE0YTNhOWY1OTExNzhkYzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2jekSla3jAI9xPQppFsVe4Po1b3
PF8/Ft8TSftWSww29oFtkzfrqPLUluyzQ0nDYB+KqrX1NVdDHhQyVb+M3rWHW0Bd
6NE4rB/Oe1rArV9El226GY5ayEzUXTfqo8CZqh+ievjeb0vqjzpK1Te+P7ZiCXVW
TmXwfAUM8ENjRYleeawsABC8aTbhd1AfYfEsJwJND2DpcjGZWwSPcEtOGNLr4yDZ
RI5WVWBoNxJq15bJtgT5km4rRiko2tpgPhOHIl/+j2ise3KCGwbscF/vS97pD/cG
8QGRuVABhQoSq8fa3eGXMfb9wt8hUvi/ucJbEU39pQOagjg6k14jXUR9iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEYMCSDB4pTvcP2Kko6n1kReNydMB8GA1UdIwQY
MBaAFDrFa96WPu98JQvIQ8aVyj/gf7rEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wZGNmOTgtYThkMi00NmMwLWI3Y2It
Y2U5YzlmM2FhODU1LzEvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8wZGNmOTgtYThkMi00NmMwLWI3Y2ItY2U5YzlmM2FhODU1
LzEvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0ZoJaxd
sUwreoHBn1WDPnUCgJO/4b7oVvH2r4D0LHvKSKJs2Ti6X1p/9MHG9I2BFGYiCPE9
T9Yrc+2X3bwXNBtYNJYwfSdaBn4RUPiwQ26jZn+K9Tfb3PHqkIwanNSUXfLn37Ib
bSvidJKBxwBh8T5oURPVhWMDf4Wrx5m4D3bt9nu7/tZQdlet4z+KC9mGyJMbB/8A
wOHXIfTDiERJd2AJGRcwncEFon8SgepKR3Hefo8uuLJm2KbcQIaHhzDJrA5yEBdO
gaqQY0K37erHIDeUK+M41JGJ9cglQiH5f0NafmhDsMF5SlfM0HEI942loUVbmMe0
8gAM5VnYTz8Kpg==
-----END CERTIFICATE-----
Generated at Sat May 10 00:42:34 2025 by rpki-client