Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
File: o8p7HBOn17MSMUErj7aUehdH250.mft (raw, json)
Hash identifier: j8ITeg+4zeI6BQr5S9Wd/bLAbuBh8ONYgc0dgcv4gcc=
Subject key identifier: 65:54:EF:10:9B:3F:5F:CF:39:97:19:C6:D4:B8:58:66:86:DE:23:35
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 0196146B4603AEAA517C68D6725FA2FDA3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
Manifest number: 02C9
Signing time: Tue 08 Apr 2025 08:01:36 +0000
Manifest this update: Tue 08 Apr 2025 08:01:36 +0000
Manifest next update: Wed 09 Apr 2025 08:01:36 +0000
Files and hashes: 1: X0-Djm0vHdUiJwsWds74O566gnw.roa (hash: wptFaY0ZwFbGnw/VuRN3robTidxbKoo/tyvxKrOBB/E=)
2: o8p7HBOn17MSMUErj7aUehdH250.crl (hash: Gg5Ze6yGdHsCY+HAK076JDfLuxjVkpqWmjmOXUNOKEM=)
3: wfeH5shQb9p8-APifaQwZCuXjuw.roa (hash: i3m8mYv5PGE+aCaz85jAgzkj3ipmT/iJy2vmh07ZehU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:6b:46:03:ae:aa:51:7c:68:d6:72:5f:a2:fd:a3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Apr 8 08:01:36 2025 GMT
Not After : Apr 9 08:01:36 2025 GMT
Subject: CN=6554ef109b3f5fcf399719c6d4b8586686de2335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:49:87:26:14:ef:79:eb:72:b9:e3:00:90:
74:b8:c4:46:4f:31:58:a3:0f:6d:26:05:be:ae:a9:
bf:f4:ff:d6:46:6f:b0:a5:fa:32:29:e2:0e:cc:bb:
9b:53:90:37:e9:c6:75:66:24:01:ac:4c:61:d7:15:
ee:3a:6f:0e:eb:69:9c:32:0a:4a:f1:d0:2c:4e:85:
da:21:cb:b9:5c:12:99:a4:05:0d:b2:13:95:d0:78:
d6:b3:fd:55:fc:af:19:6c:80:d3:bc:2e:40:81:67:
30:d4:89:16:37:f1:ce:4c:6f:8e:0a:57:2c:87:d6:
7f:0d:4c:9d:ef:8f:b8:d2:c9:66:fc:45:eb:8c:c7:
04:92:24:1d:36:d6:bf:82:97:98:49:da:0f:3b:0e:
e8:77:65:69:8d:12:b2:56:fc:c5:64:21:77:23:27:
3e:a0:83:67:e8:5b:3c:83:61:1d:29:05:7e:20:6c:
aa:52:2d:2d:aa:45:d0:8b:91:3c:d0:8e:3a:90:6f:
26:d3:a2:7d:4a:fc:73:5e:22:3f:23:d9:5b:95:c3:
47:38:54:b9:8d:87:5b:86:90:d5:c0:b9:f8:d2:45:
89:f0:18:71:e9:a3:80:62:56:fa:6c:02:a1:de:d2:
25:be:f2:7d:29:b1:e1:95:58:fa:ab:f0:56:c7:79:
03:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:54:EF:10:9B:3F:5F:CF:39:97:19:C6:D4:B8:58:66:86:DE:23:35
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:91:82:30:b6:69:07:51:b0:fb:ec:97:31:4c:79:ee:c0:d2:
a4:af:82:53:6e:5d:ea:5f:27:50:0b:26:b5:ab:85:64:5d:b2:
d7:d5:5a:5e:0a:6c:5c:aa:fa:9f:54:e5:9f:80:c1:03:71:a8:
b2:30:cb:47:42:28:c0:e3:b0:64:5c:ce:f9:89:66:ce:59:5b:
79:19:50:ca:02:90:d0:4f:21:a6:38:f0:0b:56:bb:ce:ec:14:
83:18:ee:ab:dc:5b:33:52:dc:b1:05:25:f2:1f:31:be:1c:dd:
a5:38:f5:5c:dd:cf:67:c1:31:31:e3:c4:af:c0:69:9a:5e:65:
26:ed:96:e6:34:52:13:8a:c0:95:22:0c:07:d6:58:63:c8:a0:
c6:e5:4f:79:4c:8d:6d:8a:62:7f:5a:46:7c:ab:ab:3b:ac:48:
d0:d8:a9:de:42:ba:6d:9b:75:04:d0:f3:49:de:21:c5:ec:0c:
88:a7:06:9e:5f:a3:74:9c:86:f8:93:11:4e:52:fa:ec:5e:e3:
ae:4f:ad:ce:bd:78:e9:32:e0:0f:94:80:1e:d4:84:cf:fe:7e:
04:79:5e:a6:51:6d:76:26:53:29:0c:52:1d:c4:11:8b:36:8e:
bc:b2:76:13:31:dc:52:06:e4:3c:1d:81:42:60:d3:b3:8c:03:
4b:63:72:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYUa0YDrqpRfGjWcl+i/aP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzY2E3YjFjMTNhN2Q3YjMxMjMxNDEyYjhmYjY5NDdhMTc0
N2RiOWQwHhcNMjUwNDA4MDgwMTM2WhcNMjUwNDA5MDgwMTM2WjAzMTEwLwYDVQQD
Eyg2NTU0ZWYxMDliM2Y1ZmNmMzk5NzE5YzZkNGI4NTg2Njg2ZGUyMzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyFJhyYU73nrcrnjAJB0uMRGTzFY
ow9tJgW+rqm/9P/WRm+wpfoyKeIOzLubU5A36cZ1ZiQBrExh1xXuOm8O62mcMgpK
8dAsToXaIcu5XBKZpAUNshOV0HjWs/1V/K8ZbIDTvC5AgWcw1IkWN/HOTG+OClcs
h9Z/DUyd74+40slm/EXrjMcEkiQdNta/gpeYSdoPOw7od2VpjRKyVvzFZCF3Iyc+
oINn6Fs8g2EdKQV+IGyqUi0tqkXQi5E80I46kG8m06J9SvxzXiI/I9lblcNHOFS5
jYdbhpDVwLn40kWJ8Bhx6aOAYlb6bAKh3tIlvvJ9KbHhlVj6q/BWx3kDuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVU7xCbP1/POZcZxtS4WGaG3iM1MB8GA1UdIwQY
MBaAFKPKexwTp9ezEjFBK4+2lHoXR9udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzhwN0hCT24xN01TTVVFcmo3YVVlaGRIMjUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iY2RjY2EtZjA2Yi00MGNmLThlMjEt
MjE0NTIyMDk5NGNlLzEvbzhwN0hCT24xN01TTVVFcmo3YVVlaGRIMjUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iY2RjY2EtZjA2Yi00MGNmLThlMjEtMjE0NTIyMDk5NGNl
LzEvbzhwN0hCT24xN01TTVVFcmo3YVVlaGRIMjUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5GCMLZp
B1Gw++yXMUx57sDSpK+CU25d6l8nUAsmtauFZF2y19VaXgpsXKr6n1Tln4DBA3Go
sjDLR0IowOOwZFzO+YlmzllbeRlQygKQ0E8hpjjwC1a7zuwUgxjuq9xbM1LcsQUl
8h8xvhzdpTj1XN3PZ8ExMePEr8Bpml5lJu2W5jRSE4rAlSIMB9ZYY8igxuVPeUyN
bYpif1pGfKurO6xI0Nip3kK6bZt1BNDzSd4hxewMiKcGnl+jdJyG+JMRTlL67F7j
rk+tzr146TLgD5SAHtSEz/5+BHleplFtdiZTKQxSHcQRizaOvLJ2EzHcUgbkPB2B
QmDTs4wDS2Nyqw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:27:56 2025 by rpki-client