Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
File: rkopxhOOLZPVSjYyi5TLH4o4Kms.mft (raw, json)
Hash identifier: pqcwDp5RH0g/kGwLstzk9ZaOyIuoimOC/ZEko71WTJQ=
Subject key identifier: 2F:7C:F1:6C:6C:A9:FD:D0:6E:BA:CF:48:C4:9E:AC:89:9B:09:52:29
Authority key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
Certificate issuer: /CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Certificate serial: 019677FBA78C087D35C9C0381777A995FED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
Manifest number: 09CE
Signing time: Sun 27 Apr 2025 16:01:43 +0000
Manifest this update: Sun 27 Apr 2025 16:01:43 +0000
Manifest next update: Mon 28 Apr 2025 16:01:43 +0000
Files and hashes: 1: BrYhHrEUiC6KPPt0z5zIenofLis.roa (hash: DE5/RvrYo8fEFuVG34PaeU1d6iLiNdb+LH6pRfnNAg0=)
2: rkopxhOOLZPVSjYyi5TLH4o4Kms.crl (hash: OuO/kmlkLW1aTdCYh5MPcEl5g+PpHnKMAeLqgPcDsHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:a7:8c:08:7d:35:c9:c0:38:17:77:a9:95:fe:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Validity
Not Before: Apr 27 16:01:43 2025 GMT
Not After : Apr 28 16:01:43 2025 GMT
Subject: CN=2f7cf16c6ca9fdd06ebacf48c49eac899b095229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d4:2b:e9:a7:86:ea:2f:cb:3b:c7:02:ac:aa:
15:af:29:9a:02:30:f6:28:79:1e:29:37:db:50:ca:
99:d7:2a:41:14:a0:da:e4:db:16:0f:d5:09:08:59:
0b:d3:98:13:db:6f:91:c2:c1:69:be:fa:26:af:41:
de:9b:38:e4:78:ef:d0:5b:b2:d5:6c:16:f3:4e:60:
be:a7:c9:0e:f0:57:e3:72:e0:a8:67:e9:72:e0:69:
27:8d:ad:9b:ce:6c:f9:b6:96:3f:e6:0a:2e:2e:39:
ac:44:a7:28:94:78:de:5a:23:2d:47:84:7a:fe:5a:
92:5f:f3:1f:67:9b:ca:0e:99:49:3c:d9:50:71:8a:
d0:31:fd:02:be:18:80:4c:80:e7:2d:bc:6c:35:5a:
06:c0:a1:3e:e2:88:1e:24:9d:4f:4f:99:ca:4e:57:
72:64:49:82:96:f1:67:9a:20:60:07:9f:2f:39:a1:
23:6e:e4:cb:9a:21:74:cb:a2:33:72:f3:30:24:c5:
a7:c4:c8:bb:ec:8a:c8:4f:6d:28:7a:55:60:7b:96:
5d:0a:5c:4d:95:f1:35:b0:36:47:97:39:ba:be:85:
d0:5f:90:bb:3f:ba:f5:d7:76:14:05:8c:6a:0c:6a:
05:f8:b2:e4:a7:2e:7a:05:1e:38:8a:e4:f7:1f:65:
63:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7C:F1:6C:6C:A9:FD:D0:6E:BA:CF:48:C4:9E:AC:89:9B:09:52:29
X509v3 Authority Key Identifier:
keyid:AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:51:8b:26:73:cf:82:62:af:2e:c2:8e:57:66:4d:e4:32:99:
38:aa:cc:9a:e3:bf:a4:73:2d:2b:4a:1b:38:83:f9:cc:8b:8b:
