Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
File: 1OTgFewB2mrn2EkW_RrUyqkE3E4.mft (raw, json)
Hash identifier: uqUC2O+rigg9ch2VkAy9eovUfHOxleog3xltiCQLBMU=
Subject key identifier: 3D:E2:72:27:8F:A8:57:2E:C6:22:AC:1B:FC:03:90:10:93:A4:F8:C9
Authority key identifier: D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
Certificate issuer: /CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Certificate serial: 01964EC760098FB4C31D61F75C2FB863A6B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
Manifest number: 0BCA
Signing time: Sat 19 Apr 2025 16:00:11 +0000
Manifest this update: Sat 19 Apr 2025 16:00:11 +0000
Manifest next update: Sun 20 Apr 2025 16:00:11 +0000
Files and hashes: 1: 1OTgFewB2mrn2EkW_RrUyqkE3E4.crl (hash: UrZVDZZtr7raCoZV5LIKsmsVrAbNGVul/wg83pCw9KM=)
2: Cg7qlLFT5Tw2Rj89YI6LNGMAVC8.roa (hash: RUt6pQHc+8RuyWicYb+I1y3SWfel5InfTPhk0ybD+Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:60:09:8f:b4:c3:1d:61:f7:5c:2f:b8:63:a6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Validity
Not Before: Apr 19 16:00:11 2025 GMT
Not After : Apr 20 16:00:11 2025 GMT
Subject: CN=3de272278fa8572ec622ac1bfc03901093a4f8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:cc:b7:11:3a:77:a7:13:7e:fb:81:27:5a:
d8:87:e5:51:eb:fe:b5:20:13:e3:d7:4c:4a:ed:70:
3e:c4:9d:c8:ba:c3:09:70:33:c9:2c:9c:ea:ab:74:
4d:5b:1a:7d:b9:fa:43:79:80:39:74:f4:21:db:d2:
6c:aa:68:85:39:8f:ed:e6:23:b4:f7:d2:5f:22:ba:
f8:e2:d6:dd:5e:5c:8a:f9:98:8a:47:79:8c:06:ae:
f3:dc:fe:8f:93:03:6d:5e:52:d7:70:70:d9:ca:02:
57:e1:93:f5:2a:b0:12:a6:15:bf:57:c9:46:c4:99:
f9:00:5b:82:78:a6:40:c0:d7:43:a6:30:73:98:e1:
af:8c:72:3e:dd:9d:27:62:45:fc:27:46:89:76:53:
6d:61:7d:88:68:45:6a:ed:b8:a8:e4:87:ac:99:36:
83:34:17:c6:74:73:08:fa:06:e8:96:ba:49:a2:76:
c3:b0:54:34:89:40:7c:c2:84:4f:6a:f8:71:86:80:
98:b5:96:7a:c6:b4:b3:f4:a1:c2:f7:08:f9:ef:c7:
96:be:a8:45:10:a8:ac:5b:ed:5d:c3:e9:6d:59:de:
08:65:b4:6a:f7:06:09:74:e4:95:af:37:92:a3:b8:
d5:ab:bd:8a:5c:ad:82:0b:d3:36:66:bc:45:02:4a:
a2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E2:72:27:8F:A8:57:2E:C6:22:AC:1B:FC:03:90:10:93:A4:F8:C9
X509v3 Authority Key Identifier:
keyid:D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b9:2e:ca:3b:7a:8a:51:16:b6:d4:3e:68:9e:c3:86:2b:dd:
c0:2b:4b:2d:54:a2:38:5b:d7:84:e0:29:19:00:24:e5:f4:2b:
