Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
File: o6VWBFl7BrDqzoivsakP_5N9l-o.mft (raw, json)
Hash identifier: lgVDMMmsP188ryl+W8OUyfwGykSCO9nlCIho5/acTyo=
Subject key identifier: 5E:15:8F:6C:C6:01:05:4D:E0:02:2A:D7:16:9B:F6:E1:9B:5B:98:46
Authority key identifier: A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
Certificate issuer: /CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Certificate serial: 01965EE05270A15EA1DC1B8EF3F500A8D542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
Manifest number: 1501
Signing time: Tue 22 Apr 2025 19:01:21 +0000
Manifest this update: Tue 22 Apr 2025 19:01:21 +0000
Manifest next update: Wed 23 Apr 2025 19:01:21 +0000
Files and hashes: 1: o6VWBFl7BrDqzoivsakP_5N9l-o.crl (hash: 2yrFNijOtlTdRy6L09iKb6NzkxgDDCBSjejK/Cp/gsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:e0:52:70:a1:5e:a1:dc:1b:8e:f3:f5:00:a8:d5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Validity
Not Before: Apr 22 19:01:21 2025 GMT
Not After : Apr 23 19:01:21 2025 GMT
Subject: CN=5e158f6cc601054de0022ad7169bf6e19b5b9846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:1b:97:24:0f:4a:dd:df:b0:2c:82:8c:c5:
f2:ab:60:8e:f7:8b:0b:7b:a0:99:9d:10:44:02:5f:
91:35:21:ba:9a:d4:a2:79:d2:65:94:d4:53:fd:fb:
58:0e:92:28:f7:d6:42:c6:f3:db:5c:d5:5d:94:52:
e8:25:9d:df:fc:a2:de:70:7f:46:2a:2d:90:3c:b5:
41:cb:4f:18:b5:83:86:18:d6:49:0d:2f:47:88:80:
a9:2d:c3:1b:0b:c1:8b:d4:41:f6:6d:25:ab:84:24:
e1:66:7a:a2:5b:e1:88:ed:89:ef:a6:8e:16:00:32:
c0:a6:99:62:85:7d:aa:da:6e:86:37:16:22:ba:19:
14:bf:4d:b1:a9:00:2d:35:5f:9e:a3:90:c6:fc:df:
22:95:a3:19:35:fc:16:b7:98:1b:ea:c3:70:db:04:
a5:96:11:4a:2d:15:f5:c0:d3:7d:10:96:9e:33:11:
9a:e3:da:41:c5:ec:5f:eb:ee:a9:f5:bf:f1:0f:07:
5f:89:5c:80:7c:a7:0b:39:bf:df:f7:41:4b:75:5e:
49:55:9a:99:23:d7:85:b4:ba:d8:6d:83:b0:d6:d6:
15:16:60:10:06:ab:41:86:bd:61:8d:bb:e2:e2:88:
59:68:57:72:7c:a1:dd:4e:48:bf:db:be:45:5d:a4:
42:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:15:8F:6C:C6:01:05:4D:E0:02:2A:D7:16:9B:F6:E1:9B:5B:98:46
X509v3 Authority Key Identifier:
keyid:A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:34:8f:a7:e5:a8:68:9e:9d:77:19:32:44:5a:c9:58:70:8c:
56:95:be:0f:b9:2a:f0:0a:8f:bc:ea:13:af:e5:41:95:be:cb:
af:05:e2:56:d8:3e:96:10:37:bd:2c:8c:9b:8d:34:c2:b4:4b:
98:fc:32:9f:8e:8d:71:ce:bf:9b:0e:4d:4e:07:fd:86:0f:e3:
fc:bf:5f:10:b1:b5:6b:70:a0:c1:89:cf:8a:9b:57:9a:a0:35:
ab:69:1f:be:55:02:25:8e:dc:60:b9:f5:7c:f1:a7:1c:a2:ed:
f1:5e:ad:b9:fd:06:30:db:ab:ee:11:d4:7f:0e:53:ef:04:c8:
75:97:b8:65:63:6c:e3:82:30:cf:4b:92:2c:61:f8:bd:75:4f:
35:37:a8:85:3c:d5:df:dd:90:f0:0e:d3:bc:af:60:ec:3d:0c:
ee:96:db:05:d9:52:c6:ff:61:6b:fd:7c:68:f1:94:c7:ad:b6:
31:ed:82:ba:a1:92:14:ef:08:d4:d9:5e:f1:b9:4b:e1:98:92:
2c:88:79:99:c6:b4:ee:f5:08:5d:0f:18:f1:e2:f7:f3:f1:d4:
bd:26:f4:f5:07:78:e9:e8:e9:06:7a:f9:a0:29:cf:a4:d2:3b:
33:9e:85:e3:97:e6:e9:65:8f:c4:d6:ba:35:16:59:d5:9d:0b:
9a:94:6f:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZe4FJwoV6h3BuO8/UAqNVCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYTU1NjA0NTk3YjA2YjBlYWNlODhhZmIxYTkwZmZmOTM3
ZDk3ZWEwHhcNMjUwNDIyMTkwMTIxWhcNMjUwNDIzMTkwMTIxWjAzMTEwLwYDVQQD
Eyg1ZTE1OGY2Y2M2MDEwNTRkZTAwMjJhZDcxNjliZjZlMTliNWI5ODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gEblyQPSt3fsCyCjMXyq2CO94sL
e6CZnRBEAl+RNSG6mtSiedJllNRT/ftYDpIo99ZCxvPbXNVdlFLoJZ3f/KLecH9G
Ki2QPLVBy08YtYOGGNZJDS9HiICpLcMbC8GL1EH2bSWrhCThZnqiW+GI7Ynvpo4W
ADLApplihX2q2m6GNxYiuhkUv02xqQAtNV+eo5DG/N8ilaMZNfwWt5gb6sNw2wSl
lhFKLRX1wNN9EJaeMxGa49pBxexf6+6p9b/xDwdfiVyAfKcLOb/f90FLdV5JVZqZ
I9eFtLrYbYOw1tYVFmAQBqtBhr1hjbvi4ohZaFdyfKHdTki/275FXaRChwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4Vj2zGAQVN4AIq1xab9uGbW5hGMB8GA1UdIwQY
MBaAFKOlVgRZewaw6s6Ir7GpD/+TfZfqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mOWZmMWItODM3OS00OWQxLWI4MGEt
ZmFjNGJiODNlZDI4LzEvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mOWZmMWItODM3OS00OWQxLWI4MGEtZmFjNGJiODNlZDI4
LzEvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzSPp+Wo
aJ6ddxkyRFrJWHCMVpW+D7kq8AqPvOoTr+VBlb7LrwXiVtg+lhA3vSyMm400wrRL
mPwyn46Ncc6/mw5NTgf9hg/j/L9fELG1a3CgwYnPiptXmqA1q2kfvlUCJY7cYLn1
fPGnHKLt8V6tuf0GMNur7hHUfw5T7wTIdZe4ZWNs44Iwz0uSLGH4vXVPNTeohTzV
392Q8A7TvK9g7D0M7pbbBdlSxv9ha/18aPGUx622Me2CuqGSFO8I1Nle8blL4ZiS
LIh5mca07vUIXQ8Y8eL38/HUvSb09Qd46ejpBnr5oCnPpNI7M56F45fm6WWPxNa6
NRZZ1Z0LmpRvDA==
-----END CERTIFICATE-----
Generated at Wed Apr 23 02:20:35 2025 by rpki-client