Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
File: OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft (raw, json)
Hash identifier: BNBG4Cl6yps3PJEHYEHEOfUc2o08tX3NLjGygCypsko=
Subject key identifier: 27:09:02:57:A3:05:4F:BB:C5:B3:A1:43:78:83:E5:E9:FC:93:67:D4
Authority key identifier: 38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
Certificate issuer: /CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Certificate serial: 01968511256690C73282814DC181134DF994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
Manifest number: 11B3
Signing time: Wed 30 Apr 2025 05:00:15 +0000
Manifest this update: Wed 30 Apr 2025 05:00:15 +0000
Manifest next update: Thu 01 May 2025 05:00:15 +0000
Files and hashes: 1: OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl (hash: hC91l6iANhxpwaj4WeNExSQpKxDk5QP7ww98nDCz7H8=)
2: PQhWLSkGUa_VMVGVuYBQSUZ_P_A.roa (hash: 3kRwsyvbLLbFqSNU/EJCsmBYkp3oO56TR7kGsRhAuv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:25:66:90:c7:32:82:81:4d:c1:81:13:4d:f9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Validity
Not Before: Apr 30 05:00:15 2025 GMT
Not After : May 1 05:00:15 2025 GMT
Subject: CN=27090257a3054fbbc5b3a1437883e5e9fc9367d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:48:40:ad:7a:79:9d:3c:7d:ae:54:84:4a:
97:c9:3a:83:b4:a3:ab:8d:1d:aa:3a:58:bf:29:f3:
1d:6e:c4:e2:ff:83:b5:f3:14:06:b3:cb:34:0a:d4:
22:29:cc:99:49:33:ba:01:ea:1c:cd:84:9f:6f:0f:
34:1c:26:1b:28:e6:1c:f4:93:9f:f7:d5:e3:0a:e7:
2a:48:38:a3:61:92:82:9f:9f:60:91:b3:a7:6e:c1:
5a:5d:40:e2:14:77:9f:61:52:c4:f6:39:b5:51:72:
0d:4d:81:68:04:78:e9:ae:d0:1c:66:76:8f:55:75:
c9:4c:c5:4e:de:67:21:e3:0f:6b:79:30:0e:80:45:
e2:3f:f2:7a:e3:97:49:35:bd:82:92:de:9b:ba:81:
a9:b8:06:66:a7:c4:02:53:54:8c:48:bb:cc:87:fd:
e4:82:39:0e:0d:da:c0:50:25:e9:32:6c:76:00:ed:
e8:f6:3a:de:11:a8:f7:1e:39:56:00:24:a1:19:e1:
e9:31:40:33:07:ba:dc:01:0f:74:95:51:59:a7:74:
c5:e0:a2:41:32:ad:c7:0f:bb:d6:7f:2c:df:aa:98:
09:cf:91:f4:da:a7:79:bf:09:7f:2b:7e:1d:10:30:
3a:b2:ea:6c:24:0f:fc:5c:e4:c1:81:96:d1:30:ba:
0a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:09:02:57:A3:05:4F:BB:C5:B3:A1:43:78:83:E5:E9:FC:93:67:D4
X509v3 Authority Key Identifier:
keyid:38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:22:2d:91:59:ef:89:8b:59:ff:4d:1f:49:57:3e:e9:79:28:
28:9b:98:ba:13:78:7a:97:11:9d:3a:c0:6a:c5:13:e5:de:29:
8f:e2:8a:d3:62:6d:fa:69:ff:db:51:be:6d:98:ce:fd:4e:18:
b4:78:64:53:15:0b:f3:00:bf:27:ac:3f:bd:9a:92:94:92:98:
20:fb:5f:49:f0:d0:b2:2b:0f:9d:0b:76:fb:80:39:8a:7b:5e:
16:d6:ca:0a:61:f7:8c:43:3e:4c:76:11:40:e1:6d:0f:20:f1:
5e:33:ec:81:f2:0a:ed:ee:f4:fe:7a:4b:b0:3d:6d:60:ea:90:
e7:40:90:99:d3:c1:54:20:dc:be:6c:12:1d:14:a7:24:29:23:
d0:82:3b:8c:c2:70:83:c7:35:32:14:fc:32:e9:24:b1:71:6a:
72:3b:53:bc:61:62:17:e0:c0:19:e5:c7:56:8e:b5:d1:a5:98:
3e:7f:58:1c:76:5d:02:6c:66:3d:3e:70:2f:da:b1:a7:da:e9:
72:87:3d:b3:59:46:9b:cb:c9:ab:f6:5b:16:da:92:35:af:25:
89:80:c4:7a:c8:60:86:00:a3:1c:50:ed:78:c0:e1:5a:83:87:
23:3e:d7:7f:10:7c:20:cc:76:48:52:94:43:d0:63:aa:ba:2d:
47:90:2e:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFESVmkMcygoFNwYETTfmUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NTNhZjUwMTQ0OTliMmZiNWNkMmMxZTY4YTI0ZmY4MjU2
ZDBkMGQwHhcNMjUwNDMwMDUwMDE1WhcNMjUwNTAxMDUwMDE1WjAzMTEwLwYDVQQD
EygyNzA5MDI1N2EzMDU0ZmJiYzViM2ExNDM3ODgzZTVlOWZjOTM2N2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLhIQK16eZ08fa5UhEqXyTqDtKOr
jR2qOli/KfMdbsTi/4O18xQGs8s0CtQiKcyZSTO6AeoczYSfbw80HCYbKOYc9JOf
99XjCucqSDijYZKCn59gkbOnbsFaXUDiFHefYVLE9jm1UXINTYFoBHjprtAcZnaP
VXXJTMVO3mch4w9reTAOgEXiP/J645dJNb2Ckt6buoGpuAZmp8QCU1SMSLvMh/3k
gjkODdrAUCXpMmx2AO3o9jreEaj3HjlWACShGeHpMUAzB7rcAQ90lVFZp3TF4KJB
Mq3HD7vWfyzfqpgJz5H02qd5vwl/K34dEDA6supsJA/8XOTBgZbRMLoKnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcJAlejBU+7xbOhQ3iD5en8k2fUMB8GA1UdIwQY
MBaAFDhTr1AUSZsvtc0sHmiiT/glbQ0NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0ZPdlVCUkpteS0xelN3ZWFLSlAtQ1Z0RFEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zMGNjNDEtOGFhYi00NDYzLTk5Zjgt
ZGNiNTZhY2I3NzdmLzEvT0ZPdlVCUkpteS0xelN3ZWFLSlAtQ1Z0RFEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zMGNjNDEtOGFhYi00NDYzLTk5ZjgtZGNiNTZhY2I3Nzdm
LzEvT0ZPdlVCUkpteS0xelN3ZWFLSlAtQ1Z0RFEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSItkVnv
iYtZ/00fSVc+6XkoKJuYuhN4epcRnTrAasUT5d4pj+KK02Jt+mn/21G+bZjO/U4Y
tHhkUxUL8wC/J6w/vZqSlJKYIPtfSfDQsisPnQt2+4A5inteFtbKCmH3jEM+THYR
QOFtDyDxXjPsgfIK7e70/npLsD1tYOqQ50CQmdPBVCDcvmwSHRSnJCkj0II7jMJw
g8c1MhT8MukksXFqcjtTvGFiF+DAGeXHVo610aWYPn9YHHZdAmxmPT5wL9qxp9rp
coc9s1lGm8vJq/ZbFtqSNa8liYDEeshghgCjHFDteMDhWoOHIz7XfxB8IMx2SFKU
Q9BjqrotR5Au3A==
-----END CERTIFICATE-----
Generated at Wed Apr 30 16:00:12 2025 by rpki-client