Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
File: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft (raw, json)
Hash identifier: ToBz1RAXSA2j/yfrguMYFFOTdpst46afxkZfxQaxt+Q=
Subject key identifier: 34:3F:61:94:C4:5E:A5:E1:F2:7F:83:EB:B5:A8:72:D2:57:D1:44:56
Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
Certificate issuer: /CN=a018d68115dc4b730f157906b04426e599b3a8ca
Certificate serial: 0196802274DB2DCCE2031450FD2B66241EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
Manifest number: 0ADD
Signing time: Tue 29 Apr 2025 06:01:03 +0000
Manifest this update: Tue 29 Apr 2025 06:01:03 +0000
Manifest next update: Wed 30 Apr 2025 06:01:03 +0000
Files and hashes: 1: OwUS3NXybv4j2e2fp7XuRCsj9G8.roa (hash: 1wSHkE+/1+8ByWbwo11cGeXiOHBKl5OZ9BEstqVoHFw=)
2: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl (hash: UZbRG8d71MBF6TiCR3IHK5ew6iDQn2Aescyl9pxt5M8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:74:db:2d:cc:e2:03:14:50:fd:2b:66:24:1e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca
Validity
Not Before: Apr 29 06:01:03 2025 GMT
Not After : Apr 30 06:01:03 2025 GMT
Subject: CN=343f6194c45ea5e1f27f83ebb5a872d257d14456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:ff:3c:dc:65:f4:33:b8:f4:dd:6b:be:44:
57:6e:08:a6:8e:db:20:19:1c:8c:d1:21:5b:32:07:
6e:ad:ee:ab:47:ee:8b:d3:0b:34:f5:b3:44:6a:63:
d5:9b:7f:70:13:94:0c:85:9c:ae:ad:5b:10:68:e2:
2f:aa:de:5b:9d:2e:c4:5d:9c:40:4c:55:e5:e3:cd:
32:c1:61:55:26:1e:25:ea:6f:00:b6:40:e2:ac:7c:
64:e1:ca:f2:39:46:35:21:ea:da:c4:3d:41:79:7b:
04:ae:13:ef:43:71:ab:99:56:96:ff:99:83:54:d8:
b4:86:c2:36:00:ac:98:30:ef:4a:74:af:2d:d3:f8:
0f:5d:fa:62:5b:3e:0d:77:be:72:c5:9e:32:29:ee:
0a:3a:90:2c:5f:33:02:15:47:99:56:59:3f:e6:35:
ac:ea:d7:4e:81:a7:48:d5:b6:f2:07:30:3e:fa:dc:
74:2d:d9:5b:0c:1b:0b:ee:5c:8a:28:a9:0f:36:c5:
d3:fc:c8:9d:97:8b:8c:5c:b5:3e:c8:3b:67:db:e2:
0b:f3:1b:ba:87:3f:4d:e8:e8:d7:d9:13:41:2e:bc:
0c:d5:63:48:fc:e4:f6:0d:ad:cd:a8:91:88:8e:a5:
ec:cb:b1:6c:da:3b:1c:4f:0c:1b:10:45:7f:57:a4:
71:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3F:61:94:C4:5E:A5:E1:F2:7F:83:EB:B5:A8:72:D2:57:D1:44:56
X509v3 Authority Key Identifier:
keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:08:66:f6:e6:7b:40:b7:2d:17:67:00:38:5d:64:85:44:98:
a0:ec:2c:3a:5c:83:bd:f8:7e:40:5d:71:35:21:00:09:64:1c:
b0:8b:43:5b:e2:37:8a:75:e2:60:af:0a:eb:56:45:1f:d7:03:
da:01:33:48:df:2e:b3:d9:e2:ba:b8:32:0c:c6:06:09:67:41:
5a:0c:c7:53:8f:7d:d0:f4:f2:c8:04:67:b1:37:c9:36:16:87:
88:51:f2:a3:89:85:75:29:af:4e:32:75:a2:90:8c:88:8d:b4:
42:44:ee:63:e9:b6:5c:99:68:04:fb:13:97:74:bf:69:0d:81:
bc:8f:a0:bd:83:9d:cb:3d:df:14:80:dd:a6:a7:2e:c8:8b:79:
77:80:59:6d:fa:1f:86:50:21:71:9b:b9:38:5f:e1:36:0e:71:
7e:37:a0:78:7f:ca:f4:8c:52:d4:b2:49:ad:04:60:84:76:1b:
4e:0e:5f:5a:67:74:31:4b:7f:7a:fa:28:d4:30:be:35:b0:ec:
38:fc:88:9a:57:fb:fe:5c:47:29:f1:85:bc:c0:55:be:e3:29:
72:5c:04:2b:16:5f:cf:44:45:09:1b:3d:d2:b0:02:5f:2e:3a:
fe:be:36:b9:54:75:a6:01:3d:ac:6a:9a:f2:18:6c:d0:dc:9c:
a0:2a:f0:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAInTbLcziAxRQ/StmJB61MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMThkNjgxMTVkYzRiNzMwZjE1NzkwNmIwNDQyNmU1OTli
M2E4Y2EwHhcNMjUwNDI5MDYwMTAzWhcNMjUwNDMwMDYwMTAzWjAzMTEwLwYDVQQD
EygzNDNmNjE5NGM0NWVhNWUxZjI3ZjgzZWJiNWE4NzJkMjU3ZDE0NDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMb/PNxl9DO49N1rvkRXbgimjtsg
GRyM0SFbMgdure6rR+6L0ws09bNEamPVm39wE5QMhZyurVsQaOIvqt5bnS7EXZxA
TFXl480ywWFVJh4l6m8AtkDirHxk4cryOUY1IeraxD1BeXsErhPvQ3GrmVaW/5mD
VNi0hsI2AKyYMO9KdK8t0/gPXfpiWz4Nd75yxZ4yKe4KOpAsXzMCFUeZVlk/5jWs
6tdOgadI1bbyBzA++tx0LdlbDBsL7lyKKKkPNsXT/Midl4uMXLU+yDtn2+IL8xu6
hz9N6OjX2RNBLrwM1WNI/OT2Da3NqJGIjqXsy7Fs2jscTwwbEEV/V6RxwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQ/YZTEXqXh8n+D67WoctJX0URWMB8GA1UdIwQY
MBaAFKAY1oEV3EtzDxV5BrBEJuWZs6jKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0JqV2dSWGNTM01QRlhrR3NFUW01Wm16cU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80NjQ2NjAtN2E2ZS00OWE3LTkwM2Qt
NWNiYzYzNmJkN2U3LzEvb0JqV2dSWGNTM01QRlhrR3NFUW01Wm16cU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80NjQ2NjAtN2E2ZS00OWE3LTkwM2QtNWNiYzYzNmJkN2U3
LzEvb0JqV2dSWGNTM01QRlhrR3NFUW01Wm16cU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGghm9uZ7
QLctF2cAOF1khUSYoOwsOlyDvfh+QF1xNSEACWQcsItDW+I3inXiYK8K61ZFH9cD
2gEzSN8us9niurgyDMYGCWdBWgzHU4990PTyyARnsTfJNhaHiFHyo4mFdSmvTjJ1
opCMiI20QkTuY+m2XJloBPsTl3S/aQ2BvI+gvYOdyz3fFIDdpqcuyIt5d4BZbfof
hlAhcZu5OF/hNg5xfjegeH/K9IxS1LJJrQRghHYbTg5fWmd0MUt/evoo1DC+NbDs
OPyImlf7/lxHKfGFvMBVvuMpclwEKxZfz0RFCRs90rACXy46/r42uVR1pgE9rGqa
8hhs0NycoCrwRQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 08:29:34 2025 by rpki-client