Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft
File: OmqMuD6zZTfKf_csW07WqNKtpMQ.mft (raw, json)
Hash identifier: NukcC6wu9ad/rH+zJzv2yFZgGmAofpod0yhfsNCbC60=
Subject key identifier: 5E:2C:4A:1C:0B:61:94:31:39:6F:E7:B6:EC:BE:E3:EC:2F:01:19:FD
Authority key identifier: 3A:6A:8C:B8:3E:B3:65:37:CA:7F:F7:2C:5B:4E:D6:A8:D2:AD:A4:C4
Certificate issuer: /CN=3a6a8cb83eb36537ca7ff72c5b4ed6a8d2ada4c4
Certificate serial: 019673793952F5A9D6D2283EF13B0F343FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmqMuD6zZTfKf_csW07WqNKtpMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft
Manifest number: 0C6E
Signing time: Sat 26 Apr 2025 19:00:46 +0000
Manifest this update: Sat 26 Apr 2025 19:00:46 +0000
Manifest next update: Sun 27 Apr 2025 19:00:46 +0000
Files and hashes: 1: OmqMuD6zZTfKf_csW07WqNKtpMQ.crl (hash: sS/qh4+D3myDaR/wz/AV3365bWD6YIaEd9HxQLvh2Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmqMuD6zZTfKf_csW07WqNKtpMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:39:52:f5:a9:d6:d2:28:3e:f1:3b:0f:34:3f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6a8cb83eb36537ca7ff72c5b4ed6a8d2ada4c4
Validity
Not Before: Apr 26 19:00:46 2025 GMT
Not After : Apr 27 19:00:46 2025 GMT
Subject: CN=5e2c4a1c0b619431396fe7b6ecbee3ec2f0119fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:2b:07:c5:1d:88:d9:c8:45:2a:46:87:5a:
2e:b9:12:f1:1a:ca:c9:9d:22:7c:5e:2f:64:dc:5f:
11:ef:24:5f:9e:3e:81:3c:0d:00:df:59:d6:b9:05:
e6:40:5b:3a:9b:93:93:27:0a:16:65:88:60:92:18:
9e:8e:6a:04:67:4f:59:b3:ee:b1:0a:e7:f0:f7:3e:
57:81:ef:7f:74:c6:1a:1a:e4:60:27:fe:29:24:5c:
ff:11:c3:9c:84:c6:8c:73:37:0d:b3:ae:9c:3a:08:
14:9b:d5:76:e9:f4:db:17:bb:d1:4a:a5:ee:f5:f3:
92:30:10:f4:e5:e2:a7:17:88:bd:c7:a9:d1:87:50:
7a:72:4c:41:ef:4f:bd:4a:74:45:db:cb:e8:df:4a:
f9:3a:6a:f9:fd:6f:aa:3c:51:1f:e6:9e:d3:b7:e5:
09:67:3c:96:77:4a:ee:5e:fe:92:ea:12:e2:09:62:
0e:5d:e4:0c:24:5e:ab:b9:d6:ef:17:55:df:e4:86:
cb:64:5d:fb:3d:79:b7:ee:b4:e9:a5:d1:85:03:fe:
e7:d2:9c:93:2d:c3:44:e9:e4:e6:47:55:28:bc:23:
97:79:aa:c4:a8:95:fb:cc:2e:7c:98:da:72:4e:18:
09:16:92:9e:29:ea:cf:2a:56:13:40:bb:d5:4d:65:
08:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2C:4A:1C:0B:61:94:31:39:6F:E7:B6:EC:BE:E3:EC:2F:01:19:FD
X509v3 Authority Key Identifier:
keyid:3A:6A:8C:B8:3E:B3:65:37:CA:7F:F7:2C:5B:4E:D6:A8:D2:AD:A4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmqMuD6zZTfKf_csW07WqNKtpMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:17:8c:fc:b1:9e:65:da:87:8e:34:05:4a:1a:81:d3:a6:9b:
40:9e:10:96:dc:69:64:46:a4:78:4b:5d:69:33:5c:7f:1c:5f:
4a:22:08:c1:51:2e:10:1b:12:e5:a7:90:7b:c5:56:e0:c7:a2:
a4:7b:7a:d2:d6:fb:3f:9f:f3:c2:33:59:98:4c:9d:63:96:77:
2b:ff:b1:12:91:67:9b:29:d5:2d:67:72:0a:09:51:c7:d2:2c:
49:9b:e4:98:d3:68:ce:b1:16:bb:72:a8:24:11:5d:4b:f1:91:
6a:dc:dc:d9:2d:4b:81:cd:eb:0c:66:c1:00:75:41:51:29:3c:
96:7e:a2:a0:7d:73:9a:68:6b:64:38:68:6a:68:12:83:47:25:
cc:b5:4a:60:3d:52:d9:cd:7b:9b:b1:5d:da:2d:58:52:d1:90:
37:cf:be:a4:0d:1b:ae:c9:df:34:8b:c4:8d:f1:05:50:01:c2:
bc:12:84:65:7b:6f:8c:e7:29:2f:19:f9:59:e6:fe:b3:e3:f6:
16:0a:06:0e:7c:0e:6a:e2:c7:8a:79:bf:47:56:07:a9:c0:d3:
49:8d:3e:25:1d:03:18:f2:21:fa:8b:01:d4:38:33:6b:40:f0:
10:a0:41:72:3b:bd:1f:6a:34:b7:56:46:1b:db:66:3b:e2:ed:
a4:8d:6a:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzeTlS9anW0ig+8TsPND/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNmE4Y2I4M2ViMzY1MzdjYTdmZjcyYzViNGVkNmE4ZDJh
ZGE0YzQwHhcNMjUwNDI2MTkwMDQ2WhcNMjUwNDI3MTkwMDQ2WjAzMTEwLwYDVQQD
Eyg1ZTJjNGExYzBiNjE5NDMxMzk2ZmU3YjZlY2JlZTNlYzJmMDExOWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthYrB8UdiNnIRSpGh1ouuRLxGsrJ
nSJ8Xi9k3F8R7yRfnj6BPA0A31nWuQXmQFs6m5OTJwoWZYhgkhiejmoEZ09Zs+6x
Cufw9z5Xge9/dMYaGuRgJ/4pJFz/EcOchMaMczcNs66cOggUm9V26fTbF7vRSqXu
9fOSMBD05eKnF4i9x6nRh1B6ckxB70+9SnRF28vo30r5Omr5/W+qPFEf5p7Tt+UJ
ZzyWd0ruXv6S6hLiCWIOXeQMJF6rudbvF1Xf5IbLZF37PXm37rTppdGFA/7n0pyT
LcNE6eTmR1UovCOXearEqJX7zC58mNpyThgJFpKeKerPKlYTQLvVTWUInwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4sShwLYZQxOW/ntuy+4+wvARn9MB8GA1UdIwQY
MBaAFDpqjLg+s2U3yn/3LFtO1qjSraTEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT21xTXVENnpaVGZLZl9jc1cwN1dxTkt0cE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ZjczZDQtNTYwZC00MTkzLWE3YmIt
M2UzN2JhY2RhZTBkLzEvT21xTXVENnpaVGZLZl9jc1cwN1dxTkt0cE1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84ZjczZDQtNTYwZC00MTkzLWE3YmItM2UzN2JhY2RhZTBk
LzEvT21xTXVENnpaVGZLZl9jc1cwN1dxTkt0cE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxeM/LGe
ZdqHjjQFShqB06abQJ4QltxpZEakeEtdaTNcfxxfSiIIwVEuEBsS5aeQe8VW4Mei
pHt60tb7P5/zwjNZmEydY5Z3K/+xEpFnmynVLWdyCglRx9IsSZvkmNNozrEWu3Ko
JBFdS/GRatzc2S1Lgc3rDGbBAHVBUSk8ln6ioH1zmmhrZDhoamgSg0clzLVKYD1S
2c17m7Fd2i1YUtGQN8++pA0brsnfNIvEjfEFUAHCvBKEZXtvjOcpLxn5Web+s+P2
FgoGDnwOauLHinm/R1YHqcDTSY0+JR0DGPIh+osB1Dgza0DwEKBBcju9H2o0t1ZG
G9tmO+LtpI1qUg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:09 2025 by rpki-client