Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier: IqfYbXzVtVThajkaRjKEPzer/RkWaboTnVRMTnN3Pi8=
Subject key identifier: 75:05:F6:B4:A7:82:39:34:2E:EF:8C:89:A0:4B:A6:5C:D6:00:53:C4
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial: 019680FDA8269431714413C65B972D61E864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number: 0372
Signing time: Tue 29 Apr 2025 10:00:29 +0000
Manifest this update: Tue 29 Apr 2025 10:00:29 +0000
Manifest next update: Wed 30 Apr 2025 10:00:29 +0000
Files and hashes: 1: BAHKXXDGf4FkpvGLoVJvz4ZQS9g.roa (hash: QG7io9HlNrI6xyBwfXvDwRjbZbOdJXrpGi6XSOhyDS8=)
2: Xa4rA7s8Ly9UJZgVYi-Jv5tyXbE.roa (hash: B0/EUa4/ThW3bg+w4c9UI/ZQv1E86GHArXlsrfN6HzQ=)
3: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: aA3aL7uiP3D9l8ioG9VbeZabw0mPMDFuqf7C9v6O4dM=)
4: p4F6VDWGlGgiZn3yBJi7M3fVpVg.roa (hash: TIMfRy8SxAVXXi0h232Rvp4fEAYndvsGejpfbPavyrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:a8:26:94:31:71:44:13:c6:5b:97:2d:61:e8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Validity
Not Before: Apr 29 10:00:29 2025 GMT
Not After : Apr 30 10:00:29 2025 GMT
Subject: CN=7505f6b4a78239342eef8c89a04ba65cd60053c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6e:37:ce:4d:91:24:79:87:7e:6b:46:29:a9:
da:de:90:b7:e5:1e:19:fa:d4:fe:f8:b1:1c:b2:5a:
cf:84:a9:9d:df:f9:41:32:d8:a0:f4:c2:67:a5:7a:
90:c1:1b:27:dd:d3:88:c6:e6:16:78:6a:eb:4a:31:
70:a3:d2:76:14:ac:e2:25:82:6d:87:b7:4a:f8:42:
19:27:2e:8c:f2:22:b0:fb:1b:53:af:60:e5:77:d2:
74:82:ab:dd:0c:fd:40:9d:39:1b:96:b7:be:7b:89:
1f:1d:49:de:cc:ff:67:bc:19:76:3b:cc:79:71:75:
d7:0c:11:2c:ff:d5:72:6e:e2:f7:6e:72:43:28:73:
8d:d9:f0:51:36:73:ba:fc:2e:e4:a3:75:87:c0:15:
3e:07:95:c0:88:99:5d:fd:da:40:06:9d:bf:ae:8e:
8c:8d:6a:29:59:88:49:f9:d3:0d:0c:72:32:61:02:
a2:80:c4:82:c2:86:a4:30:16:23:f6:66:d0:0c:9b:
51:78:88:42:cb:61:d4:f0:94:5f:7e:73:3f:99:57:
af:36:34:5d:7f:e2:75:a8:83:34:73:2d:90:72:24:
cd:dd:dc:43:1a:ad:63:00:95:7b:25:3d:12:43:e4:
17:69:e5:7d:3f:ac:c5:8b:67:26:7a:10:db:63:a6:
4f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:05:F6:B4:A7:82:39:34:2E:EF:8C:89:A0:4B:A6:5C:D6:00:53:C4
X509v3 Authority Key Identifier:
keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a1:f9:14:f1:dd:b5:48:d7:da:54:77:0e:fd:9d:b4:e5:ca:
1e:5a:cb:e8:9b:2c:7f:82:93:55:ea:95:e0:77:58:81:74:d1:
83:5f:2b:38:d9:58:84:90:af:c5:cc:00:5a:a3:4b:50:43:54:
58:ed:21:17:74:ef:54:8f:51:4b:9f:8e:bb:ed:4c:e8:95:39:
c8:5b:ca:f6:41:40:37:dd:e2:11:98:e2:65:2c:41:ad:c0:03:
4d:c0:a0:c3:ba:1f:b7:ea:42:86:a4:a3:b1:b6:a9:6c:ae:82:
12:96:ac:5c:0f:2b:16:56:51:93:e7:04:f3:a3:11:39:c5:45:
e0:86:8c:c9:b8:60:8c:41:3b:31:39:60:d7:d6:bc:42:a2:dd:
c0:bf:63:86:2f:c4:82:cb:1c:17:99:5f:ae:72:ed:08:ab:35:
82:d9:df:0f:60:0e:24:e7:e0:21:ed:42:e1:f4:15:d9:6d:7e:
62:33:f9:94:88:f0:c5:a4:d0:d3:15:b4:56:5b:ee:54:b6:77:
21:2f:e0:46:eb:ba:96:8c:83:27:a5:3c:9b:37:91:c9:62:3d:
70:7d:49:54:39:a4:d1:18:0e:1d:25:4d:29:59:72:43:4a:7b:
5d:9c:cd:6d:5b:c3:58:dc:ba:5b:49:38:cb:c1:8f:93:52:42:
c0:01:a6:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaA/agmlDFxRBPGW5ctYehkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZDVjN2FlN2U0NWMwMDczNGVmYmNjOTEzYTFiMWVhM2U5
NjRiNDAwHhcNMjUwNDI5MTAwMDI5WhcNMjUwNDMwMTAwMDI5WjAzMTEwLwYDVQQD
Eyg3NTA1ZjZiNGE3ODIzOTM0MmVlZjhjODlhMDRiYTY1Y2Q2MDA1M2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw243zk2RJHmHfmtGKana3pC35R4Z
+tT++LEcslrPhKmd3/lBMtig9MJnpXqQwRsn3dOIxuYWeGrrSjFwo9J2FKziJYJt
h7dK+EIZJy6M8iKw+xtTr2Dld9J0gqvdDP1AnTkblre+e4kfHUnezP9nvBl2O8x5
cXXXDBEs/9VybuL3bnJDKHON2fBRNnO6/C7ko3WHwBU+B5XAiJld/dpABp2/ro6M
jWopWYhJ+dMNDHIyYQKigMSCwoakMBYj9mbQDJtReIhCy2HU8JRffnM/mVevNjRd
f+J1qIM0cy2QciTN3dxDGq1jAJV7JT0SQ+QXaeV9P6zFi2cmehDbY6ZPawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUF9rSngjk0Lu+MiaBLplzWAFPEMB8GA1UdIwQY
MBaAFKLVx65+RcAHNO+8yROhseo+lktAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMt
ZWMxNjczNWEzMzgyLzEvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMtZWMxNjczNWEzMzgy
LzEvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoaH5FPHd
tUjX2lR3Dv2dtOXKHlrL6Jssf4KTVeqV4HdYgXTRg18rONlYhJCvxcwAWqNLUENU
WO0hF3TvVI9RS5+Ou+1M6JU5yFvK9kFAN93iEZjiZSxBrcADTcCgw7oft+pChqSj
sbapbK6CEpasXA8rFlZRk+cE86MROcVF4IaMybhgjEE7MTlg19a8QqLdwL9jhi/E
gsscF5lfrnLtCKs1gtnfD2AOJOfgIe1C4fQV2W1+YjP5lIjwxaTQ0xW0VlvuVLZ3
IS/gRuu6loyDJ6U8mzeRyWI9cH1JVDmk0RgOHSVNKVlyQ0p7XZzNbVvDWNy6W0k4
y8GPk1JCwAGmOw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:07:17 2025 by rpki-client