Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
File: ot5KBypby3TSDpLdu9f2R3w8j84.mft (raw, json)
Hash identifier: jii6F26kopP1mLM5+SSzsdH3HYcw0dgybqzHgx7rSn0=
Subject key identifier: D9:9C:55:A0:75:83:DC:8F:69:02:69:82:38:F1:70:00:38:A4:A3:3E
Authority key identifier: A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
Certificate issuer: /CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Certificate serial: 0196846CD6B6225B4080C053EA7BB14F26F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 02:00:47 +0000
Manifest this update: Wed 30 Apr 2025 02:00:47 +0000
Manifest next update: Thu 01 May 2025 02:00:47 +0000
Files and hashes: 1: cXzh2EByibI6pp16VOl9xphGioo.roa (hash: it2xcMVeYRReFR9yZ4UbpAh0VY8UGfjt29+46hCCzeU=)
2: ot5KBypby3TSDpLdu9f2R3w8j84.crl (hash: uH05dDmGrWhxn/le86xi+5ZdVV/K7fCxbYP8YA3gCy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:d6:b6:22:5b:40:80:c0:53:ea:7b:b1:4f:26:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Validity
Not Before: Apr 30 02:00:47 2025 GMT
Not After : May 1 02:00:47 2025 GMT
Subject: CN=d99c55a07583dc8f6902698238f1700038a4a33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:5c:ef:2a:e4:d1:03:35:d9:04:91:ac:5b:
97:f5:1e:8f:51:5f:db:48:8e:83:49:a9:c2:32:39:
d2:13:8c:cc:26:a9:0f:62:e6:67:cd:b8:66:04:e5:
6a:60:4c:c8:1e:0d:da:72:e1:9e:ec:5c:a9:ff:32:
90:88:46:9f:33:d9:e4:f8:05:eb:8e:da:46:a5:f8:
5c:94:49:0a:96:95:14:dc:fd:33:2e:73:90:c3:7e:
f7:a3:b7:33:f1:1e:10:99:5f:df:6d:fa:d3:36:3d:
3f:4f:ce:b6:7f:cc:16:28:0c:de:d2:e6:89:86:f1:
1e:be:46:f8:3e:67:26:f0:d5:a3:95:69:99:16:79:
26:5e:b8:45:a4:5b:01:58:80:93:26:ed:49:d0:fe:
4a:1e:70:3d:a6:5f:2c:51:5e:0a:03:50:e4:c6:22:
fc:5b:6a:c5:5d:8a:41:0a:66:8f:c9:31:0a:72:20:
7e:b2:91:55:23:1c:1a:a4:cf:37:0b:43:c8:21:92:
15:07:96:53:44:e1:81:73:42:ca:21:02:05:41:57:
67:73:54:b8:32:ec:cb:cc:83:2a:89:41:af:24:50:
a7:37:c1:2c:fa:ed:b1:83:07:c2:1d:55:bd:81:86:
75:4e:01:c6:ac:10:44:a5:fb:52:2a:30:f4:5f:a0:
d0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9C:55:A0:75:83:DC:8F:69:02:69:82:38:F1:70:00:38:A4:A3:3E
X509v3 Authority Key Identifier:
keyid:A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8b:72:61:78:17:df:4c:b3:67:f1:4e:01:30:74:3b:78:05:
2b:44:d9:f4:37:0d:9a:7f:a2:55:29:26:41:36:ee:73:20:74:
24:91:b6:3a:4c:56:a9:1f:2a:37:dc:05:31:05:fc:bd:f8:a3:
69:85:d6:6c:dc:1e:20:32:fb:46:18:20:45:61:00:de:ce:25:
26:46:9e:8b:c1:cf:5e:ed:6c:4a:e5:7c:2a:7d:b1:1f:d7:a6:
9c:5f:a9:45:1a:47:e8:fc:2d:e9:0f:79:60:cc:15:63:d5:ee:
42:fc:cf:03:b1:d9:9b:08:38:f0:5b:c2:ae:52:ae:9b:4a:39:
b0:e2:26:6b:d7:c8:64:b9:0e:73:4e:d8:63:07:9e:1a:53:60:
b8:8a:ba:e6:d9:47:a1:1b:98:9f:57:55:81:76:d0:1e:4a:67:
d7:12:b7:47:da:ba:d9:45:26:c9:7f:ad:09:aa:27:2d:b3:8b:
f6:77:e6:2e:a7:1c:b6:ee:03:c8:4f:94:0d:a1:b0:72:36:dc:
9e:12:28:75:7a:1e:d1:a7:fa:63:bb:c3:f4:3d:17:82:0c:f8:
d6:3d:e1:de:7f:aa:4a:b6:4b:e1:d6:77:af:19:cb:ef:bd:04:
55:5f:68:ae:54:29:ac:93:e7:5d:41:22:30:57:d8:12:92:5a:
46:83:1a:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaEbNa2IltAgMBT6nuxTyb1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZGU0YTA3MmE1YmNiNzRkMjBlOTJkZGJiZDdmNjQ3N2Mz
YzhmY2UwHhcNMjUwNDMwMDIwMDQ3WhcNMjUwNTAxMDIwMDQ3WjAzMTEwLwYDVQQD
EyhkOTljNTVhMDc1ODNkYzhmNjkwMjY5ODIzOGYxNzAwMDM4YTRhMzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/9c7yrk0QM12QSRrFuX9R6PUV/b
SI6DSanCMjnSE4zMJqkPYuZnzbhmBOVqYEzIHg3acuGe7Fyp/zKQiEafM9nk+AXr
jtpGpfhclEkKlpUU3P0zLnOQw373o7cz8R4QmV/fbfrTNj0/T862f8wWKAze0uaJ
hvEevkb4Pmcm8NWjlWmZFnkmXrhFpFsBWICTJu1J0P5KHnA9pl8sUV4KA1DkxiL8
W2rFXYpBCmaPyTEKciB+spFVIxwapM83C0PIIZIVB5ZTROGBc0LKIQIFQVdnc1S4
MuzLzIMqiUGvJFCnN8Es+u2xgwfCHVW9gYZ1TgHGrBBEpftSKjD0X6DQDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmcVaB1g9yPaQJpgjjxcAA4pKM+MB8GA1UdIwQY
MBaAFKLeSgcqW8t00g6S3bvX9kd8PI/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3Q1S0J5cGJ5M1RTRHBMZHU5ZjJSM3c4ajg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lMDVhM2EtMTMwNy00MWNiLWI0YzEt
NjRhNTYwNDZiY2E3LzEvb3Q1S0J5cGJ5M1RTRHBMZHU5ZjJSM3c4ajg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lMDVhM2EtMTMwNy00MWNiLWI0YzEtNjRhNTYwNDZiY2E3
LzEvb3Q1S0J5cGJ5M1RTRHBMZHU5ZjJSM3c4ajg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4tyYXgX
30yzZ/FOATB0O3gFK0TZ9DcNmn+iVSkmQTbucyB0JJG2OkxWqR8qN9wFMQX8vfij
aYXWbNweIDL7RhggRWEA3s4lJkaei8HPXu1sSuV8Kn2xH9emnF+pRRpH6Pwt6Q95
YMwVY9XuQvzPA7HZmwg48FvCrlKum0o5sOIma9fIZLkOc07YYweeGlNguIq65tlH
oRuYn1dVgXbQHkpn1xK3R9q62UUmyX+tCaonLbOL9nfmLqcctu4DyE+UDaGwcjbc
nhIodXoe0af6Y7vD9D0Xggz41j3h3n+qSrZL4dZ3rxnL770EVV9orlQprJPnXUEi
MFfYEpJaRoMaig==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:10:40 2025 by rpki-client