Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
File: O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json)
Hash identifier: 3LXo/Lk0VTcnutXu+sP/MOUbD1r4koS73YYgMZ+v0GY=
Subject key identifier: 66:1D:EA:0C:DC:77:F5:14:F3:DE:63:73:61:76:1C:A2:35:E5:12:4B
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Certificate issuer: /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial: 01968C9430A68C41694C248E4AE476BE0992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
Manifest number: 1522
Signing time: Thu 01 May 2025 16:00:43 +0000
Manifest this update: Thu 01 May 2025 16:00:43 +0000
Manifest next update: Fri 02 May 2025 16:00:43 +0000
Files and hashes: 1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: YESKNyOTWIZKsPfwEP4PI/mq05gxR4bSCMcyuiCwBxI=)
2: bnVoAcKQpBUpBdJ_G4E6sEiT0wk.roa (hash: D5MR6IRxVzBiemlQt2yPaFHtcO6ch7oL0gJFMCA2LTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:94:30:a6:8c:41:69:4c:24:8e:4a:e4:76:be:09:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
Validity
Not Before: May 1 16:00:43 2025 GMT
Not After : May 2 16:00:43 2025 GMT
Subject: CN=661dea0cdc77f514f3de637361761ca235e5124b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1f:0e:fb:4f:a6:e8:e8:e6:58:d7:85:d4:bf:
a1:cd:32:dc:92:ff:e1:47:14:c3:a2:36:6f:7f:6f:
9d:06:c7:0e:51:af:6b:ab:c4:89:57:3b:b5:d9:c0:
cf:5a:63:d0:2c:f4:e0:30:4b:19:7a:77:f9:81:29:
c8:15:c7:8a:b5:00:11:5b:f0:7c:03:27:d9:3a:51:
2c:8f:22:57:c6:1f:7a:63:73:bb:62:56:12:f8:1f:
bc:e0:23:68:a7:29:c9:ae:3d:53:20:fe:cf:95:5a:
db:4e:a5:9f:c8:1a:dd:26:ef:9e:88:98:da:98:cc:
3c:ba:56:4f:48:75:84:8d:93:eb:0e:87:dc:9a:b5:
06:5c:1c:a7:05:c9:7f:c5:be:04:54:51:f1:0b:37:
f8:2c:2d:84:cc:55:00:3c:80:89:ba:6d:12:67:4a:
9e:1f:fe:76:ba:ca:e7:84:cb:5b:27:c9:ef:28:fd:
56:7f:61:62:57:8a:33:d8:ef:0a:ec:9f:6b:b1:8a:
27:9f:e2:63:ed:40:55:b8:dc:44:40:ab:22:42:2f:
5b:91:37:17:01:1e:19:aa:c8:7a:62:53:41:0f:7e:
14:5e:d6:6c:3f:84:98:f2:39:cc:16:e5:b6:cd:96:
76:68:dd:8b:2e:b2:4c:3f:d4:51:3d:c3:13:d1:bc:
26:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1D:EA:0C:DC:77:F5:14:F3:DE:63:73:61:76:1C:A2:35:E5:12:4B
X509v3 Authority Key Identifier:
keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:63:75:15:58:37:41:8d:1b:c4:70:ca:c4:b3:e6:6b:62:56:
59:91:98:05:01:98:51:93:de:28:ab:e2:a6:37:de:f6:db:fd:
