Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
File: Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft (raw, json)
Hash identifier: pcXihls0cpH+VlzNrJE5Ck43x2IOvb+CzTLIqTnYYNo=
Subject key identifier: 74:11:97:EE:67:41:CC:22:8C:50:23:07:5E:17:40:B3:22:11:E9:EC
Authority key identifier: 3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F
Certificate issuer: /CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
Certificate serial: 01967FB444CFC9D438F1F26D50C09512785A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
Manifest number: 1512
Signing time: Tue 29 Apr 2025 04:00:42 +0000
Manifest this update: Tue 29 Apr 2025 04:00:42 +0000
Manifest next update: Wed 30 Apr 2025 04:00:42 +0000
Files and hashes: 1: KfvqJ792oMd34Pp7PugqoZjhvkw.roa (hash: S302iUZeOLpzdWoDN+iw2GhCZ0Q0jKKUkWWXOnKtMnU=)
2: Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl (hash: lZDfEiDNVKg8JbHQ354KCv01BM0tbjJuRCqCY6R3f78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:44:cf:c9:d4:38:f1:f2:6d:50:c0:95:12:78:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
Validity
Not Before: Apr 29 04:00:42 2025 GMT
Not After : Apr 30 04:00:42 2025 GMT
Subject: CN=741197ee6741cc228c5023075e1740b32211e9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4d:81:6f:c2:4f:4e:4c:df:c9:7a:98:d3:8b:
22:c0:46:a4:b5:5d:30:9f:bb:75:a2:d9:c4:73:78:
74:3f:20:78:f9:5b:f4:ae:3f:25:e1:2c:56:bf:e8:
68:b8:d1:8b:f5:82:33:8e:f2:ac:b5:7f:5b:44:d9:
39:be:11:d2:be:d2:12:aa:f4:7b:20:2c:f6:2c:78:
44:90:b0:ac:c6:b1:9d:9a:17:cd:0e:b6:32:d6:ea:
45:93:a1:c9:c6:1d:73:64:4f:01:d5:90:0c:b6:bf:
d8:30:92:4f:25:d7:a3:5a:eb:3c:fc:c4:5d:65:c2:
5f:b2:d3:01:b1:48:69:5e:35:68:96:e5:16:71:71:
91:b3:e5:90:00:a6:ed:6e:90:50:41:9d:fd:61:bd:
c5:fb:76:67:ff:0f:28:09:16:1d:6b:5d:71:ee:22:
1c:07:8c:33:4d:a8:c4:64:fa:06:8b:64:7b:4b:46:
05:f8:39:2f:c3:a0:fc:9c:fa:e3:27:01:d6:ae:bb:
1a:c6:ea:36:9c:99:fa:83:4f:a4:58:d4:ef:c0:2c:
41:06:34:62:ed:c9:c7:7d:e7:78:7f:b3:88:92:7f:
1c:38:e3:10:54:18:e6:e7:d3:f6:5a:08:cc:58:9b:
a3:41:f5:32:50:ef:5c:bf:71:2d:1a:df:05:65:01:
64:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:11:97:EE:67:41:CC:22:8C:50:23:07:5E:17:40:B3:22:11:E9:EC
X509v3 Authority Key Identifier:
keyid:3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:55:77:aa:82:ac:07:4b:64:c9:1d:cf:2d:de:d1:2f:25:2d:
70:81:4c:9f:2d:0b:42:33:7e:bb:ef:ed:61:cf:43:44:16:d2:
90:49:8e:d5:b8:81:26:14:01:d6:6c:d6:86:0f:58:a1:97:72:
f8:99:c9:fe:d4:d4:c8:9f:36:93:23:55:d7:af:f5:56:56:25:
5d:30:db:5d:61:f7:01:8c:c5:f4:b6:1c:d8:1f:44:31:56:fe:
3f:83:c6:1b:77:51:c8:4a:bb:33:b1:dd:11:d9:1b:29:cb:ac:
77:0f:04:a7:f6:75:d8:23:9d:0b:cf:70:c3:4b:40:54:12:75:
ed:28:bf:9e:b8:7b:d0:1a:91:25:ff:55:4d:34:12:95:55:4c:
17:2f:8f:e2:5e:cc:28:4f:11:db:a7:82:27:eb:ed:be:31:97:
1f:00:a7:6d:5c:d6:bd:13:ec:58:a5:e6:71:43:a5:e1:a9:21:
cb:4d:1a:23:10:e9:7d:7b:5b:d1:60:56:77:99:48:d1:0f:9c:
48:3a:b9:f8:5d:88:7e:21:53:d3:13:33:66:af:cc:cd:27:67:
f1:89:12:6e:16:72:d8:c6:d3:30:2c:83:6f:99:d4:b6:b8:41:
ab:8a:c7:8a:b7:dd:86:50:e9:93:04:59:af:a7:66:4f:11:e0:
e7:99:22:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/tETPydQ48fJtUMCVEnhaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWRkM2M3MjczZDlhYjM2NGEzMTRkYTQ4MWU1YmE1MWY4
NDI5NmYwHhcNMjUwNDI5MDQwMDQyWhcNMjUwNDMwMDQwMDQyWjAzMTEwLwYDVQQD
Eyg3NDExOTdlZTY3NDFjYzIyOGM1MDIzMDc1ZTE3NDBiMzIyMTFlOWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1E2Bb8JPTkzfyXqY04siwEaktV0w
n7t1otnEc3h0PyB4+Vv0rj8l4SxWv+houNGL9YIzjvKstX9bRNk5vhHSvtISqvR7
ICz2LHhEkLCsxrGdmhfNDrYy1upFk6HJxh1zZE8B1ZAMtr/YMJJPJdejWus8/MRd
ZcJfstMBsUhpXjVoluUWcXGRs+WQAKbtbpBQQZ39Yb3F+3Zn/w8oCRYda11x7iIc
B4wzTajEZPoGi2R7S0YF+Dkvw6D8nPrjJwHWrrsaxuo2nJn6g0+kWNTvwCxBBjRi
7cnHfed4f7OIkn8cOOMQVBjm59P2WgjMWJujQfUyUO9cv3EtGt8FZQFkkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQRl+5nQcwijFAjB14XQLMiEensMB8GA1UdIwQY
MBaAFDrt08cnPZqzZKMU2kgeW6UfhClvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3UzVHh5Yzltck5rb3hUYVNCNWJwUi1FS1c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82MmM5MmEtNWMyMy00OGQ3LWJjYTIt
NjNmMDQwOTVhNGM0LzEvT3UzVHh5Yzltck5rb3hUYVNCNWJwUi1FS1c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82MmM5MmEtNWMyMy00OGQ3LWJjYTItNjNmMDQwOTVhNGM0
LzEvT3UzVHh5Yzltck5rb3hUYVNCNWJwUi1FS1c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVV3qoKs
B0tkyR3PLd7RLyUtcIFMny0LQjN+u+/tYc9DRBbSkEmO1biBJhQB1mzWhg9YoZdy
+JnJ/tTUyJ82kyNV16/1VlYlXTDbXWH3AYzF9LYc2B9EMVb+P4PGG3dRyEq7M7Hd
EdkbKcusdw8Ep/Z12COdC89ww0tAVBJ17Si/nrh70BqRJf9VTTQSlVVMFy+P4l7M
KE8R26eCJ+vtvjGXHwCnbVzWvRPsWKXmcUOl4akhy00aIxDpfXtb0WBWd5lI0Q+c
SDq5+F2IfiFT0xMzZq/MzSdn8YkSbhZy2MbTMCyDb5nUtrhBq4rHirfdhlDpkwRZ
r6dmTxHg55kikQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:12:58 2025 by rpki-client