Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json)
Hash identifier: bJIAEeUWtoT0SKAIPLW20u94CGDQz9JgFH9ht8I/SSY=
Subject key identifier: 37:5C:2A:86:F7:BD:C2:C0:C2:DA:55:4C:74:49:92:37:BC:C9:B8:07
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial: 01967ED88921C601323506514DB338A67D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
Manifest number: 0BF9
Signing time: Tue 29 Apr 2025 00:00:42 +0000
Manifest this update: Tue 29 Apr 2025 00:00:42 +0000
Manifest next update: Wed 30 Apr 2025 00:00:42 +0000
Files and hashes: 1: 4DXia6r4DTEgUbfUdc0kmvwmm1Y.roa (hash: Z6UcUFwAm3cKPg0mR+/9vcq4H9MwUtI5vEk+Pz3XR3A=)
2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: E1SGmhVSljFD9hN4eMxfeIxRcabEb7oatDfBAF7390s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:89:21:c6:01:32:35:06:51:4d:b3:38:a6:7d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
Validity
Not Before: Apr 29 00:00:42 2025 GMT
Not After : Apr 30 00:00:42 2025 GMT
Subject: CN=375c2a86f7bdc2c0c2da554c74499237bcc9b807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:70:65:8b:a7:f7:4c:bd:72:12:04:09:29:
1d:41:13:1f:55:d9:31:93:04:a7:f2:30:dd:eb:e6:
17:95:ea:18:35:25:55:7e:53:62:f4:5e:d4:11:89:
03:1a:a6:91:2a:6f:fa:00:82:3a:07:c3:fb:ab:d2:
67:71:b6:cc:c3:a7:78:07:9c:7e:62:14:32:e5:3e:
3b:7e:af:21:a9:b6:68:1a:09:3e:25:e5:a6:be:fc:
0c:01:44:d1:35:1b:68:02:a9:a4:b5:79:65:6b:c7:
9e:70:6f:52:5b:8b:8f:ff:36:cf:bb:79:5f:44:ad:
bd:12:c5:a4:b1:2e:7d:2b:c1:43:77:29:fa:0a:35:
79:d8:1f:70:95:35:a8:a6:64:d1:a8:c4:01:f3:0f:
75:a2:46:c5:f7:0e:11:34:8f:1c:30:93:8f:e4:32:
9f:fc:39:1d:e2:09:c7:4c:0a:04:bf:04:1d:db:c0:
c0:2d:78:6d:83:e8:be:85:41:c8:4b:42:ec:30:ab:
5d:f2:41:a9:a9:93:5b:47:4e:35:26:74:2e:e8:ba:
33:b6:00:ec:a9:02:79:3f:db:c0:23:00:c8:c3:1b:
02:86:0b:25:91:ae:b0:94:ca:c2:f8:8d:29:cb:03:
a3:ee:f9:c3:5f:ad:fe:af:ba:fb:35:f5:08:d5:e8:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5C:2A:86:F7:BD:C2:C0:C2:DA:55:4C:74:49:92:37:BC:C9:B8:07
X509v3 Authority Key Identifier:
keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:66:4b:cd:66:74:ad:ee:4a:a4:3a:ed:86:6e:3c:5e:da:3d:
d6:3a:29:b5:8c:ca:37:7d:bb:23:19:ad:39:d7:ed:d7:ef:dc:
33:6f:a5:71:a2:f7:d2:10:be:7c:69:68:9c:30:bb:fd:84:e9:
b7:ff:c9:5a:78:f8:0d:6d:20:81:38:cb:e2:c5:24:89:96:22:
71:3a:d9:f0:cb:81:cc:e2:03:7a:c2:8a:8f:e5:8f:2c:31:ce:
30:63:f3:81:09:5f:4d:42:cf:7e:95:be:d9:86:92:64:91:c6:
71:8e:14:dc:46:7f:c5:ff:8e:45:42:68:43:fc:54:f5:9d:a1:
ea:31:a8:87:58:df:da:1c:82:91:f7:97:74:ad:75:49:23:ab:
0e:7e:ad:93:9e:ef:3c:a2:a4:85:20:8c:20:92:f9:f3:17:b1:
29:12:81:d2:fa:bc:bc:f5:55:41:ca:7c:8b:5d:28:2b:e2:20:
68:d6:c4:b6:bd:4a:3b:47:61:1c:70:88:da:a9:3f:c9:67:31:
42:4a:22:3f:25:27:5b:86:80:18:fe:07:6b:60:12:91:60:09:
76:24:b7:82:2f:22:2e:d6:7c:dc:79:18:a6:b2:19:29:2c:ea:
b4:8c:fa:f2:e3:8b:ad:c7:28:b7:c1:0e:9c:31:dc:6f:6a:d8:
be:78:44:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+2IkhxgEyNQZRTbM4pn1KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZThmZWU5N2RhMzY1YjY0ODA4MjFiMThiZWRmOWZjMjM1
NTM4MjYwHhcNMjUwNDI5MDAwMDQyWhcNMjUwNDMwMDAwMDQyWjAzMTEwLwYDVQQD
EygzNzVjMmE4NmY3YmRjMmMwYzJkYTU1NGM3NDQ5OTIzN2JjYzliODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwStwZYun90y9chIECSkdQRMfVdkx
kwSn8jDd6+YXleoYNSVVflNi9F7UEYkDGqaRKm/6AII6B8P7q9JncbbMw6d4B5x+
YhQy5T47fq8hqbZoGgk+JeWmvvwMAUTRNRtoAqmktXlla8eecG9SW4uP/zbPu3lf
RK29EsWksS59K8FDdyn6CjV52B9wlTWopmTRqMQB8w91okbF9w4RNI8cMJOP5DKf
/Dkd4gnHTAoEvwQd28DALXhtg+i+hUHIS0LsMKtd8kGpqZNbR041JnQu6LoztgDs
qQJ5P9vAIwDIwxsChgslka6wlMrC+I0pywOj7vnDX63+r7r7NfUI1egx5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdcKob3vcLAwtpVTHRJkje8ybgHMB8GA1UdIwQY
MBaAFKHo/ul9o2W2SAghsYvt+fwjVTgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUt
ZjgyMTM3ZTAwYmMzLzEvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUtZjgyMTM3ZTAwYmMz
LzEvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2ZLzWZ0
re5KpDrthm48Xto91joptYzKN327IxmtOdft1+/cM2+lcaL30hC+fGlonDC7/YTp
t//JWnj4DW0ggTjL4sUkiZYicTrZ8MuBzOIDesKKj+WPLDHOMGPzgQlfTULPfpW+
2YaSZJHGcY4U3EZ/xf+ORUJoQ/xU9Z2h6jGoh1jf2hyCkfeXdK11SSOrDn6tk57v
PKKkhSCMIJL58xexKRKB0vq8vPVVQcp8i10oK+IgaNbEtr1KO0dhHHCI2qk/yWcx
QkoiPyUnW4aAGP4Ha2ASkWAJdiS3gi8iLtZ83HkYprIZKSzqtIz68uOLrccot8EO
nDHcb2rYvnhEEg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:02:37 2025 by rpki-client