61:46:de:84:0d:ea:25:1f:7d:22:91:dc:36:34:b8:dc:8d:28:
8d:06:71:3a:38:58:03:82:e6:96:09:26:a3:6f:0b:80:be:13:
26:8c:79:e3:4b:24:54:58:5f:9c:c8:53:71:cc:a8:49:0a:9d:
97:f2:7e:04:c6:d6:c3:a5:39:08:57:30:81:67:38:b6:fa:a8:
4d:29:ba:29:54:3a:4b:1c:d6:e1:b5:48:f5:34:16:ce:c1:e1:
dc:09:55:65:4d:2a:24:b2:f5:d2:73:8a:d6:1e:cc:44:1d:83:
55:dd:8d:ae:55:d3:ad:b1:b2:34:81:f6:6e:82:7c:43:8e:a6:
86:19:ba:4f:47:69:ce:61:7a:dc:fe:b7:a9:97:40:66:02:06:
61:16:8f:8e:c5:6c:70:f4:bd:75:af:f8:2e:86:84:71:6b:d3:
af:77:25:0f:7c:41:81:96:6c:eb:1a:3b:4f:53:ad:ea:da:1f:
bd:54:28:4a:6a:42:b9:28:f0:91:0a:69:6d:18:5f:05:75:d9:
1b:7b:27:64:c1:35:b0:e4:38:92:dd:ea:4c:7a:f0:f6:d7:69:
5f:02:80:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaMlDCmjEFpTCSOSuR2vgmSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZTJmMDE2NGI2NmE3Njc5NTg2MGI0ZWEzNTg2ZmFkNTYz
YmFjNDcwHhcNMjUwNTAxMTYwMDQzWhcNMjUwNTAyMTYwMDQzWjAzMTEwLwYDVQQD
Eyg2NjFkZWEwY2RjNzdmNTE0ZjNkZTYzNzM2MTc2MWNhMjM1ZTUxMjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5x8O+0+m6OjmWNeF1L+hzTLckv/h
RxTDojZvf2+dBscOUa9rq8SJVzu12cDPWmPQLPTgMEsZenf5gSnIFceKtQARW/B8
AyfZOlEsjyJXxh96Y3O7YlYS+B+84CNopynJrj1TIP7PlVrbTqWfyBrdJu+eiJja
mMw8ulZPSHWEjZPrDofcmrUGXBynBcl/xb4EVFHxCzf4LC2EzFUAPICJum0SZ0qe
H/52usrnhMtbJ8nvKP1Wf2FiV4oz2O8K7J9rsYonn+Jj7UBVuNxEQKsiQi9bkTcX
AR4Zqsh6YlNBD34UXtZsP4SY8jnMFuW2zZZ2aN2LLrJMP9RRPcMT0bwmsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYd6gzcd/UU895jc2F2HKI15RJLMB8GA1UdIwQY
MBaAFDvi8BZLZqdnlYYLTqNYb61WO6xHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTy1Md0ZrdG1wMmVWaGd0T28xaHZyVlk3ckVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNzJiNjctNzZlYy00YWZhLWIzNzYt
ZjlhZDM4MDUxMjIwLzEvTy1Md0ZrdG1wMmVWaGd0T28xaHZyVlk3ckVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jNzJiNjctNzZlYy00YWZhLWIzNzYtZjlhZDM4MDUxMjIw
LzEvTy1Md0ZrdG1wMmVWaGd0T28xaHZyVlk3ckVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWN1FVg3
QY0bxHDKxLPma2JWWZGYBQGYUZPeKKvipjfe9tv9YUbehA3qJR99IpHcNjS43I0o
jQZxOjhYA4Lmlgkmo28LgL4TJox540skVFhfnMhTccyoSQqdl/J+BMbWw6U5CFcw
gWc4tvqoTSm6KVQ6SxzW4bVI9TQWzsHh3AlVZU0qJLL10nOK1h7MRB2DVd2NrlXT
rbGyNIH2boJ8Q46mhhm6T0dpzmF63P63qZdAZgIGYRaPjsVscPS9da/4LoaEcWvT
r3clD3xBgZZs6xo7T1Ot6tofvVQoSmpCuSjwkQppbRhfBXXZG3snZME1sOQ4kt3q
THrw9tdpXwKAUw==
-----END CERTIFICATE-----
Generated at Thu May 1 20:33:59 2025 by rpki-client