Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
File: C0ojfRF9934LiqUS9vJfsgf5orE.mft (raw, json)
Hash identifier: Dqic1Np4/HY+m2WMSxRX7SOOKjs/24O9nmcujxx+JDU=
Subject key identifier: 0F:2E:3E:1F:8E:6D:2D:AA:A8:C9:7F:BB:BB:E5:EA:20:F9:1D:C5:C3
Authority key identifier: 0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
Certificate issuer: /CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Certificate serial: 019653B76A465DCB4DE526B03A303B97E0AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
Manifest number: 1098
Signing time: Sun 20 Apr 2025 15:00:51 +0000
Manifest this update: Sun 20 Apr 2025 15:00:51 +0000
Manifest next update: Mon 21 Apr 2025 15:00:51 +0000
Files and hashes: 1: C0ojfRF9934LiqUS9vJfsgf5orE.crl (hash: TBnAAe4L955Szfz/dkWYih/EDb7wKTOJL0S3pyBCmZA=)
2: ubaYGhsK3un9FzpeOuJImEsVY0k.roa (hash: GKSurghCGTsvWWfo6kF8DtoCXANGJM6Q52lyK44WE3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:6a:46:5d:cb:4d:e5:26:b0:3a:30:3b:97:e0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Validity
Not Before: Apr 20 15:00:51 2025 GMT
Not After : Apr 21 15:00:51 2025 GMT
Subject: CN=0f2e3e1f8e6d2daaa8c97fbbbbe5ea20f91dc5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d5:d1:ea:6a:18:02:ec:c5:3b:20:96:85:b7:
95:50:79:21:4a:25:07:56:97:c4:c3:2b:d3:a3:31:
f5:92:7a:cf:6a:e8:04:07:37:d0:b3:02:37:02:f4:
0c:29:69:65:4a:d5:54:7e:5e:1f:eb:01:2c:5c:42:
4d:23:c0:aa:51:ab:7f:69:dd:df:ff:2f:3c:99:d5:
c2:c7:6c:be:26:f9:45:2a:0b:0f:d7:72:c3:49:a7:
ee:29:a3:2f:3e:3f:69:10:18:a0:47:4f:d1:ea:ed:
06:5c:0b:e8:9d:7a:c7:3d:89:bb:d7:fd:67:bb:45:
46:5f:c7:55:ba:d8:41:24:0a:ce:d4:d1:16:66:63:
d1:8a:f2:95:76:e7:f8:bd:78:4d:f5:80:8c:16:29:
8b:6a:40:d5:9e:ab:51:73:77:90:8f:36:dc:f0:70:
4e:8b:28:ce:26:29:ec:74:8d:06:64:6a:9b:04:88:
04:90:65:09:3a:df:f9:44:82:ba:7c:0a:6c:b3:da:
5b:2c:76:18:66:01:5b:f8:07:86:03:93:43:d3:e2:
01:d5:59:cf:4f:ad:78:e9:0b:0b:40:7f:7b:27:3d:
f7:97:43:42:af:be:32:e6:c4:5f:2c:d3:5c:62:c3:
54:49:d0:83:b0:03:69:3b:4b:9f:89:34:5a:25:80:
7d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2E:3E:1F:8E:6D:2D:AA:A8:C9:7F:BB:BB:E5:EA:20:F9:1D:C5:C3
X509v3 Authority Key Identifier:
keyid:0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:77:d6:b4:ff:94:83:e3:99:67:f0:7d:e1:47:3c:66:86:0f:
4e:3b:15:7b:f5:37:50:cb:75:fb:d0:eb:6c:8d:a7:0a:d5:a3:
a1:81:20:dd:29:94:d4:7c:b8:f1:5f:c1:11:eb:e5:3a:d0:e4:
f2:9a:1a:ca:30:7f:11:3f:6e:4f:3e:74:e6:ed:0c:c7:6a:b6:
3e:44:ee:6f:a1:86:1a:15:70:97:a2:1d:30:d4:c9:80:99:53:
dd:46:c1:3e:a8:68:67:61:87:62:14:af:f3:a5:b3:4c:9c:cd:
f5:29:99:ef:2e:6e:dc:6b:9f:0f:1e:6c:4a:ad:84:e4:91:bc:
de:e6:bc:ad:ef:24:30:1e:5c:19:56:0a:07:1f:c2:20:b0:ff:
7d:f2:7c:bb:4e:79:0b:c6:7a:32:41:ec:42:ca:5b:4c:6c:c6:
10:f4:61:5c:8c:6c:7f:2d:ea:63:bc:84:20:24:5b:92:84:02:
9c:c3:09:8f:bc:c7:ec:e0:a1:23:70:89:d0:1e:d2:af:df:b5:
c9:4a:8b:2e:a5:c4:fa:a9:04:82:8d:19:d6:ec:0c:da:87:45:
0e:0f:38:b6:25:de:9e:81:c3:3d:a2:16:f5:cf:bf:38:80:e9:
65:4e:a8:54:09:4c:96:80:01:ba:ab:e2:3c:bd:82:d6:b1:73:
30:35:c8:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTt2pGXctN5SawOjA7l+CuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGEyMzdkMTE3ZGY3N2UwYjhhYTUxMmY2ZjI1ZmIyMDdm
OWEyYjEwHhcNMjUwNDIwMTUwMDUxWhcNMjUwNDIxMTUwMDUxWjAzMTEwLwYDVQQD
EygwZjJlM2UxZjhlNmQyZGFhYThjOTdmYmJiYmU1ZWEyMGY5MWRjNWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79XR6moYAuzFOyCWhbeVUHkhSiUH
VpfEwyvTozH1knrPaugEBzfQswI3AvQMKWllStVUfl4f6wEsXEJNI8CqUat/ad3f
/y88mdXCx2y+JvlFKgsP13LDSafuKaMvPj9pEBigR0/R6u0GXAvonXrHPYm71/1n
u0VGX8dVuthBJArO1NEWZmPRivKVduf4vXhN9YCMFimLakDVnqtRc3eQjzbc8HBO
iyjOJinsdI0GZGqbBIgEkGUJOt/5RIK6fApss9pbLHYYZgFb+AeGA5ND0+IB1VnP
T6146QsLQH97Jz33l0NCr74y5sRfLNNcYsNUSdCDsANpO0ufiTRaJYB9SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8uPh+ObS2qqMl/u7vl6iD5HcXDMB8GA1UdIwQY
MBaAFAtKI30Rffd+C4qlEvbyX7IH+aKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzBvamZSRjk5MzRMaXFVUzl2SmZzZ2Y1b3JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yYjU3ZmQtZGZlZC00MzYzLWI2YTIt
MjVjOWFmYmIzMjIxLzEvQzBvamZSRjk5MzRMaXFVUzl2SmZzZ2Y1b3JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yYjU3ZmQtZGZlZC00MzYzLWI2YTItMjVjOWFmYmIzMjIx
LzEvQzBvamZSRjk5MzRMaXFVUzl2SmZzZ2Y1b3JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHfWtP+U
g+OZZ/B94Uc8ZoYPTjsVe/U3UMt1+9DrbI2nCtWjoYEg3SmU1Hy48V/BEevlOtDk
8poayjB/ET9uTz505u0Mx2q2PkTub6GGGhVwl6IdMNTJgJlT3UbBPqhoZ2GHYhSv
86WzTJzN9SmZ7y5u3GufDx5sSq2E5JG83ua8re8kMB5cGVYKBx/CILD/ffJ8u055
C8Z6MkHsQspbTGzGEPRhXIxsfy3qY7yEICRbkoQCnMMJj7zH7OChI3CJ0B7Sr9+1
yUqLLqXE+qkEgo0Z1uwM2odFDg84tiXenoHDPaIW9c+/OIDpZU6oVAlMloABuqvi
PL2C1rFzMDXIdQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:34:11 2025 by rpki-client