Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
File: oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft (raw, json)
Hash identifier: fjtNyCHZOl4JP0dLAJbTXepb9I+kpR26XrqF6YgGNOg=
Subject key identifier: 77:C6:33:4E:9B:5E:89:59:7A:2C:1A:83:1B:AE:2E:31:48:27:55:1D
Authority key identifier: A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
Certificate issuer: /CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Certificate serial: 019678688E4EC09D1CCB1796BBB79C6C92A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
Manifest number: 0665
Signing time: Sun 27 Apr 2025 18:00:40 +0000
Manifest this update: Sun 27 Apr 2025 18:00:40 +0000
Manifest next update: Mon 28 Apr 2025 18:00:40 +0000
Files and hashes: 1: oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl (hash: M/LgdPsP/TxqMUN+3fwA2bWNAOQW7hFYITZdR676Td0=)
2: vVp_ERdrnRIqLCUsItb5VjVaAYU.roa (hash: qquI+vjzguENR1gQyNKb61rrA2a/ZfrzpGtiqom6A+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:8e:4e:c0:9d:1c:cb:17:96:bb:b7:9c:6c:92:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Validity
Not Before: Apr 27 18:00:40 2025 GMT
Not After : Apr 28 18:00:40 2025 GMT
Subject: CN=77c6334e9b5e89597a2c1a831bae2e314827551d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7a:b7:ce:ec:6c:1b:6b:ce:bf:49:52:37:07:
f2:7a:ce:c3:04:57:e7:0a:fd:82:f6:78:e3:86:84:
bc:50:be:ae:16:29:95:1a:65:87:1c:1c:9c:51:02:
6b:47:92:95:cf:07:e9:f9:2d:f1:21:c0:bc:d0:82:
7d:be:99:64:bb:f8:0e:ec:2b:99:1b:eb:48:2f:fa:
2f:6a:04:c9:19:c3:b0:0c:06:ea:0a:28:61:9c:d3:
ac:1f:17:31:c4:bb:60:35:1f:0f:63:ba:9d:e6:4a:
0f:da:19:fa:da:1c:9d:32:e7:c5:7c:d8:fa:b6:25:
35:7f:6b:f1:d5:e7:27:51:49:c2:1d:63:72:f4:51:
98:84:2e:68:66:45:e9:51:c3:f5:91:2b:31:61:4f:
5e:03:38:9f:1a:18:3f:e9:00:74:7c:6b:7b:50:99:
6f:ba:12:7f:0d:da:0c:86:64:c3:11:82:8b:53:04:
9c:1c:c7:70:ee:24:5a:8b:cf:3b:64:99:c0:78:93:
61:3e:24:85:bd:2b:13:13:11:cb:82:25:f7:20:12:
5c:b0:2b:85:a1:2e:37:03:cb:c2:bc:4e:da:be:25:
7f:f6:f9:9f:45:71:43:66:94:ae:1d:ee:15:ff:76:
2f:d1:3d:95:9c:82:33:38:8d:b5:4d:3f:47:68:21:
27:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C6:33:4E:9B:5E:89:59:7A:2C:1A:83:1B:AE:2E:31:48:27:55:1D
X509v3 Authority Key Identifier:
keyid:A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d1:1c:20:13:97:00:9f:b6:9f:c6:b3:5b:cb:67:4a:3d:e4:
c4:48:ad:ac:ff:db:18:4e:49:0f:6a:97:64:e8:42:bb:99:e6:
