Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
File: OTdAGaVNS94j8NooolIVDVy0c60.mft (raw, json)
Hash identifier: vhx3HNuCiLnHW2H+gdJQ4LZpPE2W7Eql/+ScWbQ6XH8=
Subject key identifier: CC:F2:73:4C:6C:85:0F:97:5D:1C:58:72:37:16:9A:C8:48:1C:BB:C2
Authority key identifier: 39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
Certificate issuer: /CN=39374019a54d4bde23f0da28a252150d5cb473ad
Certificate serial: 01964AB449182129CAE8793D650ADD7BA083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
Manifest number: 0D9D
Signing time: Fri 18 Apr 2025 21:00:51 +0000
Manifest this update: Fri 18 Apr 2025 21:00:51 +0000
Manifest next update: Sat 19 Apr 2025 21:00:51 +0000
Files and hashes: 1: OTdAGaVNS94j8NooolIVDVy0c60.crl (hash: kXBbNnX1gHSQJQVWVYI7GlG3fnAS9cdmnx+gw8GsdAo=)
2: ma10kWI1PiUmBnjZZdsu20JVWcE.roa (hash: jNRh+1s+kkx04U4sH3v3rSIpTBgL5T0X08vSRFsU6Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b4:49:18:21:29:ca:e8:79:3d:65:0a:dd:7b:a0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39374019a54d4bde23f0da28a252150d5cb473ad
Validity
Not Before: Apr 18 21:00:51 2025 GMT
Not After : Apr 19 21:00:51 2025 GMT
Subject: CN=ccf2734c6c850f975d1c587237169ac8481cbbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:e3:e8:28:68:fc:7e:37:fc:d5:6f:60:23:
33:b7:a0:52:9d:ae:30:54:5b:f8:99:ce:ee:0f:d8:
4f:71:bf:7d:1c:47:d4:5e:c5:20:8d:d5:49:86:bd:
97:55:6a:03:75:d5:38:6b:31:00:b2:e6:2e:0e:7a:
2b:dd:e6:21:5a:ce:4d:80:32:90:18:6b:eb:d6:e4:
b2:77:7c:b6:46:b6:43:ab:d6:b7:ae:8b:1f:20:25:
73:db:c3:65:4b:ef:28:19:3e:da:48:0d:f0:68:9d:
78:6a:72:ad:3e:e9:7d:1d:ab:e1:c7:f3:6d:fb:d3:
a3:58:1d:c5:c2:74:10:69:2b:fb:de:40:33:ee:c8:
85:21:37:39:37:66:f9:2e:d4:da:99:73:35:80:f6:
65:85:cf:06:dc:4b:6d:06:85:eb:72:fa:ce:7c:76:
1e:a3:89:5f:73:0c:00:38:f0:40:43:09:6c:a2:9d:
fe:ff:bb:53:75:a3:a9:4e:5d:e4:98:27:98:57:fb:
22:02:c2:d5:44:c7:e1:8c:07:61:79:fc:45:12:80:
24:cd:16:90:a1:72:58:33:9a:04:88:76:b5:db:9a:
90:e0:ee:5f:21:88:45:73:da:5e:d5:4b:fd:eb:45:
f5:b3:2b:b4:3c:db:40:99:3f:68:78:7b:fc:a3:03:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F2:73:4C:6C:85:0F:97:5D:1C:58:72:37:16:9A:C8:48:1C:BB:C2
X509v3 Authority Key Identifier:
keyid:39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a7:f0:48:49:54:c3:ed:57:c7:7a:ae:e8:08:01:9c:8c:01:
5a:dc:52:6f:1c:d3:7c:f0:84:02:27:53:55:3d:6b:d5:67:14:
c8:43:0c:d2:2d:83:87:0f:ea:9b:97:ca:37:cc:02:66:4f:35:
e4:6c:b3:57:bf:4c:65:8e:17:91:97:e8:a1:e1:ac:72:ef:d2:
90:ff:54:9b:8e:51:8d:4f:14:d5:55:8f:82:07:20:d0:a4:2f:
c5:00:29:79:7e:a9:d9:59:c4:d6:f3:d0:e6:c4:4c:e0:91:b8:
3a:27:78:57:e0:6a:d5:aa:17:09:3c:71:46:9b:f6:08:8c:18:
08:2c:03:86:86:48:ef:a8:72:37:08:86:f6:3c:ca:7f:7e:1b:
f6:b9:91:99:b4:da:f5:09:ed:a6:84:dc:62:f3:bb:07:d5:37:
50:90:66:eb:34:1d:72:ec:84:91:d8:be:9e:29:7a:af:e5:d1:
9a:35:ee:c3:bf:cb:e0:76:7e:4e:48:77:13:78:da:de:e8:15:
05:74:dc:b6:7d:2a:96:98:37:a3:06:0b:e5:1b:b9:1e:11:94:
4d:2c:f5:19:59:ad:6d:da:9a:84:08:ed:25:09:ae:55:6f:77:
a1:e1:5f:18:67:f6:6f:89:87:52:1a:b3:77:a5:38:9a:b0:e0:
63:4f:44:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKtEkYISnK6Hk9ZQrde6CDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5Mzc0MDE5YTU0ZDRiZGUyM2YwZGEyOGEyNTIxNTBkNWNi
NDczYWQwHhcNMjUwNDE4MjEwMDUxWhcNMjUwNDE5MjEwMDUxWjAzMTEwLwYDVQQD
EyhjY2YyNzM0YzZjODUwZjk3NWQxYzU4NzIzNzE2OWFjODQ4MWNiYmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMrj6Cho/H43/NVvYCMzt6BSna4w
VFv4mc7uD9hPcb99HEfUXsUgjdVJhr2XVWoDddU4azEAsuYuDnor3eYhWs5NgDKQ
GGvr1uSyd3y2RrZDq9a3rosfICVz28NlS+8oGT7aSA3waJ14anKtPul9Havhx/Nt
+9OjWB3FwnQQaSv73kAz7siFITc5N2b5LtTamXM1gPZlhc8G3EttBoXrcvrOfHYe
o4lfcwwAOPBAQwlsop3+/7tTdaOpTl3kmCeYV/siAsLVRMfhjAdhefxFEoAkzRaQ
oXJYM5oEiHa125qQ4O5fIYhFc9pe1Uv960X1syu0PNtAmT9oeHv8owNFUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzyc0xshQ+XXRxYcjcWmshIHLvCMB8GA1UdIwQY
MBaAFDk3QBmlTUveI/DaKKJSFQ1ctHOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RkQUdhVk5TOTRqOE5vb29sSVZEVnkwYzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81MDU3NTUtYzRhYi00OTA1LThiNDgt
YmJkMWFkNTNkYTQzLzEvT1RkQUdhVk5TOTRqOE5vb29sSVZEVnkwYzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny81MDU3NTUtYzRhYi00OTA1LThiNDgtYmJkMWFkNTNkYTQz
LzEvT1RkQUdhVk5TOTRqOE5vb29sSVZEVnkwYzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqfwSElU
w+1Xx3qu6AgBnIwBWtxSbxzTfPCEAidTVT1r1WcUyEMM0i2Dhw/qm5fKN8wCZk81
5GyzV79MZY4XkZfooeGscu/SkP9Um45RjU8U1VWPggcg0KQvxQApeX6p2VnE1vPQ
5sRM4JG4Oid4V+Bq1aoXCTxxRpv2CIwYCCwDhoZI76hyNwiG9jzKf34b9rmRmbTa
9QntpoTcYvO7B9U3UJBm6zQdcuyEkdi+nil6r+XRmjXuw7/L4HZ+Tkh3E3ja3ugV
BXTctn0qlpg3owYL5Ru5HhGUTSz1GVmtbdqahAjtJQmuVW93oeFfGGf2b4mHUhqz
d6U4mrDgY09Efg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:18:37 2025 by rpki-client