Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier: nT2M5Aa0QQMfzsky854OBeJ2AR8j83+VukT0dyRCN6Q=
Subject key identifier: B8:76:84:7E:91:4A:CA:BE:34:DD:19:2F:1A:07:40:02:26:DC:30:04
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 01967643398BDDC141BC086D90CEB002D73C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number: 0BB1
Signing time: Sun 27 Apr 2025 08:00:39 +0000
Manifest this update: Sun 27 Apr 2025 08:00:39 +0000
Manifest next update: Mon 28 Apr 2025 08:00:39 +0000
Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: 57Xud9jdVi2Fhc85lNJt1iLMj3Haib5qv91cDZj4RG8=)
2: QFnY02YmfQGJ4URcdKc-UJCZjYo.roa (hash: cz0+d02fJHBBngQvBEuS7ucPucnAX57nkrsYbr2NfQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:39:8b:dd:c1:41:bc:08:6d:90:ce:b0:02:d7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: Apr 27 08:00:39 2025 GMT
Not After : Apr 28 08:00:39 2025 GMT
Subject: CN=b876847e914acabe34dd192f1a07400226dc3004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f0:f9:e1:e8:94:62:18:d5:e8:b2:30:c3:cb:
f9:4b:10:30:3b:c0:05:0a:2c:a8:c0:43:b5:0d:a7:
ed:db:a7:a1:9c:05:58:92:3e:f9:1b:b1:36:0f:1b:
95:05:7d:35:2c:e8:5a:a7:94:c0:55:f9:7e:bf:83:
73:16:0d:4a:b4:26:c4:c3:83:30:de:52:20:9c:46:
1a:89:f2:41:07:1d:78:8b:be:81:e2:37:6c:5b:ad:
4c:71:45:b8:c2:12:c6:17:e0:e1:d0:97:2d:58:b0:
2e:ff:82:5d:7b:cb:69:3b:0d:97:4c:63:42:13:8e:
ad:22:fb:2d:3c:4e:85:2d:be:5c:70:91:29:25:07:
80:dd:58:9d:91:91:8a:09:46:93:b6:6c:55:64:13:
c8:28:2c:a9:0a:37:9b:a9:b6:cc:2c:51:f8:ae:4c:
2a:fe:69:db:9b:b6:be:03:4e:4d:b0:ab:49:be:4c:
00:65:22:52:c5:ca:fe:7b:6a:6d:00:87:a9:58:b6:
11:64:11:87:2e:95:07:fd:e5:4e:05:11:aa:41:64:
7e:77:6c:43:95:cb:44:84:55:a1:98:5b:68:22:86:
7d:66:e7:b3:a1:30:4c:74:43:90:0c:1d:fb:97:40:
3a:d5:a3:28:d3:af:48:01:a6:5e:2d:d9:18:1d:54:
27:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:76:84:7E:91:4A:CA:BE:34:DD:19:2F:1A:07:40:02:26:DC:30:04
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d1:86:1d:65:ff:51:79:35:01:93:d9:65:f6:a6:b7:5c:4f:
6e:95:44:be:e5:6b:be:a7:c3:87:50:24:ea:3a:0c:fe:9a:34:
56:a5:67:f1:44:9d:0a:bb:ef:ce:26:4c:83:b0:91:d9:b4:58:
53:bf:9e:d5:44:8e:6f:34:06:e5:d3:16:34:47:61:fe:31:c1:
38:65:e9:20:99:71:c7:2f:57:4e:99:b4:46:11:80:e5:e8:f3:
1c:66:2e:31:3c:8f:7f:2b:d6:ba:08:d3:d7:ac:99:8f:10:6b:
d6:62:cc:1d:19:c0:4d:53:dd:4e:61:e9:34:ad:c1:9d:17:b7:
3f:37:6a:2e:bb:88:ed:4b:08:43:01:07:a5:5e:dd:3c:1e:8c:
2f:67:43:e0:2d:e6:4b:9e:38:9d:bd:39:23:be:44:fc:c2:5d:
3b:fc:18:79:16:d2:3f:78:7f:28:d2:df:db:ea:24:1b:fd:aa:
d1:e9:df:c2:ac:b5:25:61:18:f2:7c:87:48:af:62:64:dc:ce:
64:48:d0:26:55:5b:6d:58:55:44:0a:70:d0:6f:60:bd:bd:5e:
6d:67:56:e8:35:c6:a3:bc:75:12:76:2f:96:1f:fc:eb:5b:94:
ea:4f:29:70:9a:ad:d7:ab:57:23:66:e0:6c:ec:1f:86:85:c8:
b8:49:04:72
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZ2QzmL3cFBvAhtkM6wAtc8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhODFkYzQ2Y2NlMzljMTZjMjQzOTZmNTVlNjI2M2E2Njlj
N2U3NjkwHhcNMjUwNDI3MDgwMDM5WhcNMjUwNDI4MDgwMDM5WjAzMTEwLwYDVQQD
EyhiODc2ODQ3ZTkxNGFjYWJlMzRkZDE5MmYxYTA3NDAwMjI2ZGMzMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfD54eiUYhjV6LIww8v5SxAwO8AF
CiyowEO1Daft26ehnAVYkj75G7E2DxuVBX01LOhap5TAVfl+v4NzFg1KtCbEw4Mw
3lIgnEYaifJBBx14i76B4jdsW61McUW4whLGF+Dh0JctWLAu/4Jde8tpOw2XTGNC
E46tIvstPE6FLb5ccJEpJQeA3VidkZGKCUaTtmxVZBPIKCypCjebqbbMLFH4rkwq
/mnbm7a+A05NsKtJvkwAZSJSxcr+e2ptAIepWLYRZBGHLpUH/eVOBRGqQWR+d2xD
lctEhFWhmFtoIoZ9ZuezoTBMdEOQDB37l0A61aMo069IAaZeLdkYHVQnjwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLh2hH6RSsq+NN0ZLxoHQAIm3DAEMB8GA1UdIwQY
MBaAFPqB3EbM45wWwkOW9V5iY6Zpx+dpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1vSGNSc3pqbkJiQ1E1YjFYbUpqcG1uSDUyay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvOGYwMTgwLTJiNWItNDQxOS1hZDM2
LWY0YjhjYTM3YTFmYi8xLzEtb0hjUnN6am5CYkNRNWIxWG1KanBtbkg1MmsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNjLzhmMDE4MC0yYjViLTQ0MTktYWQzNi1mNGI4Y2EzN2Ex
ZmIvMS8xLW9IY1JzempuQmJDUTViMVhtSmpwbW5INTJrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdGG
HWX/UXk1AZPZZfamt1xPbpVEvuVrvqfDh1Ak6joM/po0VqVn8USdCrvvziZMg7CR
2bRYU7+e1USObzQG5dMWNEdh/jHBOGXpIJlxxy9XTpm0RhGA5ejzHGYuMTyPfyvW
ugjT16yZjxBr1mLMHRnATVPdTmHpNK3BnRe3PzdqLruI7UsIQwEHpV7dPB6ML2dD
4C3mS544nb05I75E/MJdO/wYeRbSP3h/KNLf2+okG/2q0enfwqy1JWEY8nyHSK9i
ZNzOZEjQJlVbbVhVRApw0G9gvb1ebWdW6DXGo7x1EnYvlh/861uU6k8pcJqt16tX
I2bgbOwfhoXIuEkEcg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:58:11 2025 by rpki-client