Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
File: oU6-xYG-93sycD2LRtMnjBkaKz0.mft (raw, json)
Hash identifier: xyPO9lAV26J/yZ9TMZSmY5Uvp2MvMTjihPMteiYGwQ8=
Subject key identifier: E0:62:0A:BA:C1:25:80:24:D0:48:76:67:04:51:99:83:75:B2:9E:8E
Authority key identifier: A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
Certificate issuer: /CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Certificate serial: 01965E04211B32C3FA960FF795F06F5ACE2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
Manifest number: 14FE
Signing time: Tue 22 Apr 2025 15:00:50 +0000
Manifest this update: Tue 22 Apr 2025 15:00:50 +0000
Manifest next update: Wed 23 Apr 2025 15:00:50 +0000
Files and hashes: 1: oU6-xYG-93sycD2LRtMnjBkaKz0.crl (hash: c7fTPk+j4TYa23tbQFKE7K3dhCEMS8PdShJfX92K1zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:04:21:1b:32:c3:fa:96:0f:f7:95:f0:6f:5a:ce:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Validity
Not Before: Apr 22 15:00:50 2025 GMT
Not After : Apr 23 15:00:50 2025 GMT
Subject: CN=e0620abac1258024d04876670451998375b29e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:9f:a7:a3:71:87:3c:d2:38:e7:1a:1d:47:
3a:3a:0e:96:32:9b:8e:d9:e6:bb:9c:df:d3:a6:cb:
b5:90:1d:e6:fd:af:ea:e9:2f:20:85:b2:42:94:46:
aa:3a:fe:f2:d7:6d:a5:6e:01:1b:8e:c0:ae:e1:b6:
ac:a2:76:e4:06:a4:ff:50:0a:56:37:70:11:ab:58:
42:dd:9f:0e:7c:4a:2d:73:ff:66:31:c8:88:f7:7b:
34:1d:5d:3f:96:9c:cc:ba:ad:48:8d:8f:00:5a:22:
69:b0:41:0f:51:41:2f:ce:67:e2:74:09:aa:bc:14:
c3:4f:c0:08:f3:de:e9:c9:69:86:af:ba:31:61:75:
fa:b9:6e:a3:ca:1c:a0:0b:83:65:cd:f6:25:e1:8d:
c4:bd:0d:a4:4c:79:b4:ec:9d:61:7e:85:f5:0b:d9:
bd:b8:2a:28:d3:50:e2:90:32:b4:b4:4c:0f:3b:bd:
18:49:a0:e8:0f:ed:00:d3:62:46:6e:15:ac:47:7d:
81:62:4a:e0:ea:6c:b9:33:5a:60:3c:d5:ef:4c:43:
c8:43:1d:c5:61:e2:70:6a:f5:cb:26:b7:3a:18:4f:
4b:b9:21:fd:1d:55:da:2f:25:01:46:c0:58:e3:97:
e3:43:c8:6f:e9:b1:b4:5d:da:59:2b:ae:16:1b:1d:
a1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:62:0A:BA:C1:25:80:24:D0:48:76:67:04:51:99:83:75:B2:9E:8E
X509v3 Authority Key Identifier:
keyid:A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:94:1b:30:ad:67:84:69:70:d1:7a:a7:47:34:88:72:93:92:
e9:89:ad:72:b5:01:8f:02:bd:b0:a9:22:53:b4:96:9b:61:37:
66:4d:68:2f:c9:bf:fb:44:60:45:87:71:c1:fb:48:4c:d4:ad:
80:63:37:c9:2b:5e:44:78:01:fa:34:31:56:14:b2:91:5a:81:
b3:a8:d7:72:e2:e3:64:92:07:ee:22:63:3e:67:2d:53:33:00:
dc:41:9d:8f:60:11:f0:90:c2:1f:28:16:ec:b6:7d:68:0f:8e:
e2:43:e8:59:bb:70:d6:61:e7:23:93:e2:9b:ae:c4:ad:4b:45:
88:e0:40:2e:ce:5a:d7:b8:f8:2a:6d:f9:30:af:66:db:d8:03:
19:6e:b4:3c:ee:b7:14:46:73:d2:8c:5e:a7:05:a4:03:36:40:
da:d1:32:d3:42:60:08:b4:35:08:c6:61:c3:90:d4:24:37:6c:
59:e4:a8:d5:4f:ac:cb:b4:dd:48:8a:c0:d8:91:23:e2:b7:00:
f1:2c:cb:83:7f:f5:1c:62:30:7c:b5:0c:cd:e4:c2:38:c7:22:
bb:de:20:29:0a:6f:37:64:b3:41:cf:29:a2:ae:70:f3:56:f4:
f5:a1:ae:f3:b7:88:3e:e9:75:04:32:29:5f:90:53:d7:94:1f:
29:e2:1b:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZeBCEbMsP6lg/3lfBvWs4vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNGViZWM1ODFiZWY3N2IzMjcwM2Q4YjQ2ZDMyNzhjMTkx
YTJiM2QwHhcNMjUwNDIyMTUwMDUwWhcNMjUwNDIzMTUwMDUwWjAzMTEwLwYDVQQD
EyhlMDYyMGFiYWMxMjU4MDI0ZDA0ODc2NjcwNDUxOTk4Mzc1YjI5ZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKyfp6NxhzzSOOcaHUc6Og6WMpuO
2ea7nN/Tpsu1kB3m/a/q6S8ghbJClEaqOv7y122lbgEbjsCu4basonbkBqT/UApW
N3ARq1hC3Z8OfEotc/9mMciI93s0HV0/lpzMuq1IjY8AWiJpsEEPUUEvzmfidAmq
vBTDT8AI897pyWmGr7oxYXX6uW6jyhygC4NlzfYl4Y3EvQ2kTHm07J1hfoX1C9m9
uCoo01DikDK0tEwPO70YSaDoD+0A02JGbhWsR32BYkrg6my5M1pgPNXvTEPIQx3F
YeJwavXLJrc6GE9LuSH9HVXaLyUBRsBY45fjQ8hv6bG0XdpZK64WGx2hUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBiCrrBJYAk0Eh2ZwRRmYN1sp6OMB8GA1UdIwQY
MBaAFKFOvsWBvvd7MnA9i0bTJ4wZGis9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1U2LXhZRy05M3N5Y0QyTFJ0TW5qQmthS3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMDExOWYtMmQyNy00YzFiLWJhZGMt
NDFlNGNkY2ZiZDVhLzEvb1U2LXhZRy05M3N5Y0QyTFJ0TW5qQmthS3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMDExOWYtMmQyNy00YzFiLWJhZGMtNDFlNGNkY2ZiZDVh
LzEvb1U2LXhZRy05M3N5Y0QyTFJ0TW5qQmthS3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpQbMK1n
hGlw0XqnRzSIcpOS6YmtcrUBjwK9sKkiU7SWm2E3Zk1oL8m/+0RgRYdxwftITNSt
gGM3ySteRHgB+jQxVhSykVqBs6jXcuLjZJIH7iJjPmctUzMA3EGdj2AR8JDCHygW
7LZ9aA+O4kPoWbtw1mHnI5Pim67ErUtFiOBALs5a17j4Km35MK9m29gDGW60PO63
FEZz0oxepwWkAzZA2tEy00JgCLQ1CMZhw5DUJDdsWeSo1U+sy7TdSIrA2JEj4rcA
8SzLg3/1HGIwfLUMzeTCOMciu94gKQpvN2SzQc8poq5w81b09aGu87eIPul1BDIp
X5BT15QfKeIb6Q==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:43:34 2025 by rpki-client