a4:83:a2:f9:ab:1b:d2:b8:f4:8a:ab:4a:96:14:31:6f:25:87:
a2:43:53:dc:aa:63:47:92:4d:7f:bd:7d:6c:0c:a7:93:da:e5:
f8:b7:0c:04:f8:ac:71:a2:04:b0:73:aa:a3:22:69:c9:4f:a3:
02:4b:f4:f9:96:c0:cf:7c:71:f1:81:ef:b2:4a:a8:3b:3c:e7:
0f:92:fb:cd:a7:96:62:4e:9f:14:a2:82:08:77:d0:2a:1f:2e:
eb:ca:4b:4d:02:75:82:e5:18:26:d9:8a:e7:1e:1a:18:0a:e0:
96:14:f0:72:7c:6e:9b:d4:e9:b5:17:1d:58:22:aa:a1:5a:21:
55:9d:48:fa:fb:ad:37:3d:4b:54:91:90:fc:93:9b:78:cb:17:
15:8f:8d:60:5f:21:4a:f4:8d:72:f0:64:09:3c:ed:84:80:54:
4a:68:3a:30:e2:09:58:c7:73:f3:1b:11:71:ca:d5:82:7a:4c:
b4:f0:6f:01:15:d4:ca:66:fc:e6:e1:a5:6d:23:65:a1:65:28:
b5:c0:a3:99:85:23:74:ae:e8:15:65:b0:bf:7b:8c:f0:9f:31:
9e:8b:d5:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOx2AJj7TDHWH3XC+4Y6a3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZTRlMDE1ZWMwMWRhNmFlN2Q4NDkxNmZkMWFkNGNhYTkw
NGRjNGUwHhcNMjUwNDE5MTYwMDExWhcNMjUwNDIwMTYwMDExWjAzMTEwLwYDVQQD
EygzZGUyNzIyNzhmYTg1NzJlYzYyMmFjMWJmYzAzOTAxMDkzYTRmOGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrjMtxE6d6cTfvuBJ1rYh+VR6/61
IBPj10xK7XA+xJ3IusMJcDPJLJzqq3RNWxp9ufpDeYA5dPQh29JsqmiFOY/t5iO0
99JfIrr44tbdXlyK+ZiKR3mMBq7z3P6PkwNtXlLXcHDZygJX4ZP1KrASphW/V8lG
xJn5AFuCeKZAwNdDpjBzmOGvjHI+3Z0nYkX8J0aJdlNtYX2IaEVq7bio5IesmTaD
NBfGdHMI+gbolrpJonbDsFQ0iUB8woRPavhxhoCYtZZ6xrSz9KHC9wj578eWvqhF
EKisW+1dw+ltWd4IZbRq9wYJdOSVrzeSo7jVq72KXK2CC9M2ZrxFAkqiCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3iciePqFcuxiKsG/wDkBCTpPjJMB8GA1UdIwQY
MBaAFNTk4BXsAdpq59hJFv0a1MqpBNxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU9UZ0Zld0IybXJuMkVrV19SclV5cWtFM0U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iZGQ4N2MtYTZkOS00YmMyLTlkODct
MGE4MTJiYjE4ZjM1LzEvMU9UZ0Zld0IybXJuMkVrV19SclV5cWtFM0U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9iZGQ4N2MtYTZkOS00YmMyLTlkODctMGE4MTJiYjE4ZjM1
LzEvMU9UZ0Zld0IybXJuMkVrV19SclV5cWtFM0U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7kuyjt6
ilEWttQ+aJ7DhivdwCtLLVSiOFvXhOApGQAk5fQrpIOi+asb0rj0iqtKlhQxbyWH
okNT3KpjR5JNf719bAynk9rl+LcMBPiscaIEsHOqoyJpyU+jAkv0+ZbAz3xx8YHv
skqoOzznD5L7zaeWYk6fFKKCCHfQKh8u68pLTQJ1guUYJtmK5x4aGArglhTwcnxu
m9TptRcdWCKqoVohVZ1I+vutNz1LVJGQ/JObeMsXFY+NYF8hSvSNcvBkCTzthIBU
Smg6MOIJWMdz8xsRccrVgnpMtPBvARXUymb85uGlbSNloWUotcCjmYUjdK7oFWWw
v3uM8J8xnovVXw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:04 2025 by rpki-client