Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
File: oiw84jcbnyHFfgw6V4fZWnNctQA.mft (raw, json)
Hash identifier: kpdyFHtpOuFP1QRXLr2gXIfojPsRuiuqBTvJffffZzg=
Subject key identifier: 36:82:74:83:FC:27:57:9C:C4:1E:58:07:63:A6:27:B7:AF:C1:A7:32
Authority key identifier: A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
Certificate issuer: /CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Certificate serial: 01965A94BCB73BCBC1FD21F1CE6711ED9859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
Manifest number: 0EFB
Signing time: Mon 21 Apr 2025 23:00:19 +0000
Manifest this update: Mon 21 Apr 2025 23:00:19 +0000
Manifest next update: Tue 22 Apr 2025 23:00:19 +0000
Files and hashes: 1: U4H4DXiB1R3t2sbazcIxIzp8LJM.roa (hash: d9YRAg9H/qZYSSHmjXFBkp2EkGuj36QH5Z/4fdmKOEA=)
2: oiw84jcbnyHFfgw6V4fZWnNctQA.crl (hash: Xf9wMUItpdJ3nn8VpG+UhyavC9OHNmFLuo7wmw67DqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:94:bc:b7:3b:cb:c1:fd:21:f1:ce:67:11:ed:98:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Validity
Not Before: Apr 21 23:00:19 2025 GMT
Not After : Apr 22 23:00:19 2025 GMT
Subject: CN=36827483fc27579cc41e580763a627b7afc1a732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8c:dc:85:b3:bc:f4:0e:c0:ea:d3:64:59:c6:
71:17:11:11:54:4a:8e:22:46:d1:10:c5:4f:b3:dc:
2b:34:58:64:4d:dd:a4:1d:ed:e1:90:f7:71:a3:d8:
6b:d3:57:aa:4e:ac:27:41:9e:f6:33:4a:2d:2b:32:
4d:0d:40:92:5e:7b:69:ec:e7:2c:5d:22:09:61:b3:
05:27:0a:05:b5:97:4e:16:88:1c:1e:39:ab:da:03:
e1:07:a1:c4:7e:40:2a:25:39:5f:a9:dc:4c:6d:41:
43:ca:63:f0:c5:16:5a:3b:48:10:bc:cd:9d:14:0c:
41:cb:bf:04:f5:1b:9e:24:e3:f7:97:c9:f1:2d:68:
fe:e0:8e:99:a7:52:60:62:8e:13:14:33:3a:31:ce:
1d:8d:0b:bf:c3:c9:a7:2c:dc:79:dd:56:55:71:2f:
f9:5f:09:84:b1:0d:28:f2:e0:56:be:ed:ce:18:6d:
31:91:26:66:3d:4d:2c:8e:e8:24:01:58:3b:2e:c7:
2e:a0:e1:40:ce:9b:01:d4:f8:68:f0:19:e8:eb:e0:
dd:87:94:cc:46:ef:e5:c4:2c:e4:5a:4a:78:fb:5e:
14:db:33:0b:21:06:94:b4:4a:d7:8d:40:e5:24:8b:
0b:c4:da:4e:09:94:ec:93:03:fe:e5:2d:4c:fb:dc:
f1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:82:74:83:FC:27:57:9C:C4:1E:58:07:63:A6:27:B7:AF:C1:A7:32
X509v3 Authority Key Identifier:
keyid:A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:81:8f:50:8f:06:b1:d5:d0:6b:b3:3b:4a:04:e6:37:68:76:
b4:6b:1a:98:31:a8:13:b6:15:ea:ce:a5:41:cb:5a:ab:34:61:
e3:98:56:c5:f8:05:e4:d8:ae:c4:46:c9:f7:2f:a7:7e:e6:38:
28:fe:ef:79:89:ee:a3:cc:be:7a:d5:ad:57:16:29:e8:02:26:
16:9d:a3:47:4e:06:92:ec:eb:f9:8b:b5:14:61:82:b3:41:c0:
be:41:98:f6:49:fa:27:08:49:b5:ce:69:40:b3:f2:5f:9a:ec:
a8:a5:35:1c:66:41:ab:7d:44:2e:fb:42:ab:9a:53:eb:d9:ef:
00:ff:69:22:0d:33:7a:35:30:d1:5c:c1:58:92:42:df:a7:79:
4f:c5:d8:b1:cb:3f:cf:c6:0d:5b:a4:8d:4d:9e:21:10:1e:9a:
62:1f:0b:38:8a:15:f8:de:f2:a0:3b:07:e5:cd:ac:b1:16:5c:
81:e4:08:f2:08:56:fa:16:1d:87:66:3b:1c:70:78:b5:10:65:
59:90:a9:53:b3:53:df:f8:1f:f4:0f:bb:87:e0:9b:09:5d:28:
79:7a:4c:df:ef:f5:86:42:50:7d:c2:6b:d3:f4:d2:50:f8:6e:
00:f7:74:eb:80:7d:3a:a5:c8:df:bd:c9:46:14:0e:b1:b5:ee:
50:b5:e2:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZalLy3O8vB/SHxzmcR7ZhZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMmMzY2UyMzcxYjlmMjFjNTdlMGMzYTU3ODdkOTVhNzM1
Y2I1MDAwHhcNMjUwNDIxMjMwMDE5WhcNMjUwNDIyMjMwMDE5WjAzMTEwLwYDVQQD
EygzNjgyNzQ4M2ZjMjc1NzljYzQxZTU4MDc2M2E2MjdiN2FmYzFhNzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4zchbO89A7A6tNkWcZxFxERVEqO
IkbREMVPs9wrNFhkTd2kHe3hkPdxo9hr01eqTqwnQZ72M0otKzJNDUCSXntp7Ocs
XSIJYbMFJwoFtZdOFogcHjmr2gPhB6HEfkAqJTlfqdxMbUFDymPwxRZaO0gQvM2d
FAxBy78E9RueJOP3l8nxLWj+4I6Zp1JgYo4TFDM6Mc4djQu/w8mnLNx53VZVcS/5
XwmEsQ0o8uBWvu3OGG0xkSZmPU0sjugkAVg7LscuoOFAzpsB1Pho8Bno6+Ddh5TM
Ru/lxCzkWkp4+14U2zMLIQaUtErXjUDlJIsLxNpOCZTskwP+5S1M+9zxSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaCdIP8J1ecxB5YB2OmJ7evwacyMB8GA1UdIwQY
MBaAFKIsPOI3G58hxX4MOleH2VpzXLUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2l3ODRqY2JueUhGZmd3NlY0ZlpXbk5jdFFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81MDZlYzgtMTUwZi00Mjc1LWFjMDUt
MDUzOTNmMmIzYTQ3LzEvb2l3ODRqY2JueUhGZmd3NlY0ZlpXbk5jdFFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81MDZlYzgtMTUwZi00Mjc1LWFjMDUtMDUzOTNmMmIzYTQ3
LzEvb2l3ODRqY2JueUhGZmd3NlY0ZlpXbk5jdFFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIGPUI8G
sdXQa7M7SgTmN2h2tGsamDGoE7YV6s6lQctaqzRh45hWxfgF5NiuxEbJ9y+nfuY4
KP7veYnuo8y+etWtVxYp6AImFp2jR04Gkuzr+Yu1FGGCs0HAvkGY9kn6JwhJtc5p
QLPyX5rsqKU1HGZBq31ELvtCq5pT69nvAP9pIg0zejUw0VzBWJJC36d5T8XYscs/
z8YNW6SNTZ4hEB6aYh8LOIoV+N7yoDsH5c2ssRZcgeQI8ghW+hYdh2Y7HHB4tRBl
WZCpU7NT3/gf9A+7h+CbCV0oeXpM3+/1hkJQfcJr0/TSUPhuAPd064B9OqXI373J
RhQOsbXuULXixw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:29:01 2025 by rpki-client