Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
File: oHejVvB-B0yubybn9Yk9zp2sitM.mft (raw, json)
Hash identifier: kxcfv7WBpRTcdNWBGre2Cm+MsIEDaR+/l7SCiRuWzxE=
Subject key identifier: 1D:9E:41:24:04:6D:69:6E:44:AD:00:7A:C9:7F:8E:23:52:CA:05:20
Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
Certificate issuer: /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Certificate serial: 0196767A184C6669A7680E2F1E5753D25272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
Manifest number: 0FFE
Signing time: Sun 27 Apr 2025 09:00:35 +0000
Manifest this update: Sun 27 Apr 2025 09:00:35 +0000
Manifest next update: Mon 28 Apr 2025 09:00:35 +0000
Files and hashes: 1: lxW4zSYAimUluowH0s8gP36GI8E.roa (hash: ACOT5wzA2KcUFV8Qgc3AQN3HAUIG6x6Guns6Pzhv5rk=)
2: oHejVvB-B0yubybn9Yk9zp2sitM.crl (hash: yJEPUWQ3s1vIDICYzd7lXBe/Yiq3LSGm64RU16AnwCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:18:4c:66:69:a7:68:0e:2f:1e:57:53:d2:52:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Validity
Not Before: Apr 27 09:00:35 2025 GMT
Not After : Apr 28 09:00:35 2025 GMT
Subject: CN=1d9e4124046d696e44ad007ac97f8e2352ca0520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:a1:be:1b:65:bd:0b:33:d0:3d:fd:67:c2:
25:3a:40:ff:c6:af:c8:63:41:5c:89:9f:83:6a:b7:
b1:3a:a6:e0:f8:48:01:52:6f:45:41:5d:b4:1b:fe:
f3:67:ed:ee:8b:54:c1:11:f6:03:a3:ea:d8:b6:e5:
6d:2a:19:8f:3d:22:1f:a7:8e:94:7e:96:0d:f3:8e:
0b:49:6a:20:e8:e2:c0:62:7f:bf:61:42:3f:e1:a9:
05:85:ad:84:df:42:9a:bc:0e:41:91:ae:c5:eb:07:
d2:31:59:74:8d:77:86:bc:ea:bb:5a:a2:a3:0e:59:
e5:70:c3:c1:99:b4:f5:a0:ef:7d:70:e7:d9:91:f4:
94:e3:85:73:33:ab:3e:bd:f2:ba:d6:4a:fc:4c:a0:
ee:15:da:99:fe:0c:d1:44:b8:6f:68:d7:f2:05:18:
7c:7a:cd:d0:fa:be:c0:63:8a:01:a3:50:22:13:99:
13:e5:0f:20:82:1e:95:83:36:08:df:de:26:17:84:
d5:61:b8:22:5a:da:37:ea:b9:d8:79:e3:7a:aa:e4:
83:a2:30:e7:9f:03:6a:77:18:9a:09:b5:c2:4b:44:
74:c6:bd:05:08:70:35:23:6f:3e:ee:be:4b:06:f5:
8b:31:03:26:9a:0a:41:db:f7:30:2f:80:5c:62:f0:
c7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9E:41:24:04:6D:69:6E:44:AD:00:7A:C9:7F:8E:23:52:CA:05:20
X509v3 Authority Key Identifier:
keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:35:06:cb:6e:b3:ea:e5:d4:9d:f7:57:cf:18:f9:78:fb:f5:
18:c9:49:3e:06:4a:48:bf:6e:64:73:c0:9b:1a:46:7b:a0:cc:
33:06:47:d4:28:d5:b3:26:74:a3:3b:e5:e2:1f:07:45:bd:f7:
29:c0:c7:4b:da:e6:ad:fe:dc:44:4d:b5:76:f1:af:c9:01:57:
2e:9d:79:95:87:3d:e5:10:18:48:f2:1e:26:b5:30:32:1a:8e:
d8:ec:9b:7b:f5:ec:9b:12:e4:e1:a3:2b:c5:5e:19:33:90:2a:
a3:ef:90:95:91:86:c8:d0:c0:f0:76:47:1c:fb:9b:61:d7:c1:
6b:cc:32:f5:bc:2b:86:46:d5:f1:da:89:8a:5f:37:9d:47:bc:
77:94:9b:77:c8:b4:67:7d:b3:98:11:8c:6f:00:f8:c9:43:57:
5e:2f:20:19:d5:5f:82:1d:bf:d2:8e:69:e3:b2:44:81:27:f9:
1f:6d:36:65:14:c4:bd:67:ba:3c:3e:b8:32:94:a5:cd:b7:1a:
02:0c:70:b2:e3:7b:a2:d9:6e:17:8b:a8:6b:97:c8:e3:d3:73:
ce:a2:0a:d9:21:6b:48:38:87:c0:98:bf:01:34:6d:15:18:f6:
26:20:11:53:c5:bc:e5:2c:a4:ce:20:6b:dd:9c:f3:63:ce:f2:
a2:31:79:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2ehhMZmmnaA4vHldT0lJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNzdhMzU2ZjA3ZTA3NGNhZTZmMjZlN2Y1ODkzZGNlOWRh
YzhhZDMwHhcNMjUwNDI3MDkwMDM1WhcNMjUwNDI4MDkwMDM1WjAzMTEwLwYDVQQD
EygxZDllNDEyNDA0NmQ2OTZlNDRhZDAwN2FjOTdmOGUyMzUyY2EwNTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOOhvhtlvQsz0D39Z8IlOkD/xq/I
Y0FciZ+DarexOqbg+EgBUm9FQV20G/7zZ+3ui1TBEfYDo+rYtuVtKhmPPSIfp46U
fpYN844LSWog6OLAYn+/YUI/4akFha2E30KavA5Bka7F6wfSMVl0jXeGvOq7WqKj
DlnlcMPBmbT1oO99cOfZkfSU44VzM6s+vfK61kr8TKDuFdqZ/gzRRLhvaNfyBRh8
es3Q+r7AY4oBo1AiE5kT5Q8ggh6VgzYI394mF4TVYbgiWto36rnYeeN6quSDojDn
nwNqdxiaCbXCS0R0xr0FCHA1I28+7r5LBvWLMQMmmgpB2/cwL4BcYvDHAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2eQSQEbWluRK0Aesl/jiNSygUgMB8GA1UdIwQY
MBaAFKB3o1bwfgdMrm8m5/WJPc6drIrTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0hlalZ2Qi1CMHl1YnlibjlZazl6cDJzaXRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8yM2IzY2UtOTkyMi00MmZiLWExMjQt
NDgwOTNmYjZjNjdmLzEvb0hlalZ2Qi1CMHl1YnlibjlZazl6cDJzaXRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8yM2IzY2UtOTkyMi00MmZiLWExMjQtNDgwOTNmYjZjNjdm
LzEvb0hlalZ2Qi1CMHl1YnlibjlZazl6cDJzaXRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATUGy26z
6uXUnfdXzxj5ePv1GMlJPgZKSL9uZHPAmxpGe6DMMwZH1CjVsyZ0ozvl4h8HRb33
KcDHS9rmrf7cRE21dvGvyQFXLp15lYc95RAYSPIeJrUwMhqO2Oybe/XsmxLk4aMr
xV4ZM5Aqo++QlZGGyNDA8HZHHPubYdfBa8wy9bwrhkbV8dqJil83nUe8d5Sbd8i0
Z32zmBGMbwD4yUNXXi8gGdVfgh2/0o5p47JEgSf5H202ZRTEvWe6PD64MpSlzbca
AgxwsuN7otluF4uoa5fI49NzzqIK2SFrSDiHwJi/ATRtFRj2JiARU8W85SykziBr
3ZzzY87yojF5ZQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:22:19 2025 by rpki-client