11:19:15:a5:ee:7b:0d:30:32:fa:c9:c0:4c:24:16:6c:24:1a:
6d:b7:18:75:2b:d5:23:c0:cf:ed:06:2f:73:99:a8:37:81:99:
6f:0b:b0:6e:fc:05:fd:62:26:56:da:db:8c:27:fa:c0:c1:a9:
6f:08:f1:46:08:0a:e7:7d:fb:77:e1:8c:12:87:09:4d:63:50:
8e:4b:05:49:16:e9:be:f1:34:f4:e2:94:36:0f:77:2e:b6:9e:
e7:26:a5:f2:3c:53:61:f7:39:cc:20:21:41:d4:03:12:4d:bb:
60:fb:10:1f:16:ce:f4:17:2d:7e:9e:69:e4:b9:77:d8:dd:ff:
98:22:04:06:99:3b:df:31:f9:5f:c4:a4:d8:4c:3d:0f:23:2b:
dd:7f:bd:f5:68:82:39:70:6f:db:97:8f:d4:a2:cf:0b:ca:1a:
3f:8b:91:b8:cd:0e:c2:0a:bf:6c:3b:ad:26:59:c3:f9:d0:23:
de:52:b3:55:76:30:94:8d:c3:0f:71:75:cd:1e:9d:02:08:74:
42:ec:97:6d:5c:5c:38:d7:d4:33:61:69:30:69:fc:95:95:ce:
36:56:56:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4aI5OwJ0cyxeWu7ecbJKjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTIyZmNiNTRhMDkxZDY5MTNmZmU5ZmFmYjk4M2M1N2E0
YWMyMmMwHhcNMjUwNDI3MTgwMDQwWhcNMjUwNDI4MTgwMDQwWjAzMTEwLwYDVQQD
Eyg3N2M2MzM0ZTliNWU4OTU5N2EyYzFhODMxYmFlMmUzMTQ4Mjc1NTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nq3zuxsG2vOv0lSNwfyes7DBFfn
Cv2C9njjhoS8UL6uFimVGmWHHBycUQJrR5KVzwfp+S3xIcC80IJ9vplku/gO7CuZ
G+tIL/ovagTJGcOwDAbqCihhnNOsHxcxxLtgNR8PY7qd5koP2hn62hydMufFfNj6
tiU1f2vx1ecnUUnCHWNy9FGYhC5oZkXpUcP1kSsxYU9eAzifGhg/6QB0fGt7UJlv
uhJ/DdoMhmTDEYKLUwScHMdw7iRai887ZJnAeJNhPiSFvSsTExHLgiX3IBJcsCuF
oS43A8vCvE7aviV/9vmfRXFDZpSuHe4V/3Yv0T2VnIIzOI21TT9HaCEnTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfGM06bXolZeiwagxuuLjFIJ1UdMB8GA1UdIwQY
MBaAFKCiL8tUoJHWkT/+n6+5g8V6SsIsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tJdnkxU2drZGFSUF82ZnI3bUR4WHBLd2l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kZjNiMzAtMWJhOS00YzRiLWFhMGMt
ZjkyN2U1ODJlYmY5LzEvb0tJdnkxU2drZGFSUF82ZnI3bUR4WHBLd2l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kZjNiMzAtMWJhOS00YzRiLWFhMGMtZjkyN2U1ODJlYmY5
LzEvb0tJdnkxU2drZGFSUF82ZnI3bUR4WHBLd2l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9EcIBOX
AJ+2n8azW8tnSj3kxEitrP/bGE5JD2qXZOhCu5nmERkVpe57DTAy+snATCQWbCQa
bbcYdSvVI8DP7QYvc5moN4GZbwuwbvwF/WImVtrbjCf6wMGpbwjxRggK5337d+GM
EocJTWNQjksFSRbpvvE09OKUNg93Lrae5yal8jxTYfc5zCAhQdQDEk27YPsQHxbO
9Bctfp5p5Ll32N3/mCIEBpk73zH5X8Sk2Ew9DyMr3X+99WiCOXBv25eP1KLPC8oa
P4uRuM0Owgq/bDutJlnD+dAj3lKzVXYwlI3DD3F1zR6dAgh0QuyXbVxcONfUM2Fp
MGn8lZXONlZW0w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:17:32 2025 by rpki-client