Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
File: oInHIR6wy6D9k84xaziVOM4aywA.mft (raw, json)
Hash identifier: aFdg7dBMwm3Kx9BvuHjW8a9MtLXxSm12QsyshCLOLO8=
Subject key identifier: 98:2D:D3:13:AE:99:80:F0:B4:46:9E:D7:BF:D4:A1:27:85:25:F3:5E
Authority key identifier: A0:89:C7:21:1E:B0:CB:A0:FD:93:CE:31:6B:38:95:38:CE:1A:CB:00
Certificate issuer: /CN=a089c7211eb0cba0fd93ce316b389538ce1acb00
Certificate serial: 0196865B8116F41DA57850AFF9EBCE85C62B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
Manifest number: 0D87
Signing time: Wed 30 Apr 2025 11:01:05 +0000
Manifest this update: Wed 30 Apr 2025 11:01:05 +0000
Manifest next update: Thu 01 May 2025 11:01:05 +0000
Files and hashes: 1: 07n12IDxKPAxIxs90Uxv2kiE_p8.roa (hash: onmuGRswCBPJXmNtk3krWUPKECPDIYJbgKGbyF0Mw3c=)
2: oInHIR6wy6D9k84xaziVOM4aywA.crl (hash: FICfPbKnPf/jCJGQUcPAuDD3nmdxGyabfn2NsorqkaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5b:81:16:f4:1d:a5:78:50:af:f9:eb:ce:85:c6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a089c7211eb0cba0fd93ce316b389538ce1acb00
Validity
Not Before: Apr 30 11:01:05 2025 GMT
Not After : May 1 11:01:05 2025 GMT
Subject: CN=982dd313ae9980f0b4469ed7bfd4a1278525f35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:00:c9:45:7f:ee:05:73:9c:01:89:97:58:
c6:9b:db:e8:c8:16:52:49:5d:63:27:1c:2c:cb:ae:
b7:8c:f2:32:59:1a:4f:aa:95:8c:23:9c:84:67:50:
c7:cb:2e:b4:af:11:32:93:13:58:44:ae:93:c5:e9:
e1:68:a7:ed:ba:e5:01:e5:5d:04:55:5b:9d:69:dc:
28:0b:5a:37:97:82:85:1c:55:34:8e:5e:51:18:8b:
9a:3a:98:d1:e8:42:94:07:70:2d:c2:19:a6:5d:1a:
f2:e1:c9:a2:6a:05:f9:d7:2a:2f:36:dd:05:b4:8f:
14:9f:24:16:1b:d0:c9:b6:23:84:5c:78:6e:bb:33:
d0:6d:df:01:47:45:0d:3f:07:60:ed:9d:a6:a5:d0:
15:c5:d7:82:52:d7:81:d5:e2:06:98:e3:b5:e6:64:
58:43:9d:28:02:66:58:b8:ef:68:f6:7f:34:6c:71:
9b:ad:e9:55:bc:32:87:15:e6:10:51:45:d7:f8:e5:
42:7b:fd:59:f1:c8:92:a1:a3:92:b9:dc:db:44:a7:
5e:dc:f5:9b:83:50:5b:7b:7f:f9:90:79:42:77:a4:
8b:a9:88:69:b2:13:0e:8d:54:22:9f:44:2c:ec:5a:
4c:01:e2:e6:f4:4b:b7:e7:24:81:a6:88:aa:3b:11:
83:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2D:D3:13:AE:99:80:F0:B4:46:9E:D7:BF:D4:A1:27:85:25:F3:5E
X509v3 Authority Key Identifier:
keyid:A0:89:C7:21:1E:B0:CB:A0:FD:93:CE:31:6B:38:95:38:CE:1A:CB:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:83:fb:9e:64:a5:7f:9f:17:d2:be:ae:8d:cb:62:ee:3f:ca:
63:21:15:38:c0:a3:bd:10:d7:6c:a5:39:e3:01:84:5c:f7:ea:
a7:ce:c1:9b:55:6b:42:33:70:5c:87:0c:38:dc:7e:60:57:da:
5a:54:58:eb:31:34:03:c7:ae:aa:9b:48:4d:8a:e1:1c:ca:8d:
b9:bc:ce:98:fa:22:c2:20:4b:47:15:74:c6:dd:56:af:e0:d5:
7f:cd:66:09:e6:1f:19:08:16:61:56:d8:57:c3:09:a5:1e:e0:
6b:f9:01:89:5e:e3:7f:5e:05:41:97:f7:5f:72:05:59:1e:fb:
59:1c:97:16:f6:23:50:88:a4:fd:13:bd:b0:a5:2a:fe:89:c9:
97:0a:ba:23:36:0e:6d:45:7b:cb:dc:3e:ed:fd:e4:ed:80:02:
c6:c1:c5:3b:7e:9e:47:31:60:38:1d:da:33:b9:e8:19:7d:52:
d5:f9:9e:64:26:76:5d:25:d8:ae:87:54:3e:be:e1:58:cb:64:
6f:79:c9:c6:56:27:1a:55:3e:2e:b9:57:2d:45:1c:d6:59:ed:
4c:87:98:ce:3a:e8:c6:09:a4:84:e9:fd:fb:a8:d9:55:09:a4:
59:a6:89:05:fd:8e:c6:86:3d:2d:f5:0a:76:d6:7c:b1:bd:cf:
aa:7a:d4:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaGW4EW9B2leFCv+evOhcYrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwODljNzIxMWViMGNiYTBmZDkzY2UzMTZiMzg5NTM4Y2Ux
YWNiMDAwHhcNMjUwNDMwMTEwMTA1WhcNMjUwNTAxMTEwMTA1WjAzMTEwLwYDVQQD
Eyg5ODJkZDMxM2FlOTk4MGYwYjQ0NjllZDdiZmQ0YTEyNzg1MjVmMzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUsAyUV/7gVznAGJl1jGm9voyBZS
SV1jJxwsy663jPIyWRpPqpWMI5yEZ1DHyy60rxEykxNYRK6TxenhaKftuuUB5V0E
VVudadwoC1o3l4KFHFU0jl5RGIuaOpjR6EKUB3AtwhmmXRry4cmiagX51yovNt0F
tI8UnyQWG9DJtiOEXHhuuzPQbd8BR0UNPwdg7Z2mpdAVxdeCUteB1eIGmOO15mRY
Q50oAmZYuO9o9n80bHGbrelVvDKHFeYQUUXX+OVCe/1Z8ciSoaOSudzbRKde3PWb
g1Bbe3/5kHlCd6SLqYhpshMOjVQin0Qs7FpMAeLm9Eu35ySBpoiqOxGDPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgt0xOumYDwtEae17/UoSeFJfNeMB8GA1UdIwQY
MBaAFKCJxyEesMug/ZPOMWs4lTjOGssAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0luSElSNnd5NkQ5azg0eGF6aVZPTTRheXdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS84ZTEyMDQtNGEwMy00Yzk3LWEwM2Yt
OTdlMDgwZTJhOTEwLzEvb0luSElSNnd5NkQ5azg0eGF6aVZPTTRheXdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS84ZTEyMDQtNGEwMy00Yzk3LWEwM2YtOTdlMDgwZTJhOTEw
LzEvb0luSElSNnd5NkQ5azg0eGF6aVZPTTRheXdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs4P7nmSl
f58X0r6ujcti7j/KYyEVOMCjvRDXbKU54wGEXPfqp87Bm1VrQjNwXIcMONx+YFfa
WlRY6zE0A8euqptITYrhHMqNubzOmPoiwiBLRxV0xt1Wr+DVf81mCeYfGQgWYVbY
V8MJpR7ga/kBiV7jf14FQZf3X3IFWR77WRyXFvYjUIik/RO9sKUq/onJlwq6IzYO
bUV7y9w+7f3k7YACxsHFO36eRzFgOB3aM7noGX1S1fmeZCZ2XSXYrodUPr7hWMtk
b3nJxlYnGlU+LrlXLUUc1lntTIeYzjroxgmkhOn9+6jZVQmkWaaJBf2OxoY9LfUK
dtZ8sb3PqnrUxw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 14:44:18 2025 by rpki-client