Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: U+oexT5pokFQkEYw+wAXq9Yz6osDfBIK5nFIdtd5Wws=
Subject key identifier: D5:3B:5C:08:E3:B8:21:16:2E:1E:16:6F:FA:F9:E3:8B:59:54:C4:1E
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 019655A5F35D1FA6E14AB8D5B1D5A46ED4C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 0443
Signing time: Mon 21 Apr 2025 00:01:01 +0000
Manifest this update: Mon 21 Apr 2025 00:01:01 +0000
Manifest next update: Tue 22 Apr 2025 00:01:01 +0000
Files and hashes: 1: RAu0fNtqwivhpDFk4ehwbUssHTc.roa (hash: ASO7jKRNvxEqEpBOo5wevxzSp2tNnkfm3RRt0ZwZtAw=)
2: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: bnoJFyNqiy/oE4UcvyV1UJg5X1+4vjvXeq/VLTCUWUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:f3:5d:1f:a6:e1:4a:b8:d5:b1:d5:a4:6e:d4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Apr 21 00:01:01 2025 GMT
Not After : Apr 22 00:01:01 2025 GMT
Subject: CN=d53b5c08e3b821162e1e166ffaf9e38b5954c41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:a2:a2:f8:5e:65:0d:5a:4f:16:2a:23:7e:
12:fb:e6:26:0b:50:e3:23:46:1d:f6:f7:ae:91:66:
52:3a:2a:af:08:b9:43:a7:01:ce:3f:99:25:76:2b:
1b:35:b5:fb:33:3b:6e:bf:6a:02:98:fd:3c:7c:96:
2c:4d:58:a3:54:e6:f7:6d:e3:b7:ea:7c:f2:19:b1:
e5:72:03:17:3e:90:77:a0:e5:9a:ab:62:25:10:be:
c2:7b:62:5f:f1:c4:ac:31:3c:5f:19:8f:85:40:d8:
48:5a:e9:36:10:7f:71:21:8b:e1:bd:ba:ae:79:43:
b4:ff:f7:8b:29:80:7e:d6:90:93:6e:13:1d:25:68:
fb:d7:c4:5b:fd:68:66:22:42:b7:4f:c5:ae:2e:cf:
75:5e:56:df:32:2c:2d:f2:da:05:52:cb:4b:2b:50:
d8:eb:84:ad:f5:eb:87:ff:78:c7:b9:ad:a6:2d:08:
08:60:94:48:81:71:9f:f4:39:6f:b6:ee:fd:10:09:
77:a4:49:89:69:cd:dc:55:4d:ab:46:32:7e:ef:72:
fc:82:76:6d:1f:ab:67:46:d8:ea:a0:60:95:6f:77:
29:db:46:89:8e:d9:df:45:37:db:b9:1d:52:11:41:
90:a7:6c:7e:91:e6:54:4d:c2:41:95:2c:40:48:f6:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3B:5C:08:E3:B8:21:16:2E:1E:16:6F:FA:F9:E3:8B:59:54:C4:1E
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:de:97:9f:f8:09:91:29:59:95:9c:27:96:b0:88:40:ac:fc:
a7:95:5d:65:e3:57:d1:a0:d8:72:0f:1f:68:5e:fc:4f:04:e7:
54:69:7d:a6:92:68:0b:55:86:42:0e:f1:2b:0c:85:35:08:24:
9b:5e:80:b9:90:c4:07:a8:82:a9:27:a8:13:46:0b:ee:d7:17:
5a:d2:51:a7:f6:01:cb:8f:f1:ae:be:22:c6:3d:3c:45:b1:17:
ff:52:69:cb:a8:6c:cd:42:e0:78:c7:b9:4a:57:43:41:54:5c:
de:53:ae:dd:b6:7f:23:0c:98:c7:ac:30:9e:44:e1:e8:52:05:
e2:5c:ff:c9:e4:63:21:f6:2f:17:5f:49:41:0c:3b:87:9c:40:
a2:f7:46:e9:ba:dc:c0:37:5a:33:f8:ea:9d:76:0d:b2:9f:f8:
97:dd:bb:d7:c8:a5:84:b0:e8:36:a0:3b:6d:ab:d2:9c:d1:8a:
26:c7:f6:2d:d8:9f:94:d9:7a:a4:28:ac:4e:3c:d9:6d:51:5a:
26:46:db:f6:c8:4c:a3:32:2c:17:e7:79:b7:c0:3e:99:58:9a:
40:f3:69:31:5c:b6:a1:6f:26:88:a8:c2:f3:de:81:9f:a7:f2:
70:5e:28:81:2e:68:50:6a:b6:5b:93:df:fd:be:04:f6:81:00:
d4:16:e0:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVpfNdH6bhSrjVsdWkbtTIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYTU1YmYyODg4NzUzZTQ0Njc1YjYxZGRhMzAzOTRkOTAx
NTZjMGEwHhcNMjUwNDIxMDAwMTAxWhcNMjUwNDIyMDAwMTAxWjAzMTEwLwYDVQQD
EyhkNTNiNWMwOGUzYjgyMTE2MmUxZTE2NmZmYWY5ZTM4YjU5NTRjNDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkCiovheZQ1aTxYqI34S++YmC1Dj
I0Yd9veukWZSOiqvCLlDpwHOP5kldisbNbX7Mztuv2oCmP08fJYsTVijVOb3beO3
6nzyGbHlcgMXPpB3oOWaq2IlEL7Ce2Jf8cSsMTxfGY+FQNhIWuk2EH9xIYvhvbqu
eUO0//eLKYB+1pCTbhMdJWj718Rb/WhmIkK3T8WuLs91XlbfMiwt8toFUstLK1DY
64St9euH/3jHua2mLQgIYJRIgXGf9Dlvtu79EAl3pEmJac3cVU2rRjJ+73L8gnZt
H6tnRtjqoGCVb3cp20aJjtnfRTfbuR1SEUGQp2x+keZUTcJBlSxASPbkHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNU7XAjjuCEWLh4Wb/r544tZVMQeMB8GA1UdIwQY
MBaAFKGlW/KIh1PkRnW2HdowOU2QFWwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yZGFiMTgtN2JiNy00YWExLTk4YWQt
MjdjOWQ5MTE0MjM4LzEvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yZGFiMTgtN2JiNy00YWExLTk4YWQtMjdjOWQ5MTE0MjM4
LzEvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE96Xn/gJ
kSlZlZwnlrCIQKz8p5VdZeNX0aDYcg8faF78TwTnVGl9ppJoC1WGQg7xKwyFNQgk
m16AuZDEB6iCqSeoE0YL7tcXWtJRp/YBy4/xrr4ixj08RbEX/1Jpy6hszULgeMe5
SldDQVRc3lOu3bZ/IwyYx6wwnkTh6FIF4lz/yeRjIfYvF19JQQw7h5xAovdG6brc
wDdaM/jqnXYNsp/4l92718ilhLDoNqA7bavSnNGKJsf2LdiflNl6pCisTjzZbVFa
Jkbb9shMozIsF+d5t8A+mViaQPNpMVy2oW8miKjC896Bn6fycF4ogS5oUGq2W5Pf
/b4E9oEA1BbgAw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:08:05 2025 by rpki-client