Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
File: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft (raw, json)
Hash identifier: Vuk3npFpetkO462G/MAPkv6nfc2meO5QNJ0cViCAFuI=
Subject key identifier: 38:76:FE:2F:FC:21:2B:94:6C:29:BB:05:DC:EA:F4:84:48:32:0F:4A
Authority key identifier: A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
Certificate issuer: /CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Certificate serial: 019673B057606B0A9201219143FABF80150D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
Manifest number: 06E1
Signing time: Sat 26 Apr 2025 20:00:58 +0000
Manifest this update: Sat 26 Apr 2025 20:00:58 +0000
Manifest next update: Sun 27 Apr 2025 20:00:58 +0000
Files and hashes: 1: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl (hash: 9KJ5QzIlfV/a0hTEmX7dZOpXtRqWmmBHcu5FAb522tw=)
2: swurPPgvx5Mw_k7aI45OkF86THI.roa (hash: dit/va7s8wsuU7O85dlDJKzD74oG/IiETxDpxdGILWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:57:60:6b:0a:92:01:21:91:43:fa:bf:80:15:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Validity
Not Before: Apr 26 20:00:58 2025 GMT
Not After : Apr 27 20:00:58 2025 GMT
Subject: CN=3876fe2ffc212b946c29bb05dceaf48448320f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:70:ee:99:b6:31:1d:65:63:6f:55:27:c8:
55:85:ad:40:4e:fc:a8:60:ae:a5:e4:9d:20:e1:a5:
59:16:f2:e4:89:a2:16:25:07:0b:14:71:8c:8f:cf:
02:f9:7e:36:64:3e:c5:4a:38:1d:cf:57:02:87:da:
82:4d:c0:61:7a:1b:21:c3:f8:8a:bb:8c:83:b4:7c:
85:48:aa:2b:ec:a2:7b:0d:83:18:f7:61:0e:5e:3f:
61:6a:ea:fe:5d:6f:b5:b1:db:14:56:fd:da:8a:71:
5a:e1:fe:59:8d:b9:3e:31:b1:29:22:c1:73:9b:6d:
10:ff:b3:dd:be:73:08:0d:c0:e7:d0:c0:9c:a0:7f:
f2:55:f6:7d:1f:52:3a:b2:e1:5f:07:81:d4:7e:41:
8f:71:68:65:2c:aa:d7:06:1a:4e:54:0f:1f:6f:de:
75:ea:12:e6:16:e9:da:4f:f4:31:7d:d6:f7:cb:33:
47:ea:a3:bd:f6:eb:b8:e6:ef:c0:7b:6f:90:ba:68:
0f:2d:37:dc:70:56:7a:b1:f5:84:a4:e7:1c:5b:04:
64:f7:fd:35:6d:83:78:ec:2a:d7:3c:df:38:d3:17:
d8:76:a2:3d:5c:5b:9e:b7:8e:b2:31:c2:78:d1:4f:
af:c7:b6:92:e2:6d:a6:9c:23:2d:f5:b2:56:7f:9c:
7f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:76:FE:2F:FC:21:2B:94:6C:29:BB:05:DC:EA:F4:84:48:32:0F:4A
X509v3 Authority Key Identifier:
keyid:A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:84:1c:f6:db:a5:50:7c:c4:92:13:06:85:d6:d4:ab:13:ab:
a9:75:9d:0d:4d:67:4c:d2:fe:5c:7f:cf:ad:9d:d7:56:c8:6d:
