Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/OTioGkQSd0HZSaNVpH88tZk4mng.mft
File: OTioGkQSd0HZSaNVpH88tZk4mng.mft (raw, json)
Hash identifier: CDit/ZVBU/OuKjyXciEd6iyQj7IhU0/n119ugk8gDO0=
Subject key identifier: 9A:B8:4B:5E:A5:4D:EC:49:44:CB:49:F0:A9:41:98:79:31:19:70:D7
Authority key identifier: 39:38:A8:1A:44:12:77:41:D9:49:A3:55:A4:7F:3C:B5:99:38:9A:78
Certificate issuer: /CN=3938a81a44127741d949a355a47f3cb599389a78
Certificate serial: 019655A57866B976CEC947A7AC9C73DF46FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTioGkQSd0HZSaNVpH88tZk4mng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/OTioGkQSd0HZSaNVpH88tZk4mng.mft
Manifest number: 0F51
Signing time: Mon 21 Apr 2025 00:00:29 +0000
Manifest this update: Mon 21 Apr 2025 00:00:29 +0000
Manifest next update: Tue 22 Apr 2025 00:00:29 +0000
Files and hashes: 1: OTioGkQSd0HZSaNVpH88tZk4mng.crl (hash: /i6oRul3NIguIq5IbGqbIzd27NfyuqVqvPqv4eyKx+Q=)
2: SyALsZDSYtge1NmYRoKzwbP5Vv8.roa (hash: rjh76rxbo7HoAknp3g/P2hhQiBIAvMqHmifN8tVtg/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/OTioGkQSd0HZSaNVpH88tZk4mng.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/OTioGkQSd0HZSaNVpH88tZk4mng.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTioGkQSd0HZSaNVpH88tZk4mng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:78:66:b9:76:ce:c9:47:a7:ac:9c:73:df:46:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938a81a44127741d949a355a47f3cb599389a78
Validity
Not Before: Apr 21 00:00:29 2025 GMT
Not After : Apr 22 00:00:29 2025 GMT
Subject: CN=9ab84b5ea54dec4944cb49f0a9419879311970d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:14:58:78:57:c8:91:a3:ef:7b:19:40:09:
3c:f9:7a:c4:bf:3d:90:e1:29:27:9b:3b:c1:57:2c:
43:d2:a0:a7:07:5f:a3:1f:56:54:c6:1b:61:74:59:
71:63:69:d8:6c:d9:be:b5:57:e7:ab:c6:75:a6:71:
4c:85:0f:34:1a:1c:44:19:93:5d:e1:01:84:c2:60:
71:47:d1:fb:ac:bc:8f:94:ff:4c:09:64:a2:13:f6:
e8:67:dd:5a:20:da:fc:62:6a:61:6e:c8:0b:47:94:
11:7a:dc:2b:f2:64:08:a2:56:f5:0a:47:c4:66:56:
4e:80:66:a5:da:31:00:f6:c9:21:73:bb:ae:e8:0a:
65:4a:14:51:c0:73:20:ce:f7:74:15:02:7f:fc:60:
2d:ac:52:a4:7f:55:cf:38:4e:80:38:47:d3:ec:ce:
77:30:ae:e0:e5:0a:19:b6:ff:6c:27:28:c4:e0:f4:
98:e0:84:2a:9f:82:d1:d8:b8:31:83:fe:50:a8:ba:
06:99:ef:03:9b:08:a8:43:e3:3d:7e:3b:d9:13:25:
d0:f2:ef:da:e9:0f:8c:88:70:d4:34:d2:18:0e:25:
71:24:79:9a:29:59:df:8a:31:44:4b:bb:f2:15:23:
c6:26:3e:22:a5:7a:d7:b9:a2:42:7c:43:03:3f:f6:
a7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B8:4B:5E:A5:4D:EC:49:44:CB:49:F0:A9:41:98:79:31:19:70:D7
X509v3 Authority Key Identifier:
keyid:39:38:A8:1A:44:12:77:41:D9:49:A3:55:A4:7F:3C:B5:99:38:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTioGkQSd0HZSaNVpH88tZk4mng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/OTioGkQSd0HZSaNVpH88tZk4mng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/OTioGkQSd0HZSaNVpH88tZk4mng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:35:f6:c9:01:6b:c2:28:e8:a3:50:ec:0f:7c:69:39:09:ab:
70:86:5e:a3:89:21:ed:2c:74:34:5e:7b:20:c6:f3:ec:2b:d3:
97:38:37:7e:bb:98:1b:13:95:9a:fd:24:75:72:63:c5:25:a3:
19:a7:8b:52:8e:05:de:e5:79:d4:29:ec:d3:a6:36:f3:4a:8b:
fe:df:1e:53:d6:c2:18:ec:e4:3c:19:11:8f:95:7f:13:6c:f1:
81:c3:15:bd:42:71:8c:75:af:1a:a2:9e:50:c5:bb:62:f7:13:
29:2a:78:64:bd:8b:36:36:f7:dc:74:5f:ed:66:bc:47:1f:dc:
02:fe:d1:69:4a:0b:af:5c:1e:a2:f4:8c:6d:f8:f3:98:b5:12:
3d:04:72:8c:0c:3f:82:dc:45:a3:0f:56:0c:5c:bd:6d:c7:b1:
51:c6:b6:f2:a8:8a:b6:e6:0f:3d:60:26:cb:e8:64:00:8d:67:
2d:60:61:46:dd:b4:e0:a8:e6:31:5d:b2:97:c0:82:fb:9c:96:
8f:8f:2e:7c:1e:65:23:e4:99:84:e7:29:bb:30:9e:8d:4b:3a:
55:84:07:61:c3:06:3b:40:4d:4b:b2:5b:dc:b0:b1:11:36:90:
c9:e8:9d:60:f9:c8:82:91:6e:dc:76:46:f0:18:2e:83:58:09:
bb:50:fb:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVpXhmuXbOyUenrJxz30b6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MzhhODFhNDQxMjc3NDFkOTQ5YTM1NWE0N2YzY2I1OTkz
ODlhNzgwHhcNMjUwNDIxMDAwMDI5WhcNMjUwNDIyMDAwMDI5WjAzMTEwLwYDVQQD
Eyg5YWI4NGI1ZWE1NGRlYzQ5NDRjYjQ5ZjBhOTQxOTg3OTMxMTk3MGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYAUWHhXyJGj73sZQAk8+XrEvz2Q
4SknmzvBVyxD0qCnB1+jH1ZUxhthdFlxY2nYbNm+tVfnq8Z1pnFMhQ80GhxEGZNd
4QGEwmBxR9H7rLyPlP9MCWSiE/boZ91aINr8YmphbsgLR5QRetwr8mQIolb1CkfE
ZlZOgGal2jEA9skhc7uu6AplShRRwHMgzvd0FQJ//GAtrFKkf1XPOE6AOEfT7M53
MK7g5QoZtv9sJyjE4PSY4IQqn4LR2Lgxg/5QqLoGme8DmwioQ+M9fjvZEyXQ8u/a
6Q+MiHDUNNIYDiVxJHmaKVnfijFES7vyFSPGJj4ipXrXuaJCfEMDP/an0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJq4S16lTexJRMtJ8KlBmHkxGXDXMB8GA1UdIwQY
MBaAFDk4qBpEEndB2UmjVaR/PLWZOJp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1Rpb0drUVNkMEhaU2FOVnBIODh0Wms0bW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wMmNhYjUtNTliNC00ZDkwLWE1ZGIt
ZmQyMTRjYWNmYjYyLzEvT1Rpb0drUVNkMEhaU2FOVnBIODh0Wms0bW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wMmNhYjUtNTliNC00ZDkwLWE1ZGItZmQyMTRjYWNmYjYy
LzEvT1Rpb0drUVNkMEhaU2FOVnBIODh0Wms0bW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATX2yQFr
wijoo1DsD3xpOQmrcIZeo4kh7Sx0NF57IMbz7CvTlzg3fruYGxOVmv0kdXJjxSWj
GaeLUo4F3uV51Cns06Y280qL/t8eU9bCGOzkPBkRj5V/E2zxgcMVvUJxjHWvGqKe
UMW7YvcTKSp4ZL2LNjb33HRf7Wa8Rx/cAv7RaUoLr1weovSMbfjzmLUSPQRyjAw/
gtxFow9WDFy9bcexUca28qiKtuYPPWAmy+hkAI1nLWBhRt204KjmMV2yl8CC+5yW
j48ufB5lI+SZhOcpuzCejUs6VYQHYcMGO0BNS7Jb3LCxETaQyeidYPnIgpFu3HZG
8Bgug1gJu1D7DQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:03 2025 by rpki-client