Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
File: oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json)
Hash identifier: YA15fqb8Pdgd52k14LRmLXCF9M+4m7cQj9qiUk/brfQ=
Subject key identifier: 18:3C:A4:F5:B1:09:7F:73:7F:44:3E:58:82:EE:17:DA:1B:B5:2F:42
Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
Certificate issuer: /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Certificate serial: 0196729D785A80F86A29CF80ABACDEE8F8C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
Manifest number: 0FB4
Signing time: Sat 26 Apr 2025 15:00:44 +0000
Manifest this update: Sat 26 Apr 2025 15:00:44 +0000
Manifest next update: Sun 27 Apr 2025 15:00:44 +0000
Files and hashes: 1: AItoBBXTr3JSVEunHoKYVScHBBA.roa (hash: bQ8pPRnSjhK+OHhk4/Jjzl0/46sUTmdeipylWtU4pOg=)
2: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: M7SNCwZ0AsTbwpbNdV2uXYTFocQCV4kEKhMesWS59uc=)
3: ublcR1AG8bTtIDegIl4XF5yKZ2U.roa (hash: EReps1m4UdW66UXSYxPeRRxVic46xc68n57xt40fmWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:78:5a:80:f8:6a:29:cf:80:ab:ac:de:e8:f8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Validity
Not Before: Apr 26 15:00:44 2025 GMT
Not After : Apr 27 15:00:44 2025 GMT
Subject: CN=183ca4f5b1097f737f443e5882ee17da1bb52f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:36:19:48:51:a3:06:2d:46:dc:4b:89:7b:61:
fd:5b:95:2d:e1:6f:32:ff:3f:2a:33:dc:24:f2:be:
cd:4e:a6:d3:88:25:96:a4:59:7a:38:bf:03:67:36:
0b:7e:a9:2b:0b:f2:7e:ca:38:00:f0:0e:cc:14:45:
c1:48:ab:63:82:f1:0a:15:2d:ec:d4:e5:f9:36:e5:
5e:40:2a:1b:9e:2f:d4:70:6b:f5:b6:3b:13:4e:48:
36:78:69:93:74:e6:50:ab:fd:28:26:32:a4:31:3e:
fb:6d:14:71:43:b1:db:5e:fc:d2:93:96:81:69:fe:
c0:43:d2:4d:08:cc:78:52:3d:0e:94:b8:81:70:82:
7b:36:f5:02:69:b4:16:b7:e9:5b:c0:68:55:d8:d0:
1a:80:a8:29:20:d9:29:2b:3c:c0:d4:5e:b5:ae:7d:
b1:95:1a:cb:64:0b:e9:b8:f9:df:db:3c:bc:78:7f:
8c:05:dc:fb:63:85:1b:d7:76:4e:0a:6a:39:ba:6f:
56:46:5a:fe:47:8b:f4:9f:96:9d:56:ae:65:e3:b7:
f1:ca:72:91:4a:01:e7:37:f6:ea:7f:6b:b6:b5:d0:
d1:ea:fc:4b:7d:53:8b:74:cd:41:c4:1e:82:a3:07:
fc:a9:33:90:85:b4:f7:8f:83:e2:3e:f5:08:0d:a7:
b2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3C:A4:F5:B1:09:7F:73:7F:44:3E:58:82:EE:17:DA:1B:B5:2F:42
X509v3 Authority Key Identifier:
keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6b:b1:e2:da:a1:4d:b7:1e:46:b3:04:f4:5f:17:9a:06:43:
