Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
File: oILdW4b5WNW-c_2-PwzPbf8C9yE.mft (raw, json)
Hash identifier: WAKgyvCGX06/S4nNWZPwjeefGYOXcKQ29ncETmaLlfE=
Subject key identifier: F7:37:29:6A:8D:B7:3B:BE:72:91:40:77:DF:2C:A7:E0:EF:3B:BF:85
Authority key identifier: A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
Certificate issuer: /CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Certificate serial: 019673797723D581AE104DE802A733FCB6FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
Manifest number: 150E
Signing time: Sat 26 Apr 2025 19:01:02 +0000
Manifest this update: Sat 26 Apr 2025 19:01:02 +0000
Manifest next update: Sun 27 Apr 2025 19:01:02 +0000
Files and hashes: 1: PKIB0NDZswSqU-d6MbwA9JZfGMk.roa (hash: OewUcdT2Rw4jRK7U2p1ljpQHoVklDy1bcntiR+wXIOw=)
2: oILdW4b5WNW-c_2-PwzPbf8C9yE.crl (hash: XA1scewaJGQDVgbc7GyIIo2bjWa5GPAR9CwYAwJtdBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:77:23:d5:81:ae:10:4d:e8:02:a7:33:fc:b6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Validity
Not Before: Apr 26 19:01:02 2025 GMT
Not After : Apr 27 19:01:02 2025 GMT
Subject: CN=f737296a8db73bbe72914077df2ca7e0ef3bbf85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e1:e3:5f:64:af:2a:43:6b:5d:4b:95:45:7d:
99:b4:9c:98:0b:26:02:66:d0:f1:02:83:7f:23:71:
2f:2c:c5:f6:02:85:3c:f1:62:5e:09:72:5a:5f:68:
ac:1d:37:7f:95:bd:ca:3c:ef:c0:11:2e:d7:ae:19:
26:b0:27:b4:0b:1b:cf:4b:3a:41:65:6d:23:8d:3e:
fb:3c:06:60:41:e4:6f:d7:bd:22:e1:0c:bf:bc:2f:
6d:55:19:30:ad:04:3a:17:99:53:1d:3e:26:82:71:
e5:6c:2a:63:23:70:c8:f7:cf:c4:63:8b:b0:41:1f:
53:38:dd:e2:a6:87:13:4e:0a:55:8a:e1:91:76:95:
11:dd:38:6b:b9:6a:03:d7:1f:3a:ce:9b:31:38:b5:
77:7e:0b:3a:69:f9:24:11:f3:6d:ae:ac:00:97:31:
41:5f:e6:c5:89:b4:20:38:82:76:ff:a6:6e:8b:3e:
2f:41:5c:7b:7b:8f:00:47:3c:53:3f:a6:cc:8c:ab:
71:2e:5c:98:dc:0d:09:22:b3:10:13:8d:76:41:8a:
af:79:ea:91:ec:90:1b:07:51:8c:31:99:4f:aa:01:
a6:d6:af:e6:3e:1c:27:fc:df:c6:ce:2b:10:1d:13:
3f:03:d1:11:44:86:76:26:a9:49:4b:c7:e2:41:0e:
ee:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:37:29:6A:8D:B7:3B:BE:72:91:40:77:DF:2C:A7:E0:EF:3B:BF:85
X509v3 Authority Key Identifier:
keyid:A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:da:89:62:4d:84:23:55:b5:ac:02:7d:2a:49:3e:59:f5:a4:
1f:f2:71:83:06:b0:ef:74:c1:04:b1:4e:ba:e4:a2:49:1c:d0:
f1:ab:86:54:bf:76:ef:cf:5d:5d:e6:01:08:22:b1:11:3b:ed:
3f:45:3c:11:26:0f:37:c4:ab:a9:a4:e0:4d:bb:4b:69:b3:ae:
85:0c:22:f9:07:58:c7:4a:94:bb:e1:4f:c2:5b:24:02:7b:26:
57:51:20:08:b3:7b:cc:ae:ef:81:a6:fe:29:ea:60:85:62:4a:
76:82:da:e0:aa:67:ce:f4:0c:7d:fe:dc:ec:bb:c7:61:8a:c8:
29:c0:f7:31:80:0d:38:09:2e:46:94:04:6e:48:2d:7b:3a:83:
d0:8c:43:ab:15:a0:6b:5a:f3:fb:e3:44:8e:0b:58:1f:4a:cc:
c2:d5:ae:ef:80:c5:8f:54:01:18:2e:58:c5:5c:5a:5c:21:9e:
ea:e9:93:04:03:7d:8d:5b:05:5a:d4:07:53:c9:37:db:46:f3:
e2:5c:eb:32:07:bb:08:df:ac:0c:cc:b5:17:87:68:ba:f5:32:
f2:a1:8c:67:74:a2:6e:67:38:47:f6:c0:f4:4d:ab:02:8e:7c:
d7:66:2a:81:a5:cb:cc:13:5d:85:54:9f:0a:fd:85:1c:aa:d2:
00:1a:1e:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzeXcj1YGuEE3oAqcz/Lb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwODJkZDViODZmOTU4ZDViZTczZmRiZTNmMGNjZjZkZmYw
MmY3MjEwHhcNMjUwNDI2MTkwMTAyWhcNMjUwNDI3MTkwMTAyWjAzMTEwLwYDVQQD
EyhmNzM3Mjk2YThkYjczYmJlNzI5MTQwNzdkZjJjYTdlMGVmM2JiZjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OHjX2SvKkNrXUuVRX2ZtJyYCyYC
ZtDxAoN/I3EvLMX2AoU88WJeCXJaX2isHTd/lb3KPO/AES7XrhkmsCe0CxvPSzpB
ZW0jjT77PAZgQeRv170i4Qy/vC9tVRkwrQQ6F5lTHT4mgnHlbCpjI3DI98/EY4uw
QR9TON3ipocTTgpViuGRdpUR3ThruWoD1x86zpsxOLV3fgs6afkkEfNtrqwAlzFB
X+bFibQgOIJ2/6Zuiz4vQVx7e48ARzxTP6bMjKtxLlyY3A0JIrMQE412QYqveeqR
7JAbB1GMMZlPqgGm1q/mPhwn/N/GzisQHRM/A9ERRIZ2JqlJS8fiQQ7u+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPc3KWqNtzu+cpFAd98sp+DvO7+FMB8GA1UdIwQY
MBaAFKCC3VuG+VjVvnP9vj8Mz23/AvchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0lMZFc0YjVXTlctY18yLVB3elBiZjhDOXlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83Mjc5ZDYtZjk1Mi00ZTM1LTk3OTYt
ZjMwM2RlNGEyZDVlLzEvb0lMZFc0YjVXTlctY18yLVB3elBiZjhDOXlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83Mjc5ZDYtZjk1Mi00ZTM1LTk3OTYtZjMwM2RlNGEyZDVl
LzEvb0lMZFc0YjVXTlctY18yLVB3elBiZjhDOXlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdqJYk2E
I1W1rAJ9Kkk+WfWkH/Jxgwaw73TBBLFOuuSiSRzQ8auGVL92789dXeYBCCKxETvt
P0U8ESYPN8SrqaTgTbtLabOuhQwi+QdYx0qUu+FPwlskAnsmV1EgCLN7zK7vgab+
KepghWJKdoLa4KpnzvQMff7c7LvHYYrIKcD3MYANOAkuRpQEbkgtezqD0IxDqxWg
a1rz++NEjgtYH0rMwtWu74DFj1QBGC5YxVxaXCGe6umTBAN9jVsFWtQHU8k320bz
4lzrMge7CN+sDMy1F4douvUy8qGMZ3Sibmc4R/bA9E2rAo5812YqgaXLzBNdhVSf
Cv2FHKrSABoeeA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:22 2025 by rpki-client