Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
File: oZUhxzUtHKw_mMdW_HprSzrpdT0.mft (raw, json)
Hash identifier: nU60uxEwVtpfLTXZIs3AOG1xx34kUVG9Ut4WLwu6Oqg=
Subject key identifier: ED:71:D6:1A:5F:A1:81:F9:1D:B7:E3:0C:DE:74:02:CC:16:8E:DA:F4
Authority key identifier: A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
Certificate issuer: /CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Certificate serial: 0196B77E2B4764894E9017AC1D144653C8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
Manifest number: 0F82
Signing time: Sat 10 May 2025 00:00:21 +0000
Manifest this update: Sat 10 May 2025 00:00:21 +0000
Manifest next update: Sun 11 May 2025 00:00:21 +0000
Files and hashes: 1: Bo1myrpN4GYHDeA8eZrww4v2MYk.roa (hash: iX1wfmXvs8NDvW8ILAABxp5yjw4VCOGlhTOgUXPFMOo=)
2: oZUhxzUtHKw_mMdW_HprSzrpdT0.crl (hash: cApuOE92JTvN0rE9REiUs0W+GfS3aKLU9uNkxXw6vCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:7e:2b:47:64:89:4e:90:17:ac:1d:14:46:53:c8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Validity
Not Before: May 10 00:00:21 2025 GMT
Not After : May 11 00:00:21 2025 GMT
Subject: CN=ed71d61a5fa181f91db7e30cde7402cc168edaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:95:ed:5d:02:13:13:6f:75:07:e2:14:99:
0d:04:c3:5c:09:74:cc:b0:77:00:47:f9:8d:6a:4e:
cc:50:27:99:5d:e5:c7:ab:67:9c:e8:f2:08:b4:9b:
7b:e9:9d:c3:6c:60:12:ac:bd:eb:f7:6a:92:aa:60:
99:26:af:9e:22:35:d4:48:55:88:bc:20:ca:51:ce:
0b:ac:3d:65:0a:8a:dd:8e:85:75:0b:d9:0c:e3:cd:
2f:4b:6d:74:49:ae:13:02:cc:5d:31:ea:8b:52:78:
ef:61:28:9d:7c:19:0e:be:37:02:38:d9:ce:7e:ca:
45:bb:ac:31:2b:2c:e7:62:ea:fc:04:39:e8:94:3f:
05:b2:68:27:cb:a4:88:64:0c:99:71:02:e6:f7:3a:
fb:9b:36:79:bc:a2:1c:53:e9:02:be:a8:7c:60:93:
3e:ae:4f:d7:9e:49:81:e8:11:e5:6d:5b:ef:93:70:
b8:a7:3b:f5:1b:50:45:59:8e:cf:58:25:bc:6c:17:
bf:84:36:13:34:9e:c4:7d:5c:7f:92:f2:7c:3f:73:
3f:0b:1c:da:14:19:59:0d:07:1e:bc:66:8a:5b:3a:
66:6f:20:75:93:b2:66:bb:c6:c5:ab:b9:68:f7:f0:
bf:4a:92:fb:e8:43:7f:1c:7e:27:bf:9f:d4:1e:df:
20:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:71:D6:1A:5F:A1:81:F9:1D:B7:E3:0C:DE:74:02:CC:16:8E:DA:F4
X509v3 Authority Key Identifier:
keyid:A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0d:56:74:bb:60:6a:fd:ac:04:e2:c1:f9:ee:ac:79:61:41:
69:14:fa:22:78:93:80:92:16:b2:2f:f3:b1:4f:28:b3:42:40:
08:18:8f:41:7f:11:22:4c:00:d9:cb:6e:ab:48:60:d1:0a:6b:
d7:37:0c:31:1d:f8:fc:b5:ae:83:54:1b:73:78:40:f9:1a:6f:
9d:9c:03:4c:07:41:a7:4f:4f:d8:be:98:a2:8f:6d:20:8e:a0:
48:e3:bb:42:82:2e:3f:32:b4:ba:d7:09:99:7e:9d:2b:33:39:
f1:c3:b6:77:d2:eb:c7:52:08:78:92:ef:4d:a0:00:79:54:0f:
10:31:91:f3:9a:ed:23:21:aa:d0:7c:15:ab:3f:fa:1f:50:61:
e2:82:fa:2a:35:78:57:b4:1e:d3:82:73:0a:0d:b0:fc:4a:f7:
f3:7a:2d:22:80:3a:1e:9a:53:18:58:57:8e:fa:f9:45:e8:58:
d4:48:72:79:71:ca:29:e6:54:c1:45:e9:5e:d4:10:a5:5d:aa:
c8:85:dd:51:89:c4:68:24:de:fb:9e:15:d6:e9:50:f9:39:b8:
49:d4:66:b6:df:d9:d2:8b:bb:fc:e1:a2:57:21:d5:ec:2e:c3:
8e:07:0f:fa:27:b0:a9:7c:6c:f2:2e:f3:ad:1c:44:7f:4f:94:
1c:39:6d:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3fitHZIlOkBesHRRGU8jdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExOTUyMWM3MzUyZDFjYWMzZjk4Yzc1NmZjN2E2YjRiM2Fl
OTc1M2QwHhcNMjUwNTEwMDAwMDIxWhcNMjUwNTExMDAwMDIxWjAzMTEwLwYDVQQD
EyhlZDcxZDYxYTVmYTE4MWY5MWRiN2UzMGNkZTc0MDJjYzE2OGVkYWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHSV7V0CExNvdQfiFJkNBMNcCXTM
sHcAR/mNak7MUCeZXeXHq2ec6PIItJt76Z3DbGASrL3r92qSqmCZJq+eIjXUSFWI
vCDKUc4LrD1lCordjoV1C9kM480vS210Sa4TAsxdMeqLUnjvYSidfBkOvjcCONnO
fspFu6wxKyznYur8BDnolD8Fsmgny6SIZAyZcQLm9zr7mzZ5vKIcU+kCvqh8YJM+
rk/XnkmB6BHlbVvvk3C4pzv1G1BFWY7PWCW8bBe/hDYTNJ7EfVx/kvJ8P3M/Cxza
FBlZDQcevGaKWzpmbyB1k7Jmu8bFq7lo9/C/SpL76EN/HH4nv5/UHt8gPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1x1hpfoYH5HbfjDN50AswWjtr0MB8GA1UdIwQY
MBaAFKGVIcc1LRysP5jHVvx6a0s66XU9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1pVaHh6VXRIS3dfbU1kV19IcHJTenJwZFQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yYjdkYzItYzFkZS00OTcwLWFiNTMt
ZTVhZGEzNmZhMWYzLzEvb1pVaHh6VXRIS3dfbU1kV19IcHJTenJwZFQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yYjdkYzItYzFkZS00OTcwLWFiNTMtZTVhZGEzNmZhMWYz
LzEvb1pVaHh6VXRIS3dfbU1kV19IcHJTenJwZFQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApA1WdLtg
av2sBOLB+e6seWFBaRT6IniTgJIWsi/zsU8os0JACBiPQX8RIkwA2ctuq0hg0Qpr
1zcMMR34/LWug1Qbc3hA+RpvnZwDTAdBp09P2L6Yoo9tII6gSOO7QoIuPzK0utcJ
mX6dKzM58cO2d9Lrx1IIeJLvTaAAeVQPEDGR85rtIyGq0HwVqz/6H1Bh4oL6KjV4
V7Qe04JzCg2w/Er383otIoA6HppTGFhXjvr5RehY1EhyeXHKKeZUwUXpXtQQpV2q
yIXdUYnEaCTe+54V1ulQ+Tm4SdRmtt/Z0ou7/OGiVyHV7C7DjgcP+iewqXxs8i7z
rRxEf0+UHDltaQ==
-----END CERTIFICATE-----
Generated at Sat May 10 07:54:31 2025 by rpki-client