d9:15:06:86:bb:ff:6b:1b:00:ed:1b:9f:98:07:bf:e1:49:94:
31:ba:6d:af:f9:7f:4f:c2:46:1a:66:26:a1:38:f0:9e:75:ff:
cb:22:65:69:99:ab:1e:fb:58:26:c8:23:0b:af:cb:d6:d5:cd:
a8:42:da:56:73:9b:74:2e:09:49:5f:06:dc:73:30:02:2d:6a:
31:21:90:ba:53:a8:8c:c0:b7:c8:e2:e1:ef:ab:01:ef:40:6a:
dd:7e:c1:f8:a0:8a:37:53:20:ac:9a:5d:ee:5a:c3:65:e1:16:
77:8b:31:b3:5d:60:23:d3:b0:bb:a5:ed:cf:ad:2b:1f:99:63:
67:ea:62:6d:87:fd:8b:a5:28:f3:d7:7f:41:ea:79:0e:46:1f:
56:57:8b:8c:5d:29:45:03:ce:6b:b2:54:ad:c0:a5:b1:cc:38:
36:9c:35:59:f3:b8:be:c0:8c:57:06:4e:38:dc:c1:3e:14:48:
8f:00:a2:55:a0:d7:7d:36:73:3a:a4:bd:a0:bd:69:30:a0:cf:
5e:24:63:1f:94:f7:94:ef:90:d0:fa:01:f3:78:eb:e4:a0:e4:
c1:8a:cd:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzsFdgawqSASGRQ/q/gBUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMmU2MWIxZGRjODFkYzRmMzM4YTY4OWZlYmQ4ZGZkZGI0
NGJmNDQwHhcNMjUwNDI2MjAwMDU4WhcNMjUwNDI3MjAwMDU4WjAzMTEwLwYDVQQD
EygzODc2ZmUyZmZjMjEyYjk0NmMyOWJiMDVkY2VhZjQ4NDQ4MzIwZjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7tw7pm2MR1lY29VJ8hVha1ATvyo
YK6l5J0g4aVZFvLkiaIWJQcLFHGMj88C+X42ZD7FSjgdz1cCh9qCTcBhehshw/iK
u4yDtHyFSKor7KJ7DYMY92EOXj9haur+XW+1sdsUVv3ainFa4f5Zjbk+MbEpIsFz
m20Q/7PdvnMIDcDn0MCcoH/yVfZ9H1I6suFfB4HUfkGPcWhlLKrXBhpOVA8fb951
6hLmFunaT/Qxfdb3yzNH6qO99uu45u/Ae2+QumgPLTfccFZ6sfWEpOccWwRk9/01
bYN47CrXPN840xfYdqI9XFuet46yMcJ40U+vx7aS4m2mnCMt9bJWf5x/qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDh2/i/8ISuUbCm7Bdzq9IRIMg9KMB8GA1UdIwQY
MBaAFKIuYbHdyB3E8zimif69jf3bRL9EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2k1aHNkM0lIY1R6T0thSl9yMk5fZHRFdjBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kOTNlZGQtYTgwNy00NWE1LTg3MTkt
N2JhYmEyOTczNzQ2LzEvb2k1aHNkM0lIY1R6T0thSl9yMk5fZHRFdjBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9kOTNlZGQtYTgwNy00NWE1LTg3MTktN2JhYmEyOTczNzQ2
LzEvb2k1aHNkM0lIY1R6T0thSl9yMk5fZHRFdjBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4Qc9tul
UHzEkhMGhdbUqxOrqXWdDU1nTNL+XH/PrZ3XVsht2RUGhrv/axsA7RufmAe/4UmU
Mbptr/l/T8JGGmYmoTjwnnX/yyJlaZmrHvtYJsgjC6/L1tXNqELaVnObdC4JSV8G
3HMwAi1qMSGQulOojMC3yOLh76sB70Bq3X7B+KCKN1MgrJpd7lrDZeEWd4sxs11g
I9Owu6Xtz60rH5ljZ+pibYf9i6Uo89d/Qep5DkYfVleLjF0pRQPOa7JUrcClscw4
Npw1WfO4vsCMVwZOONzBPhRIjwCiVaDXfTZzOqS9oL1pMKDPXiRjH5T3lO+Q0PoB
83jr5KDkwYrN6g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:52:31 2025 by rpki-client