Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
File: OXBHadCH2f6PeQplVctPvvzSTTg.mft (raw, json)
Hash identifier: 6ELpzXJd47hloWlCvUnArgMS7wDnMVEwOT3Zqd9yExo=
Subject key identifier: 95:97:2D:40:0A:D8:4F:37:5E:02:AF:81:12:71:57:3D:C1:F6:76:25
Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Certificate serial: 0196809001B31F6C37495089CA5C5C8C9259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
Manifest number: 01C6
Signing time: Tue 29 Apr 2025 08:00:43 +0000
Manifest this update: Tue 29 Apr 2025 08:00:43 +0000
Manifest next update: Wed 30 Apr 2025 08:00:43 +0000
Files and hashes: 1: GvH_ld4kbG2WgWcG2cx_5y70SCI.roa (hash: aThEESBkBgawQBBj+8NWP1oT0rEWoC0jxTnO1rDLqhk=)
2: OXBHadCH2f6PeQplVctPvvzSTTg.crl (hash: EyCHGd2qrhVEGeceXT+ciZEjnDSN/0dyI5qcdANH56I=)
3: qg4rCavoAEstd_gdiifZJ2l134s.roa (hash: zv8J2KuDAwQOB6a6izYV8dRbqPViGL374uqqVPG9O1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:90:01:b3:1f:6c:37:49:50:89:ca:5c:5c:8c:92:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Validity
Not Before: Apr 29 08:00:43 2025 GMT
Not After : Apr 30 08:00:43 2025 GMT
Subject: CN=95972d400ad84f375e02af811271573dc1f67625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e6:a3:91:5c:a6:e4:c6:a7:94:ae:0a:0c:72:
d2:b7:de:06:74:75:0e:27:f2:c0:f4:38:1f:1f:15:
4f:51:76:74:0f:62:79:8d:64:4c:74:53:08:2d:d4:
d9:62:64:21:12:7c:c0:dc:88:51:94:d3:f2:d9:26:
72:e8:49:d7:29:f8:13:c1:c2:31:b9:0a:56:a7:9a:
87:47:8b:19:ff:e7:20:94:6c:cd:7f:d1:03:1e:24:
1e:15:5f:08:b7:87:74:69:82:ae:d4:db:e6:d2:35:
21:d8:0e:16:b9:64:7b:52:8e:22:82:9c:29:53:e3:
60:d7:25:83:2c:ca:14:13:a6:16:5b:1f:b1:2e:e1:
7b:9a:5f:1b:bc:18:20:73:7b:a1:aa:42:0c:3c:e0:
f0:49:d1:f0:b0:00:5d:38:a1:9d:78:fe:7e:db:19:
79:ff:1c:61:b5:b6:a9:72:54:05:06:81:00:d7:6d:
48:db:89:90:c0:15:0f:d9:ab:ea:f6:89:fe:a1:b2:
ec:b1:ec:66:29:99:5c:50:9e:dc:61:7f:c8:0c:b5:
19:75:6a:55:52:d7:dd:e9:ba:4f:61:b3:02:35:c7:
83:06:7a:7d:8e:c7:d7:e2:45:ed:80:f7:32:45:99:
b5:17:ce:e8:d0:93:0e:36:55:ff:08:b5:31:2b:5c:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:97:2D:40:0A:D8:4F:37:5E:02:AF:81:12:71:57:3D:C1:F6:76:25
X509v3 Authority Key Identifier:
keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a6:a0:f8:4e:7d:4c:4d:d9:4e:79:32:36:99:69:7a:f3:80:
99:9e:ec:6c:2f:8f:bf:d3:5a:9b:4d:00:ac:59:2c:c9:f2:78:
1f:b7:68:45:34:8f:e1:2c:0a:71:29:82:95:31:fa:45:2a:87:
81:e6:d1:21:54:bf:db:07:70:00:1e:b9:2c:69:80:62:5e:8c:
ad:53:e9:bd:ae:5e:2d:a9:16:06:2b:b9:8c:7e:d5:1f:b4:bc:
8b:6e:17:4f:00:e8:5f:ab:bc:cf:1c:fd:64:a7:e9:b8:b1:12:
4a:e7:80:83:b9:a9:fc:cb:74:1e:d0:c1:7a:d3:32:e1:4a:30:
b8:d2:fb:9c:9e:70:95:30:8a:76:76:1d:52:e5:12:82:d4:90:
b1:f5:44:33:59:a6:2c:96:b7:4b:7e:63:2f:8d:17:05:a8:db:
14:e0:e7:10:59:a0:b6:d8:6d:64:1d:1b:73:41:c9:36:fb:f4:
07:68:d5:cd:a3:76:9e:c5:05:ee:40:25:1a:55:77:ca:2e:7e:
99:01:c6:a1:80:eb:6e:6f:15:bc:b5:5a:94:81:d4:1c:4e:c0:
b6:37:bb:a9:58:51:7f:49:76:3c:b8:86:9b:66:57:ea:35:cc:
a0:6d:3e:12:99:6c:60:da:6d:0d:e3:0e:9b:8d:e2:74:20:4c:
0a:38:5a:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAkAGzH2w3SVCJylxcjJJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzA0NzY5ZDA4N2Q5ZmU4Zjc5MGE2NTU1Y2I0ZmJlZmNk
MjRkMzgwHhcNMjUwNDI5MDgwMDQzWhcNMjUwNDMwMDgwMDQzWjAzMTEwLwYDVQQD
Eyg5NTk3MmQ0MDBhZDg0ZjM3NWUwMmFmODExMjcxNTczZGMxZjY3NjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOajkVym5ManlK4KDHLSt94GdHUO
J/LA9DgfHxVPUXZ0D2J5jWRMdFMILdTZYmQhEnzA3IhRlNPy2SZy6EnXKfgTwcIx
uQpWp5qHR4sZ/+cglGzNf9EDHiQeFV8It4d0aYKu1Nvm0jUh2A4WuWR7Uo4igpwp
U+Ng1yWDLMoUE6YWWx+xLuF7ml8bvBggc3uhqkIMPODwSdHwsABdOKGdeP5+2xl5
/xxhtbapclQFBoEA121I24mQwBUP2avq9on+obLssexmKZlcUJ7cYX/IDLUZdWpV
Utfd6bpPYbMCNceDBnp9jsfX4kXtgPcyRZm1F87o0JMONlX/CLUxK1xOpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWXLUAK2E83XgKvgRJxVz3B9nYlMB8GA1UdIwQY
MBaAFDlwR2nQh9n+j3kKZVXLT7780k04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjIt
ZTQ1MzUwNDE0ZGRmLzEvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjItZTQ1MzUwNDE0ZGRm
LzEvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqag+E59
TE3ZTnkyNplpevOAmZ7sbC+Pv9Nam00ArFksyfJ4H7doRTSP4SwKcSmClTH6RSqH
gebRIVS/2wdwAB65LGmAYl6MrVPpva5eLakWBiu5jH7VH7S8i24XTwDoX6u8zxz9
ZKfpuLESSueAg7mp/Mt0HtDBetMy4UowuNL7nJ5wlTCKdnYdUuUSgtSQsfVEM1mm
LJa3S35jL40XBajbFODnEFmgtthtZB0bc0HJNvv0B2jVzaN2nsUF7kAlGlV3yi5+
mQHGoYDrbm8VvLValIHUHE7Atje7qVhRf0l2PLiGm2ZX6jXMoG0+EplsYNptDeMO
m43idCBMCjhaZg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:01:59 2025 by rpki-client