Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
File: OPJMluat5giBDDDZoTB8xpr5_00.mft (raw, json)
Hash identifier: oU53eY9lUJTnzouePO7YNm96TUxlp7+DbqjDMKfBAkI=
Subject key identifier: 50:74:53:DD:24:91:A3:AB:B7:AD:F5:F6:33:53:33:86:17:F7:FB:E8
Authority key identifier: 38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
Certificate issuer: /CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Certificate serial: 0196BCDB932B7CA7CF909346ABEB254A6ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
Manifest number: 0BE9
Signing time: Sun 11 May 2025 01:00:28 +0000
Manifest this update: Sun 11 May 2025 01:00:28 +0000
Manifest next update: Mon 12 May 2025 01:00:28 +0000
Files and hashes: 1: OPJMluat5giBDDDZoTB8xpr5_00.crl (hash: er8sTk1VMxIh5znb6WfvgqCdlBzn4W0aPEG3mWMdkgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:93:2b:7c:a7:cf:90:93:46:ab:eb:25:4a:6a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Validity
Not Before: May 11 01:00:28 2025 GMT
Not After : May 12 01:00:28 2025 GMT
Subject: CN=507453dd2491a3abb7adf5f63353338617f7fbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:7c:05:27:5f:3e:8a:03:0e:cf:bf:33:b9:
ad:35:9d:33:f2:df:bd:2c:56:c0:fa:30:9e:57:47:
ac:d1:25:79:58:9f:d9:b8:0d:23:91:9b:38:9e:e8:
fc:69:f8:1c:de:d7:1b:e6:0a:aa:fa:15:17:8a:d1:
0a:82:a1:8f:f8:f2:23:85:be:b1:37:e1:88:e9:e5:
f2:38:c6:b5:b7:db:2e:8d:11:aa:ba:71:ba:d9:a6:
ed:9f:1f:5b:89:b4:da:9e:d4:36:b2:05:75:a6:3b:
de:ce:ea:a6:f4:a6:37:2a:6d:83:de:c9:64:ee:a9:
69:d4:bd:7e:56:d4:6b:a7:3c:c6:15:7e:dc:6f:7c:
78:68:93:c8:ae:36:90:6a:16:a0:1e:81:a6:a4:46:
47:23:00:84:ce:2f:17:db:48:bd:a1:29:48:a1:73:
04:1b:d3:37:35:2c:94:3d:ef:8a:a4:c1:90:0d:9f:
12:0c:e5:9d:f8:e1:66:d8:30:27:55:b9:b2:21:82:
c6:c8:fe:43:6f:b2:ad:15:8c:28:a4:1f:67:d1:06:
ed:0b:c3:95:16:31:2d:99:13:f5:e4:35:9f:69:01:
50:2e:94:3a:72:bc:9d:d3:97:b9:e9:c8:e6:09:0f:
07:e4:29:b6:f5:68:8d:39:79:8b:ca:4f:f9:a5:93:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:74:53:DD:24:91:A3:AB:B7:AD:F5:F6:33:53:33:86:17:F7:FB:E8
X509v3 Authority Key Identifier:
keyid:38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3a:e2:22:df:65:eb:d7:6f:b3:00:62:c7:21:27:40:f4:ce:
eb:ef:34:0f:4e:64:24:d6:6b:de:60:a3:41:6e:2b:53:6e:b5:
8b:10:38:4f:33:5b:9e:a5:94:97:97:51:e6:3c:eb:16:f5:fd:
4e:37:b8:8b:93:ee:2a:b1:0c:36:5a:dd:74:f1:cd:34:2e:41:
bc:3c:2e:00:20:84:3c:ed:82:d6:c7:36:fe:ff:32:95:2f:8a:
5e:1d:5f:61:16:63:01:8b:6c:f2:82:c1:c8:f6:ea:45:13:a0:
2d:d6:31:c3:45:71:ed:5d:3e:be:65:f0:ad:33:3c:9c:12:4f:
92:84:fe:2d:fe:2f:d9:50:1c:76:ad:0e:3c:eb:b5:e2:fa:3b:
30:93:5b:98:9b:11:4b:63:79:fd:60:63:3e:d9:be:5e:c0:0a:
26:ca:ac:dd:c3:7d:31:27:64:58:15:e9:2b:35:c5:a4:47:06:
c1:ed:21:32:15:c4:78:d3:ae:9c:47:03:dc:e9:63:92:4a:e1:
ed:ca:81:a2:ac:0a:f9:3a:99:0c:c2:cb:94:ea:a8:a5:45:0e:
a8:bd:51:d3:1b:b8:cf:79:01:ec:1e:e3:d6:76:7b:b2:f2:f0:
d6:5c:35:be:35:8b:03:0e:d6:ac:36:61:c9:79:c6:9b:4a:05:
39:db:ad:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa825MrfKfPkJNGq+slSmrdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZjI0Yzk2ZTZhZGU2MDg4MTBjMzBkOWExMzA3Y2M2OWFm
OWZmNGQwHhcNMjUwNTExMDEwMDI4WhcNMjUwNTEyMDEwMDI4WjAzMTEwLwYDVQQD
Eyg1MDc0NTNkZDI0OTFhM2FiYjdhZGY1ZjYzMzUzMzM4NjE3ZjdmYmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT98BSdfPooDDs+/M7mtNZ0z8t+9
LFbA+jCeV0es0SV5WJ/ZuA0jkZs4nuj8afgc3tcb5gqq+hUXitEKgqGP+PIjhb6x
N+GI6eXyOMa1t9sujRGqunG62abtnx9bibTantQ2sgV1pjvezuqm9KY3Km2D3slk
7qlp1L1+VtRrpzzGFX7cb3x4aJPIrjaQahagHoGmpEZHIwCEzi8X20i9oSlIoXME
G9M3NSyUPe+KpMGQDZ8SDOWd+OFm2DAnVbmyIYLGyP5Db7KtFYwopB9n0QbtC8OV
FjEtmRP15DWfaQFQLpQ6cryd05e56cjmCQ8H5Cm29WiNOXmLyk/5pZMz4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFB0U90kkaOrt6319jNTM4YX9/voMB8GA1UdIwQY
MBaAFDjyTJbmreYIgQww2aEwfMaa+f9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1BKTWx1YXQ1Z2lCREREWm9UQjh4cHI1XzAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84YWYxY2QtNTAyMS00NjNiLTk5YTMt
MDRlNGE4NGE3NGFjLzEvT1BKTWx1YXQ1Z2lCREREWm9UQjh4cHI1XzAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84YWYxY2QtNTAyMS00NjNiLTk5YTMtMDRlNGE4NGE3NGFj
LzEvT1BKTWx1YXQ1Z2lCREREWm9UQjh4cHI1XzAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTriIt9l
69dvswBixyEnQPTO6+80D05kJNZr3mCjQW4rU261ixA4TzNbnqWUl5dR5jzrFvX9
Tje4i5PuKrEMNlrddPHNNC5BvDwuACCEPO2C1sc2/v8ylS+KXh1fYRZjAYts8oLB
yPbqRROgLdYxw0Vx7V0+vmXwrTM8nBJPkoT+Lf4v2VAcdq0OPOu14vo7MJNbmJsR
S2N5/WBjPtm+XsAKJsqs3cN9MSdkWBXpKzXFpEcGwe0hMhXEeNOunEcD3Oljkkrh
7cqBoqwK+TqZDMLLlOqopUUOqL1R0xu4z3kB7B7j1nZ7svLw1lw1vjWLAw7WrDZh
yXnGm0oFOdutyw==
-----END CERTIFICATE-----
Generated at Sun May 11 04:20:40 2025 by rpki-client