Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
File: OlOeUB3_N83JLL7gzduS7S6BwTw.mft (raw, json)
Hash identifier: 6IpKRmri+g1Q1/Yv/wSzLU547Vl7aMj2znx1x1VoQUw=
Subject key identifier: 38:4F:F8:23:9F:70:A7:7F:A2:8B:CE:17:3D:70:A2:7A:40:25:FC:13
Authority key identifier: 3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
Certificate issuer: /CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Certificate serial: 019674F9E6FC056B10424FEA1CA6130A36A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 02:00:56 +0000
Manifest this update: Sun 27 Apr 2025 02:00:56 +0000
Manifest next update: Mon 28 Apr 2025 02:00:56 +0000
Files and hashes: 1: OlOeUB3_N83JLL7gzduS7S6BwTw.crl (hash: WHpP0o1oBhLocqyrkWvbrQnrej53Td3lkiWcAI7e+EU=)
2: atjesNZQ2ZNfTEAkHa8X7G1spoI.roa (hash: ztzd1xVIo16Gew42+wgHm3Qb1gPLUkf9BdSdxy5xsYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:e6:fc:05:6b:10:42:4f:ea:1c:a6:13:0a:36:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Validity
Not Before: Apr 27 02:00:56 2025 GMT
Not After : Apr 28 02:00:56 2025 GMT
Subject: CN=384ff8239f70a77fa28bce173d70a27a4025fc13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:53:b3:3c:07:d7:4b:ca:4a:30:5a:d2:2f:b9:
42:51:bb:9f:b7:07:65:53:11:73:19:be:77:ed:58:
36:b8:1c:e9:93:d7:76:8c:25:e8:cf:89:b1:64:7f:
b3:b0:e3:b4:b8:08:67:f4:8f:32:4b:cd:19:1a:89:
d6:f7:37:88:0c:3e:37:6a:93:46:03:63:99:d4:50:
b6:70:ae:66:d9:a0:7b:f1:bf:b3:5a:9a:ef:00:03:
0a:00:d3:cc:aa:95:4a:b4:36:81:92:63:d3:f2:79:
33:96:7b:52:97:dc:26:e0:b9:13:5e:c2:71:5d:ce:
f0:9d:49:e0:10:da:8e:f7:64:22:c5:15:5b:2b:7e:
32:46:6f:f8:a4:67:a7:9e:0d:88:81:86:80:2d:1d:
86:02:44:98:6d:21:17:ef:28:e6:3a:ba:eb:09:19:
49:18:6f:af:52:c6:c3:2b:1f:e9:a1:29:29:e0:ab:
0d:15:4b:2b:6d:a0:08:61:62:e0:40:49:cd:1b:60:
92:c2:8e:f3:11:c0:89:17:a8:a5:7f:b0:da:a3:b3:
e7:7d:6a:f7:78:36:72:66:0b:bf:50:5c:b9:da:6e:
a6:ca:9d:c7:63:7f:c6:ad:7d:db:18:52:81:29:8b:
1e:aa:38:56:53:67:67:4e:38:55:86:70:c7:ec:d1:
60:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4F:F8:23:9F:70:A7:7F:A2:8B:CE:17:3D:70:A2:7A:40:25:FC:13
X509v3 Authority Key Identifier:
keyid:3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:93:da:52:11:d0:40:26:1b:e5:1d:0b:fe:6c:d9:c3:1a:14:
67:74:1b:a1:81:15:00:a6:bd:07:07:e8:63:52:79:39:22:60:
9c:cf:15:20:11:19:4a:cb:df:90:3d:b2:d4:99:af:2b:6f:d1:
b2:a6:41:6c:41:2f:cc:d5:35:18:d3:92:6d:e6:6f:5b:c9:1c:
d4:bb:cb:ee:79:8b:a4:5d:29:23:67:4d:fd:22:44:41:8b:3a:
05:76:f1:60:e1:6c:9f:f2:da:c3:fd:11:08:cd:c7:7e:a2:e2:
d2:c4:23:3e:02:6e:3b:66:16:98:07:72:d2:b0:25:79:dc:dc:
57:31:19:51:f0:47:1a:6f:63:10:bf:18:a9:65:9a:18:0f:d2:
27:cb:4a:31:18:55:e0:69:3d:80:f3:32:65:8b:d3:22:cb:a9:
b3:e4:78:50:2a:39:3e:44:80:d7:ee:50:f6:c1:b7:66:92:30:
02:ca:1b:32:79:d1:86:dc:61:4e:52:2f:c7:3f:3c:55:4b:9e:
f3:87:35:53:5e:f2:55:77:e0:1c:32:a5:9c:68:1c:3f:09:6b:
f2:4e:1c:dd:66:04:c8:44:e3:7b:22:49:de:d4:91:46:e6:d0:
36:33:39:6b:9c:b3:55:d8:5a:ed:c6:bc:a7:de:06:d9:54:36:
2b:e4:22:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0+eb8BWsQQk/qHKYTCjanMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNTM5ZTUwMWRmZjM3Y2RjOTJjYmVlMGNkZGI5MmVkMmU4
MWMxM2MwHhcNMjUwNDI3MDIwMDU2WhcNMjUwNDI4MDIwMDU2WjAzMTEwLwYDVQQD
EygzODRmZjgyMzlmNzBhNzdmYTI4YmNlMTczZDcwYTI3YTQwMjVmYzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FOzPAfXS8pKMFrSL7lCUbuftwdl
UxFzGb537Vg2uBzpk9d2jCXoz4mxZH+zsOO0uAhn9I8yS80ZGonW9zeIDD43apNG
A2OZ1FC2cK5m2aB78b+zWprvAAMKANPMqpVKtDaBkmPT8nkzlntSl9wm4LkTXsJx
Xc7wnUngENqO92QixRVbK34yRm/4pGenng2IgYaALR2GAkSYbSEX7yjmOrrrCRlJ
GG+vUsbDKx/poSkp4KsNFUsrbaAIYWLgQEnNG2CSwo7zEcCJF6ilf7Dao7PnfWr3
eDZyZgu/UFy52m6myp3HY3/GrX3bGFKBKYseqjhWU2dnTjhVhnDH7NFglQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhP+COfcKd/oovOFz1wonpAJfwTMB8GA1UdIwQY
MBaAFDpTnlAd/zfNySy+4M3bku0ugcE8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2xPZVVCM19OODNKTEw3Z3pkdVM3UzZCd1R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kODFhNDMtNDgyYS00NDMzLWE3YTIt
MDI3YzBkNjQyNGUzLzEvT2xPZVVCM19OODNKTEw3Z3pkdVM3UzZCd1R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kODFhNDMtNDgyYS00NDMzLWE3YTItMDI3YzBkNjQyNGUz
LzEvT2xPZVVCM19OODNKTEw3Z3pkdVM3UzZCd1R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpPaUhHQ
QCYb5R0L/mzZwxoUZ3QboYEVAKa9BwfoY1J5OSJgnM8VIBEZSsvfkD2y1JmvK2/R
sqZBbEEvzNU1GNOSbeZvW8kc1LvL7nmLpF0pI2dN/SJEQYs6BXbxYOFsn/Law/0R
CM3HfqLi0sQjPgJuO2YWmAdy0rAledzcVzEZUfBHGm9jEL8YqWWaGA/SJ8tKMRhV
4Gk9gPMyZYvTIsups+R4UCo5PkSA1+5Q9sG3ZpIwAsobMnnRhtxhTlIvxz88VUue
84c1U17yVXfgHDKlnGgcPwlr8k4c3WYEyETjeyJJ3tSRRubQNjM5a5yzVdha7ca8
p94G2VQ2K+Qi9w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:07:25 2025 by rpki-client