Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
File: OklF5GdkAp0lgdggwzc_pEWFVTk.mft (raw, json)
Hash identifier: 6HAeBIKyVi24tepHoH5gbUcEMzPHKOLby/iODJIduqI=
Subject key identifier: C7:90:C3:8B:AA:8C:02:23:36:1B:65:65:ED:4B:02:07:C0:6B:56:0C
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 019655DD22850641142BD3E3CA2A4EC5B400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 01:01:17 +0000
Manifest this update: Mon 21 Apr 2025 01:01:17 +0000
Manifest next update: Tue 22 Apr 2025 01:01:17 +0000
Files and hashes: 1: LHDFKCfWLJp2mBfByLfhuS_iDkY.roa (hash: hhocfI4M747eSln+lUvkyI8Ag+8FG16kwPY8wAbPOQk=)
2: OklF5GdkAp0lgdggwzc_pEWFVTk.crl (hash: CIvAzqxleKD3J41/oKRmZNBWXjhMndqwSkEbvm+C2mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:22:85:06:41:14:2b:d3:e3:ca:2a:4e:c5:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Apr 21 01:01:17 2025 GMT
Not After : Apr 22 01:01:17 2025 GMT
Subject: CN=c790c38baa8c0223361b6565ed4b0207c06b560c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:36:8b:7d:62:8a:c6:60:5b:b5:b0:fd:72:26:
76:9f:ef:62:6b:71:76:c5:5e:d5:84:72:b7:85:19:
73:cc:98:bd:2f:51:86:02:10:50:45:5c:c7:99:1a:
0d:ee:2e:92:ed:d8:cc:a1:81:c9:43:02:f5:2a:61:
33:5d:5a:75:eb:bd:74:3b:81:d1:fb:ed:56:1e:19:
d5:e4:c5:48:70:3f:55:3f:d2:d3:a0:73:02:aa:6d:
66:6a:1d:98:a9:a8:3f:fc:49:f6:fa:de:da:e3:f6:
54:74:9d:e8:72:d9:98:f6:f9:26:ea:4c:22:5e:f9:
b6:79:f9:17:c1:75:af:ef:89:2e:70:0f:08:02:0d:
7d:ee:f5:37:fe:6f:46:e1:0c:c8:a4:c0:fe:a6:03:
c9:d8:c5:fe:de:e8:0d:55:85:06:15:c5:f3:a9:ec:
5c:b0:c3:c3:32:7b:b5:c8:8b:df:c4:96:79:05:90:
46:b0:15:b4:87:fa:a9:89:6a:9b:aa:eb:95:fa:6a:
d3:b6:60:8a:e6:72:fd:58:46:c7:c5:13:d5:d8:c5:
7a:23:90:e4:15:da:89:6e:a1:c1:9a:9b:9c:65:a7:
c9:08:75:d6:98:83:d9:44:2e:f2:7d:24:44:65:76:
81:14:80:7c:6e:5b:59:5d:94:f2:de:c8:56:1e:8c:
90:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:90:C3:8B:AA:8C:02:23:36:1B:65:65:ED:4B:02:07:C0:6B:56:0C
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4b:7c:8e:11:4a:7a:1f:f8:2e:9e:be:e3:0e:f9:ea:55:48:
fb:1b:80:86:3e:db:77:cd:29:37:e8:17:0e:44:59:72:ae:5c:
ea:99:81:5d:37:92:eb:a2:dc:fc:5e:22:38:96:0d:33:a7:04:
de:af:86:49:8e:7f:45:48:cd:cb:5e:33:1f:ee:30:48:5b:06:
6b:c7:c9:95:3b:e0:70:9b:33:6f:b4:81:38:dd:fc:82:c0:6d:
48:52:dd:ce:22:7a:be:bc:f7:26:5a:d5:64:01:9f:f0:26:24:
34:55:9c:4a:5d:d4:c8:f2:48:94:6c:2e:9e:ce:d6:3e:91:1b:
fa:9d:29:a1:f5:a8:cb:0e:f0:d6:e7:72:27:72:0b:a1:c2:ce:
6b:83:67:88:f9:42:9d:54:a6:1f:32:10:28:00:a1:52:36:b9:
43:9a:44:89:57:27:f5:7c:dc:51:51:66:7e:2a:4d:98:15:42:
93:9d:26:70:c0:36:65:89:4c:97:59:7b:c7:97:07:ae:86:90:
a5:fd:28:e9:20:b9:aa:5b:40:cb:e0:36:fd:89:ba:b4:e8:0c:
ed:c5:6f:77:c5:c3:6b:a8:64:9c:42:6d:4e:e0:d6:34:a1:e6:
06:d6:ed:b5:b7:2e:c5:f9:59:bc:e7:f3:7e:f8:f1:45:36:c8:
66:06:4b:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3SKFBkEUK9PjyipOxbQAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNDk0NWU0Njc2NDAyOWQyNTgxZDgyMGMzMzczZmE0NDU4
NTU1MzkwHhcNMjUwNDIxMDEwMTE3WhcNMjUwNDIyMDEwMTE3WjAzMTEwLwYDVQQD
EyhjNzkwYzM4YmFhOGMwMjIzMzYxYjY1NjVlZDRiMDIwN2MwNmI1NjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TaLfWKKxmBbtbD9ciZ2n+9ia3F2
xV7VhHK3hRlzzJi9L1GGAhBQRVzHmRoN7i6S7djMoYHJQwL1KmEzXVp16710O4HR
++1WHhnV5MVIcD9VP9LToHMCqm1mah2Yqag//En2+t7a4/ZUdJ3octmY9vkm6kwi
Xvm2efkXwXWv74kucA8IAg197vU3/m9G4QzIpMD+pgPJ2MX+3ugNVYUGFcXzqexc
sMPDMnu1yIvfxJZ5BZBGsBW0h/qpiWqbquuV+mrTtmCK5nL9WEbHxRPV2MV6I5Dk
FdqJbqHBmpucZafJCHXWmIPZRC7yfSREZXaBFIB8bltZXZTy3shWHoyQZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeQw4uqjAIjNhtlZe1LAgfAa1YMMB8GA1UdIwQY
MBaAFDpJReRnZAKdJYHYIMM3P6RFhVU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1Njgt
MzM2YWM5NDU2NDY0LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1NjgtMzM2YWM5NDU2NDY0
LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHEt8jhFK
eh/4Lp6+4w756lVI+xuAhj7bd80pN+gXDkRZcq5c6pmBXTeS66Lc/F4iOJYNM6cE
3q+GSY5/RUjNy14zH+4wSFsGa8fJlTvgcJszb7SBON38gsBtSFLdziJ6vrz3JlrV
ZAGf8CYkNFWcSl3UyPJIlGwuns7WPpEb+p0pofWoyw7w1udyJ3ILocLOa4NniPlC
nVSmHzIQKAChUja5Q5pEiVcn9XzcUVFmfipNmBVCk50mcMA2ZYlMl1l7x5cHroaQ
pf0o6SC5qltAy+A2/Ym6tOgM7cVvd8XDa6hknEJtTuDWNKHmBtbttbcuxflZvOfz
fvjxRTbIZgZLBQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:37 2025 by rpki-client