Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
File: OQGfnAqym0Lg2xLprIezJ7_FWvk.mft (raw, json)
Hash identifier: moBJ6CQdbHvITVJjGFARjtEXErPsV4Zjv0LwBN5feq4=
Subject key identifier: 7D:A4:1B:93:57:25:D3:43:70:24:C8:96:E2:63:B2:2A:8D:FD:66:36
Authority key identifier: 39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
Certificate issuer: /CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Certificate serial: 0196760C8AD9E4DD720DAD6A142DA1D11A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 07:00:55 +0000
Manifest this update: Sun 27 Apr 2025 07:00:55 +0000
Manifest next update: Mon 28 Apr 2025 07:00:55 +0000
Files and hashes: 1: OQGfnAqym0Lg2xLprIezJ7_FWvk.crl (hash: FMfcDSvgxBd62kf1bJLnhXHfen7ELcNiF/Wbc7e8TBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:8a:d9:e4:dd:72:0d:ad:6a:14:2d:a1:d1:1a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Validity
Not Before: Apr 27 07:00:55 2025 GMT
Not After : Apr 28 07:00:55 2025 GMT
Subject: CN=7da41b935725d3437024c896e263b22a8dfd6636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:f8:b9:3e:96:91:cd:48:c7:36:8b:8c:4a:
e5:d0:0c:d0:54:3f:b0:34:4a:8f:dd:c6:0a:6a:a7:
3b:28:ff:bd:04:33:d3:de:3c:da:bb:37:b5:56:cc:
3d:12:10:db:b9:75:81:da:b4:97:a3:23:d7:ab:f7:
9b:72:72:1d:eb:d9:ec:5b:57:e3:ad:84:a1:4e:86:
57:f8:90:b5:d7:91:3c:6a:83:f8:ac:7f:b5:d5:8d:
8b:11:9c:b1:51:0c:4d:f7:8d:b2:a4:a3:44:37:c3:
c9:3f:d5:f4:2a:34:e7:9f:f3:a1:e2:6b:84:f9:f8:
14:b5:05:53:d5:ea:d5:2e:86:67:a6:ee:d9:45:a1:
92:56:0a:cc:94:e6:05:39:88:d8:34:e2:cc:11:cf:
cf:75:6f:82:80:bf:60:12:19:c0:96:cf:38:88:d3:
ab:7e:33:6c:e7:d0:11:e0:61:86:e2:90:25:e9:94:
0e:85:30:dd:49:77:fc:c7:8e:a0:58:f1:e7:6e:5f:
59:bc:f2:ce:12:b5:9e:ee:49:ea:a3:54:e8:f5:7d:
6f:a0:26:49:0c:72:e2:41:50:ad:d1:94:4c:83:92:
e8:df:d7:a9:9b:68:a9:6e:df:0e:11:41:cf:04:2e:
fd:30:cc:e4:f6:d6:02:26:3b:c7:d6:ab:b8:bc:0b:
e5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A4:1B:93:57:25:D3:43:70:24:C8:96:E2:63:B2:2A:8D:FD:66:36
X509v3 Authority Key Identifier:
keyid:39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:10:75:53:50:d0:6e:b4:ae:61:ed:06:f4:bf:5d:db:c0:f6:
26:f0:d7:63:62:6d:97:6c:1b:e9:53:3c:e4:17:69:91:fa:fa:
bf:a1:5f:7a:d6:cd:62:19:e0:28:7f:f2:62:df:48:8d:0f:3a:
3e:e5:2a:16:a5:f0:bd:1e:c3:e3:e3:ff:3f:62:63:5d:b0:5d:
4e:91:05:d9:f1:e0:5e:44:b8:07:85:ca:a5:a8:9f:87:42:81:
62:8f:5c:70:36:9a:95:3b:43:41:57:a0:3e:8c:ea:8e:79:8f:
a0:91:31:f8:2f:39:c3:74:ac:d0:d7:41:84:54:9d:9b:07:fe:
cd:4d:6e:ef:3a:31:3d:9c:75:82:0f:b4:a5:46:f5:f7:02:e3:
f4:9f:b2:da:65:a8:e8:67:96:f2:38:92:3b:01:04:ec:e8:9b:
66:84:30:ec:cc:54:e4:97:a5:2c:28:ec:b1:82:b0:96:1c:45:
5b:33:d5:2d:09:d1:42:06:66:8a:23:8a:4d:3b:b2:54:4e:1b:
11:9d:75:bf:de:71:80:02:28:ae:60:d0:4c:23:64:85:af:97:
45:66:d6:f8:db:3f:e9:17:5c:8a:c9:0d:59:f3:f4:c0:e4:c1:
3e:c0:0c:b5:ca:cd:d8:aa:f8:5b:f3:69:47:bf:88:38:10:44:
d9:b9:0c:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DIrZ5N1yDa1qFC2h0RoBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MDE5ZjljMGFiMjliNDJlMGRiMTJlOWFjODdiMzI3YmZj
NTVhZjkwHhcNMjUwNDI3MDcwMDU1WhcNMjUwNDI4MDcwMDU1WjAzMTEwLwYDVQQD
Eyg3ZGE0MWI5MzU3MjVkMzQzNzAyNGM4OTZlMjYzYjIyYThkZmQ2NjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6X4uT6Wkc1IxzaLjErl0AzQVD+w
NEqP3cYKaqc7KP+9BDPT3jzauze1Vsw9EhDbuXWB2rSXoyPXq/ebcnId69nsW1fj
rYShToZX+JC115E8aoP4rH+11Y2LEZyxUQxN942ypKNEN8PJP9X0KjTnn/Oh4muE
+fgUtQVT1erVLoZnpu7ZRaGSVgrMlOYFOYjYNOLMEc/PdW+CgL9gEhnAls84iNOr
fjNs59AR4GGG4pAl6ZQOhTDdSXf8x46gWPHnbl9ZvPLOErWe7knqo1To9X1voCZJ
DHLiQVCt0ZRMg5Lo39epm2ipbt8OEUHPBC79MMzk9tYCJjvH1qu4vAvlEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2kG5NXJdNDcCTIluJjsiqN/WY2MB8GA1UdIwQY
MBaAFDkBn5wKsptC4NsS6ayHsye/xVr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1FHZm5BcXltMExnMnhMcHJJZXpKN19GV3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80MzBjODEtZWU0Yi00ZTg4LWEzNmYt
Nzg4ZjVhNTgwNDRmLzEvT1FHZm5BcXltMExnMnhMcHJJZXpKN19GV3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80MzBjODEtZWU0Yi00ZTg4LWEzNmYtNzg4ZjVhNTgwNDRm
LzEvT1FHZm5BcXltMExnMnhMcHJJZXpKN19GV3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxB1U1DQ
brSuYe0G9L9d28D2JvDXY2Jtl2wb6VM85Bdpkfr6v6FfetbNYhngKH/yYt9IjQ86
PuUqFqXwvR7D4+P/P2JjXbBdTpEF2fHgXkS4B4XKpaifh0KBYo9ccDaalTtDQVeg
PozqjnmPoJEx+C85w3Ss0NdBhFSdmwf+zU1u7zoxPZx1gg+0pUb19wLj9J+y2mWo
6GeW8jiSOwEE7OibZoQw7MxU5JelLCjssYKwlhxFWzPVLQnRQgZmiiOKTTuyVE4b
EZ11v95xgAIormDQTCNkha+XRWbW+Ns/6RdciskNWfP0wOTBPsAMtcrN2Kr4W/Np
R7+IOBBE2bkMZQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:15:25 2025 by rpki-client