Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier: KVrOYZtNAupDXETOPXCWVChc5lcYt/nwdmkznj8WmgA=
Subject key identifier: A4:AB:BB:12:15:70:E8:F5:37:0C:7B:2B:6C:29:28:0D:03:7D:1E:27
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 01965538E527A29C6BAFE9AA240DC1D2F1EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 22:01:54 +0000
Manifest this update: Sun 20 Apr 2025 22:01:54 +0000
Manifest next update: Mon 21 Apr 2025 22:01:54 +0000
Files and hashes: 1: HJiUdFRcnCCA97tz7GIyzHp366Y.roa (hash: yKaY+45Vcb3qR17Dz+EuLvkK0krevHkZZEA1gt2KjQg=)
2: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: jWgOjaaN86E4r5Q4tPHubp5qXUCtPbrt21dDbLHaDkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:e5:27:a2:9c:6b:af:e9:aa:24:0d:c1:d2:f1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Apr 20 22:01:54 2025 GMT
Not After : Apr 21 22:01:54 2025 GMT
Subject: CN=a4abbb121570e8f5370c7b2b6c29280d037d1e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fe:b9:a4:70:9f:fe:99:94:04:4e:23:1d:06:
c6:04:c2:be:c1:99:19:23:e6:69:45:39:c0:40:1f:
5a:f3:ce:35:54:e2:9b:64:12:2d:0c:90:f9:96:8d:
ce:28:d8:c5:82:43:0f:f1:80:88:11:d7:68:47:9c:
a0:a6:fe:d2:47:82:90:32:c6:d5:d5:7c:56:0f:af:
08:eb:73:4f:9c:bf:b1:03:97:15:15:92:c5:04:b3:
2b:94:24:a8:e0:b0:a2:14:61:89:70:98:af:01:43:
d6:09:f4:bd:c8:28:e1:9b:79:ac:6c:ed:15:4f:f5:
b6:85:2c:6c:55:dd:6d:91:ff:03:d9:02:74:56:df:
c1:97:84:38:4f:8f:ad:53:52:a8:f5:9d:82:01:0b:
5a:c6:bb:23:fe:6d:4e:57:26:2b:5f:76:08:4a:7c:
e8:76:35:b4:8e:12:65:00:f0:0f:61:01:a4:c3:6c:
f6:34:83:cb:4c:06:69:90:03:b5:00:52:9b:45:ab:
33:c1:71:c2:4e:3f:a6:e8:95:4a:5a:a2:2b:da:63:
7f:6e:57:48:81:3d:be:67:e3:b1:c8:fa:45:20:a8:
6e:44:bd:44:64:b9:5f:5f:b6:10:18:1f:a2:4c:fd:
c9:e9:c9:2e:b3:1d:e6:7a:84:04:3d:b9:31:c6:90:
0f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AB:BB:12:15:70:E8:F5:37:0C:7B:2B:6C:29:28:0D:03:7D:1E:27
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:64:25:e5:13:f5:15:d8:11:de:0c:ff:d4:16:b7:b3:35:2a:
8c:8a:13:34:1d:3e:68:35:aa:f5:67:7f:7a:e6:40:52:6c:c0:
e6:40:af:70:8e:97:a9:b9:07:10:bf:b3:d7:8a:d9:51:19:56:
78:04:88:b9:0c:79:8f:c8:2d:9b:28:0f:90:d9:92:33:9f:e1:
43:1c:28:d9:9d:ec:33:20:36:f5:5c:b0:0b:31:6c:31:9d:8b:
ee:ed:bf:63:9d:bb:0b:3c:55:69:0a:c5:a7:7d:10:d6:dc:24:
9a:be:19:93:b7:81:1c:5e:ff:98:a5:62:5b:aa:02:c2:c5:ae:
71:0a:7d:24:b1:63:59:f9:1a:43:c7:fa:08:5e:97:0a:1f:4d:
2e:53:e9:13:a0:4d:87:e6:70:54:f5:b9:60:64:6b:b1:cb:fb:
76:77:44:f6:e6:fd:dd:8b:92:92:1f:a1:b8:76:2b:78:a1:19:
66:ec:c5:01:2d:91:7e:dd:2d:98:b2:f1:e0:54:13:67:1e:9e:
5f:88:b4:30:1d:f2:58:7a:22:05:69:32:94:69:2a:16:39:e1:
fe:5e:cf:87:f8:55:9e:87:31:e7:ed:7d:70:18:89:9b:46:dc:
c7:bb:80:6b:90:f8:99:2f:e7:73:fa:01:3e:3f:72:af:c6:6a:
1b:0c:72:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVOOUnopxrr+mqJA3B0vHqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZDQzYzI2NDY4ODE5YzA3YjE5MjUxMTVmZTQ5MjFmODQy
MDNkMTYwHhcNMjUwNDIwMjIwMTU0WhcNMjUwNDIxMjIwMTU0WjAzMTEwLwYDVQQD
EyhhNGFiYmIxMjE1NzBlOGY1MzcwYzdiMmI2YzI5MjgwZDAzN2QxZTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5v65pHCf/pmUBE4jHQbGBMK+wZkZ
I+ZpRTnAQB9a8841VOKbZBItDJD5lo3OKNjFgkMP8YCIEddoR5ygpv7SR4KQMsbV
1XxWD68I63NPnL+xA5cVFZLFBLMrlCSo4LCiFGGJcJivAUPWCfS9yCjhm3msbO0V
T/W2hSxsVd1tkf8D2QJ0Vt/Bl4Q4T4+tU1Ko9Z2CAQtaxrsj/m1OVyYrX3YISnzo
djW0jhJlAPAPYQGkw2z2NIPLTAZpkAO1AFKbRaszwXHCTj+m6JVKWqIr2mN/bldI
gT2+Z+OxyPpFIKhuRL1EZLlfX7YQGB+iTP3J6ckusx3meoQEPbkxxpAPYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSruxIVcOj1Nwx7K2wpKA0DfR4nMB8GA1UdIwQY
MBaAFDnUPCZGiBnAexklEV/kkh+EID0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2RROEprYUlHY0I3R1NVUlgtU1NINFFnUFJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZmZjMDEtYTU4Zi00ZjcwLWE0MDQt
YWJmMGVhMDdlZmFmLzEvT2RROEprYUlHY0I3R1NVUlgtU1NINFFnUFJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9hZmZjMDEtYTU4Zi00ZjcwLWE0MDQtYWJmMGVhMDdlZmFm
LzEvT2RROEprYUlHY0I3R1NVUlgtU1NINFFnUFJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWQl5RP1
FdgR3gz/1Ba3szUqjIoTNB0+aDWq9Wd/euZAUmzA5kCvcI6XqbkHEL+z14rZURlW
eASIuQx5j8gtmygPkNmSM5/hQxwo2Z3sMyA29VywCzFsMZ2L7u2/Y527CzxVaQrF
p30Q1twkmr4Zk7eBHF7/mKViW6oCwsWucQp9JLFjWfkaQ8f6CF6XCh9NLlPpE6BN
h+ZwVPW5YGRrscv7dndE9ub93YuSkh+huHYreKEZZuzFAS2Rft0tmLLx4FQTZx6e
X4i0MB3yWHoiBWkylGkqFjnh/l7Ph/hVnocx5+19cBiJm0bcx7uAa5D4mS/nc/oB
Pj9yr8ZqGwxyvg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:36:06 2025 by rpki-client