Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: ev/W5o/S+KsZbRACSoSzoexZ/qsSH2VS7Gu22L2tPIo=
Subject key identifier: A5:3C:3A:83:58:DA:ED:51:05:ED:32:CF:FE:F0:5A:91:12:C8:04:69
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 01965681A49CADA4ED7C537EE57B41CD3AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 04:00:58 +0000
Manifest this update: Mon 21 Apr 2025 04:00:58 +0000
Manifest next update: Tue 22 Apr 2025 04:00:58 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: KVbZRnRiHvfrs3Eb7tm5QdYJ8ruk1N4C3vT5lT/qjvY=)
2: d0vd09ijftZxQ36MggmGV19KbF8.roa (hash: qQnSCjOjuDvlDGOH0RwUYDIFq1N35gmrsquQwH69sXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:a4:9c:ad:a4:ed:7c:53:7e:e5:7b:41:cd:3a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Apr 21 04:00:58 2025 GMT
Not After : Apr 22 04:00:58 2025 GMT
Subject: CN=a53c3a8358daed5105ed32cffef05a9112c80469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cf:c8:40:9f:e7:97:80:00:93:47:1d:0b:be:
d5:9b:c2:25:9e:63:fa:29:14:c5:05:18:56:db:ee:
1d:2e:e5:f7:33:9a:09:49:82:df:8e:66:b8:7e:99:
e3:66:86:e6:fb:e7:94:22:a0:19:08:00:4a:e8:39:
c7:cd:be:53:32:7f:d0:a7:39:2b:4e:df:bf:5c:72:
95:b4:15:ce:0e:60:ad:c2:9f:1e:55:19:b3:63:0c:
99:6f:f5:59:43:56:83:f8:c4:ce:87:30:d7:03:22:
36:cd:d1:13:26:05:5a:05:db:76:61:cd:05:82:e3:
87:3c:82:1b:da:f2:38:06:9b:53:48:59:9b:27:93:
0a:6c:7b:7a:24:a7:d3:d8:61:81:6e:82:8b:94:73:
65:c2:d3:96:d7:77:91:e9:02:15:79:ed:c3:c2:03:
82:29:dc:4c:c6:c5:71:56:da:b3:09:78:01:07:5a:
d7:df:c5:2d:2e:e3:35:d3:74:2e:05:c3:1e:df:e9:
6e:b1:da:54:32:31:8a:40:92:94:a3:34:fe:bd:ea:
da:6b:29:8c:8e:70:37:70:21:b8:62:f1:80:23:e2:
59:d0:cc:41:31:b2:24:6f:75:3a:8f:7a:46:e0:c2:
f3:c5:c5:be:8b:31:3c:64:ed:78:b2:e9:e9:f9:9a:
a8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3C:3A:83:58:DA:ED:51:05:ED:32:CF:FE:F0:5A:91:12:C8:04:69
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:82:56:ec:85:ba:69:4d:fc:10:64:31:bd:d4:4e:3c:e0:9b:
92:99:7c:9b:b8:af:1e:49:35:54:06:b5:3e:99:8c:fd:3a:a7:
5e:7e:4f:ab:22:6c:aa:25:c5:e0:95:21:56:c8:1b:2a:d6:cb:
3a:91:3b:46:fb:c5:49:3b:fe:6f:77:31:28:c1:2e:a8:a5:b7:
60:27:e5:b3:09:1d:5d:27:17:91:f8:fc:fa:d1:44:0f:1d:d8:
ae:eb:56:1a:7d:2c:ba:1f:83:cc:c5:5d:23:9b:c4:f3:74:02:
57:6f:2d:fe:b7:49:2b:f1:44:89:37:ba:ac:c0:b8:65:f5:ee:
fe:e5:ff:70:5e:10:e2:f5:e0:bb:20:f0:bf:fe:e7:05:77:82:
7d:a5:50:d4:6b:26:89:d4:e6:de:71:e3:1e:b4:54:8a:0e:a1:
e4:06:87:d1:bb:13:bd:45:23:7a:4f:5e:08:a1:f9:b7:a7:9f:
36:4d:5e:ee:c5:63:36:9c:63:ca:77:1d:e4:3c:91:20:14:5f:
24:f2:94:d2:8c:c7:22:4c:69:d0:c2:47:b1:96:33:10:16:3b:
50:f2:5b:61:fc:cb:76:13:bb:f9:5a:17:bb:fc:7a:d2:ea:11:
a4:ee:b9:b2:bd:1f:58:d8:80:d4:2c:dc:99:93:8e:23:64:57:
ce:90:f0:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWgaScraTtfFN+5XtBzTr1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNGRmOWE1NDYwY2JkNDUwYjRlNzUzODAzOTNhODIxZTg1
Yzc0ZDgwHhcNMjUwNDIxMDQwMDU4WhcNMjUwNDIyMDQwMDU4WjAzMTEwLwYDVQQD
EyhhNTNjM2E4MzU4ZGFlZDUxMDVlZDMyY2ZmZWYwNWE5MTEyYzgwNDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM/IQJ/nl4AAk0cdC77Vm8IlnmP6
KRTFBRhW2+4dLuX3M5oJSYLfjma4fpnjZobm++eUIqAZCABK6DnHzb5TMn/Qpzkr
Tt+/XHKVtBXODmCtwp8eVRmzYwyZb/VZQ1aD+MTOhzDXAyI2zdETJgVaBdt2Yc0F
guOHPIIb2vI4BptTSFmbJ5MKbHt6JKfT2GGBboKLlHNlwtOW13eR6QIVee3DwgOC
KdxMxsVxVtqzCXgBB1rX38UtLuM103QuBcMe3+lusdpUMjGKQJKUozT+veraaymM
jnA3cCG4YvGAI+JZ0MxBMbIkb3U6j3pG4MLzxcW+izE8ZO14sunp+Zqo1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKU8OoNY2u1RBe0yz/7wWpESyARpMB8GA1UdIwQY
MBaAFDtN+aVGDL1FC051OAOTqCHoXHTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzAzNXBVWU12VVVMVG5VNEE1T29JZWhjZE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wNDk3NWMtZWY0OS00NzU0LTk2Zjkt
OTgxMmQ3Y2ZkNjk0LzEvTzAzNXBVWU12VVVMVG5VNEE1T29JZWhjZE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wNDk3NWMtZWY0OS00NzU0LTk2ZjktOTgxMmQ3Y2ZkNjk0
LzEvTzAzNXBVWU12VVVMVG5VNEE1T29JZWhjZE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYJW7IW6
aU38EGQxvdROPOCbkpl8m7ivHkk1VAa1PpmM/TqnXn5PqyJsqiXF4JUhVsgbKtbL
OpE7RvvFSTv+b3cxKMEuqKW3YCflswkdXScXkfj8+tFEDx3YrutWGn0suh+DzMVd
I5vE83QCV28t/rdJK/FEiTe6rMC4ZfXu/uX/cF4Q4vXguyDwv/7nBXeCfaVQ1Gsm
idTm3nHjHrRUig6h5AaH0bsTvUUjek9eCKH5t6efNk1e7sVjNpxjyncd5DyRIBRf
JPKU0ozHIkxp0MJHsZYzEBY7UPJbYfzLdhO7+VoXu/x60uoRpO65sr0fWNiA1Czc
mZOOI2RXzpDwpQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 11:13:35 2025 by rpki-client