
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
File: 0vONSutNAojbuFTR6uC9itP4Qfo.mft (raw, json)
Hash identifier: UKjA6GsrAIKCyX2KQoz6lcNaAQWPgHJw/tb42F7SUWA=
Subject key identifier: EE:01:A9:13:AE:60:34:B8:BE:57:20:47:C4:B3:75:9A:7E:9C:DF:E9
Authority key identifier: D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
Certificate issuer: /CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Certificate serial: 01965613CDC79B64B14E62BAB16565C0901C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 02:01:00 +0000
Manifest this update: Mon 21 Apr 2025 02:01:00 +0000
Manifest next update: Tue 22 Apr 2025 02:01:00 +0000
Files and hashes: 1: 0vONSutNAojbuFTR6uC9itP4Qfo.crl (hash: Qxpr1dxMz8s0yvGshpMhHf8/EKFwWzqD19K/JK2NOu8=)
2: ERnL-2TcZrO4tJF-sDDaVNlMYnY.roa (hash: +H0qLZUs9MIqoA3GO45JQCdAhU27Z3D/QbaTtfRGmIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:cd:c7:9b:64:b1:4e:62:ba:b1:65:65:c0:90:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Validity
Not Before: Apr 21 02:01:00 2025 GMT
Not After : Apr 22 02:01:00 2025 GMT
Subject: CN=ee01a913ae6034b8be572047c4b3759a7e9cdfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3d:d8:d7:aa:4c:0a:82:a0:85:e6:ae:82:92:
53:cf:de:3a:b2:00:10:58:57:76:ea:f3:ee:a5:bb:
a6:21:2c:77:a2:e5:d7:7e:2e:d4:5c:e1:d3:64:4a:
5b:b4:cc:b9:ca:09:f3:9e:06:05:ec:be:2e:b6:28:
69:4a:f3:6b:09:3e:60:14:e5:18:6a:3e:19:73:43:
ce:77:97:af:8d:a2:93:90:1b:6a:98:86:de:06:07:
8a:e6:de:49:d7:93:31:9d:3c:3b:cf:58:2a:0b:75:
f1:00:1b:d7:d9:78:fc:45:1c:d8:83:4c:65:fc:6d:
f7:39:c3:63:65:ff:23:7e:1b:b9:3d:d5:c6:a1:11:
75:43:87:2e:03:8b:ff:66:ee:92:4d:3d:41:4b:82:
37:39:94:7b:57:a8:26:7f:4c:88:e0:e6:69:2f:21:
2e:e0:6c:71:81:bd:ec:70:d9:90:2d:4f:3a:ce:ea:
9d:e5:51:ce:89:66:23:cf:d8:c3:1f:3a:88:33:1d:
55:02:2e:0e:33:91:6b:97:98:16:17:14:ad:84:82:
29:16:63:ec:b8:74:f2:63:d4:20:03:50:9d:37:bc:
ea:77:f3:e8:a4:4e:76:c4:ce:0b:06:3b:aa:7b:5c:
77:16:5c:bf:66:2a:8e:af:d2:74:2d:4d:e9:28:56:
65:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:01:A9:13:AE:60:34:B8:BE:57:20:47:C4:B3:75:9A:7E:9C:DF:E9
X509v3 Authority Key Identifier:
keyid:D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3c:cf:0b:d7:47:a8:b7:00:96:c2:8b:0a:71:46:f6:2a:a2:
7a:ef:35:6f:17:a7:3c:f0:2f:5a:98:7b:03:b7:02:dd:e4:07:
7d:3a:b8:cd:e2:52:1c:6c:90:ba:53:d5:82:92:c5:72:5d:08:
0f:a5:51:7b:fd:99:83:e7:c2:cd:cb:4a:18:88:67:f0:bc:99:
5d:b6:97:04:67:34:b7:41:c0:04:50:8c:fb:d3:f1:eb:55:c1:
e0:7e:c9:56:81:9f:d2:20:ed:ef:9f:96:7a:97:9b:9b:99:19:
f7:a1:4f:2b:b4:33:b6:ac:6b:23:1b:f5:e8:ec:61:2a:d8:ea:
77:87:25:1b:bc:4c:81:ca:11:6c:71:6f:b6:1d:39:41:78:ed:
5d:a3:b7:20:fb:ab:71:35:e8:c0:80:3c:70:00:09:81:05:af:
70:ef:d6:c4:e7:e9:b0:2a:b0:fe:f9:39:ae:4e:17:f3:8a:86:
32:c9:96:67:8a:f9:b6:a2:86:31:df:c5:a5:d4:d9:47:cf:8e:
81:38:50:37:cc:78:f8:91:be:c7:a8:66:e1:26:c8:c8:36:17:
af:7a:03:22:b5:5a:e4:5a:41:c3:1b:0d:f7:04:5c:62:95:a2:
a2:10:f6:db:75:4a:1d:e0:f8:9c:85:47:dd:34:89:71:71:df:
15:ba:83:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWE83Hm2SxTmK6sWVlwJAcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZjM4ZDRhZWI0ZDAyODhkYmI4NTRkMWVhZTBiZDhhZDNm
ODQxZmEwHhcNMjUwNDIxMDIwMTAwWhcNMjUwNDIyMDIwMTAwWjAzMTEwLwYDVQQD
EyhlZTAxYTkxM2FlNjAzNGI4YmU1NzIwNDdjNGIzNzU5YTdlOWNkZmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT3Y16pMCoKgheaugpJTz946sgAQ
WFd26vPupbumISx3ouXXfi7UXOHTZEpbtMy5ygnzngYF7L4utihpSvNrCT5gFOUY
aj4Zc0POd5evjaKTkBtqmIbeBgeK5t5J15MxnTw7z1gqC3XxABvX2Xj8RRzYg0xl
/G33OcNjZf8jfhu5PdXGoRF1Q4cuA4v/Zu6STT1BS4I3OZR7V6gmf0yI4OZpLyEu
4Gxxgb3scNmQLU86zuqd5VHOiWYjz9jDHzqIMx1VAi4OM5Frl5gWFxSthIIpFmPs
uHTyY9QgA1CdN7zqd/PopE52xM4LBjuqe1x3Fly/ZiqOr9J0LU3pKFZl8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4BqROuYDS4vlcgR8SzdZp+nN/pMB8GA1UdIwQY
MBaAFNLzjUrrTQKI27hU0ergvYrT+EH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZPTlN1dE5Bb2pidUZUUjZ1QzlpdFA0UWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS80OGVmMjctNTg1OC00MjRiLWFkZDEt
MGY2NDU1ZjA1Mjc2LzEvMHZPTlN1dE5Bb2pidUZUUjZ1QzlpdFA0UWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS80OGVmMjctNTg1OC00MjRiLWFkZDEtMGY2NDU1ZjA1Mjc2
LzEvMHZPTlN1dE5Bb2pidUZUUjZ1QzlpdFA0UWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjzPC9dH
qLcAlsKLCnFG9iqieu81bxenPPAvWph7A7cC3eQHfTq4zeJSHGyQulPVgpLFcl0I
D6VRe/2Zg+fCzctKGIhn8LyZXbaXBGc0t0HABFCM+9Px61XB4H7JVoGf0iDt75+W
epebm5kZ96FPK7QztqxrIxv16OxhKtjqd4clG7xMgcoRbHFvth05QXjtXaO3IPur
cTXowIA8cAAJgQWvcO/WxOfpsCqw/vk5rk4X84qGMsmWZ4r5tqKGMd/FpdTZR8+O
gThQN8x4+JG+x6hm4SbIyDYXr3oDIrVa5FpBwxsN9wRcYpWiohD223VKHeD4nIVH
3TSJcXHfFbqDJw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:15 2025 by rpki-client