Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
File: oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft (raw, json)
Hash identifier: FW92IRg1rZTSq/gLRxXWkZ5ObQ+JzpoSEjfA7EZtvJI=
Subject key identifier: F4:A1:D1:CA:3D:D8:33:EC:A4:7B:48:65:AC:80:28:67:FB:62:04:C8
Authority key identifier: A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED
Certificate issuer: /CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced
Certificate serial: 0196556E9D333C6FD71E9D363A529863463E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
Manifest number: 0170
Signing time: Sun 20 Apr 2025 23:00:34 +0000
Manifest this update: Sun 20 Apr 2025 23:00:34 +0000
Manifest next update: Mon 21 Apr 2025 23:00:34 +0000
Files and hashes: 1: KVGzhURun_Z2Cbls6jKq8-siUnI.roa (hash: ICdbcaL6JuM+fFFA7u9Ui1orbNqbZysTahR0X2YtQkM=)
2: hSxuqdFakuVuEvKUogCcsFaigPs.roa (hash: Xj6H7DBsScqxHUyFTpNMVSRKFfZSSLZGI1xOM2DNsyc=)
3: oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl (hash: M4vpB2KpUu7p/kPJdT/l2uUfAwZXCWNVveOkUXFkvPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:9d:33:3c:6f:d7:1e:9d:36:3a:52:98:63:46:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced
Validity
Not Before: Apr 20 23:00:34 2025 GMT
Not After : Apr 21 23:00:34 2025 GMT
Subject: CN=f4a1d1ca3dd833eca47b4865ac802867fb6204c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:ce:17:0b:7b:5a:c5:cf:49:93:5f:0a:7b:
90:c5:d2:3d:7f:95:2f:03:60:ba:a8:6a:c4:92:44:
36:5c:97:bf:fa:0e:b4:10:11:85:69:5e:b3:42:87:
0d:5d:f2:eb:9b:bf:28:fd:1e:9b:57:01:a3:1d:37:
f2:ef:f7:dc:5f:94:19:78:6a:2f:55:f6:82:7a:92:
eb:66:a7:68:59:3a:33:85:4d:87:f7:77:91:e8:da:
3e:cb:5d:91:05:28:c5:26:0a:fd:96:db:54:70:29:
52:51:9b:cd:9d:2f:2f:c6:12:02:c5:d9:58:64:a3:
35:9c:0b:71:76:9c:e1:1f:69:cc:ea:54:a2:23:43:
81:b1:f8:7f:5e:67:08:ad:d9:b4:ba:79:60:2b:a5:
f8:4e:cd:00:5d:25:04:d7:e0:09:f2:64:e0:b3:20:
dd:e6:32:f5:4a:30:5e:3f:cc:b0:51:f7:cb:e0:b6:
30:0c:ea:ee:46:45:89:2b:e9:1f:4f:76:fe:b2:e9:
46:89:51:9d:03:da:19:0e:21:97:ce:52:f8:96:9b:
c1:16:24:c8:7c:b4:d7:be:0d:3a:0f:ec:e8:f6:3b:
fd:0f:32:5b:bc:7c:d2:c0:ba:9f:76:55:22:84:6a:
4c:47:1c:22:89:5d:48:6f:62:de:f7:3d:f2:74:4b:
3e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A1:D1:CA:3D:D8:33:EC:A4:7B:48:65:AC:80:28:67:FB:62:04:C8
X509v3 Authority Key Identifier:
keyid:A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c7:0e:ab:dc:a4:6d:84:3f:0a:36:00:b5:11:ac:81:9f:38:
