Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
File: 8oxp2pTIXt1I2cH9jjMq477mYAQ.mft (raw, json)
Hash identifier: 7EPpBzLZNxJW+LL+wwyn2mdsyb0K/pJTEzBFBJ0+J08=
Subject key identifier: 06:4B:6A:48:33:03:2A:D9:46:0B:F5:03:90:3A:1E:FF:D9:F4:56:F8
Authority key identifier: F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
Certificate issuer: /CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Certificate serial: 019676B0E8CA25D8EE522A95ABC2ED5E540E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
Manifest number: 0DDA
Signing time: Sun 27 Apr 2025 10:00:27 +0000
Manifest this update: Sun 27 Apr 2025 10:00:27 +0000
Manifest next update: Mon 28 Apr 2025 10:00:27 +0000
Files and hashes: 1: 8oxp2pTIXt1I2cH9jjMq477mYAQ.crl (hash: q1SXng60Crd0iv3fIZV72ez7qjALKTWcTqNBWNenV50=)
2: m7fQ-cMMDdeyLl0RJP3A0VDHgVE.roa (hash: rB/+iXy3MWnMmudzmSTexHxDroAo7zhjaO5iq26LcWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:e8:ca:25:d8:ee:52:2a:95:ab:c2:ed:5e:54:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Validity
Not Before: Apr 27 10:00:27 2025 GMT
Not After : Apr 28 10:00:27 2025 GMT
Subject: CN=064b6a4833032ad9460bf503903a1effd9f456f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:d6:ab:33:4a:19:53:06:50:76:ad:f3:ec:
0e:78:09:25:a9:02:2a:10:ed:9e:f8:ca:ce:da:57:
a0:bb:e5:c1:69:37:96:7a:fd:0c:56:67:7f:75:dc:
aa:85:8c:1c:4a:3d:e1:51:50:dd:ce:3b:bc:e0:8f:
16:25:42:73:1c:cc:10:2f:48:55:0b:52:cb:06:27:
11:aa:db:14:e2:90:66:21:54:b7:0a:d6:19:12:f2:
c2:62:f4:ab:47:a8:48:57:6c:b8:90:89:47:75:4a:
38:9e:f2:79:a6:02:3a:a8:95:5a:2b:12:72:00:f1:
cc:13:87:e1:14:13:fb:90:2f:40:8b:98:28:4f:cf:
78:f0:95:8f:b6:ea:f7:35:1b:a5:9a:c1:66:29:fd:
16:58:20:09:03:80:d4:b4:fb:0f:2a:d7:38:d2:18:
ff:1e:1a:8b:a2:58:43:66:75:f9:7f:cd:15:27:3c:
a9:90:74:eb:c1:be:4b:17:d8:3c:77:56:1f:1f:fe:
f5:df:30:1a:38:14:bb:1e:b5:06:c1:3e:61:61:53:
8b:aa:a2:f2:c0:f6:e8:91:0d:33:08:aa:67:23:10:
60:71:97:d2:f6:70:c3:5b:64:f9:96:44:35:02:6e:
42:3c:d7:47:4f:f1:07:b8:14:ab:00:33:04:48:77:
00:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4B:6A:48:33:03:2A:D9:46:0B:F5:03:90:3A:1E:FF:D9:F4:56:F8
X509v3 Authority Key Identifier:
keyid:F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3a:f1:43:68:ef:6d:df:1d:0d:98:6e:6f:f3:34:55:c4:2e:
2a:a9:81:21:ea:ca:6b:41:a1:85:95:c0:c5:16:29:68:f0:26:
e7:dc:b3:e5:4a:1f:9e:a3:81:f5:3b:ca:75:37:c6:15:27:c0:
d4:39:2e:47:2e:fb:16:24:50:1d:cf:b7:06:44:6f:e2:26:43:
a2:e5:dd:8f:93:af:f6:b1:e2:5f:a7:2f:30:6e:5e:3a:7b:3e:
9d:19:36:45:8c:e9:ce:a2:1e:43:a6:96:93:14:fe:e5:d2:13:
74:95:73:4d:23:8a:de:b4:c5:b1:22:0f:31:e2:44:17:a2:8f:
ac:01:45:49:22:39:30:1d:73:78:ce:99:d4:ff:5f:94:dc:85:
8f:5b:13:3e:42:ba:45:7c:9c:f0:cc:9a:14:07:ba:88:ff:87:
1f:ae:17:75:e7:22:7b:69:66:dc:b0:51:45:99:73:9c:59:91:
1b:96:ec:bb:a0:df:b6:68:36:3d:60:7f:58:f0:c0:6b:4c:8d:
03:ba:35:98:ce:e2:f0:3b:48:4d:41:e6:c9:cb:df:20:e4:48:
97:9e:e2:23:9e:30:22:db:fe:a2:ab:a4:79:3f:33:5b:0b:f0:
5a:92:7a:c4:0a:73:3f:73:80:cf:05:8f:42:31:27:c0:3a:59:
8c:36:7d:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2sOjKJdjuUiqVq8LtXlQOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyOGM2OWRhOTRjODVlZGQ0OGQ5YzFmZDhlMzMyYWUzYmVl
NjYwMDQwHhcNMjUwNDI3MTAwMDI3WhcNMjUwNDI4MTAwMDI3WjAzMTEwLwYDVQQD
EygwNjRiNmE0ODMzMDMyYWQ5NDYwYmY1MDM5MDNhMWVmZmQ5ZjQ1NmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc3WqzNKGVMGUHat8+wOeAklqQIq
EO2e+MrO2legu+XBaTeWev0MVmd/ddyqhYwcSj3hUVDdzju84I8WJUJzHMwQL0hV
C1LLBicRqtsU4pBmIVS3CtYZEvLCYvSrR6hIV2y4kIlHdUo4nvJ5pgI6qJVaKxJy
APHME4fhFBP7kC9Ai5goT8948JWPtur3NRulmsFmKf0WWCAJA4DUtPsPKtc40hj/
HhqLolhDZnX5f80VJzypkHTrwb5LF9g8d1YfH/713zAaOBS7HrUGwT5hYVOLqqLy
wPbokQ0zCKpnIxBgcZfS9nDDW2T5lkQ1Am5CPNdHT/EHuBSrADMESHcAfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZLakgzAyrZRgv1A5A6Hv/Z9Fb4MB8GA1UdIwQY
MBaAFPKMadqUyF7dSNnB/Y4zKuO+5mAEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG94cDJwVElYdDFJMmNIOWpqTXE0NzdtWUFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZGNkOTYtMGFlMy00ZjVjLThkMjEt
YTkwMmIwMDk2Yjk5LzEvOG94cDJwVElYdDFJMmNIOWpqTXE0NzdtWUFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8wZGNkOTYtMGFlMy00ZjVjLThkMjEtYTkwMmIwMDk2Yjk5
LzEvOG94cDJwVElYdDFJMmNIOWpqTXE0NzdtWUFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzrxQ2jv
bd8dDZhub/M0VcQuKqmBIerKa0GhhZXAxRYpaPAm59yz5UofnqOB9TvKdTfGFSfA
1DkuRy77FiRQHc+3BkRv4iZDouXdj5Ov9rHiX6cvMG5eOns+nRk2RYzpzqIeQ6aW
kxT+5dITdJVzTSOK3rTFsSIPMeJEF6KPrAFFSSI5MB1zeM6Z1P9flNyFj1sTPkK6
RXyc8MyaFAe6iP+HH64Xdecie2lm3LBRRZlznFmRG5bsu6Dftmg2PWB/WPDAa0yN
A7o1mM7i8DtITUHmycvfIORIl57iI54wItv+oqukeT8zWwvwWpJ6xApzP3OAzwWP
QjEnwDpZjDZ9rQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:09:41 2025 by rpki-client