Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier: 0RTMGT8tw6auNdBQHYvTXKSFce0qb1uk15evGqrBJ5g=
Subject key identifier: 29:FE:80:0B:6D:79:82:4E:F6:88:AA:AD:DE:80:DD:CB:16:A0:A0:17
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 01962AF323664249676426A03A706409CAD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number: 0A0B
Signing time: Sat 12 Apr 2025 17:01:39 +0000
Manifest this update: Sat 12 Apr 2025 17:01:39 +0000
Manifest next update: Sun 13 Apr 2025 17:01:39 +0000
Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: 52MvRo0RawFbHxvJrGfHZS5565Fn7SeLbjw0kr9gv+U=)
2: cAytH-HDjgmoQUIxFhiNXUzaQk0.roa (hash: WrCK/gy3OkunpeHSieq4WLNSBfAWRn5dFSNNGUA3mvQ=)
3: zlltM2nOjh81UxcytVZozmvMUKM.roa (hash: xAPvFxFilxhJOjDq/sl/DoT41X3vws8/d3NLTmKyCmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:f3:23:66:42:49:67:64:26:a0:3a:70:64:09:ca:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Apr 12 17:01:39 2025 GMT
Not After : Apr 13 17:01:39 2025 GMT
Subject: CN=29fe800b6d79824ef688aaadde80ddcb16a0a017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:b4:d4:f9:8e:b6:ce:43:e4:50:5d:ce:36:
b8:b7:ae:3b:17:ec:b9:84:9b:a6:d5:32:dc:22:45:
4e:38:68:05:96:5e:7e:fe:f5:86:0b:90:fd:e6:ce:
0a:0b:e2:bd:8b:99:c0:1a:31:f2:2a:9b:b5:3a:22:
cb:17:7b:16:de:43:fd:bc:2d:0a:ab:f0:d0:52:29:
e4:e5:80:8c:8e:46:90:5e:2c:8b:67:47:96:bf:e1:
8e:4f:5f:90:30:ca:b9:d2:4f:b7:5c:6a:bb:95:60:
95:12:01:23:9f:d5:d7:14:48:66:1e:70:76:c6:09:
ac:3c:79:61:91:cb:38:e5:07:a1:98:67:f8:e8:61:
83:06:f9:80:5b:c4:85:1f:ad:a1:3f:a1:24:78:e4:
4c:e1:71:3a:e2:b7:31:7b:ec:0e:48:00:a0:37:f4:
02:5b:d8:04:5b:ee:61:d8:6d:26:ac:da:c9:0f:99:
3f:9a:60:c4:66:1b:2b:69:c2:ea:79:dc:42:0a:b2:
c3:8f:a8:34:55:a0:e0:dd:d5:ad:6d:a8:ed:3d:c5:
74:37:5f:60:2d:89:b6:4b:66:f9:65:17:84:91:f3:
8b:21:a7:60:86:2f:a3:f0:8a:2d:0a:20:cb:cc:b6:
ae:b1:58:d1:f9:cd:71:8b:8e:11:09:6c:b9:a8:8b:
2a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FE:80:0B:6D:79:82:4E:F6:88:AA:AD:DE:80:DD:CB:16:A0:A0:17
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:14:f5:25:f8:43:7a:84:c7:c4:02:c2:41:dc:9d:8b:e7:91:
28:2a:bb:49:8c:3f:92:f4:b3:da:6e:28:c8:9f:0c:e6:71:1b:
1e:31:2c:9f:1f:b1:73:49:8d:46:1e:f8:23:ca:d5:65:6b:19:
e3:2e:bb:fd:68:4c:1a:3d:48:3b:36:71:35:b0:d2:d7:9c:8d:
28:be:b4:22:7d:74:49:d1:d0:57:f1:05:9b:6b:a3:6c:b9:23:
db:cc:17:bd:0d:ff:bf:07:d2:a4:60:03:5b:ff:5b:f2:92:ca:
16:12:25:46:c4:29:99:2c:6d:5d:b4:4b:54:d2:a8:48:e7:ac:
cd:c3:2a:1a:78:6c:c2:c4:78:da:99:fb:fd:29:27:72:a4:0e:
dd:50:52:90:ee:da:0b:48:0c:88:f5:dd:d0:af:bd:af:97:7a:
b5:76:82:f4:5a:04:38:c5:2d:1a:23:f3:ad:cb:f7:c2:d3:c6:
6a:92:2d:37:5c:82:a2:f6:4e:97:d3:b0:66:d1:7b:e1:50:df:
36:df:96:ce:47:67:4b:9b:ac:f1:9f:75:49:d9:dc:c5:8f:09:
e4:b9:cb:47:39:71:53:1c:79:ad:90:9e:e1:d1:f5:72:c3:32:
cb:9f:56:f3:86:69:c7:a2:18:3a:45:e1:8e:04:e9:ca:cd:59:
80:e2:11:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYq8yNmQklnZCagOnBkCcrTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YTNjZWJiODExMDQ2YTA5NjZlOTU1NGQwN2U1ZDE2YjM2
ZGJmMDQwHhcNMjUwNDEyMTcwMTM5WhcNMjUwNDEzMTcwMTM5WjAzMTEwLwYDVQQD
EygyOWZlODAwYjZkNzk4MjRlZjY4OGFhYWRkZTgwZGRjYjE2YTBhMDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDK01PmOts5D5FBdzja4t647F+y5
hJum1TLcIkVOOGgFll5+/vWGC5D95s4KC+K9i5nAGjHyKpu1OiLLF3sW3kP9vC0K
q/DQUink5YCMjkaQXiyLZ0eWv+GOT1+QMMq50k+3XGq7lWCVEgEjn9XXFEhmHnB2
xgmsPHlhkcs45QehmGf46GGDBvmAW8SFH62hP6EkeORM4XE64rcxe+wOSACgN/QC
W9gEW+5h2G0mrNrJD5k/mmDEZhsracLqedxCCrLDj6g0VaDg3dWtbajtPcV0N19g
LYm2S2b5ZReEkfOLIadghi+j8IotCiDLzLausVjR+c1xi44RCWy5qIsq+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCn+gAtteYJO9oiqrd6A3csWoKAXMB8GA1UdIwQY
MBaAFDmjzruBEEaglm6VVNB+XRazbb8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUt
NmYyMWY0Yzc1MWYzLzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUtNmYyMWY0Yzc1MWYz
LzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxT1JfhD
eoTHxALCQdydi+eRKCq7SYw/kvSz2m4oyJ8M5nEbHjEsnx+xc0mNRh74I8rVZWsZ
4y67/WhMGj1IOzZxNbDS15yNKL60In10SdHQV/EFm2ujbLkj28wXvQ3/vwfSpGAD
W/9b8pLKFhIlRsQpmSxtXbRLVNKoSOeszcMqGnhswsR42pn7/SkncqQO3VBSkO7a
C0gMiPXd0K+9r5d6tXaC9FoEOMUtGiPzrcv3wtPGapItN1yCovZOl9OwZtF74VDf
Nt+WzkdnS5us8Z91SdncxY8J5LnLRzlxUxx5rZCe4dH1csMyy59W84Zpx6IYOkXh
jgTpys1ZgOIRCQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 19:59:01 2025 by rpki-client