Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
File: O63rHzjiUanY1hTzLTbyat9P1YA.mft (raw, json)
Hash identifier: WwB/8zUtPTgZfN/Lfvz8wfpjqQGoS+4KEpX9tp9s/gQ=
Subject key identifier: 51:45:B4:63:D0:67:08:CE:ED:FC:B9:71:60:90:32:D7:4C:FA:B5:61
Authority key identifier: 3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80
Certificate issuer: /CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580
Certificate serial: 01965B71379B8AC5CBC4C0A85480AE2A6DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
Manifest number: 0CAC
Signing time: Tue 22 Apr 2025 03:01:08 +0000
Manifest this update: Tue 22 Apr 2025 03:01:08 +0000
Manifest next update: Wed 23 Apr 2025 03:01:08 +0000
Files and hashes: 1: O63rHzjiUanY1hTzLTbyat9P1YA.crl (hash: hPETbrS4TDCwHqcPnk/uMoc35AjY4vZ65aM2IJGRd6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:71:37:9b:8a:c5:cb:c4:c0:a8:54:80:ae:2a:6d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580
Validity
Not Before: Apr 22 03:01:08 2025 GMT
Not After : Apr 23 03:01:08 2025 GMT
Subject: CN=5145b463d06708ceedfcb971609032d74cfab561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:48:4a:77:88:b7:4e:42:55:cc:d5:c6:5b:5c:
79:e1:a2:7c:74:a7:07:2c:83:3d:f2:bd:b0:b1:14:
e7:a3:1e:c0:7b:6e:49:cc:23:61:8e:1c:1b:29:04:
e9:80:45:05:a8:49:e6:ff:87:7a:8b:58:95:5a:a8:
60:de:96:67:ed:6c:15:6e:79:9e:be:3a:54:68:be:
d7:2a:a5:3e:ac:d0:b3:6e:82:11:b6:00:83:87:3b:
84:50:45:6a:87:6d:fb:03:6d:bd:ae:d4:30:8f:8f:
fc:27:62:64:3e:67:62:d1:20:48:7a:36:4f:a0:36:
c2:3f:54:54:bb:9f:f1:f6:08:59:9a:a6:d3:66:4b:
4b:19:12:24:41:ca:dc:91:19:81:0d:76:ce:96:af:
13:23:37:d0:2a:39:41:5f:8e:ca:94:17:30:75:13:
a6:d1:06:8c:57:b7:4a:5e:8f:36:18:a7:56:59:c5:
9b:90:d8:31:fd:64:d2:0f:90:46:27:26:f5:f7:f5:
2f:92:d9:9c:c2:60:bc:58:ac:59:05:d8:d8:55:97:
d6:e4:88:d6:98:23:38:73:4f:ae:51:53:7e:62:bb:
81:4c:37:f2:95:04:c5:e8:ff:dc:d5:94:a9:f1:ab:
6f:33:e5:19:e4:c3:03:e8:54:3e:22:4a:05:cf:b7:
57:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:45:B4:63:D0:67:08:CE:ED:FC:B9:71:60:90:32:D7:4C:FA:B5:61
X509v3 Authority Key Identifier:
keyid:3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:74:2e:65:0a:3a:13:b5:c4:f4:a3:2c:b1:9c:13:34:74:43:
66:60:28:a2:a7:8a:24:49:fc:71:65:fe:52:b1:a4:47:7c:20:
9e:05:34:44:7f:9b:2a:88:45:ad:61:d1:fe:0c:76:3b:bb:6e:
8e:5b:b7:60:a2:76:6c:d0:e2:77:41:b4:87:0d:7a:01:64:68:
63:38:a9:ea:2d:1a:5f:88:59:4c:ba:4c:ca:3d:d3:78:3e:dc:
6b:71:cf:07:d8:df:fd:9c:3d:dc:ab:be:fd:76:42:ce:da:81:
30:97:77:61:fc:88:82:2e:ab:78:d1:3f:b2:b5:30:09:f9:2c:
e6:a2:06:c0:1a:97:ea:1f:bc:50:e3:87:f2:ed:0f:80:70:77:
56:35:91:f6:f3:02:0d:59:af:c4:d7:34:e8:dd:37:a3:24:ad:
4e:97:b3:8f:f8:f8:24:06:c2:25:cb:f2:ac:aa:0b:ce:0d:54:
85:5e:c1:b7:b2:a2:85:05:95:35:59:21:7f:7d:8a:23:fd:ac:
34:8e:4a:6c:31:a0:a8:3d:5a:bd:a4:87:06:6a:88:91:2c:88:
44:94:9f:4d:68:8a:3d:c1:a2:3b:ae:9e:2e:7f:af:ac:09:8d:
e8:a2:c9:9a:94:92:c5:16:b3:b5:8e:bf:67:65:13:a7:77:64:
0f:0c:7c:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbcTebisXLxMCoVICuKm3sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYWRlYjFmMzhlMjUxYTlkOGQ2MTRmMzJkMzZmMjZhZGY0
ZmQ1ODAwHhcNMjUwNDIyMDMwMTA4WhcNMjUwNDIzMDMwMTA4WjAzMTEwLwYDVQQD
Eyg1MTQ1YjQ2M2QwNjcwOGNlZWRmY2I5NzE2MDkwMzJkNzRjZmFiNTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30hKd4i3TkJVzNXGW1x54aJ8dKcH
LIM98r2wsRTnox7Ae25JzCNhjhwbKQTpgEUFqEnm/4d6i1iVWqhg3pZn7WwVbnme
vjpUaL7XKqU+rNCzboIRtgCDhzuEUEVqh237A229rtQwj4/8J2JkPmdi0SBIejZP
oDbCP1RUu5/x9ghZmqbTZktLGRIkQcrckRmBDXbOlq8TIzfQKjlBX47KlBcwdROm
0QaMV7dKXo82GKdWWcWbkNgx/WTSD5BGJyb19/UvktmcwmC8WKxZBdjYVZfW5IjW
mCM4c0+uUVN+YruBTDfylQTF6P/c1ZSp8atvM+UZ5MMD6FQ+IkoFz7dXfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFFtGPQZwjO7fy5cWCQMtdM+rVhMB8GA1UdIwQY
MBaAFDut6x844lGp2NYU8y028mrfT9WAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzYzckh6amlVYW5ZMWhUekxUYnlhdDlQMVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmJhMGYtZDU2ZC00ZDdmLWE4YjUt
NGM4N2ZlNWZkYWRjLzEvTzYzckh6amlVYW5ZMWhUekxUYnlhdDlQMVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8xYmJhMGYtZDU2ZC00ZDdmLWE4YjUtNGM4N2ZlNWZkYWRj
LzEvTzYzckh6amlVYW5ZMWhUekxUYnlhdDlQMVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHQuZQo6
E7XE9KMssZwTNHRDZmAooqeKJEn8cWX+UrGkR3wgngU0RH+bKohFrWHR/gx2O7tu
jlu3YKJ2bNDid0G0hw16AWRoYzip6i0aX4hZTLpMyj3TeD7ca3HPB9jf/Zw93Ku+
/XZCztqBMJd3YfyIgi6reNE/srUwCfks5qIGwBqX6h+8UOOH8u0PgHB3VjWR9vMC
DVmvxNc06N03oyStTpezj/j4JAbCJcvyrKoLzg1UhV7Bt7KihQWVNVkhf32KI/2s
NI5KbDGgqD1avaSHBmqIkSyIRJSfTWiKPcGiO66eLn+vrAmN6KLJmpSSxRaztY6/
Z2UTp3dkDwx8Vg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:27:14 2025 by rpki-client