Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
File: _o6FIymApj8NTfWwSRY-P9AvVLM.mft (raw, json)
Hash identifier: tzi2nvxY3y1kktwIG2r4axqyn0FFSh947JXT6xIGiLM=
Subject key identifier: 0C:C3:9F:1F:C5:6A:40:E7:5A:CE:1C:E1:F3:A4:BC:82:5C:E5:BC:B1
Authority key identifier: FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3
Certificate issuer: /CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3
Certificate serial: 01965B70DF571C6C9346DD89D9AC94B64108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
Manifest number: 0979
Signing time: Tue 22 Apr 2025 03:00:45 +0000
Manifest this update: Tue 22 Apr 2025 03:00:45 +0000
Manifest next update: Wed 23 Apr 2025 03:00:45 +0000
Files and hashes: 1: 7IkFNxuEd7zYMJ5GFmWYCrb0D3k.roa (hash: EbQqPJKQBhTvoE7/qrp3Wi8FH8cq4X28q+E9y9x/db0=)
2: _o6FIymApj8NTfWwSRY-P9AvVLM.crl (hash: VvQUGEG4hAn9LeM07G6sthsCtE8jMnQOlcDVaqk5K7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:df:57:1c:6c:93:46:dd:89:d9:ac:94:b6:41:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3
Validity
Not Before: Apr 22 03:00:45 2025 GMT
Not After : Apr 23 03:00:45 2025 GMT
Subject: CN=0cc39f1fc56a40e75ace1ce1f3a4bc825ce5bcb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:fa:8e:7e:2a:07:75:17:35:4b:05:76:1a:
46:81:fe:78:dc:60:ce:5e:24:d5:33:e9:0e:bd:b6:
74:cd:0a:30:4e:5f:2a:86:ab:93:35:c0:3c:91:37:
0b:ac:64:c2:90:14:af:35:55:5a:c2:e1:ab:cc:f8:
48:be:f5:72:86:b8:b6:53:7e:1b:01:5c:d6:52:dd:
15:ec:e4:7e:78:79:01:2c:9b:8f:0a:21:9c:b8:20:
af:41:37:d9:e2:bb:50:55:b8:f3:2e:aa:e7:d2:e0:
d9:06:40:26:4a:47:29:0a:f8:19:fd:fa:10:b9:22:
bf:2c:dc:ae:06:61:87:33:5a:b7:f1:4b:b0:96:98:
e1:c1:1e:78:11:11:16:d0:1b:96:f2:13:c9:ca:fb:
fe:e6:c5:ed:f8:b9:2c:10:aa:d9:54:d9:40:71:ef:
c0:af:f2:3b:e3:a3:7d:b4:36:6a:16:fc:96:4a:52:
da:27:75:48:c2:9f:07:61:30:e3:bd:c3:c5:47:b5:
9f:81:9d:a2:dc:42:e7:bf:7c:05:45:85:91:99:44:
c2:b7:2d:f3:53:db:20:df:d7:7d:b4:3f:6a:2b:52:
5b:d5:ef:82:30:c3:23:f2:e4:3a:5f:b9:b2:cb:c6:
9a:2c:38:46:c9:b8:6e:06:36:16:c8:a2:68:4e:da:
00:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C3:9F:1F:C5:6A:40:E7:5A:CE:1C:E1:F3:A4:BC:82:5C:E5:BC:B1
X509v3 Authority Key Identifier:
keyid:FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f4:db:55:4c:82:9e:b5:40:9a:2f:e8:c5:2c:2a:e9:39:57:
4f:46:a5:67:61:01:0f:e8:8f:fc:e4:53:e2:dc:db:59:37:a7:
9b:81:51:37:64:1a:41:0d:4e:60:0b:51:b4:4a:04:03:af:b7:
0c:02:75:80:e9:79:ef:b3:4e:8f:58:a3:bd:ad:77:af:99:bd:
33:56:8c:ae:88:cc:e3:03:0c:52:fc:24:20:60:c6:4b:6e:bf:
47:82:78:b0:57:57:42:d6:86:d9:a5:16:7d:39:df:eb:2d:3c:
e7:f9:3b:76:9d:1d:f5:97:55:e8:34:60:4f:66:12:88:13:4b:
30:ba:b5:01:dd:68:4b:7f:b8:e9:5f:ca:11:d8:8d:aa:b8:eb:
52:ce:4d:d1:78:88:cd:d2:73:3a:d2:cb:40:61:1e:26:ee:ca:
01:94:38:2d:c2:06:f2:eb:46:ab:24:5a:77:2a:e1:35:77:c6:
0e:c5:3f:21:a1:e9:b4:6f:d4:6a:1a:9d:34:10:34:5d:2f:02:
54:6b:dc:df:05:17:4a:70:cf:d8:25:31:a4:a8:9d:a4:86:0b:
5e:a6:37:b5:a8:56:04:8f:20:84:70:dc:d5:0c:fc:20:09:7b:
7d:62:1e:39:3b:89:f2:14:ef:9a:da:65:d3:e6:7e:e5:d7:d9:
fa:03:95:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbcN9XHGyTRt2J2ayUtkEIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlOGU4NTIzMjk4MGE2M2YwZDRkZjViMDQ5MTYzZTNmZDAy
ZjU0YjMwHhcNMjUwNDIyMDMwMDQ1WhcNMjUwNDIzMDMwMDQ1WjAzMTEwLwYDVQQD
EygwY2MzOWYxZmM1NmE0MGU3NWFjZTFjZTFmM2E0YmM4MjVjZTViY2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPr6jn4qB3UXNUsFdhpGgf543GDO
XiTVM+kOvbZ0zQowTl8qhquTNcA8kTcLrGTCkBSvNVVawuGrzPhIvvVyhri2U34b
AVzWUt0V7OR+eHkBLJuPCiGcuCCvQTfZ4rtQVbjzLqrn0uDZBkAmSkcpCvgZ/foQ
uSK/LNyuBmGHM1q38UuwlpjhwR54EREW0BuW8hPJyvv+5sXt+LksEKrZVNlAce/A
r/I746N9tDZqFvyWSlLaJ3VIwp8HYTDjvcPFR7WfgZ2i3ELnv3wFRYWRmUTCty3z
U9sg39d9tD9qK1Jb1e+CMMMj8uQ6X7myy8aaLDhGybhuBjYWyKJoTtoAywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzDnx/FakDnWs4c4fOkvIJc5byxMB8GA1UdIwQY
MBaAFP6OhSMpgKY/DU31sEkWPj/QL1SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX282Rkl5bUFwajhOVGZXd1NSWS1QOUF2VkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kMzZiOGItODY1Ni00ODViLTkzYjIt
Mzg5MmFjYTI3N2IwLzEvX282Rkl5bUFwajhOVGZXd1NSWS1QOUF2VkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9kMzZiOGItODY1Ni00ODViLTkzYjItMzg5MmFjYTI3N2Iw
LzEvX282Rkl5bUFwajhOVGZXd1NSWS1QOUF2VkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfTbVUyC
nrVAmi/oxSwq6TlXT0alZ2EBD+iP/ORT4tzbWTenm4FRN2QaQQ1OYAtRtEoEA6+3
DAJ1gOl577NOj1ijva13r5m9M1aMrojM4wMMUvwkIGDGS26/R4J4sFdXQtaG2aUW
fTnf6y085/k7dp0d9ZdV6DRgT2YSiBNLMLq1Ad1oS3+46V/KEdiNqrjrUs5N0XiI
zdJzOtLLQGEeJu7KAZQ4LcIG8utGqyRadyrhNXfGDsU/IaHptG/UahqdNBA0XS8C
VGvc3wUXSnDP2CUxpKidpIYLXqY3tahWBI8ghHDc1Qz8IAl7fWIeOTuJ8hTvmtpl
0+Z+5dfZ+gOVPQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:44 2025 by rpki-client