Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
File: oWkKV2UZ54d6ZAis325pu4RyqhU.mft (raw, json)
Hash identifier: soJCVibpUzLzt64DMZAxuIiyZykykkaXMBxbH5K1qVY=
Subject key identifier: 38:4E:3F:F2:CF:1F:68:BA:0F:73:1A:61:EC:62:DA:94:0D:B0:63:64
Authority key identifier: A1:69:0A:57:65:19:E7:87:7A:64:08:AC:DF:6E:69:BB:84:72:AA:15
Certificate issuer: /CN=a1690a576519e7877a6408acdf6e69bb8472aa15
Certificate serial: 019659B9569A70309C1A9BAE0197F4E3A226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWkKV2UZ54d6ZAis325pu4RyqhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
Manifest number: 03F2
Signing time: Mon 21 Apr 2025 19:00:40 +0000
Manifest this update: Mon 21 Apr 2025 19:00:40 +0000
Manifest next update: Tue 22 Apr 2025 19:00:40 +0000
Files and hashes: 1: oWkKV2UZ54d6ZAis325pu4RyqhU.crl (hash: NWkpxs9OFzVK9+ZspH2UJ2mRtdi/qlgPRqJhF7sOUr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWkKV2UZ54d6ZAis325pu4RyqhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:56:9a:70:30:9c:1a:9b:ae:01:97:f4:e3:a2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1690a576519e7877a6408acdf6e69bb8472aa15
Validity
Not Before: Apr 21 19:00:40 2025 GMT
Not After : Apr 22 19:00:40 2025 GMT
Subject: CN=384e3ff2cf1f68ba0f731a61ec62da940db06364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:68:f8:ad:28:a2:b9:0a:d1:8d:56:ca:79:a1:
72:17:fc:6f:6f:4e:13:0d:d0:78:e7:03:3b:b4:78:
33:9b:76:b1:22:b3:54:e0:b2:8f:00:d6:a7:17:a5:
f3:e2:38:2a:07:0c:35:4c:bd:ec:a2:17:e4:93:60:
fe:f4:0a:68:18:52:47:78:ca:90:86:81:45:31:44:
8e:f9:47:2e:fa:ac:e8:e6:50:59:62:fb:cc:2c:3f:
89:8d:6d:b2:4b:a4:a8:fa:d7:37:0b:af:9b:2c:d7:
35:ef:96:09:6c:1c:02:53:d2:22:40:66:7b:da:1e:
4b:c3:03:98:50:d4:44:bd:ce:b0:32:a7:18:d0:5b:
7d:04:92:d6:9a:ee:f4:e0:45:72:a2:6d:ee:97:1c:
f9:c9:e3:ea:4a:20:5f:c6:05:bf:6e:9f:b2:4d:78:
28:34:d2:f4:37:93:81:b8:f7:8c:86:95:f4:be:49:
da:27:bd:89:40:52:01:ec:67:24:8f:c0:8e:5f:05:
85:e3:f1:4f:d8:e3:5b:bd:79:95:9f:6b:4f:c7:f3:
3d:13:13:ed:2f:fa:dc:15:ff:b9:0d:60:70:e2:4b:
82:f2:28:e1:fc:47:d8:9a:aa:31:c5:59:1a:a6:e8:
9e:7e:cb:65:51:62:31:0b:78:72:7f:2f:cc:00:25:
b0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4E:3F:F2:CF:1F:68:BA:0F:73:1A:61:EC:62:DA:94:0D:B0:63:64
X509v3 Authority Key Identifier:
keyid:A1:69:0A:57:65:19:E7:87:7A:64:08:AC:DF:6E:69:BB:84:72:AA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWkKV2UZ54d6ZAis325pu4RyqhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3a:fb:34:81:8a:2a:dc:c1:6f:e4:45:b3:e4:d5:a3:bc:5a:
8f:43:51:44:8e:48:77:6b:ed:c1:1c:7e:2f:d1:8e:0d:ba:47:
c9:d6:c4:6d:e6:b4:19:7a:eb:f4:a9:17:f2:81:7e:74:5c:fa:
18:40:62:c0:a5:e1:1b:a6:de:8d:a0:22:fd:0e:39:29:3c:45:
43:35:5f:28:68:9e:62:39:ca:a4:b5:65:e8:16:b5:dc:9c:1d:
a6:54:90:c1:b1:7b:e9:af:a1:6a:24:b6:6c:32:f2:52:83:34:
50:05:49:de:e7:9c:95:c7:ce:79:a7:0b:4b:46:cb:d0:de:56:
9b:4c:76:24:12:8e:e0:65:36:b4:66:15:b9:8e:1d:b5:e6:4d:
bb:bf:31:81:34:a9:c8:bc:2c:50:5e:a6:8a:15:c7:d5:49:aa:
bd:91:8e:c1:47:f8:0c:80:f6:73:66:e4:d5:b6:8f:3b:4b:bb:
89:ab:21:b0:54:80:11:0d:b5:85:4a:e5:69:50:0b:c6:b7:91:
e4:b1:53:00:e7:07:52:30:ad:a5:0d:68:75:7b:b6:91:e9:c0:
5b:28:85:15:34:e7:bc:56:41:75:ff:43:12:96:88:4d:8a:41:
1b:32:12:01:4e:e3:14:24:05:92:ea:70:7f:93:96:2f:cf:79:
e3:f2:a8:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZuVaacDCcGpuuAZf046ImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNjkwYTU3NjUxOWU3ODc3YTY0MDhhY2RmNmU2OWJiODQ3
MmFhMTUwHhcNMjUwNDIxMTkwMDQwWhcNMjUwNDIyMTkwMDQwWjAzMTEwLwYDVQQD
EygzODRlM2ZmMmNmMWY2OGJhMGY3MzFhNjFlYzYyZGE5NDBkYjA2MzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGj4rSiiuQrRjVbKeaFyF/xvb04T
DdB45wM7tHgzm3axIrNU4LKPANanF6Xz4jgqBww1TL3sohfkk2D+9ApoGFJHeMqQ
hoFFMUSO+Ucu+qzo5lBZYvvMLD+JjW2yS6So+tc3C6+bLNc175YJbBwCU9IiQGZ7
2h5LwwOYUNREvc6wMqcY0Ft9BJLWmu704EVyom3ulxz5yePqSiBfxgW/bp+yTXgo
NNL0N5OBuPeMhpX0vknaJ72JQFIB7Gckj8COXwWF4/FP2ONbvXmVn2tPx/M9ExPt
L/rcFf+5DWBw4kuC8ijh/EfYmqoxxVkapuiefstlUWIxC3hyfy/MACWwRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhOP/LPH2i6D3MaYexi2pQNsGNkMB8GA1UdIwQY
MBaAFKFpCldlGeeHemQIrN9uabuEcqoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1drS1YyVVo1NGQ2WkFpczMyNXB1NFJ5cWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wMTcxNDctYTZjMS00ZjQ4LWE1ZDkt
MmNkZTQwNDVjNDJhLzEvb1drS1YyVVo1NGQ2WkFpczMyNXB1NFJ5cWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wMTcxNDctYTZjMS00ZjQ4LWE1ZDktMmNkZTQwNDVjNDJh
LzEvb1drS1YyVVo1NGQ2WkFpczMyNXB1NFJ5cWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDr7NIGK
KtzBb+RFs+TVo7xaj0NRRI5Id2vtwRx+L9GODbpHydbEbea0GXrr9KkX8oF+dFz6
GEBiwKXhG6bejaAi/Q45KTxFQzVfKGieYjnKpLVl6Ba13JwdplSQwbF76a+haiS2
bDLyUoM0UAVJ3ueclcfOeacLS0bL0N5Wm0x2JBKO4GU2tGYVuY4dteZNu78xgTSp
yLwsUF6mihXH1UmqvZGOwUf4DID2c2bk1baPO0u7iashsFSAEQ21hUrlaVALxreR
5LFTAOcHUjCtpQ1odXu2kenAWyiFFTTnvFZBdf9DEpaITYpBGzISAU7jFCQFkupw
f5OWL8954/KoYg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:48 2025 by rpki-client