Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
File: oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft (raw, json)
Hash identifier: CmR9l54yX0lpdttRemMxZid8l08geoNFnqR9ZZXaHvY=
Subject key identifier: 38:F6:79:AD:40:7A:3A:31:BA:96:EE:62:46:47:87:43:EF:91:7A:B4
Authority key identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
Certificate issuer: /CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Certificate serial: 019683C7B4B1D5C24CC0BE32FE0D57D43894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 23:00:25 +0000
Manifest this update: Tue 29 Apr 2025 23:00:25 +0000
Manifest next update: Wed 30 Apr 2025 23:00:25 +0000
Files and hashes: 1: 2OFA6f1DjHXZMhryh5jA0oQbPrI.roa (hash: 4LohZFyvURnINNqOgIllTWqy2TcXQvTUTxllcCyXfjc=)
2: oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl (hash: GoG78HwDZmXwO95jnI+A/B7RI9+ZRRVMB6uhK8JL4mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:b4:b1:d5:c2:4c:c0:be:32:fe:0d:57:d4:38:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Validity
Not Before: Apr 29 23:00:25 2025 GMT
Not After : Apr 30 23:00:25 2025 GMT
Subject: CN=38f679ad407a3a31ba96ee6246478743ef917ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7f:d8:b7:98:7c:01:80:96:95:1b:8e:7f:c8:
b9:9f:96:37:34:12:31:7e:1c:2c:75:5f:00:aa:20:
58:02:cf:2e:22:35:11:59:a1:61:2b:a1:08:d0:44:
71:81:66:d8:0b:62:e4:cd:9b:47:96:72:90:7f:d6:
21:be:84:d0:d4:07:f4:ef:df:d2:a5:f7:bd:4e:b9:
bf:ae:47:0d:43:71:ff:ae:85:6b:db:2e:53:3d:5c:
5d:8f:7e:fe:8b:dc:d6:48:ae:59:ab:64:64:80:94:
ed:99:42:88:ab:65:6f:32:67:12:13:6e:fd:94:03:
df:16:67:1a:e9:8a:31:56:27:b6:af:3e:0f:88:44:
49:72:6d:de:de:14:c2:c0:e4:ca:c0:d2:8c:d8:a0:
be:74:ba:af:5c:9a:72:1f:90:fe:97:1a:3f:d4:e2:
56:7b:9c:00:c6:ef:6f:7a:ea:e7:95:ad:93:03:6a:
ce:c6:e5:a6:f0:26:de:15:ed:68:b7:0e:d3:3b:52:
50:dc:23:47:12:7a:b8:79:2e:04:32:21:a1:38:c8:
d1:a4:5f:71:ec:56:cb:57:2a:31:75:bb:18:d5:40:
11:43:0b:c2:a1:22:7a:09:f1:ea:f1:fb:9a:3d:74:
ad:b7:42:dc:77:8b:94:70:2e:d9:20:05:e7:ee:62:
f3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F6:79:AD:40:7A:3A:31:BA:96:EE:62:46:47:87:43:EF:91:7A:B4
X509v3 Authority Key Identifier:
keyid:A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0b:c8:24:7d:cf:2e:eb:06:76:06:47:df:00:96:71:5c:46:
4b:32:c9:24:dd:f5:6f:de:24:16:db:ce:8e:b8:87:8e:b5:24:
71:55:e7:1f:5c:06:8a:db:3f:61:d7:8e:52:eb:dc:0e:4e:7a:
db:2f:e7:53:9d:48:18:20:5d:45:3c:6d:12:cb:18:01:0e:11:
e9:43:d1:27:5c:85:f6:53:b4:35:e2:dd:72:4d:60:70:e3:f0:
66:7e:86:7b:6d:ef:3c:e7:7f:e6:8b:84:c9:81:29:5a:90:04:
29:1f:8f:8b:a9:a5:7f:dc:75:cc:8f:46:53:ae:d0:ef:a5:ae:
25:a3:29:d8:3d:c9:fb:98:9a:77:25:bb:18:b0:3f:ce:42:51:
96:18:52:7b:66:a0:78:74:2b:ba:92:3a:80:99:1b:ff:06:97:
83:ee:5a:04:6f:c0:bc:28:66:0f:c8:03:95:d3:7d:16:18:12:
cf:9e:e4:81:10:42:20:b3:c0:21:39:68:62:f3:a7:b9:6b:c9:
84:23:bd:b7:d5:13:ba:0b:74:b1:25:46:42:6a:ed:5e:6d:c0:
f7:23:39:25:fc:68:9d:c6:77:cd:de:18:18:a8:22:ce:dd:3a:
a0:64:61:71:2d:72:53:23:57:27:5a:6f:4e:0f:e0:93:7d:d6:
63:17:aa:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDx7Sx1cJMwL4y/g1X1DiUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMGI0MjYwNGIzZjhlOWU1YjcyZjIzMjkzODlhZjE4ZmZi
ZDIwYjgwHhcNMjUwNDI5MjMwMDI1WhcNMjUwNDMwMjMwMDI1WjAzMTEwLwYDVQQD
EygzOGY2NzlhZDQwN2EzYTMxYmE5NmVlNjI0NjQ3ODc0M2VmOTE3YWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23/Yt5h8AYCWlRuOf8i5n5Y3NBIx
fhwsdV8AqiBYAs8uIjURWaFhK6EI0ERxgWbYC2LkzZtHlnKQf9YhvoTQ1Af079/S
pfe9Trm/rkcNQ3H/roVr2y5TPVxdj37+i9zWSK5Zq2RkgJTtmUKIq2VvMmcSE279
lAPfFmca6YoxVie2rz4PiERJcm3e3hTCwOTKwNKM2KC+dLqvXJpyH5D+lxo/1OJW
e5wAxu9veurnla2TA2rOxuWm8CbeFe1otw7TO1JQ3CNHEnq4eS4EMiGhOMjRpF9x
7FbLVyoxdbsY1UARQwvCoSJ6CfHq8fuaPXStt0Lcd4uUcC7ZIAXn7mLzzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDj2ea1AejoxupbuYkZHh0PvkXq0MB8GA1UdIwQY
MBaAFKALQmBLP46eW3LyMpOJrxj/vSC4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lOWYzMTMtY2Q2OC00ZmI1LWJiOGQt
NzM5NmQ4YjY0MGFkLzEvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lOWYzMTMtY2Q2OC00ZmI1LWJiOGQtNzM5NmQ4YjY0MGFk
LzEvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwvIJH3P
LusGdgZH3wCWcVxGSzLJJN31b94kFtvOjriHjrUkcVXnH1wGits/YdeOUuvcDk56
2y/nU51IGCBdRTxtEssYAQ4R6UPRJ1yF9lO0NeLdck1gcOPwZn6Ge23vPOd/5ouE
yYEpWpAEKR+Pi6mlf9x1zI9GU67Q76WuJaMp2D3J+5iadyW7GLA/zkJRlhhSe2ag
eHQrupI6gJkb/waXg+5aBG/AvChmD8gDldN9FhgSz57kgRBCILPAITloYvOnuWvJ
hCO9t9UTugt0sSVGQmrtXm3A9yM5JfxoncZ3zd4YGKgizt06oGRhcS1yUyNXJ1pv
Tg/gk33WYxeqtA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:29:43 2025 by rpki-client