Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
File: O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft (raw, json)
Hash identifier: uNYoXWn/G9FZZ0KO1lex4SXavRVIpSz9vSbtMoDycbo=
Subject key identifier: 30:F8:83:3C:15:E5:A7:E7:04:97:67:32:B4:71:14:CF:FC:4A:39:A2
Authority key identifier: 3B:F4:68:D1:51:5A:D6:F1:4C:A6:9C:F9:C7:72:E5:CB:57:D2:77:D6
Certificate issuer: /CN=3bf468d1515ad6f14ca69cf9c772e5cb57d277d6
Certificate serial: 01964AEAA4A8DF5ADBDC5E7055CBF87BF3C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
Manifest number: 09C6
Signing time: Fri 18 Apr 2025 22:00:13 +0000
Manifest this update: Fri 18 Apr 2025 22:00:13 +0000
Manifest next update: Sat 19 Apr 2025 22:00:13 +0000
Files and hashes: 1: F3oEv0QBT7ejRZnF2aTKoyEK5cI.roa (hash: MTTLBQPL1aOScQOGtAiCwXpSCEzlrz60TWKC9wTFgO4=)
2: O_Ro0VFa1vFMppz5x3Lly1fSd9Y.crl (hash: PJDtzDmuG6HjFfwU0hEEl8vqIHmYxUoRYN9fKdRaS+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:ea:a4:a8:df:5a:db:dc:5e:70:55:cb:f8:7b:f3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf468d1515ad6f14ca69cf9c772e5cb57d277d6
Validity
Not Before: Apr 18 22:00:13 2025 GMT
Not After : Apr 19 22:00:13 2025 GMT
Subject: CN=30f8833c15e5a7e704976732b47114cffc4a39a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:30:c8:0b:1d:a1:45:32:98:b0:a8:bc:55:
76:87:ec:72:02:57:10:3f:d6:2f:45:24:fd:e0:91:
37:5f:21:95:d6:36:68:05:b9:07:3e:d2:b5:af:a2:
ad:ec:30:12:64:71:57:ed:9e:d7:8c:ee:d1:ee:3e:
24:df:d5:e8:2b:63:1b:ab:10:a8:24:82:bc:9a:39:
bd:97:53:69:5e:23:74:3b:08:d1:0e:b6:ff:91:91:
d7:43:af:26:a1:c5:4f:71:e4:e0:42:40:61:2f:3d:
63:1a:88:76:19:4f:b3:41:0d:54:4b:31:f8:a4:bc:
99:a2:e2:47:10:ee:32:a2:f8:3c:0c:06:fb:0b:c9:
da:9b:42:38:1a:82:64:ad:91:cd:5d:8b:18:71:31:
c0:08:69:4f:6f:42:5d:3d:f9:3c:bd:1f:9f:21:3d:
02:0a:45:3f:40:ed:85:55:dc:ba:07:03:29:78:69:
a1:f9:64:42:6d:b4:47:b1:a8:6a:ca:7f:60:96:02:
3f:d0:05:cd:d9:0e:d8:73:10:40:d7:4d:6b:5c:45:
68:f8:b5:e9:2a:a4:a7:90:89:8d:bc:93:f7:2f:1f:
cb:c1:38:38:eb:61:2e:50:83:e7:03:a7:74:59:ea:
39:04:40:25:10:62:95:6a:92:6b:bb:2d:eb:c1:41:
2b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F8:83:3C:15:E5:A7:E7:04:97:67:32:B4:71:14:CF:FC:4A:39:A2
X509v3 Authority Key Identifier:
keyid:3B:F4:68:D1:51:5A:D6:F1:4C:A6:9C:F9:C7:72:E5:CB:57:D2:77:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:43:78:90:10:44:ce:ad:15:49:b6:22:fe:f9:c5:e1:0f:6c:
28:98:32:e7:34:be:44:35:90:ef:be:af:20:ab:af:1c:53:67:
70:88:1e:6c:08:f9:8a:90:1d:b9:38:72:67:d9:04:11:25:4e:
4a:99:d5:f0:11:1e:96:13:1b:0a:47:49:53:2b:27:89:2b:e7:
6e:ca:e1:d6:1a:28:4f:5f:c7:26:f9:95:88:94:7e:78:9c:8d:
e6:dc:f8:7a:de:4d:02:a1:71:3e:a0:3a:9b:38:30:fb:42:55:
12:c4:0c:b5:5d:d6:ad:7a:47:33:1e:69:3b:49:5f:d8:ec:4c:
cc:80:90:a8:49:95:3b:22:40:e3:22:44:d8:d0:9e:83:3d:f9:
a9:2c:2f:24:40:83:2c:33:e0:e5:8a:25:98:4f:d8:97:25:55:
20:78:2e:e3:fc:17:4e:4c:0d:ac:fd:60:50:a5:f1:c6:e6:bf:
66:d4:e5:74:51:28:cd:ec:28:0c:7d:96:64:bb:3c:05:eb:54:
12:d0:5f:89:80:41:5a:be:70:61:6a:19:e5:70:35:de:f3:59:
59:d4:51:72:43:71:38:79:a2:5d:af:b2:67:12:b9:2f:10:97:
50:8d:26:fa:b3:57:26:9e:c2:29:76:e7:af:87:50:10:6f:84:
ba:b7:2e:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZK6qSo31rb3F5wVcv4e/PGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZjQ2OGQxNTE1YWQ2ZjE0Y2E2OWNmOWM3NzJlNWNiNTdk
Mjc3ZDYwHhcNMjUwNDE4MjIwMDEzWhcNMjUwNDE5MjIwMDEzWjAzMTEwLwYDVQQD
EygzMGY4ODMzYzE1ZTVhN2U3MDQ5NzY3MzJiNDcxMTRjZmZjNGEzOWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiUwyAsdoUUymLCovFV2h+xyAlcQ
P9YvRST94JE3XyGV1jZoBbkHPtK1r6Kt7DASZHFX7Z7XjO7R7j4k39XoK2MbqxCo
JIK8mjm9l1NpXiN0OwjRDrb/kZHXQ68mocVPceTgQkBhLz1jGoh2GU+zQQ1USzH4
pLyZouJHEO4yovg8DAb7C8nam0I4GoJkrZHNXYsYcTHACGlPb0JdPfk8vR+fIT0C
CkU/QO2FVdy6BwMpeGmh+WRCbbRHsahqyn9glgI/0AXN2Q7YcxBA101rXEVo+LXp
KqSnkImNvJP3Lx/LwTg462EuUIPnA6d0Weo5BEAlEGKVapJruy3rwUErMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDD4gzwV5afnBJdnMrRxFM/8SjmiMB8GA1UdIwQY
MBaAFDv0aNFRWtbxTKac+cdy5ctX0nfWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT19SbzBWRmExdkZNcHB6NXgzTGx5MWZTZDlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC84MjFmMzUtYTg4MC00ZDY0LWFkYzAt
NDYxMTA0NmYxYTRlLzEvT19SbzBWRmExdkZNcHB6NXgzTGx5MWZTZDlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC84MjFmMzUtYTg4MC00ZDY0LWFkYzAtNDYxMTA0NmYxYTRl
LzEvT19SbzBWRmExdkZNcHB6NXgzTGx5MWZTZDlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkN4kBBE
zq0VSbYi/vnF4Q9sKJgy5zS+RDWQ776vIKuvHFNncIgebAj5ipAduThyZ9kEESVO
SpnV8BEelhMbCkdJUysniSvnbsrh1hooT1/HJvmViJR+eJyN5tz4et5NAqFxPqA6
mzgw+0JVEsQMtV3WrXpHMx5pO0lf2OxMzICQqEmVOyJA4yJE2NCegz35qSwvJECD
LDPg5YolmE/YlyVVIHgu4/wXTkwNrP1gUKXxxua/ZtTldFEozewoDH2WZLs8BetU
EtBfiYBBWr5wYWoZ5XA13vNZWdRRckNxOHmiXa+yZxK5LxCXUI0m+rNXJp7CKXbn
r4dQEG+EurcuMw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:38:53 2025 by rpki-client