Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
File: O-wSwhEIE08AwDUxB9YMza6--y4.mft (raw, json)
Hash identifier: mtePErVzthLv3cmEVTzvkLrcOumtUHy9CBhDYL9YC4Q=
Subject key identifier: 54:13:B0:F7:A9:D3:1F:2E:6E:7F:76:0A:95:49:E4:A4:82:D8:EB:25
Authority key identifier: 3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
Certificate issuer: /CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Certificate serial: 0196824707D2316A605992E0B37B91C2C707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
Manifest number: 072A
Signing time: Tue 29 Apr 2025 16:00:15 +0000
Manifest this update: Tue 29 Apr 2025 16:00:15 +0000
Manifest next update: Wed 30 Apr 2025 16:00:15 +0000
Files and hashes: 1: O-wSwhEIE08AwDUxB9YMza6--y4.crl (hash: s/8FJIPDzR7ycavISWSRohkN8SmRFQpswCc9fLkRiDQ=)
2: u2WMlvCqvR8C4fxIzSZBue7OPx8.roa (hash: qmjTqeANx+dQ4nPXTJuIRLRK9MoQ6Usvr9tkzeOywu8=)
3: zTvzZc3tlOwLBnnj-NPbv4PhboA.roa (hash: msHMJXILJsy2yJM+hVyJRqp2m3iGv1So8lJvoritOiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 16:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:07:d2:31:6a:60:59:92:e0:b3:7b:91:c2:c7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Validity
Not Before: Apr 29 16:00:15 2025 GMT
Not After : Apr 30 16:00:15 2025 GMT
Subject: CN=5413b0f7a9d31f2e6e7f760a9549e4a482d8eb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:d4:e0:1c:d0:bc:1c:a4:4a:14:95:e2:c7:
93:6c:3d:55:5e:51:02:83:b3:de:3b:64:74:de:3b:
ce:cc:1a:cd:34:64:f0:ca:d8:e6:8d:6b:a4:22:fd:
c3:1e:fa:81:30:f5:9e:a3:55:25:20:db:6e:96:eb:
2e:9f:b5:88:2d:2f:ba:79:aa:02:57:ba:9e:bd:6f:
ba:21:be:5c:08:10:c4:59:b3:b2:dc:22:23:42:46:
a7:73:03:f5:80:78:c9:ce:65:46:80:5b:1d:8d:da:
1d:c0:b0:42:89:38:a0:72:64:d2:ef:8b:5d:84:1f:
3f:7d:50:d6:af:75:8f:aa:2e:87:e2:a6:63:20:f1:
8a:68:17:83:2d:ae:5f:12:c8:5e:92:a3:f6:05:0c:
4b:74:ad:df:0a:e8:68:46:e4:cf:e1:a0:a1:93:9d:
65:23:b3:de:67:d3:f4:91:7e:6b:5a:f6:3b:a2:96:
03:c0:56:60:d0:02:b2:54:f6:1c:95:24:46:57:6b:
92:db:b9:2a:a8:cf:13:96:64:7d:92:95:25:d1:ac:
fb:12:a9:d3:04:e5:0f:60:ae:b5:3f:f9:23:12:1b:
87:65:5e:ae:13:f3:9e:6c:01:0e:b9:ec:b3:bc:6e:
cc:47:0a:57:a9:15:5b:36:a5:2d:cd:bf:dc:51:0d:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:13:B0:F7:A9:D3:1F:2E:6E:7F:76:0A:95:49:E4:A4:82:D8:EB:25
X509v3 Authority Key Identifier:
keyid:3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:58:42:88:d0:b1:8d:df:7d:42:da:5c:49:00:38:9b:af:25:
d8:9b:94:70:57:8b:95:61:3d:b1:ef:39:f5:59:50:63:1d:f0:
2a:20:a8:a9:1b:a3:b3:ca:c8:fb:a8:77:bc:da:09:9b:0c:28:
a9:f3:ae:5b:a0:57:3e:58:0e:a8:7b:d0:c9:40:2b:30:b7:21:
c7:3a:56:db:ec:f5:26:be:f3:57:5d:4d:e5:a0:2e:29:0c:e9:
00:1b:52:d7:4d:a3:6c:75:dc:f5:81:c5:ca:8a:3d:b5:f5:cd:
a9:8d:b2:cb:e1:2d:28:bf:5c:3e:4a:3a:2e:55:cd:f1:ab:74:
a5:88:17:dd:82:64:31:e3:45:05:6f:ad:5b:93:cf:15:71:5a:
58:92:1c:29:f8:9a:c3:3d:48:6a:cb:5d:4d:34:a6:bf:5f:9a:
ff:a0:dd:0c:d4:b8:ea:79:50:ea:96:b4:f1:ea:cb:cb:3a:fd:
e9:8f:00:53:d8:96:05:e9:47:87:40:ef:59:07:ad:26:e8:7e:
8e:7e:d3:1d:0e:ae:91:2a:60:b0:f2:2b:c4:6d:eb:6c:aa:dd:
8e:e7:4d:7f:07:71:3f:05:e6:71:9a:e8:26:b1:51:3b:6b:59:
40:64:0b:ea:e4:37:9b:68:f4:03:96:1c:22:91:b0:c9:b4:ac:
e7:a5:6d:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCRwfSMWpgWZLgs3uRwscHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZWMxMmMyMTEwODEzNGYwMGMwMzUzMTA3ZDYwY2NkYWVi
ZWZiMmUwHhcNMjUwNDI5MTYwMDE1WhcNMjUwNDMwMTYwMDE1WjAzMTEwLwYDVQQD
Eyg1NDEzYjBmN2E5ZDMxZjJlNmU3Zjc2MGE5NTQ5ZTRhNDgyZDhlYjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzPU4BzQvBykShSV4seTbD1VXlEC
g7PeO2R03jvOzBrNNGTwytjmjWukIv3DHvqBMPWeo1UlINtulusun7WILS+6eaoC
V7qevW+6Ib5cCBDEWbOy3CIjQkancwP1gHjJzmVGgFsdjdodwLBCiTigcmTS74td
hB8/fVDWr3WPqi6H4qZjIPGKaBeDLa5fEshekqP2BQxLdK3fCuhoRuTP4aChk51l
I7PeZ9P0kX5rWvY7opYDwFZg0AKyVPYclSRGV2uS27kqqM8TlmR9kpUl0az7EqnT
BOUPYK61P/kjEhuHZV6uE/OebAEOueyzvG7MRwpXqRVbNqUtzb/cUQ0zRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQTsPep0x8ubn92CpVJ5KSC2OslMB8GA1UdIwQY
MBaAFDvsEsIRCBNPAMA1MQfWDM2uvvsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTy13U3doRUlFMDhBd0RVeEI5WU16YTYtLXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZGZhOTctOGM1My00ZTc0LTlhMmMt
NDg0YTA2YTYxNzE3LzEvTy13U3doRUlFMDhBd0RVeEI5WU16YTYtLXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yZGZhOTctOGM1My00ZTc0LTlhMmMtNDg0YTA2YTYxNzE3
LzEvTy13U3doRUlFMDhBd0RVeEI5WU16YTYtLXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflhCiNCx
jd99QtpcSQA4m68l2JuUcFeLlWE9se859VlQYx3wKiCoqRujs8rI+6h3vNoJmwwo
qfOuW6BXPlgOqHvQyUArMLchxzpW2+z1Jr7zV11N5aAuKQzpABtS102jbHXc9YHF
yoo9tfXNqY2yy+EtKL9cPko6LlXN8at0pYgX3YJkMeNFBW+tW5PPFXFaWJIcKfia
wz1IastdTTSmv1+a/6DdDNS46nlQ6pa08erLyzr96Y8AU9iWBelHh0DvWQetJuh+
jn7THQ6ukSpgsPIrxG3rbKrdjudNfwdxPwXmcZroJrFRO2tZQGQL6uQ3m2j0A5Yc
IpGwybSs56VtGg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:53:15 2025 by rpki-client