Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
File: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft (raw, json)
Hash identifier: UnXwJ64ze5syPMFOmiwPatDWKi0PrUwSllzORZV4mlY=
Subject key identifier: 0E:24:E9:7C:64:73:19:6E:47:63:AB:E4:9B:7D:49:08:14:80:60:E4
Authority key identifier: D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
Certificate issuer: /CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Certificate serial: 0196523653067E6D6B142B40B55A0AE0C026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
Manifest number: 0A7F
Signing time: Sun 20 Apr 2025 08:00:13 +0000
Manifest this update: Sun 20 Apr 2025 08:00:13 +0000
Manifest next update: Mon 21 Apr 2025 08:00:13 +0000
Files and hashes: 1: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl (hash: Enb8S0evqILj4m7MYSpv1R2C2n1U61hEx7J7VdeDleE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:53:06:7e:6d:6b:14:2b:40:b5:5a:0a:e0:c0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Validity
Not Before: Apr 20 08:00:13 2025 GMT
Not After : Apr 21 08:00:13 2025 GMT
Subject: CN=0e24e97c6473196e4763abe49b7d4908148060e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b9:95:fe:cf:21:bc:53:fe:71:73:ad:65:17:
db:62:95:f4:34:fb:2f:98:1f:d0:97:eb:d7:60:2f:
17:37:13:36:1c:df:d0:84:1c:75:66:c9:45:6e:a0:
8d:a4:0b:03:d7:4d:f3:d4:a8:bd:d6:8e:94:9d:69:
c1:70:ec:eb:fb:c9:d5:66:b5:50:68:c2:06:74:11:
7d:06:7b:9e:69:e1:b2:70:5a:2e:80:86:f1:72:c8:
23:e9:16:6b:e4:29:56:fe:a9:6f:ae:0c:23:15:b7:
39:88:13:ab:79:b3:cb:12:78:ac:32:07:c9:7e:58:
9d:dd:fc:cb:bf:83:f1:1c:a5:31:f7:fc:d7:91:87:
a6:db:e6:28:0c:7b:78:65:62:a3:f0:bd:31:13:57:
9a:90:6d:e7:74:18:09:60:8c:32:a1:ad:f4:05:37:
04:28:3b:62:f1:83:4e:53:9f:09:96:af:de:f4:79:
69:f6:e0:f0:07:ec:4d:b0:7f:66:ae:86:45:22:4d:
e5:da:55:4e:8a:11:f1:d9:12:df:fc:12:29:29:40:
b6:d6:14:58:ce:83:5f:35:30:5c:06:0b:0b:7e:b9:
38:0d:f1:15:65:23:c7:99:66:ab:f8:83:61:83:26:
ac:b8:8f:73:9a:4b:55:cc:02:2f:89:ea:f4:c3:a4:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:24:E9:7C:64:73:19:6E:47:63:AB:E4:9B:7D:49:08:14:80:60:E4
X509v3 Authority Key Identifier:
keyid:D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:72:a3:76:c4:ad:db:ab:6b:7d:8b:43:50:99:a9:82:52:f8:
6c:8a:f2:e1:2d:43:fb:10:3c:93:4f:c2:af:7c:21:9f:0a:c2:
1c:82:ba:af:9e:c1:01:a3:1a:d3:01:c4:82:00:16:5c:e5:65:
a4:12:7d:01:1f:8f:d2:b2:56:8a:52:52:96:90:3f:ab:32:5a:
0b:58:88:d5:ac:fd:6c:ae:25:fd:3c:78:a9:31:77:ec:15:ae:
45:e2:d5:7d:5d:a0:ff:53:ca:e3:1f:a3:06:07:05:02:65:07:
6f:58:e4:01:3f:c6:6d:ae:e8:02:92:fb:32:fb:db:77:b6:33:
f2:ac:52:30:e2:2d:f2:d8:cc:81:3c:5f:63:16:ad:4d:f8:56:
b2:f3:20:d8:83:15:ec:1d:94:62:bc:3b:a0:45:c9:7a:df:59:
43:79:99:58:25:aa:81:d1:7e:df:49:9a:6e:3f:50:14:d2:b6:
35:a6:23:85:26:f7:0c:d1:0b:78:95:62:42:39:a8:40:04:ba:
5b:66:08:1f:d9:ca:74:e1:51:f0:a1:1b:63:61:13:57:79:b7:
66:24:dd:8e:b0:36:7b:53:00:48:b5:98:56:94:63:4b:5c:61:
62:38:e2:64:86:e7:c1:f1:ea:9b:4b:08:23:91:0b:19:b5:53:
f4:2b:be:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSNlMGfm1rFCtAtVoK4MAmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMDk4ZTVlMjBkNzhmOTRlNjk2YzEzNzJiNTYyM2ZmYTcx
ZDk0ZDAwHhcNMjUwNDIwMDgwMDEzWhcNMjUwNDIxMDgwMDEzWjAzMTEwLwYDVQQD
EygwZTI0ZTk3YzY0NzMxOTZlNDc2M2FiZTQ5YjdkNDkwODE0ODA2MGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLmV/s8hvFP+cXOtZRfbYpX0NPsv
mB/Ql+vXYC8XNxM2HN/QhBx1ZslFbqCNpAsD103z1Ki91o6UnWnBcOzr+8nVZrVQ
aMIGdBF9BnueaeGycFougIbxcsgj6RZr5ClW/qlvrgwjFbc5iBOrebPLEnisMgfJ
flid3fzLv4PxHKUx9/zXkYem2+YoDHt4ZWKj8L0xE1eakG3ndBgJYIwyoa30BTcE
KDti8YNOU58Jlq/e9Hlp9uDwB+xNsH9mroZFIk3l2lVOihHx2RLf/BIpKUC21hRY
zoNfNTBcBgsLfrk4DfEVZSPHmWar+INhgyasuI9zmktVzAIvier0w6QrtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4k6XxkcxluR2Or5Jt9SQgUgGDkMB8GA1UdIwQY
MBaAFNMJjl4g14+U5pbBNytWI/+nHZTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHdtT1hpRFhqNVRtbHNFM0sxWWpfNmNkbE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81MzYxY2MtYjA0ZC00NDY1LTkzOGQt
NjE3YTI2MzI3ZTk4LzEvMHdtT1hpRFhqNVRtbHNFM0sxWWpfNmNkbE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81MzYxY2MtYjA0ZC00NDY1LTkzOGQtNjE3YTI2MzI3ZTk4
LzEvMHdtT1hpRFhqNVRtbHNFM0sxWWpfNmNkbE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXKjdsSt
26trfYtDUJmpglL4bIry4S1D+xA8k0/Cr3whnwrCHIK6r57BAaMa0wHEggAWXOVl
pBJ9AR+P0rJWilJSlpA/qzJaC1iI1az9bK4l/Tx4qTF37BWuReLVfV2g/1PK4x+j
BgcFAmUHb1jkAT/Gba7oApL7Mvvbd7Yz8qxSMOIt8tjMgTxfYxatTfhWsvMg2IMV
7B2UYrw7oEXJet9ZQ3mZWCWqgdF+30mabj9QFNK2NaYjhSb3DNELeJViQjmoQAS6
W2YIH9nKdOFR8KEbY2ETV3m3ZiTdjrA2e1MASLWYVpRjS1xhYjjiZIbnwfHqm0sI
I5ELGbVT9Cu+3Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:56 2025 by rpki-client