Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
File: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft (raw, json)
Hash identifier: zNq2c3N3stFs367Q4UYrvr0UzMJ0Hlhz1t+Erj2WgIk=
Subject key identifier: 8A:52:C2:A8:B4:0F:AF:FA:CF:55:B0:D8:35:E7:FB:A8:56:93:9D:F5
Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
Certificate issuer: /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Certificate serial: 0196071D1C89020BC07C5837E12A418662F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
Manifest number: 14DA
Signing time: Sat 05 Apr 2025 18:01:10 +0000
Manifest this update: Sat 05 Apr 2025 18:01:10 +0000
Manifest next update: Sun 06 Apr 2025 18:01:10 +0000
Files and hashes: 1: MxdOOGKjf3TwBVC6lvhNhwB4_8Q.roa (hash: 5fj9W4zcJFTLUMtVyudn5yxVF316NgWFNmNlngfvVcI=)
2: dDjpKlcdmauXOkT6m9CWK4-kpis.roa (hash: G6ujxWSW0sYQE7gy/Nuu88UGg9rwT78FpEnJjrgOwo8=)
3: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl (hash: ivi3FiE3prNBlmte1/1C2d1XWsdTGdC4Amp6z01maLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:07:1d:1c:89:02:0b:c0:7c:58:37:e1:2a:41:86:62:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Validity
Not Before: Apr 5 18:01:10 2025 GMT
Not After : Apr 6 18:01:10 2025 GMT
Subject: CN=8a52c2a8b40faffacf55b0d835e7fba856939df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:2e:ed:ae:8d:8d:3b:01:56:62:08:ad:4d:
ed:d0:2c:be:1a:2a:32:77:ad:76:da:19:5e:65:f2:
73:c9:19:75:47:07:e2:2a:81:c3:fa:5d:35:56:25:
f7:27:d3:5a:82:c9:7d:84:bc:f5:eb:64:9e:9d:63:
f3:43:ca:e9:03:93:0f:62:7d:5a:e5:0a:15:fc:7f:
da:94:75:ff:70:80:ef:31:65:85:70:43:8f:1d:48:
fe:de:86:d3:43:bc:38:6b:2c:f5:24:35:55:f2:70:
9c:cc:45:ab:60:20:13:ea:04:20:7c:df:62:b8:95:
16:07:6e:2e:fb:77:a9:02:3a:22:6a:50:bc:fe:b0:
3a:76:63:4d:9f:a0:32:d0:09:96:05:62:5f:51:8a:
30:29:05:c6:6a:b3:d0:6a:34:2e:d1:6f:91:4e:56:
c2:c6:fc:f3:b3:a5:21:69:3c:cf:64:42:a9:a5:56:
44:1d:71:42:35:57:0f:cf:41:a8:7c:47:c0:db:00:
d2:e4:b0:57:cf:49:ae:80:51:01:b8:a6:76:38:08:
90:27:3a:18:eb:e2:e7:80:2f:f7:00:9a:a8:a3:f5:
2c:cc:56:47:56:fd:38:7c:92:1c:4f:40:63:38:86:
29:e5:98:2d:3e:33:c0:da:09:55:10:a7:00:9f:8c:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:52:C2:A8:B4:0F:AF:FA:CF:55:B0:D8:35:E7:FB:A8:56:93:9D:F5
X509v3 Authority Key Identifier:
keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3c:35:e3:3e:59:69:45:40:81:f6:97:87:7c:32:26:a7:a0:
1b:62:ed:5b:94:22:b6:17:2e:d8:61:39:5c:c7:63:25:62:e6:
d5:89:a8:38:b2:5c:4c:b6:78:55:e1:1f:01:93:5f:0e:3b:0d:
f5:5c:84:c6:22:55:3c:8a:d4:99:ea:7e:09:9d:18:a9:01:9e:
e9:98:01:1e:e4:04:81:4d:1a:cf:42:fc:b9:ba:4c:2c:62:54:
13:80:a6:3d:ff:e1:f7:09:89:6a:d2:13:04:e1:7d:53:1c:07:
14:99:65:0d:74:9a:49:22:e3:41:53:36:51:82:82:65:ed:65:
09:6b:e0:93:84:3b:08:bd:ce:77:c4:3d:40:1f:9a:5e:47:ad:
71:ad:47:05:0b:4b:01:65:4d:e1:11:21:5a:a4:bc:9e:cb:e7:
63:75:2f:c1:d0:65:47:8a:a5:97:a4:e4:2a:47:a0:e7:09:9c:
59:cf:24:f3:c8:48:d9:a4:bc:25:30:7d:fc:ea:15:50:ee:ec:
e6:de:46:cf:05:7b:4d:f8:81:1e:01:99:ed:bf:cd:ed:e4:4d:
da:9f:2f:c0:2c:c6:65:52:6c:25:8f:d4:75:b4:cb:ae:68:51:
03:da:83:a5:a4:62:86:de:ce:32:f3:8c:d2:3c:92:48:73:10:
2c:d3:0a:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYHHRyJAgvAfFg34SpBhmL2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNWUzZjk3NGI1Zjk3NDY1NmNjZjRkNDU1OTZjYWFkMWI5
MDk2ZDQwHhcNMjUwNDA1MTgwMTEwWhcNMjUwNDA2MTgwMTEwWjAzMTEwLwYDVQQD
Eyg4YTUyYzJhOGI0MGZhZmZhY2Y1NWIwZDgzNWU3ZmJhODU2OTM5ZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjsu7a6NjTsBVmIIrU3t0Cy+Gioy
d6122hleZfJzyRl1RwfiKoHD+l01ViX3J9Nagsl9hLz162SenWPzQ8rpA5MPYn1a
5QoV/H/alHX/cIDvMWWFcEOPHUj+3obTQ7w4ayz1JDVV8nCczEWrYCAT6gQgfN9i
uJUWB24u+3epAjoialC8/rA6dmNNn6Ay0AmWBWJfUYowKQXGarPQajQu0W+RTlbC
xvzzs6UhaTzPZEKppVZEHXFCNVcPz0GofEfA2wDS5LBXz0mugFEBuKZ2OAiQJzoY
6+LngC/3AJqoo/UszFZHVv04fJIcT0BjOIYp5ZgtPjPA2glVEKcAn4w77wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpSwqi0D6/6z1Ww2DXn+6hWk531MB8GA1UdIwQY
MBaAFKFeP5dLX5dGVsz01FWWyq0bkJbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kNmE0MjItMzYxMi00NWFmLTgzYWIt
ZDI0YjY4OTY2ZTBlLzEvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kNmE0MjItMzYxMi00NWFmLTgzYWItZDI0YjY4OTY2ZTBl
LzEvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDw14z5Z
aUVAgfaXh3wyJqegG2LtW5Qithcu2GE5XMdjJWLm1YmoOLJcTLZ4VeEfAZNfDjsN
9VyExiJVPIrUmep+CZ0YqQGe6ZgBHuQEgU0az0L8ubpMLGJUE4CmPf/h9wmJatIT
BOF9UxwHFJllDXSaSSLjQVM2UYKCZe1lCWvgk4Q7CL3Od8Q9QB+aXketca1HBQtL
AWVN4REhWqS8nsvnY3UvwdBlR4qll6TkKkeg5wmcWc8k88hI2aS8JTB9/OoVUO7s
5t5GzwV7TfiBHgGZ7b/N7eRN2p8vwCzGZVJsJY/UdbTLrmhRA9qDpaRiht7OMvOM
0jySSHMQLNMK7w==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:20 2025 by rpki-client