Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
File: Oeh-8DzxcaQLor7InmiLudOCWHM.mft (raw, json)
Hash identifier: suJ++bH3ykzTp50pxnTeioHqWGP20tw5Xxpqnev1epg=
Subject key identifier: D4:7B:02:10:9F:14:7F:AB:91:CC:55:40:B1:A0:4A:80:68:BA:35:58
Authority key identifier: 39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
Certificate issuer: /CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Certificate serial: 01967642FE48BFA1B8081D998D721352AB8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 08:00:23 +0000
Manifest this update: Sun 27 Apr 2025 08:00:23 +0000
Manifest next update: Mon 28 Apr 2025 08:00:23 +0000
Files and hashes: 1: Oeh-8DzxcaQLor7InmiLudOCWHM.crl (hash: z6LJ1bwr1aF41FbxmjbQDx7THmWyS82MhyTUct3J5Mw=)
2: n5SYr_9AWl7ry045zaGcqL0nDKk.roa (hash: T+InoEanLxjmmolVeMM0w1zQ5q4vdK0ebBhDTbrVjAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:fe:48:bf:a1:b8:08:1d:99:8d:72:13:52:ab:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Validity
Not Before: Apr 27 08:00:23 2025 GMT
Not After : Apr 28 08:00:23 2025 GMT
Subject: CN=d47b02109f147fab91cc5540b1a04a8068ba3558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:26:e3:25:31:af:bf:09:ce:91:59:34:84:71:
ca:e6:fb:9b:54:4f:0f:69:19:ab:d5:5f:1d:37:e8:
49:f6:32:71:70:88:9b:8d:a1:cc:41:bc:18:31:c8:
3e:4f:a8:04:f0:78:6d:26:61:59:5e:67:5e:4b:03:
72:c4:1d:46:da:ae:93:3e:da:1c:82:a3:38:bc:5b:
77:d3:79:12:cd:96:35:c9:84:26:b7:e9:2d:67:92:
18:59:48:75:0d:47:56:ef:5c:44:c6:fe:89:5f:9a:
ea:cb:0c:c3:90:ed:5c:bc:dc:d8:c9:0e:66:6b:14:
85:7a:3c:84:2d:50:a7:03:d0:e3:a4:ea:51:e5:40:
75:68:58:b1:6d:82:6e:10:0c:83:0d:a1:9a:52:ab:
65:d9:3a:e8:c3:eb:30:0e:84:1a:44:af:28:81:f1:
19:95:71:fc:90:bc:ae:9f:b6:ec:34:f1:27:64:5b:
8e:0b:fb:1e:a2:dc:4f:8f:12:5e:50:cd:ef:9a:98:
19:3f:d0:cb:c6:76:9e:00:a2:de:6f:30:12:35:54:
ef:7c:a1:0f:8a:99:02:2a:5a:d2:81:c9:19:aa:02:
d6:ef:d8:5d:af:3c:15:b5:6e:0f:80:ef:b6:75:7e:
aa:f6:91:04:a4:18:3b:65:c8:58:c1:54:89:1e:c9:
03:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7B:02:10:9F:14:7F:AB:91:CC:55:40:B1:A0:4A:80:68:BA:35:58
X509v3 Authority Key Identifier:
keyid:39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:9b:97:ee:b2:f9:8d:f4:c3:33:db:b1:93:b3:2c:45:14:b5:
f1:94:73:50:56:5c:ec:7a:31:b3:a0:4a:9f:17:ba:93:76:5b:
c3:02:4b:a9:cc:21:ee:c7:1f:d8:6a:91:b4:9b:3c:c3:a0:37:
cb:7f:c5:3a:2e:81:7e:02:c0:6a:01:41:60:37:c9:a8:4b:e1:
b8:b7:4a:eb:0a:82:3c:f1:27:70:f8:6d:af:9e:35:b4:e9:f3:
7c:6a:89:4d:ef:e7:49:79:bc:55:b2:dc:35:88:ef:8d:66:a8:
e6:83:30:d2:93:a8:d2:35:64:ba:62:93:be:e3:e9:cb:27:7c:
f2:9a:08:d9:02:18:03:70:c4:97:7e:ad:06:84:0f:0c:a7:ed:
ab:ed:c0:e6:fa:d6:11:0f:58:da:6b:fc:cd:b5:2c:ac:2b:ef:
1c:da:90:88:38:4f:8d:33:35:74:a9:ee:f9:e5:9f:ab:c9:19:
7d:12:89:7f:15:a9:aa:c5:9b:d3:27:5a:92:fa:77:01:3b:5d:
b0:d3:61:ab:7d:f8:92:78:61:bb:f4:3e:4d:ad:f3:18:64:91:
74:b6:31:b5:b2:2f:2d:f4:86:6b:74:63:ad:9a:f5:dc:31:1f:
e2:fc:bc:62:60:11:ec:ef:2a:ea:7c:f6:33:52:b6:fe:77:f2:
c8:01:d6:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2Qv5Iv6G4CB2ZjXITUquOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZTg3ZWYwM2NmMTcxYTQwYmEyYmVjODllNjg4YmI5ZDM4
MjU4NzMwHhcNMjUwNDI3MDgwMDIzWhcNMjUwNDI4MDgwMDIzWjAzMTEwLwYDVQQD
EyhkNDdiMDIxMDlmMTQ3ZmFiOTFjYzU1NDBiMWEwNGE4MDY4YmEzNTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ybjJTGvvwnOkVk0hHHK5vubVE8P
aRmr1V8dN+hJ9jJxcIibjaHMQbwYMcg+T6gE8HhtJmFZXmdeSwNyxB1G2q6TPtoc
gqM4vFt303kSzZY1yYQmt+ktZ5IYWUh1DUdW71xExv6JX5rqywzDkO1cvNzYyQ5m
axSFejyELVCnA9DjpOpR5UB1aFixbYJuEAyDDaGaUqtl2Trow+swDoQaRK8ogfEZ
lXH8kLyun7bsNPEnZFuOC/seotxPjxJeUM3vmpgZP9DLxnaeAKLebzASNVTvfKEP
ipkCKlrSgckZqgLW79hdrzwVtW4PgO+2dX6q9pEEpBg7ZchYwVSJHskDtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNR7AhCfFH+rkcxVQLGgSoBoujVYMB8GA1UdIwQY
MBaAFDnofvA88XGkC6K+yJ5oi7nTglhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2VoLThEenhjYVFMb3I3SW5taUx1ZE9DV0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81MWE2MGMtY2Y2My00NDNkLTllMDIt
MDRkZDU2ZjcwZmUzLzEvT2VoLThEenhjYVFMb3I3SW5taUx1ZE9DV0hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy81MWE2MGMtY2Y2My00NDNkLTllMDItMDRkZDU2ZjcwZmUz
LzEvT2VoLThEenhjYVFMb3I3SW5taUx1ZE9DV0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJuX7rL5
jfTDM9uxk7MsRRS18ZRzUFZc7Hoxs6BKnxe6k3ZbwwJLqcwh7scf2GqRtJs8w6A3
y3/FOi6BfgLAagFBYDfJqEvhuLdK6wqCPPEncPhtr541tOnzfGqJTe/nSXm8VbLc
NYjvjWao5oMw0pOo0jVkumKTvuPpyyd88poI2QIYA3DEl36tBoQPDKftq+3A5vrW
EQ9Y2mv8zbUsrCvvHNqQiDhPjTM1dKnu+eWfq8kZfRKJfxWpqsWb0ydakvp3ATtd
sNNhq334knhhu/Q+Ta3zGGSRdLYxtbIvLfSGa3RjrZr13DEf4vy8YmAR7O8q6nz2
M1K2/nfyyAHW/g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:06:08 2025 by rpki-client