Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
File: OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft (raw, json)
Hash identifier: 13pq278T7H4CM76MI4xzvnlx7Y6IlMVtDSwtX0GjMOY=
Subject key identifier: 87:C9:1B:2F:E0:FF:F1:F9:95:91:EB:00:10:00:8A:43:D6:A6:8C:03
Authority key identifier: 38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
Certificate issuer: /CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Certificate serial: 01960AF9C4B51DCAC859777F211041F099C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
Manifest number: 14DA
Signing time: Sun 06 Apr 2025 12:01:02 +0000
Manifest this update: Sun 06 Apr 2025 12:01:02 +0000
Manifest next update: Mon 07 Apr 2025 12:01:02 +0000
Files and hashes: 1: OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl (hash: ZRJGSxyHdZMSQcLwgyXhS9V6sMUhiO/lo8oKx4ZmvvI=)
2: P-qDcpUjUWgiMApBb5BbPbEUdus.roa (hash: S9R1fM6ee5L0InXw/97Mdsuva54hJaVpgqKQTLiB5Tw=)
3: VyN653hL4rAY_e2hdksKGUqIxbM.roa (hash: VrgaTpIZV9tWUm9PEYZT3bNMzddxfH9mCTF1o6wKY4w=)
4: ev01UlTf8xnmaZcDqeNnJaY8mDw.roa (hash: bBrSvTSN1a9z7klG5jouNd18ngFrGD6DYe0uz0gXvaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:f9:c4:b5:1d:ca:c8:59:77:7f:21:10:41:f0:99:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Validity
Not Before: Apr 6 12:01:02 2025 GMT
Not After : Apr 7 12:01:02 2025 GMT
Subject: CN=87c91b2fe0fff1f99591eb0010008a43d6a68c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:98:16:7c:b5:04:d8:d8:8e:56:c2:ef:e4:
69:46:27:6d:dd:08:aa:7e:b5:e2:46:08:13:eb:ff:
90:6d:8f:81:ab:e4:9e:ff:e1:c1:03:0b:4c:5d:f7:
30:00:7b:04:f4:65:e2:2a:58:4a:d1:4f:90:75:62:
47:31:3a:3e:9e:94:37:fe:f2:b5:40:31:a8:5f:14:
ee:76:5d:da:d6:18:69:4d:c5:aa:6b:76:6b:0a:a6:
ba:e1:cf:41:2f:c8:72:dc:c4:40:c1:a4:fb:82:f7:
5b:26:b0:17:b1:ca:da:a5:70:11:c5:a7:6c:7a:43:
be:cd:b0:52:38:3f:60:cf:4f:2e:47:5b:ed:16:86:
46:8a:6a:2d:83:54:56:5b:78:ab:b3:9d:41:74:04:
e9:d1:49:f0:27:0f:54:a1:32:e0:16:45:49:53:68:
79:01:c5:3d:1e:8a:85:93:25:98:22:9e:05:c4:00:
62:29:8c:f7:02:42:5b:d5:0a:10:dc:70:7d:87:90:
1e:6b:64:3f:87:35:d4:8d:d5:a0:da:01:0f:52:0a:
44:c3:e1:f0:35:df:e6:0e:b3:48:9c:b5:b2:ce:26:
e8:45:7c:20:61:27:4b:e4:e7:30:66:4b:38:df:5c:
9f:88:e4:3a:52:18:eb:28:29:5f:a0:7f:69:ce:c7:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C9:1B:2F:E0:FF:F1:F9:95:91:EB:00:10:00:8A:43:D6:A6:8C:03
X509v3 Authority Key Identifier:
keyid:38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e2:9e:3d:de:6d:2d:26:89:0d:01:78:c4:2f:9a:a4:fb:b2:
55:84:f8:12:38:90:e1:5e:bf:99:dc:d3:58:49:f0:cf:e1:0a:
73:bf:97:b5:19:ab:87:64:83:44:de:00:8c:b0:62:ad:a9:ce:
5d:36:61:41:ed:2a:df:84:34:dc:c5:0a:41:8e:24:6b:d5:63:
10:0c:ee:e4:7b:66:a5:67:1b:8a:51:52:ce:15:a5:29:81:9f:
d5:ea:31:eb:59:86:d7:20:92:04:b4:3c:fa:bf:68:01:cc:b7:
50:d7:93:6a:48:c5:e5:a1:62:3a:97:bd:f7:0f:1d:8b:0a:96:
d1:4e:e9:00:13:f3:be:55:f9:52:25:99:8e:f6:e1:f8:34:22:
a3:2a:b4:8d:81:0b:84:a8:e6:89:67:ae:3e:22:f3:51:e6:73:
75:e6:b3:3f:02:4f:72:ca:b9:29:2b:fc:6d:d4:2f:be:29:67:
5c:6d:24:99:c5:31:a4:f4:c1:21:c7:50:74:5f:96:c7:47:17:
e3:8f:c8:7c:80:dc:34:26:72:44:94:15:27:0a:0e:4c:a8:0d:
46:ce:5d:40:46:63:e7:4d:84:b2:e0:8c:f8:e2:6a:95:12:e3:
42:57:7b:80:b7:f2:84:04:8b:4d:09:fd:20:b2:7a:f3:48:18:
37:d5:15:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYK+cS1HcrIWXd/IRBB8JnCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YmQ2ZDhlYmI4MjQwNGQ1NzA5MzUxYmMyMzI5YTBlZTQz
YTlhNDMwHhcNMjUwNDA2MTIwMTAyWhcNMjUwNDA3MTIwMTAyWjAzMTEwLwYDVQQD
Eyg4N2M5MWIyZmUwZmZmMWY5OTU5MWViMDAxMDAwOGE0M2Q2YTY4YzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlmYFny1BNjYjlbC7+RpRidt3Qiq
frXiRggT6/+QbY+Bq+Se/+HBAwtMXfcwAHsE9GXiKlhK0U+QdWJHMTo+npQ3/vK1
QDGoXxTudl3a1hhpTcWqa3ZrCqa64c9BL8hy3MRAwaT7gvdbJrAXscrapXARxads
ekO+zbBSOD9gz08uR1vtFoZGimotg1RWW3irs51BdATp0UnwJw9UoTLgFkVJU2h5
AcU9HoqFkyWYIp4FxABiKYz3AkJb1QoQ3HB9h5Aea2Q/hzXUjdWg2gEPUgpEw+Hw
Nd/mDrNInLWyziboRXwgYSdL5OcwZks431yfiOQ6UhjrKClfoH9pzsenGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfJGy/g//H5lZHrABAAikPWpowDMB8GA1UdIwQY
MBaAFDi9bY67gkBNVwk1G8Iymg7kOppDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0wxdGpydUNRRTFYQ1RVYndqS2FEdVE2bWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iYjNiNDktNjJkMC00OTdjLWJkMWUt
OGM5NTM5ZjQ0NGM2LzEvT0wxdGpydUNRRTFYQ1RVYndqS2FEdVE2bWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iYjNiNDktNjJkMC00OTdjLWJkMWUtOGM5NTM5ZjQ0NGM2
LzEvT0wxdGpydUNRRTFYQ1RVYndqS2FEdVE2bWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeKePd5t
LSaJDQF4xC+apPuyVYT4EjiQ4V6/mdzTWEnwz+EKc7+XtRmrh2SDRN4AjLBiranO
XTZhQe0q34Q03MUKQY4ka9VjEAzu5HtmpWcbilFSzhWlKYGf1eox61mG1yCSBLQ8
+r9oAcy3UNeTakjF5aFiOpe99w8diwqW0U7pABPzvlX5UiWZjvbh+DQioyq0jYEL
hKjmiWeuPiLzUeZzdeazPwJPcsq5KSv8bdQvvilnXG0kmcUxpPTBIcdQdF+Wx0cX
44/IfIDcNCZyRJQVJwoOTKgNRs5dQEZj502EsuCM+OJqlRLjQld7gLfyhASLTQn9
ILJ680gYN9UVKQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:02:25 2025 by rpki-client