Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
File: IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json)
Hash identifier: HBYyKoN/bwhQQNgDfy7bTdRmmeWubw9p8BEWblJSPOM=
Subject key identifier: 09:53:E7:80:A1:1E:49:A2:1C:12:F0:CA:4F:8E:30:25:BE:14:9E:21
Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
Certificate issuer: /CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Certificate serial: 0196846CCB55CF49D3CFFD7D93D74F08E03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
Manifest number: 0BD3
Signing time: Wed 30 Apr 2025 02:00:44 +0000
Manifest this update: Wed 30 Apr 2025 02:00:44 +0000
Manifest next update: Thu 01 May 2025 02:00:44 +0000
Files and hashes: 1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: 33XzXTanUOx8sdEPgHC+j7A8Wjk9bV+yiosotbfiPeM=)
2: maYu8dN9neYyc8DtbRu2KTpDdQk.roa (hash: H5U+8VR9PAI4QlkVpTR8DC6LqpMXq6tJVvxgrK/vIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:cb:55:cf:49:d3:cf:fd:7d:93:d7:4f:08:e0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Validity
Not Before: Apr 30 02:00:44 2025 GMT
Not After : May 1 02:00:44 2025 GMT
Subject: CN=0953e780a11e49a21c12f0ca4f8e3025be149e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3a:e8:7b:e4:25:80:d5:95:c9:3b:42:55:a1:
82:1d:92:c6:b5:ec:b8:0e:d3:32:01:2e:62:75:19:
0b:53:61:3b:ba:99:88:ae:a3:f2:ec:74:e8:bc:fe:
eb:dd:f3:e9:c1:3d:bb:6c:78:77:e6:2f:2a:57:22:
d1:17:5b:ef:9e:9d:a0:3e:f8:e2:70:94:34:a5:ec:
34:b6:7d:3b:a7:35:8c:27:81:25:71:40:a7:90:7e:
4c:77:6f:c1:84:59:76:6c:33:7f:a0:52:34:91:68:
cb:31:a9:91:fd:9e:c3:e9:da:22:eb:71:7c:1c:1f:
bd:2e:d6:d2:29:35:a7:38:b6:09:b4:f4:a4:59:8a:
7e:e4:e1:86:e5:93:79:1e:50:e0:d6:f9:2c:b4:20:
a4:26:de:d0:f8:8d:ae:24:35:88:f9:39:58:5c:5c:
31:3e:46:b7:ff:57:fc:04:6a:c5:80:03:2f:3d:c1:
24:79:1a:7d:79:3d:e9:0d:fd:4b:ad:29:3c:f8:d5:
19:8e:a9:59:b0:2a:65:ba:a7:d4:f2:d9:42:e7:7b:
b5:83:bc:c1:6b:2e:9e:33:40:a8:f2:0b:bd:c5:0f:
40:13:de:95:c1:68:37:08:54:56:c5:db:fe:fc:74:
a3:eb:42:44:1c:e1:9e:f4:99:c7:c7:6f:d9:8e:95:
cd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:53:E7:80:A1:1E:49:A2:1C:12:F0:CA:4F:8E:30:25:BE:14:9E:21
X509v3 Authority Key Identifier:
keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:43:26:57:3b:3b:61:48:57:b1:45:97:5a:38:a6:5b:e6:5d:
c5:aa:be:dd:bb:93:47:ed:93:40:d9:18:59:19:08:1d:26:61:
9b:d2:49:d9:6e:59:c6:3d:ec:8b:55:f2:22:a0:9f:85:7e:c8:
62:89:6b:ea:7b:19:b3:62:20:1b:32:85:1a:12:02:66:e4:cc:
e3:0b:8f:76:0d:33:72:0b:ea:5f:d6:99:c7:4b:53:5b:94:a6:
14:52:30:35:52:bd:32:65:3d:46:65:b5:40:81:c2:fc:12:05:
83:39:cd:91:00:56:dc:45:3c:90:4b:b8:a4:31:65:81:ae:fb:
64:6b:5f:d0:73:15:e7:e4:dc:50:88:30:62:77:02:40:0c:ac:
d4:f7:ff:77:bf:3d:b3:65:e4:14:5c:70:15:b2:69:64:3d:c6:
7c:b0:c2:58:b8:bd:68:ed:dc:e6:fd:5b:c7:46:d2:12:c2:4b:
af:1e:ab:16:01:4c:d1:0d:ac:9a:5d:1f:d9:88:73:ec:95:5b:
3e:ac:4c:eb:e8:62:8e:7d:df:46:10:b1:9d:1d:4e:35:8e:e1:
8f:2c:a7:05:6e:85:4a:94:95:47:49:dc:72:c6:fe:bd:c5:f7:
05:f0:74:65:21:a2:fc:a1:5c:67:69:d9:80:d7:74:fa:d2:7c:
02:0e:e4:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaEbMtVz0nTz/19k9dPCOA/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDFmNDM5ZGViYWZmNTg4MDM5NWQ3OGYwYmJmYWQ4Y2E3
NjA4YmYwHhcNMjUwNDMwMDIwMDQ0WhcNMjUwNTAxMDIwMDQ0WjAzMTEwLwYDVQQD
EygwOTUzZTc4MGExMWU0OWEyMWMxMmYwY2E0ZjhlMzAyNWJlMTQ5ZTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zroe+QlgNWVyTtCVaGCHZLGtey4
DtMyAS5idRkLU2E7upmIrqPy7HTovP7r3fPpwT27bHh35i8qVyLRF1vvnp2gPvji
cJQ0pew0tn07pzWMJ4ElcUCnkH5Md2/BhFl2bDN/oFI0kWjLMamR/Z7D6doi63F8
HB+9LtbSKTWnOLYJtPSkWYp+5OGG5ZN5HlDg1vkstCCkJt7Q+I2uJDWI+TlYXFwx
Pka3/1f8BGrFgAMvPcEkeRp9eT3pDf1LrSk8+NUZjqlZsCpluqfU8tlC53u1g7zB
ay6eM0Co8gu9xQ9AE96VwWg3CFRWxdv+/HSj60JEHOGe9JnHx2/ZjpXNEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlT54ChHkmiHBLwyk+OMCW+FJ4hMB8GA1UdIwQY
MBaAFCEB9Dneuv9YgDldePC7+tjKdgi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFIME9kNjZfMWlBT1YxNDhMdjYyTXAyQ0w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83OGM0MTQtOWIwOS00Nzc1LWE1NTgt
ZTNkZWZiN2UyNTE4LzEvSVFIME9kNjZfMWlBT1YxNDhMdjYyTXAyQ0w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83OGM0MTQtOWIwOS00Nzc1LWE1NTgtZTNkZWZiN2UyNTE4
LzEvSVFIME9kNjZfMWlBT1YxNDhMdjYyTXAyQ0w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckMmVzs7
YUhXsUWXWjimW+Zdxaq+3buTR+2TQNkYWRkIHSZhm9JJ2W5Zxj3si1XyIqCfhX7I
Yolr6nsZs2IgGzKFGhICZuTM4wuPdg0zcgvqX9aZx0tTW5SmFFIwNVK9MmU9RmW1
QIHC/BIFgznNkQBW3EU8kEu4pDFlga77ZGtf0HMV5+TcUIgwYncCQAys1Pf/d789
s2XkFFxwFbJpZD3GfLDCWLi9aO3c5v1bx0bSEsJLrx6rFgFM0Q2sml0f2Yhz7JVb
PqxM6+hijn3fRhCxnR1ONY7hjyynBW6FSpSVR0nccsb+vcX3BfB0ZSGi/KFcZ2nZ
gNd0+tJ8Ag7k7g==
-----END CERTIFICATE-----
Generated at Wed Apr 30 07:51:55 2025 by rpki-client