18:2b:10:b7:88:ed:1d:d8:fb:77:4a:53:0f:7e:b9:ff:b3:1f:
0c:d9:cd:2e:80:eb:40:29:4b:8e:11:8d:1b:96:9f:b7:73:ed:
6e:58:e1:04:43:6e:e3:59:a8:72:bb:63:9e:1d:90:7f:bb:5d:
a0:2b:f6:0a:01:aa:d4:04:f5:5c:98:e4:38:c7:50:10:57:d1:
9d:50:5b:8b:1d:c4:7f:1a:82:3c:15:d1:da:63:96:b7:05:f2:
a7:2f:2e:70:38:f1:d5:53:9d:42:9e:0b:d7:55:ea:32:a4:9d:
cf:1d:af:e1:ff:0f:fe:68:0a:35:ed:67:1e:60:de:79:4a:56:
d7:6d:74:40:4f:e2:e1:26:ce:b3:91:51:88:df:e2:8f:d8:0c:
fd:ff:1b:13:5e:d3:92:11:ab:2d:f1:0f:96:d2:1b:ba:85:63:
c8:69:a9:a2:1e:94:b2:5d:ce:cf:a5:bf:2c:0e:a6:6c:75:ed:
74:1e:5e:4c:e8:7e:b0:1a:ed:bf:96:29:62:86:e3:cc:0f:45:
57:c1:5e:cb:05:e0:1f:e9:fb:97:6c:03:b4:dc:d3:6f:47:e5:
20:f2:36:6f:3d:76:d0:8e:68:b9:50:f0:1c:c1:49:c5:a6:b9:
7a:8e:c7:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZynXhagPhqKc+Aq6ze6PjAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZGJkNWQxZjg2ZGQ5ZGQ2NjYwNmExNGQzMWQ2NGNiMGVh
YWM4M2IwHhcNMjUwNDI2MTUwMDQ0WhcNMjUwNDI3MTUwMDQ0WjAzMTEwLwYDVQQD
EygxODNjYTRmNWIxMDk3ZjczN2Y0NDNlNTg4MmVlMTdkYTFiYjUyZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzYZSFGjBi1G3EuJe2H9W5Ut4W8y
/z8qM9wk8r7NTqbTiCWWpFl6OL8DZzYLfqkrC/J+yjgA8A7MFEXBSKtjgvEKFS3s
1OX5NuVeQCobni/UcGv1tjsTTkg2eGmTdOZQq/0oJjKkMT77bRRxQ7HbXvzSk5aB
af7AQ9JNCMx4Uj0OlLiBcIJ7NvUCabQWt+lbwGhV2NAagKgpINkpKzzA1F61rn2x
lRrLZAvpuPnf2zy8eH+MBdz7Y4Ub13ZOCmo5um9WRlr+R4v0n5adVq5l47fxynKR
SgHnN/bqf2u2tdDR6vxLfVOLdM1BxB6Cowf8qTOQhbT3j4PiPvUIDaeyBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBg8pPWxCX9zf0Q+WILuF9obtS9CMB8GA1UdIwQY
MBaAFKDb1dH4bdndZmBqFNMdZMsOqsg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb052VjBmaHQyZDFtWUdvVTB4MWt5dzZxeURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xZDRjZmMtOGU1Yy00NTdjLTk2MjAt
MTM1YzkxZWMxOTllLzEvb052VjBmaHQyZDFtWUdvVTB4MWt5dzZxeURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xZDRjZmMtOGU1Yy00NTdjLTk2MjAtMTM1YzkxZWMxOTll
LzEvb052VjBmaHQyZDFtWUdvVTB4MWt5dzZxeURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2ux4tqh
TbceRrME9F8XmgZDGCsQt4jtHdj7d0pTD365/7MfDNnNLoDrQClLjhGNG5aft3Pt
bljhBENu41mocrtjnh2Qf7tdoCv2CgGq1AT1XJjkOMdQEFfRnVBbix3EfxqCPBXR
2mOWtwXypy8ucDjx1VOdQp4L11XqMqSdzx2v4f8P/mgKNe1nHmDeeUpW1210QE/i
4SbOs5FRiN/ij9gM/f8bE17TkhGrLfEPltIbuoVjyGmpoh6Usl3Oz6W/LA6mbHXt
dB5eTOh+sBrtv5YpYobjzA9FV8FeywXgH+n7l2wDtNzTb0flIPI2bz120I5ouVDw
HMFJxaa5eo7HhA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:02:30 2025 by rpki-client