Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
File: OuvyLoZEQlX994owxMsLLZHlt1c.mft (raw, json)
Hash identifier: W4gfh98Xkq7JUwzG3/tk/H5cPdgnC6H9Mgq/L5BNdPs=
Subject key identifier: 3B:4C:CA:3B:57:B4:2C:A7:B1:0B:DC:D0:41:71:8A:49:32:AB:73:B3
Authority key identifier: 3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
Certificate issuer: /CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Certificate serial: 0195108FF8ACCC1D6F71328912F12E56E5B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
Manifest number: 13E8
Signing time: Sun 16 Feb 2025 21:00:25 +0000
Manifest this update: Sun 16 Feb 2025 21:00:25 +0000
Manifest next update: Mon 17 Feb 2025 21:00:25 +0000
Files and hashes: 1: OuvyLoZEQlX994owxMsLLZHlt1c.crl (hash: UGGCDzoBKZa1RwugvwKibb9b3tuK0ydpT3vLLfllyWM=)
2: XGOc6Yta1j7sUM6Fv0ZGp6ykvs4.roa (hash: c3SifmbdW15nfuTRwIPceqNmWNmz6mVEc9pu384Gaco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:f8:ac:cc:1d:6f:71:32:89:12:f1:2e:56:e5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Validity
Not Before: Feb 16 21:00:25 2025 GMT
Not After : Feb 17 21:00:25 2025 GMT
Subject: CN=3b4cca3b57b42ca7b10bdcd041718a4932ab73b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:9e:19:d0:a3:22:28:2d:a7:7a:aa:c6:44:
3c:cd:3a:8c:5e:63:6d:2e:0a:55:52:93:14:93:cb:
b8:75:04:45:9e:41:fb:0e:4d:c4:5f:92:0c:a3:f1:
59:a6:92:78:f3:b3:52:3b:86:9b:d4:3e:18:1e:d8:
e8:c4:98:83:57:d8:de:fb:96:33:58:a1:0c:c8:a7:
cc:63:fd:4c:67:33:b9:fc:5d:79:08:3f:b7:0e:10:
6d:3c:ca:63:1b:1e:4c:94:50:f1:be:42:21:a6:3d:
59:bd:54:6f:9f:b8:4f:2e:d1:fb:ba:12:8d:dd:4c:
e1:5d:2e:61:e1:b7:64:13:87:01:36:80:83:70:c7:
ce:fc:c5:ee:57:72:76:15:a0:77:59:64:9f:26:c7:
e2:dc:b2:e7:b5:8d:66:c9:0b:5f:97:b8:f9:3f:0e:
3e:62:ac:36:4f:7f:5c:73:e5:19:3b:19:a0:f4:a0:
b3:41:c5:5c:dc:24:c6:1d:11:49:21:90:c0:37:fe:
62:f2:d0:65:d5:04:cf:e9:cd:5c:7e:dd:5f:e0:8b:
62:67:46:d9:e8:2a:ba:f8:32:fb:65:06:fd:a4:0c:
00:91:d3:11:5b:50:6d:34:94:fc:06:bf:c7:3c:b6:
2f:a9:f3:03:ad:a1:15:40:a9:2b:76:79:11:1d:0e:
16:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4C:CA:3B:57:B4:2C:A7:B1:0B:DC:D0:41:71:8A:49:32:AB:73:B3
X509v3 Authority Key Identifier:
keyid:3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:aa:56:97:f0:fe:87:ab:f8:56:d4:f3:ec:96:1b:07:2b:16:
d9:e9:ae:b8:9f:76:5b:ae:9c:b4:18:5c:8e:fa:1b:47:52:45:
93:e8:20:a7:af:8b:e7:1b:0f:d8:e0:b7:ab:79:05:27:6f:d2:
9a:a3:08:83:62:1c:93:5e:d1:5b:bc:ff:6c:b2:d4:ef:54:f8:
c7:d7:67:a9:8b:1b:3c:32:49:c8:df:0c:87:35:c6:4c:a2:ab:
cc:6a:89:b5:a5:5e:b1:24:b0:94:a5:9e:ae:8e:68:f5:b8:cc:
fb:c6:87:21:33:13:f6:17:99:24:cd:24:a7:71:30:4d:48:73:
54:2e:30:32:28:b2:db:d2:46:37:16:c9:53:01:fa:6a:e4:97:
b5:3c:50:99:54:17:d3:48:f0:17:98:d5:2f:81:dc:92:e5:a3:
74:90:53:a7:d6:f7:1f:76:6e:99:44:82:de:30:74:d2:73:48:
76:14:17:00:f7:6a:80:33:0b:48:b9:f3:18:57:e5:f3:9f:12:
b0:1a:93:fe:fc:88:e3:e4:51:72:73:35:2a:89:db:16:fc:15:
44:40:43:75:e7:50:3e:43:e6:ed:ca:9a:56:0d:9e:27:1d:b9:
0f:a5:61:4d:72:6c:52:57:3c:cc:88:2e:73:be:c9:f1:93:09:
cb:44:e5:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQj/iszB1vcTKJEvEuVuWwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWJmMjJlODY0NDQyNTVmZGY3OGEzMGM0Y2IwYjJkOTFl
NWI3NTcwHhcNMjUwMjE2MjEwMDI1WhcNMjUwMjE3MjEwMDI1WjAzMTEwLwYDVQQD
EygzYjRjY2EzYjU3YjQyY2E3YjEwYmRjZDA0MTcxOGE0OTMyYWI3M2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG6eGdCjIigtp3qqxkQ8zTqMXmNt
LgpVUpMUk8u4dQRFnkH7Dk3EX5IMo/FZppJ487NSO4ab1D4YHtjoxJiDV9je+5Yz
WKEMyKfMY/1MZzO5/F15CD+3DhBtPMpjGx5MlFDxvkIhpj1ZvVRvn7hPLtH7uhKN
3UzhXS5h4bdkE4cBNoCDcMfO/MXuV3J2FaB3WWSfJsfi3LLntY1myQtfl7j5Pw4+
Yqw2T39cc+UZOxmg9KCzQcVc3CTGHRFJIZDAN/5i8tBl1QTP6c1cft1f4ItiZ0bZ
6Cq6+DL7ZQb9pAwAkdMRW1BtNJT8Br/HPLYvqfMDraEVQKkrdnkRHQ4WAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtMyjtXtCynsQvc0EFxikkyq3OzMB8GA1UdIwQY
MBaAFDrr8i6GREJV/feKMMTLCy2R5bdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3V2eUxvWkVRbFg5OTRvd3hNc0xMWkhsdDFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85OGIyZjUtNzVlMS00MjQ1LTk3NmQt
MDE1MGM5NGY5NDBkLzEvT3V2eUxvWkVRbFg5OTRvd3hNc0xMWkhsdDFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85OGIyZjUtNzVlMS00MjQ1LTk3NmQtMDE1MGM5NGY5NDBk
LzEvT3V2eUxvWkVRbFg5OTRvd3hNc0xMWkhsdDFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6pWl/D+
h6v4VtTz7JYbBysW2emuuJ92W66ctBhcjvobR1JFk+ggp6+L5xsP2OC3q3kFJ2/S
mqMIg2Ick17RW7z/bLLU71T4x9dnqYsbPDJJyN8MhzXGTKKrzGqJtaVesSSwlKWe
ro5o9bjM+8aHITMT9heZJM0kp3EwTUhzVC4wMiiy29JGNxbJUwH6auSXtTxQmVQX
00jwF5jVL4HckuWjdJBTp9b3H3ZumUSC3jB00nNIdhQXAPdqgDMLSLnzGFfl858S
sBqT/vyI4+RRcnM1KonbFvwVREBDdedQPkPm7cqaVg2eJx25D6VhTXJsUlc8zIgu
c77J8ZMJy0Tlkw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:57 2025 by rpki-client