Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
File: oK89hVH73Tti9P_f1ZytQWHkRx4.mft (raw, json)
Hash identifier: q8PFASl0h0sPiqDBLb6lwUvrWMa3R040Q9x6sshlmqg=
Subject key identifier: 91:C3:0E:67:D3:FC:05:B6:C8:46:5E:7D:17:9B:E7:C5:41:12:3A:F2
Authority key identifier: A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
Certificate issuer: /CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Certificate serial: 019678689733CDD7863F83298DE69EAF9D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
Manifest number: 0C97
Signing time: Sun 27 Apr 2025 18:00:42 +0000
Manifest this update: Sun 27 Apr 2025 18:00:42 +0000
Manifest next update: Mon 28 Apr 2025 18:00:42 +0000
Files and hashes: 1: Fa0oKJS-5OytgjD9FfEKRTyYbH4.roa (hash: uvEwc2Oby4x64qeSjPHNoFr0vjSUe2G9BJiy9VMRAr0=)
2: oK89hVH73Tti9P_f1ZytQWHkRx4.crl (hash: Z3P9KUU+n1EgrqJlrEXqExYfYq10EKS4y0EQT6yrSiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:97:33:cd:d7:86:3f:83:29:8d:e6:9e:af:9d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Validity
Not Before: Apr 27 18:00:42 2025 GMT
Not After : Apr 28 18:00:42 2025 GMT
Subject: CN=91c30e67d3fc05b6c8465e7d179be7c541123af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:21:27:d1:aa:c3:66:17:1e:16:91:a4:64:
29:86:05:67:5a:eb:22:ae:43:55:65:27:e2:9a:c3:
8b:51:f8:63:e5:9c:b9:8c:ce:0b:f7:f0:73:c9:fa:
95:39:a6:50:2d:44:49:2d:07:0f:93:8f:73:e7:fc:
00:f3:91:73:83:79:9f:b2:88:55:41:12:af:ff:4e:
42:29:3c:99:59:42:48:c9:b8:31:06:7c:14:9d:0a:
1f:66:00:26:93:9c:dc:a7:46:e2:35:8a:2c:ca:39:
e4:fe:a8:7e:5e:65:16:c9:19:12:d8:b1:31:f7:dd:
b2:2b:4a:ba:ae:9f:0d:66:04:40:57:c9:65:46:af:
ff:9d:65:ea:8b:27:37:a0:36:d9:ef:59:66:3f:85:
44:5e:bb:69:53:3f:03:79:3e:79:41:a0:e7:b0:96:
fd:88:22:ac:c1:c2:ba:22:37:2e:94:db:cb:aa:0a:
12:da:b7:71:fe:75:36:a8:ec:02:96:97:b3:ff:13:
5e:13:f1:d0:52:0f:a6:42:9b:2e:8e:f7:69:93:cc:
bd:7d:0d:a8:25:2b:bf:50:66:4c:e8:b7:69:68:a1:
d9:49:63:ae:d0:20:9e:ad:0a:a0:91:a2:9d:00:0a:
a3:ee:f9:9f:53:6f:64:f1:1b:ff:5b:52:1b:fe:f5:
f2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C3:0E:67:D3:FC:05:B6:C8:46:5E:7D:17:9B:E7:C5:41:12:3A:F2
X509v3 Authority Key Identifier:
keyid:A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:eb:42:80:d5:05:a5:51:d9:9d:60:e3:56:76:01:5c:56:60:
5b:d7:3d:52:b3:a1:2e:2f:bc:23:36:e1:06:3d:43:d4:9d:a3:
62:55:04:56:df:a7:72:0b:68:c9:33:70:b6:98:f1:18:2e:48:
55:b7:e2:21:9b:7d:ec:9b:0e:e6:f5:b1:6f:b1:00:51:7c:3d:
23:b2:0d:fe:53:d6:ad:6d:1e:57:a1:16:4f:d6:25:d8:6c:bb:
79:35:55:18:14:77:35:09:3c:1f:6f:32:2c:e6:0a:2b:f6:94:
12:95:4b:1c:91:5c:e8:76:f3:aa:35:a3:c9:8f:9f:de:ce:f1:
1e:78:14:a9:70:5c:36:18:da:d4:bb:af:fc:18:e5:58:8d:9c:
62:44:e9:23:74:c5:89:fe:b2:03:fe:92:05:07:bb:8c:20:34:
44:89:dc:23:bd:81:06:da:dd:c7:93:b8:cd:e1:02:56:cd:a7:
f6:d3:30:91:0c:ee:56:5f:91:42:8e:f0:e2:31:71:cb:1a:39:
ff:df:d8:35:65:86:56:ab:fe:18:45:83:7d:60:a9:03:41:04:
bf:59:36:53:2d:a0:af:c6:0b:2e:f6:06:b6:28:da:ca:c0:ac:
6a:16:07:2d:38:26:00:80:a7:42:c0:3e:f1:f2:8f:75:7d:a6:
07:32:16:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4aJczzdeGP4Mpjeaer507MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYWYzZDg1NTFmYmRkM2I2MmY0ZmZkZmQ1OWNhZDQxNjFl
NDQ3MWUwHhcNMjUwNDI3MTgwMDQyWhcNMjUwNDI4MTgwMDQyWjAzMTEwLwYDVQQD
Eyg5MWMzMGU2N2QzZmMwNWI2Yzg0NjVlN2QxNzliZTdjNTQxMTIzYWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1ghJ9Gqw2YXHhaRpGQphgVnWusi
rkNVZSfimsOLUfhj5Zy5jM4L9/BzyfqVOaZQLURJLQcPk49z5/wA85Fzg3mfsohV
QRKv/05CKTyZWUJIybgxBnwUnQofZgAmk5zcp0biNYosyjnk/qh+XmUWyRkS2LEx
992yK0q6rp8NZgRAV8llRq//nWXqiyc3oDbZ71lmP4VEXrtpUz8DeT55QaDnsJb9
iCKswcK6IjculNvLqgoS2rdx/nU2qOwClpez/xNeE/HQUg+mQpsujvdpk8y9fQ2o
JSu/UGZM6LdpaKHZSWOu0CCerQqgkaKdAAqj7vmfU29k8Rv/W1Ib/vXypwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHDDmfT/AW2yEZefReb58VBEjryMB8GA1UdIwQY
MBaAFKCvPYVR+907YvT/39WcrUFh5EceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0s4OWhWSDczVHRpOVBfZjFaeXRRV0hrUng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9jNTY2YzctM2NhYy00NWE5LTgyYTEt
MDRiMDkwNTc1MjJmLzEvb0s4OWhWSDczVHRpOVBfZjFaeXRRV0hrUng0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9jNTY2YzctM2NhYy00NWE5LTgyYTEtMDRiMDkwNTc1MjJm
LzEvb0s4OWhWSDczVHRpOVBfZjFaeXRRV0hrUng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAketCgNUF
pVHZnWDjVnYBXFZgW9c9UrOhLi+8IzbhBj1D1J2jYlUEVt+ncgtoyTNwtpjxGC5I
VbfiIZt97JsO5vWxb7EAUXw9I7IN/lPWrW0eV6EWT9Yl2Gy7eTVVGBR3NQk8H28y
LOYKK/aUEpVLHJFc6HbzqjWjyY+f3s7xHngUqXBcNhja1Luv/BjlWI2cYkTpI3TF
if6yA/6SBQe7jCA0RIncI72BBtrdx5O4zeECVs2n9tMwkQzuVl+RQo7w4jFxyxo5
/9/YNWWGVqv+GEWDfWCpA0EEv1k2Uy2gr8YLLvYGtijaysCsahYHLTgmAICnQsA+
8fKPdX2mBzIWiQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:17:27 2025 by rpki-client