Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
File: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft (raw, json)
Hash identifier: Py3NsUvPkVzavuc0BQidzbFh2RcWQ6b9Ww9k4r0bseo=
Subject key identifier: 48:1B:B2:C1:C2:85:C9:60:63:3F:6A:30:D0:A0:5D:FA:7D:B6:EA:9B
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial: 019653B73783FC6299C2C4ABB4958690832E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 15:00:38 +0000
Manifest this update: Sun 20 Apr 2025 15:00:38 +0000
Manifest next update: Mon 21 Apr 2025 15:00:38 +0000
Files and hashes: 1: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl (hash: D8w9/uzR2vZyh5+CeQmtA4IQdPV5M3UWYV4et08Xv8Y=)
2: t9qHq5xTtnN-jj4rqq-G8Agb4fE.roa (hash: t+hLra7ztXXuOYQYYQngzFN6esJ5Nassa730bMic3dU=)
3: vLREmzKS7ARNQ8r2dAo92bSwFOE.roa (hash: I+ZNUqrukd4BTvdK3vQp+SBz+2MVzX88vJMJ1QUiiVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:37:83:fc:62:99:c2:c4:ab:b4:95:86:90:83:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Validity
Not Before: Apr 20 15:00:38 2025 GMT
Not After : Apr 21 15:00:38 2025 GMT
Subject: CN=481bb2c1c285c960633f6a30d0a05dfa7db6ea9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:e1:e6:62:ee:d0:04:e4:6a:e6:3c:5b:20:
e6:fa:35:40:a4:ff:04:33:c4:43:9a:4f:8e:1a:b1:
06:25:e8:7c:10:df:6a:a6:4c:4b:41:07:c0:cc:e6:
f1:48:88:b4:03:84:66:da:63:58:ab:1a:23:d4:9c:
14:f0:69:a5:a3:8b:51:03:56:ba:29:99:7b:1a:33:
f5:fb:75:8b:07:95:48:a7:bb:68:ab:93:23:73:63:
68:2e:47:1d:05:68:5e:58:64:ed:2d:cc:3f:e4:f2:
ac:79:0c:bf:b2:8a:0f:28:30:88:7f:8e:3b:62:d0:
2e:79:dd:79:bc:50:40:23:ae:f6:5f:e0:4c:4d:3e:
65:98:d4:eb:1b:02:ce:58:17:22:71:e5:24:38:e8:
c3:b5:62:85:06:22:ca:16:78:ea:c0:7a:16:8d:cd:
96:ba:d8:45:e7:e0:68:fe:13:41:a6:11:a4:bf:c3:
79:28:2b:98:f9:e4:2a:d1:8f:7d:f5:40:0a:2e:af:
26:95:54:10:57:c3:a9:7f:31:a7:cd:c4:d8:21:5f:
9c:ba:dd:1c:64:d5:ec:92:29:31:20:f3:25:07:cd:
32:bf:df:e1:64:6b:fd:bf:eb:33:31:cc:21:56:3e:
f7:ab:5a:f8:e4:25:74:83:34:03:bc:b9:4f:29:6b:
15:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1B:B2:C1:C2:85:C9:60:63:3F:6A:30:D0:A0:5D:FA:7D:B6:EA:9B
X509v3 Authority Key Identifier:
keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:22:91:01:be:8e:1b:e3:cf:6d:a5:cf:ac:71:3d:b7:91:a2:
00:46:16:a7:d5:17:c8:83:70:1e:11:2f:58:c9:8d:8f:b4:28:
09:7a:ac:b7:ae:98:57:33:89:7f:06:9e:25:81:25:73:77:b1:
4b:41:72:52:88:f6:c0:18:71:6a:dd:3a:0b:57:0b:94:d0:bf:
ad:d6:6e:81:9a:28:e2:e3:ff:60:0f:1d:14:b6:47:68:e7:bb:
23:9e:a2:b3:2e:d1:b1:46:9f:ff:b7:fe:38:17:c5:fd:81:41:
64:a7:33:fe:95:f1:cd:dd:19:a4:ee:c6:f8:29:0b:95:19:6e:
d9:1b:09:9a:5c:72:d6:7d:88:f1:ef:94:a3:ed:64:f8:68:fe:
2c:5d:ca:31:28:de:c6:52:c8:7b:fd:e1:0b:92:bb:cf:48:e0:
8a:99:c5:09:36:b8:e7:b2:1e:c7:70:1c:f4:ad:f2:c4:9b:b0:
88:75:bf:98:5a:18:51:75:8d:c8:ff:32:d9:83:a2:d1:a7:da:
42:91:5e:bd:e5:de:06:63:58:fa:15:dd:62:51:f6:c2:ef:d5:
1f:dd:7e:0f:72:53:51:5a:8e:cd:8f:cd:ae:fe:f8:32:bd:fc:
86:45:e5:70:2f:a5:b4:a8:17:85:16:cf:f6:d1:2d:b3:63:77:
ec:3b:a1:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTtzeD/GKZwsSrtJWGkIMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMzA0MmQxMzdmYmIwM2JlYmE2NDIxZjMzYTg1MjViNTJh
ODhmN2EwHhcNMjUwNDIwMTUwMDM4WhcNMjUwNDIxMTUwMDM4WjAzMTEwLwYDVQQD
Eyg0ODFiYjJjMWMyODVjOTYwNjMzZjZhMzBkMGEwNWRmYTdkYjZlYTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qXh5mLu0ATkauY8WyDm+jVApP8E
M8RDmk+OGrEGJeh8EN9qpkxLQQfAzObxSIi0A4Rm2mNYqxoj1JwU8Gmlo4tRA1a6
KZl7GjP1+3WLB5VIp7toq5Mjc2NoLkcdBWheWGTtLcw/5PKseQy/sooPKDCIf447
YtAued15vFBAI672X+BMTT5lmNTrGwLOWBciceUkOOjDtWKFBiLKFnjqwHoWjc2W
uthF5+Bo/hNBphGkv8N5KCuY+eQq0Y999UAKLq8mlVQQV8OpfzGnzcTYIV+cut0c
ZNXskikxIPMlB80yv9/hZGv9v+szMcwhVj73q1r45CV0gzQDvLlPKWsVYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgbssHChclgYz9qMNCgXfp9tuqbMB8GA1UdIwQY
MBaAFKEwQtE3+7A766ZCHzOoUltSqI96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9hZjQ0MDctZjk4ZS00OTk0LTlmOWUt
ZjZiNmMwNDkxNmExLzEvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9hZjQ0MDctZjk4ZS00OTk0LTlmOWUtZjZiNmMwNDkxNmEx
LzEvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyKRAb6O
G+PPbaXPrHE9t5GiAEYWp9UXyINwHhEvWMmNj7QoCXqst66YVzOJfwaeJYElc3ex
S0FyUoj2wBhxat06C1cLlNC/rdZugZoo4uP/YA8dFLZHaOe7I56isy7RsUaf/7f+
OBfF/YFBZKcz/pXxzd0ZpO7G+CkLlRlu2RsJmlxy1n2I8e+Uo+1k+Gj+LF3KMSje
xlLIe/3hC5K7z0jgipnFCTa457Iex3Ac9K3yxJuwiHW/mFoYUXWNyP8y2YOi0afa
QpFeveXeBmNY+hXdYlH2wu/VH91+D3JTUVqOzY/Nrv74Mr38hkXlcC+ltKgXhRbP
9tEts2N37DuhkA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:18 2025 by rpki-client