Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: xItLZ32kRNqpGLiaM5ikAqDyXhglzq/2Xh8FSgjISMc=
Subject key identifier: 5C:8D:23:08:41:92:7C:52:48:3F:F8:7E:C5:99:B9:88:10:6A:18:FA
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 01965FBC0F61E9942181C3D16A5E907E7242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 1506
Signing time: Tue 22 Apr 2025 23:01:22 +0000
Manifest this update: Tue 22 Apr 2025 23:01:22 +0000
Manifest next update: Wed 23 Apr 2025 23:01:22 +0000
Files and hashes: 1: 44FBBoaP1hY4HlkyJxoeqw82Ez0.roa (hash: Ij/VEJNQIjQvvNrHY8dRfRHlSxSYc7lDRay7etVRtiI=)
2: Vwp4sUHwufYyD-bPptLzOvd6WdQ.roa (hash: YWIoCXXcHFga0/3pa1NcRYE9BSy/d2UDiqjf+NsI2BE=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: 40SrV/WZcetdRIibd5kFTO9QHl2y9TTmfJqxi0u1CzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:bc:0f:61:e9:94:21:81:c3:d1:6a:5e:90:7e:72:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Apr 22 23:01:22 2025 GMT
Not After : Apr 23 23:01:22 2025 GMT
Subject: CN=5c8d230841927c52483ff87ec599b988106a18fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:91:25:04:46:81:83:36:a0:f7:87:f5:bd:63:
70:c9:2f:89:ca:f7:3b:b4:bf:4d:f5:89:b5:e1:b6:
64:ed:d1:0a:5d:41:b8:99:98:14:8d:0d:53:6c:9b:
21:c7:a0:e1:d1:8a:aa:c1:53:50:6c:19:63:24:8e:
6b:28:4c:8d:db:11:eb:54:79:eb:f7:73:0b:a3:48:
f6:59:19:03:10:49:55:6c:3b:71:02:15:8b:52:1a:
79:a0:84:13:35:12:25:a5:80:87:6f:43:42:fa:0e:
a5:72:87:7b:88:d0:fb:de:ae:9c:ff:bc:23:28:80:
9e:38:f9:1a:ad:31:49:b4:16:8d:66:38:62:56:07:
83:b9:7d:64:53:1e:58:5a:99:09:61:9a:57:79:e4:
12:9f:41:66:60:16:65:4d:75:86:45:39:17:0b:bd:
41:d5:61:fa:1f:30:07:06:21:9c:c2:f3:48:76:31:
e6:ef:14:3a:96:4f:53:b6:41:6d:28:20:95:16:8c:
7b:06:34:1d:7b:77:b8:91:ba:3e:58:29:91:3a:35:
34:ae:b6:e6:a7:cd:ec:0b:42:60:05:06:06:df:59:
90:8e:24:86:2f:43:36:f1:94:3a:3e:2c:9c:12:9f:
dc:db:c4:db:b7:a5:72:03:49:f1:9d:9d:5c:df:3e:
b6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8D:23:08:41:92:7C:52:48:3F:F8:7E:C5:99:B9:88:10:6A:18:FA
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8a:98:83:d7:e0:fd:20:80:8e:be:9d:2e:20:84:6a:44:bb:
50:71:06:95:1e:66:0e:32:08:3b:fc:e1:60:6e:ad:fd:5f:c6:
f1:4a:80:d4:ec:20:d3:f7:43:d7:6f:d3:a7:ba:5c:30:0c:3b:
58:7e:94:9b:34:ee:c7:47:e7:91:0d:33:8c:9f:f6:c0:05:e6:
e4:4a:08:01:c5:3f:38:7f:e9:a3:dd:4a:68:ad:55:ae:9e:01:
57:a7:4f:85:ec:ef:fe:34:6a:64:50:cd:dc:7d:78:cf:d1:8b:
89:8e:d9:81:73:3d:60:2b:c1:05:0d:8b:46:af:54:bb:41:e2:
53:8a:1f:14:84:b7:ea:c0:2c:26:cb:db:f5:dc:e2:02:41:1a:
ba:d3:b4:33:a8:93:bb:b7:2e:2a:cd:18:8f:3b:db:fc:c3:86:
c9:4b:2a:33:3a:c3:70:ce:e7:dc:98:72:45:00:05:38:a9:a6:
70:66:d3:ba:f6:1a:75:6a:89:e8:a2:85:58:f4:60:e6:45:c5:
76:bd:7f:66:92:d6:8b:59:97:68:d7:7f:a7:15:eb:3c:ea:93:
d8:3c:75:1b:98:2e:c1:65:17:89:be:95:e7:d1:96:e7:77:3d:
8c:56:9c:26:ef:eb:0c:24:04:59:17:2c:52:dd:a7:bf:fe:b2:
e7:3e:f9:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZfvA9h6ZQhgcPRal6QfnJCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNzgxMThkYjA1ZTRjOTNlNzZmYTFmMWM5NTY3OWM3MDVi
ZWIyMDgwHhcNMjUwNDIyMjMwMTIyWhcNMjUwNDIzMjMwMTIyWjAzMTEwLwYDVQQD
Eyg1YzhkMjMwODQxOTI3YzUyNDgzZmY4N2VjNTk5Yjk4ODEwNmExOGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZElBEaBgzag94f1vWNwyS+Jyvc7
tL9N9Ym14bZk7dEKXUG4mZgUjQ1TbJshx6Dh0YqqwVNQbBljJI5rKEyN2xHrVHnr
93MLo0j2WRkDEElVbDtxAhWLUhp5oIQTNRIlpYCHb0NC+g6lcod7iND73q6c/7wj
KICeOPkarTFJtBaNZjhiVgeDuX1kUx5YWpkJYZpXeeQSn0FmYBZlTXWGRTkXC71B
1WH6HzAHBiGcwvNIdjHm7xQ6lk9TtkFtKCCVFox7BjQde3e4kbo+WCmROjU0rrbm
p83sC0JgBQYG31mQjiSGL0M28ZQ6PiycEp/c28Tbt6VyA0nxnZ1c3z62IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyNIwhBknxSSD/4fsWZuYgQahj6MB8GA1UdIwQY
MBaAFKN4EY2wXkyT52+h8clWeccFvrIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wZjM1NWEtM2EwYS00NmVjLWIwN2Yt
ODY2NjA3YWYyZmE1LzEvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8wZjM1NWEtM2EwYS00NmVjLWIwN2YtODY2NjA3YWYyZmE1
LzEvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIqYg9fg
/SCAjr6dLiCEakS7UHEGlR5mDjIIO/zhYG6t/V/G8UqA1Owg0/dD12/Tp7pcMAw7
WH6UmzTux0fnkQ0zjJ/2wAXm5EoIAcU/OH/po91KaK1Vrp4BV6dPhezv/jRqZFDN
3H14z9GLiY7ZgXM9YCvBBQ2LRq9Uu0HiU4ofFIS36sAsJsvb9dziAkEautO0M6iT
u7cuKs0Yjzvb/MOGyUsqMzrDcM7n3JhyRQAFOKmmcGbTuvYadWqJ6KKFWPRg5kXF
dr1/ZpLWi1mXaNd/pxXrPOqT2Dx1G5guwWUXib6V59GW53c9jFacJu/rDCQEWRcs
Ut2nv/6y5z75QA==
-----END CERTIFICATE-----
Generated at Wed Apr 23 03:38:05 2025 by rpki-client