Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
File: ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft (raw, json)
Hash identifier: qDBaLrBHMqR+P9HyWfybfUBX6Pln2aKh7Fx+QAe/TIc=
Subject key identifier: 5C:C9:52:59:F5:CC:7E:B4:DB:16:1F:86:B6:B4:B7:2E:1C:EB:69:5E
Authority key identifier: A2:33:A6:AF:5F:68:84:32:87:9C:7E:0C:07:72:CD:DD:8F:17:6D:B5
Certificate issuer: /CN=a233a6af5f688432879c7e0c0772cddd8f176db5
Certificate serial: 0196BCDBBB3C2C523139D320FE966A48B0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
Manifest number: 1531
Signing time: Sun 11 May 2025 01:00:38 +0000
Manifest this update: Sun 11 May 2025 01:00:38 +0000
Manifest next update: Mon 12 May 2025 01:00:38 +0000
Files and hashes: 1: ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl (hash: 4vRuIZKV4le5KpMNDVx5EdBnlzMcSGDCYVtFqurAMzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:bb:3c:2c:52:31:39:d3:20:fe:96:6a:48:b0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a233a6af5f688432879c7e0c0772cddd8f176db5
Validity
Not Before: May 11 01:00:38 2025 GMT
Not After : May 12 01:00:38 2025 GMT
Subject: CN=5cc95259f5cc7eb4db161f86b6b4b72e1ceb695e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c9:e1:ab:69:54:8e:98:44:4e:84:0d:22:8e:
96:89:22:ce:98:a0:91:e6:91:66:83:8f:dd:69:f3:
a5:11:1f:e3:e5:94:7f:57:98:ea:da:f6:8b:a6:a4:
9d:e0:24:80:3a:97:c1:6b:99:91:7a:b5:7c:30:e3:
a9:6b:e2:88:c6:8f:26:8d:5e:84:3f:f0:e1:f2:f3:
14:f6:7c:95:ec:80:e0:10:f7:f3:43:eb:51:c0:42:
cb:bc:56:24:25:e0:5c:7d:ef:c3:f4:ee:9c:b1:0f:
43:9b:a6:28:4e:47:ca:f5:2a:81:5f:55:9e:46:4b:
da:1c:36:8a:2f:47:fd:8b:ce:18:74:f0:b5:22:8e:
4c:a2:c8:c3:36:5e:c8:84:96:32:5a:76:be:1b:d9:
67:71:fa:a7:51:d7:51:d7:6c:d6:b9:73:e5:39:da:
68:df:47:58:3c:fd:1e:fc:4d:c4:bd:2a:4e:62:e4:
fb:c1:d5:e6:e8:22:04:89:4a:29:7b:d3:3b:ea:09:
48:70:3f:32:f1:3a:49:f5:73:9c:d7:02:32:a0:d4:
b6:b3:da:60:08:8c:c8:61:ef:97:b8:03:e3:18:b5:
87:72:b6:81:86:64:4a:ca:ea:ca:8f:95:55:b7:71:
15:c9:80:4e:32:1d:ef:9d:87:76:79:80:1e:ad:73:
bb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C9:52:59:F5:CC:7E:B4:DB:16:1F:86:B6:B4:B7:2E:1C:EB:69:5E
X509v3 Authority Key Identifier:
keyid:A2:33:A6:AF:5F:68:84:32:87:9C:7E:0C:07:72:CD:DD:8F:17:6D:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:40:ef:d6:20:c1:6d:a0:b6:14:c2:eb:8e:e1:ad:63:01:23:
28:35:75:61:50:bd:fd:8a:72:43:78:da:a7:8b:94:85:4a:32:
73:04:aa:25:10:4c:f3:da:61:27:cd:99:74:86:5d:ed:69:35:
40:be:97:51:d5:82:59:14:94:a3:fd:31:54:0b:7c:fc:04:7e:
29:3a:cc:36:30:e9:7c:ed:b8:f4:dd:2f:49:04:84:03:f3:ad:
9e:6f:1d:74:c7:df:c9:37:5b:4b:99:e7:8b:96:f4:13:84:d7:
97:c7:fe:39:b7:ec:0d:53:fe:cf:a0:70:5c:f9:43:c6:7c:03:
e3:91:38:c3:cd:6e:93:0a:67:91:99:36:fd:ae:77:37:4e:15:
7b:c2:2e:89:a0:e8:94:43:d1:e2:48:6b:0a:8a:71:3f:69:d4:
da:51:96:7a:8f:d6:a5:a0:ae:5b:bf:60:02:ad:4d:79:ad:63:
34:c5:0e:f5:7f:d9:7f:bd:2a:4f:8c:e7:af:0b:9e:f4:5b:6a:
a7:4e:de:de:b9:09:f9:68:9b:b8:2c:48:2a:0e:39:61:ea:81:
7a:c7:c4:d2:48:fb:41:f1:42:a2:ed:ab:aa:bd:81:0a:d3:fc:
57:bb:04:3e:68:85:ae:a7:41:c0:67:7d:ed:60:93:c6:6b:1f:
89:33:c7:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa827s8LFIxOdMg/pZqSLDpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMzNhNmFmNWY2ODg0MzI4NzljN2UwYzA3NzJjZGRkOGYx
NzZkYjUwHhcNMjUwNTExMDEwMDM4WhcNMjUwNTEyMDEwMDM4WjAzMTEwLwYDVQQD
Eyg1Y2M5NTI1OWY1Y2M3ZWI0ZGIxNjFmODZiNmI0YjcyZTFjZWI2OTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8nhq2lUjphEToQNIo6WiSLOmKCR
5pFmg4/dafOlER/j5ZR/V5jq2vaLpqSd4CSAOpfBa5mRerV8MOOpa+KIxo8mjV6E
P/Dh8vMU9nyV7IDgEPfzQ+tRwELLvFYkJeBcfe/D9O6csQ9Dm6YoTkfK9SqBX1We
RkvaHDaKL0f9i84YdPC1Io5MosjDNl7IhJYyWna+G9lncfqnUddR12zWuXPlOdpo
30dYPP0e/E3EvSpOYuT7wdXm6CIEiUope9M76glIcD8y8TpJ9XOc1wIyoNS2s9pg
CIzIYe+XuAPjGLWHcraBhmRKyurKj5VVt3EVyYBOMh3vnYd2eYAerXO7TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzJUln1zH602xYfhra0ty4c62leMB8GA1UdIwQY
MBaAFKIzpq9faIQyh5x+DAdyzd2PF221MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2pPbXIxOW9oREtIbkg0TUIzTE4zWThYYmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81NGQzOGUtYzkwYi00YjcxLWI3MWEt
M2U0MjQwNTY5NDhmLzEvb2pPbXIxOW9oREtIbkg0TUIzTE4zWThYYmJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC81NGQzOGUtYzkwYi00YjcxLWI3MWEtM2U0MjQwNTY5NDhm
LzEvb2pPbXIxOW9oREtIbkg0TUIzTE4zWThYYmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEDv1iDB
baC2FMLrjuGtYwEjKDV1YVC9/YpyQ3jap4uUhUoycwSqJRBM89phJ82ZdIZd7Wk1
QL6XUdWCWRSUo/0xVAt8/AR+KTrMNjDpfO249N0vSQSEA/Otnm8ddMffyTdbS5nn
i5b0E4TXl8f+ObfsDVP+z6BwXPlDxnwD45E4w81ukwpnkZk2/a53N04Ve8IuiaDo
lEPR4khrCopxP2nU2lGWeo/WpaCuW79gAq1Nea1jNMUO9X/Zf70qT4znrwue9Ftq
p07e3rkJ+WibuCxIKg45YeqBesfE0kj7QfFCou2rqr2BCtP8V7sEPmiFrqdBwGd9
7WCTxmsfiTPHNQ==
-----END CERTIFICATE-----
Generated at Sun May 11 05:27:03 2025 by rpki-client