Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
File: ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft (raw, json)
Hash identifier: o4Nl2LCZTLDiDARVKiRB95wzdMr4Xr9+pyUVioEUwws=
Subject key identifier: A4:86:76:8E:86:7B:44:86:37:F8:3B:1B:C3:3A:EC:3E:E7:CC:51:A9
Authority key identifier: A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
Certificate issuer: /CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Certificate serial: 019674C2DB07BD5C1230697810F02FF695B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
Manifest number: 0DDF
Signing time: Sun 27 Apr 2025 01:00:49 +0000
Manifest this update: Sun 27 Apr 2025 01:00:49 +0000
Manifest next update: Mon 28 Apr 2025 01:00:49 +0000
Files and hashes: 1: JyWi5BFZcLnbfEzmECOIrpo9WqY.roa (hash: BGeaCEXgvEq5NNxKl+Ag2+yFWkLD9Y1n05TPe3xR8kw=)
2: ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl (hash: t1BwpdoKnHEDzLVs9m09uFFs7M9XE5ud7cU+lao71MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:db:07:bd:5c:12:30:69:78:10:f0:2f:f6:95:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Validity
Not Before: Apr 27 01:00:49 2025 GMT
Not After : Apr 28 01:00:49 2025 GMT
Subject: CN=a486768e867b448637f83b1bc33aec3ee7cc51a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:c3:1d:1c:c8:72:0a:2f:2d:ef:b5:0c:11:
6d:cb:a8:95:0b:55:2c:d1:8a:f0:db:6b:0c:52:63:
7e:83:9e:d8:34:ac:a6:71:6d:d8:41:42:35:84:30:
17:5c:e9:34:e8:57:dc:f9:86:e3:e4:d4:34:28:30:
6d:bc:e3:2d:42:2a:6e:1b:fb:9c:5f:bd:73:2a:15:
19:6e:22:59:6c:6a:e4:46:0b:08:ad:a8:44:52:32:
10:4a:f7:0d:7e:42:1e:5e:b0:f1:d7:5c:46:7c:33:
ef:bd:ff:f3:90:1a:51:79:d3:a7:ae:96:42:52:2d:
0a:b1:77:75:bb:c6:ba:1b:b1:20:c5:92:41:79:02:
5e:e4:6a:3d:a5:46:36:0e:ae:dd:c8:b5:3f:e8:6f:
47:4d:8b:b7:1c:ee:44:ba:22:21:fa:bd:6a:ec:78:
77:57:75:fc:b5:7d:33:e9:b9:c8:09:e2:43:10:e3:
d0:47:d1:8e:77:31:63:b8:0d:8a:a0:42:52:12:3b:
b7:01:f9:0c:d8:dc:2a:6f:91:d7:f8:a9:63:c8:e0:
16:76:4b:b6:e0:4e:a8:a2:6d:0a:65:70:5c:96:d4:
5a:c5:1e:63:63:8e:e7:0d:c9:72:01:23:f9:5a:8f:
ef:3d:0a:c4:ef:3a:e5:02:9a:6f:72:31:2c:57:da:
80:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:86:76:8E:86:7B:44:86:37:F8:3B:1B:C3:3A:EC:3E:E7:CC:51:A9
X509v3 Authority Key Identifier:
keyid:A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0a:a2:fc:0b:63:fc:91:28:71:bc:1b:ad:ec:c8:52:af:d1:
77:98:d8:33:00:fd:44:91:3c:00:ca:5d:1e:54:bd:76:5b:e0:
2e:58:b5:b0:8a:a9:5c:fc:14:be:66:85:b7:f5:1b:f2:fa:3a:
e1:a3:06:f9:db:13:78:10:e5:87:1b:21:0a:77:df:91:40:42:
27:8d:28:55:11:9c:c6:9e:ba:fa:b0:c7:b0:f4:9d:8e:54:40:
30:0b:6e:af:d0:c3:08:a9:75:b1:ea:82:18:99:60:bb:e8:bb:
d7:c6:da:84:db:6f:5f:00:ca:b1:c8:26:97:6f:40:74:de:a7:
fc:2a:58:50:96:7d:95:f5:11:55:21:f2:0f:bd:86:bd:d7:f1:
45:99:96:8a:ea:5f:65:00:4e:02:e8:c9:77:d9:e6:dd:a3:0e:
86:24:6b:cc:e6:06:26:87:d0:f1:5f:b0:9b:f2:3c:29:e5:7f:
46:dd:ef:f3:7a:c1:ac:73:39:56:6b:de:4e:37:06:55:93:a1:
6a:32:bf:92:8a:4a:87:18:dd:98:cd:d4:9d:c9:51:39:1a:9d:
80:05:04:c6:52:aa:17:35:4f:18:1f:1e:c8:22:b1:35:27:99:
cc:08:1c:7b:2e:19:72:25:e8:0f:a2:3e:5c:04:27:41:a2:e5:
c2:f7:f1:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wtsHvVwSMGl4EPAv9pW1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYzEzMDA3MmQyY2U5Y2Y1NjJiODMxOThlZGFhZGFmYTQ4
ZjZkYjQwHhcNMjUwNDI3MDEwMDQ5WhcNMjUwNDI4MDEwMDQ5WjAzMTEwLwYDVQQD
EyhhNDg2NzY4ZTg2N2I0NDg2MzdmODNiMWJjMzNhZWMzZWU3Y2M1MWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyijDHRzIcgovLe+1DBFty6iVC1Us
0Yrw22sMUmN+g57YNKymcW3YQUI1hDAXXOk06Ffc+Ybj5NQ0KDBtvOMtQipuG/uc
X71zKhUZbiJZbGrkRgsIrahEUjIQSvcNfkIeXrDx11xGfDPvvf/zkBpRedOnrpZC
Ui0KsXd1u8a6G7EgxZJBeQJe5Go9pUY2Dq7dyLU/6G9HTYu3HO5EuiIh+r1q7Hh3
V3X8tX0z6bnICeJDEOPQR9GOdzFjuA2KoEJSEju3AfkM2Nwqb5HX+KljyOAWdku2
4E6oom0KZXBcltRaxR5jY47nDclyASP5Wo/vPQrE7zrlAppvcjEsV9qANQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSGdo6Ge0SGN/g7G8M67D7nzFGpMB8GA1UdIwQY
MBaAFKHBMActLOnPViuDGY7ara+kj220MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2NFd0J5MHM2YzlXSzRNWmp0cXRyNlNQYmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9mNWJiNTEtNzA4Zi00ZGQyLTg4MGYt
ODdkOTA1NjFhYTQ4LzEvb2NFd0J5MHM2YzlXSzRNWmp0cXRyNlNQYmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9mNWJiNTEtNzA4Zi00ZGQyLTg4MGYtODdkOTA1NjFhYTQ4
LzEvb2NFd0J5MHM2YzlXSzRNWmp0cXRyNlNQYmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAqi/Atj
/JEocbwbrezIUq/Rd5jYMwD9RJE8AMpdHlS9dlvgLli1sIqpXPwUvmaFt/Ub8vo6
4aMG+dsTeBDlhxshCnffkUBCJ40oVRGcxp66+rDHsPSdjlRAMAtur9DDCKl1seqC
GJlgu+i718bahNtvXwDKscgml29AdN6n/CpYUJZ9lfURVSHyD72GvdfxRZmWiupf
ZQBOAujJd9nm3aMOhiRrzOYGJofQ8V+wm/I8KeV/Rt3v83rBrHM5VmveTjcGVZOh
ajK/kopKhxjdmM3UnclRORqdgAUExlKqFzVPGB8eyCKxNSeZzAgcey4ZciXoD6I+
XAQnQaLlwvfxJw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:30:38 2025 by rpki-client