7b:82:18:a4:1a:e6:ab:d5:2c:bc:27:9d:3c:73:6e:ba:24:74:
93:f9:e5:fc:50:77:70:32:b1:d0:13:50:38:06:da:3f:ad:eb:
be:06:a2:52:15:aa:18:fe:36:3a:50:cc:7f:81:4c:8c:28:e3:
c7:ce:0f:9a:e8:c9:a5:c4:67:fa:86:52:bb:83:48:89:5c:e5:
a6:04:32:63:22:d4:ee:9d:ca:6e:7f:14:61:78:43:39:6b:cc:
e4:e9:43:e1:e5:70:ec:20:77:e5:68:71:75:aa:92:cf:e0:01:
b8:79:e8:4f:cf:6f:56:b0:7a:08:94:5a:63:f2:e1:4e:91:d4:
78:df:97:54:ca:4f:82:46:d1:e6:bd:3e:9c:2a:74:37:f6:e8:
1c:2c:2a:24:b5:55:f0:fb:1e:d5:bd:5b:0f:ff:4a:6f:f4:ea:
e2:ba:f5:e8:fa:af:24:fb:7b:d5:0a:9e:51:5d:bc:ef:3a:26:
11:a6:d2:e8:14:d9:48:52:0c:49:f7:cc:c1:b1:84:30:15:e2:
b0:d0:f3:32:ab:22:95:2a:c0:f6:1a:68:36:cf:a0:1d:7f:d7:
c8:0b:39:d1:a3:46:4a:ac:fa:3c:6e:6c:8e:9c:4e:53:0d:e3:
39:d4:b6:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVbp0zPG/XHp02OlKYY0Y+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwN2Y2ZTJiNjBjYTQ2NDcwMGRkOGUyOGZiYTBkYWFkYzJj
NDBjZWQwHhcNMjUwNDIwMjMwMDM0WhcNMjUwNDIxMjMwMDM0WjAzMTEwLwYDVQQD
EyhmNGExZDFjYTNkZDgzM2VjYTQ3YjQ4NjVhYzgwMjg2N2ZiNjIwNGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC7OFwt7WsXPSZNfCnuQxdI9f5Uv
A2C6qGrEkkQ2XJe/+g60EBGFaV6zQocNXfLrm78o/R6bVwGjHTfy7/fcX5QZeGov
VfaCepLrZqdoWTozhU2H93eR6No+y12RBSjFJgr9lttUcClSUZvNnS8vxhICxdlY
ZKM1nAtxdpzhH2nM6lSiI0OBsfh/XmcIrdm0unlgK6X4Ts0AXSUE1+AJ8mTgsyDd
5jL1SjBeP8ywUffL4LYwDOruRkWJK+kfT3b+sulGiVGdA9oZDiGXzlL4lpvBFiTI
fLTXvg06D+zo9jv9DzJbvHzSwLqfdlUihGpMRxwiiV1Ib2Le9z3ydEs+JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSh0co92DPspHtIZayAKGf7YgTIMB8GA1UdIwQY
MBaAFKB/bitgykZHAN2OKPug2q3CxAztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0g5dUsyREtSa2NBM1k0by02RGFyY0xFRE8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hN2NlOWUtMTBmYy00YmRhLTgzOGIt
YmNiNzI0YmMyNjg0LzEvb0g5dUsyREtSa2NBM1k0by02RGFyY0xFRE8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hN2NlOWUtMTBmYy00YmRhLTgzOGItYmNiNzI0YmMyNjg0
LzEvb0g5dUsyREtSa2NBM1k0by02RGFyY0xFRE8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArccOq9yk
bYQ/CjYAtRGsgZ84e4IYpBrmq9UsvCedPHNuuiR0k/nl/FB3cDKx0BNQOAbaP63r
vgaiUhWqGP42OlDMf4FMjCjjx84PmujJpcRn+oZSu4NIiVzlpgQyYyLU7p3Kbn8U
YXhDOWvM5OlD4eVw7CB35WhxdaqSz+ABuHnoT89vVrB6CJRaY/LhTpHUeN+XVMpP
gkbR5r0+nCp0N/boHCwqJLVV8Pse1b1bD/9Kb/Tq4rr16PqvJPt71QqeUV287zom
EabS6BTZSFIMSffMwbGEMBXisNDzMqsilSrA9hpoNs+gHX/XyAs50aNGSqz6PG5s
jpxOUw3jOdS21A==
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:35:46 2025 by rpki-client