d0:e8:ef:aa:65:cf:25:27:dc:ca:c2:61:f9:1d:b4:d0:bd:fd:
39:24:a4:20:52:29:9c:2a:bd:47:fd:47:df:48:6a:b7:26:a4:
dd:ad:21:73:7b:30:19:1f:e3:5c:f8:60:ac:2f:bc:ec:53:2b:
0d:0e:a8:02:a9:a9:28:43:7c:86:ff:a6:fc:8e:04:ac:f1:ca:
b8:fb:64:2d:48:c6:24:c2:7e:19:b5:ea:6b:de:03:cf:44:9b:
d6:45:56:8d:bd:fb:20:79:73:88:b5:0f:50:e6:2f:c1:92:a8:
0b:08:14:06:05:5b:0a:27:2a:9f:8e:64:e4:d8:c3:ae:f6:31:
a3:62:8d:79:22:ec:b8:fc:22:07:1b:01:c4:8d:4a:1f:f1:1d:
50:e2:4d:16:57:4b:15:b0:3e:f4:95:c2:ed:8c:f4:fb:e0:a6:
83:5b:1b:55:2d:0e:b7:56:3d:c0:f5:ca:a2:6a:a6:2b:9b:52:
6b:a8:97:4e:f8:f7:8d:ec:53:ae:28:aa:f0:91:b3:01:8b:ff:
75:5b:70:6c:16:6a:86:2a:53:b3:50:b9:65:78:f1:c0:46:62:
27:6b:30:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+6eMCH01ycA4F3eplf7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNGEyOWM2MTM4ZTJkOTNkNTRhMzYzMjhiOTRjYjFmOGEz
ODJhNmIwHhcNMjUwNDI3MTYwMTQzWhcNMjUwNDI4MTYwMTQzWjAzMTEwLwYDVQQD
EygyZjdjZjE2YzZjYTlmZGQwNmViYWNmNDhjNDllYWM4OTliMDk1MjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NQr6aeG6i/LO8cCrKoVrymaAjD2
KHkeKTfbUMqZ1ypBFKDa5NsWD9UJCFkL05gT22+RwsFpvvomr0HemzjkeO/QW7LV
bBbzTmC+p8kO8FfjcuCoZ+ly4Gknja2bzmz5tpY/5gouLjmsRKcolHjeWiMtR4R6
/lqSX/MfZ5vKDplJPNlQcYrQMf0CvhiATIDnLbxsNVoGwKE+4ogeJJ1PT5nKTldy
ZEmClvFnmiBgB58vOaEjbuTLmiF0y6IzcvMwJMWnxMi77IrIT20oelVge5ZdClxN
lfE1sDZHlzm6voXQX5C7P7r113YUBYxqDGoF+LLkpy56BR44iuT3H2VjgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC988Wxsqf3QbrrPSMSerImbCVIpMB8GA1UdIwQY
MBaAFK5KKcYTji2T1Uo2MouUyx+KOCprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmtvcHhoT09MWlBWU2pZeWk1VExING80S21zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zNWJlMDQtZDViNy00NGFhLWFkZTQt
MTM0MDFkMWYyMmQyLzEvcmtvcHhoT09MWlBWU2pZeWk1VExING80S21zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zNWJlMDQtZDViNy00NGFhLWFkZTQtMTM0MDFkMWYyMmQy
LzEvcmtvcHhoT09MWlBWU2pZeWk1VExING80S21zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClGLJnPP
gmKvLsKOV2ZN5DKZOKrMmuO/pHMtK0obOIP5zIuL0OjvqmXPJSfcysJh+R200L39
OSSkIFIpnCq9R/1H30hqtyak3a0hc3swGR/jXPhgrC+87FMrDQ6oAqmpKEN8hv+m
/I4ErPHKuPtkLUjGJMJ+GbXqa94Dz0Sb1kVWjb37IHlziLUPUOYvwZKoCwgUBgVb
Cicqn45k5NjDrvYxo2KNeSLsuPwiBxsBxI1KH/EdUOJNFldLFbA+9JXC7Yz0++Cm
g1sbVS0Ot1Y9wPXKomqmK5tSa6iXTvj3jexTriiq8JGzAYv/dVtwbBZqhipTs1C5
ZXjxwEZiJ2swqw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:23:04 2025 by rpki-client