Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
File: OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft (raw, json)
Hash identifier: ABuTCgwu48C0OmTxrSdFlDGXeGqVhOJJ9otRz9thpIg=
Subject key identifier: 9D:8B:E5:83:DD:B9:6B:51:C5:65:26:97:1C:01:A7:43:B2:86:8A:8D
Authority key identifier: 38:08:30:44:FB:6C:43:BF:FA:D5:FD:54:B0:7D:2C:C7:C0:0D:1B:D3
Certificate issuer: /CN=38083044fb6c43bffad5fd54b07d2cc7c00d1bd3
Certificate serial: 0196760CC692FAE8396DCDB6915D3B14CE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
Manifest number: 0586
Signing time: Sun 27 Apr 2025 07:01:10 +0000
Manifest this update: Sun 27 Apr 2025 07:01:10 +0000
Manifest next update: Mon 28 Apr 2025 07:01:10 +0000
Files and hashes: 1: 96NgLEHRtKxUiimE9cBg6xhscpQ.roa (hash: mk1oEXhjeJbAg6bVncPiZm7XaZ/iA+I0QEGuQUH1ZeM=)
2: OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl (hash: kpo6LPwIsuSYbRyePpNTyL6RHJiBIPM7l3c9a4sTav4=)
3: auApMcvT0ghtABN_47-F8XLxrNw.roa (hash: XofAinsDeuW+LGI1qiG7UWKXoZIw8N+n+gNQOT5w3Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:c6:92:fa:e8:39:6d:cd:b6:91:5d:3b:14:ce:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38083044fb6c43bffad5fd54b07d2cc7c00d1bd3
Validity
Not Before: Apr 27 07:01:10 2025 GMT
Not After : Apr 28 07:01:10 2025 GMT
Subject: CN=9d8be583ddb96b51c56526971c01a743b2868a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:a1:17:88:e3:77:e1:79:1f:9b:b7:37:46:
8e:f0:d0:3d:8f:64:fc:8b:e2:ff:4c:7e:42:bb:d7:
7f:a4:68:67:4f:8d:6c:df:1a:31:bf:92:52:8b:20:
c1:d7:0f:10:f1:95:c7:87:bb:0b:1b:6b:bf:4f:c1:
e6:3c:1b:92:02:4d:f6:87:25:a4:b8:e8:5f:8d:8f:
da:31:e6:5c:77:9b:62:9d:20:c0:3e:33:71:97:13:
75:99:cd:7a:75:be:86:78:47:e9:ba:1f:82:eb:1c:
f5:75:c5:b5:d1:aa:32:a6:cf:ea:5d:da:a1:d1:32:
bb:82:29:60:f2:28:d6:83:d4:4e:63:42:bd:23:c7:
dd:29:29:fb:e9:c1:58:d4:56:13:91:b9:09:de:45:
ed:f4:17:bb:a0:6e:c2:cc:7b:c9:70:f5:0a:b0:5c:
a3:2f:a3:c2:dd:ca:1e:bd:d5:f7:0b:0f:58:8f:20:
56:ca:17:42:79:79:fe:50:4e:84:19:ad:1a:78:9f:
f0:ce:b1:f0:d5:04:9e:be:00:8e:38:8d:61:30:0c:
51:3a:5c:6d:54:3b:60:f7:2e:bd:c8:7d:8b:c5:a5:
02:1d:fa:38:33:4a:ea:86:24:00:7a:be:f1:5e:c4:
e7:59:ec:fd:4b:f1:ae:e5:84:9a:b5:17:4a:8c:33:
07:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8B:E5:83:DD:B9:6B:51:C5:65:26:97:1C:01:A7:43:B2:86:8A:8D
X509v3 Authority Key Identifier:
keyid:38:08:30:44:FB:6C:43:BF:FA:D5:FD:54:B0:7D:2C:C7:C0:0D:1B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:56:5e:f4:a3:2d:bc:56:68:5e:02:bf:e2:81:a6:5f:92:fd:
cd:f0:61:06:9d:9f:83:3e:e5:7c:b3:f9:54:c6:d9:89:07:c4:
2e:a1:94:1d:e4:5a:4c:ec:84:8b:45:3b:05:e5:14:44:82:8d:
da:91:85:da:45:64:1a:94:7d:ba:99:fc:69:1b:d0:b2:a6:bd:
21:e5:9c:3c:eb:7c:1e:eb:62:17:3e:9e:71:43:b2:2a:7b:de:
02:15:61:2f:73:c4:64:92:74:4d:51:66:a5:0c:06:9b:e5:36:
da:46:6f:ba:63:34:e5:95:46:37:51:d9:b9:55:10:3d:fb:00:
74:85:18:6a:cf:16:6c:24:b8:16:76:ce:4b:bc:9a:e4:78:a5:
db:0d:bf:7a:65:4f:91:c0:4e:12:fb:c7:c6:cf:f9:a5:85:e6:
ec:19:a0:72:df:e5:cf:74:7c:bd:ae:a5:c1:17:47:fb:c4:0d:
13:e5:87:ab:29:a5:80:28:b8:8d:22:d7:15:d4:2b:9e:b1:4d:
48:ee:44:bf:11:66:af:51:53:3b:1a:06:9c:1f:af:84:3d:5f:
00:a8:07:2f:df:c1:0b:94:33:fe:44:7f:cf:fe:69:ca:69:75:
63:ff:90:75:60:20:6e:ca:1d:7e:9c:28:c4:61:1f:bb:25:24:
7d:66:73:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DMaS+ug5bc22kV07FM4UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MDgzMDQ0ZmI2YzQzYmZmYWQ1ZmQ1NGIwN2QyY2M3YzAw
ZDFiZDMwHhcNMjUwNDI3MDcwMTEwWhcNMjUwNDI4MDcwMTEwWjAzMTEwLwYDVQQD
Eyg5ZDhiZTU4M2RkYjk2YjUxYzU2NTI2OTcxYzAxYTc0M2IyODY4YThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS6hF4jjd+F5H5u3N0aO8NA9j2T8
i+L/TH5Cu9d/pGhnT41s3xoxv5JSiyDB1w8Q8ZXHh7sLG2u/T8HmPBuSAk32hyWk
uOhfjY/aMeZcd5tinSDAPjNxlxN1mc16db6GeEfpuh+C6xz1dcW10aoyps/qXdqh
0TK7gilg8ijWg9ROY0K9I8fdKSn76cFY1FYTkbkJ3kXt9Be7oG7CzHvJcPUKsFyj
L6PC3coevdX3Cw9YjyBWyhdCeXn+UE6EGa0aeJ/wzrHw1QSevgCOOI1hMAxROlxt
VDtg9y69yH2LxaUCHfo4M0rqhiQAer7xXsTnWez9S/Gu5YSatRdKjDMHFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2L5YPduWtRxWUmlxwBp0OyhoqNMB8GA1UdIwQY
MBaAFDgIMET7bEO/+tX9VLB9LMfADRvTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0Fnd1JQdHNRN182MWYxVXNIMHN4OEFORzlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NGE2YjgtMzlkMy00Zjc5LWFlMjUt
YTk1NTExYmE0ZDQ2LzEvT0Fnd1JQdHNRN182MWYxVXNIMHN4OEFORzlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NGE2YjgtMzlkMy00Zjc5LWFlMjUtYTk1NTExYmE0ZDQ2
LzEvT0Fnd1JQdHNRN182MWYxVXNIMHN4OEFORzlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlZe9KMt
vFZoXgK/4oGmX5L9zfBhBp2fgz7lfLP5VMbZiQfELqGUHeRaTOyEi0U7BeUURIKN
2pGF2kVkGpR9upn8aRvQsqa9IeWcPOt8HutiFz6ecUOyKnveAhVhL3PEZJJ0TVFm
pQwGm+U22kZvumM05ZVGN1HZuVUQPfsAdIUYas8WbCS4FnbOS7ya5Hil2w2/emVP
kcBOEvvHxs/5pYXm7Bmgct/lz3R8va6lwRdH+8QNE+WHqymlgCi4jSLXFdQrnrFN
SO5EvxFmr1FTOxoGnB+vhD1fAKgHL9/BC5Qz/kR/z/5pyml1Y/+QdWAgbsodfpwo
xGEfuyUkfWZzyg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:13:26 2025 by rpki-client