Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File: sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier: OfACILFx3EfypTYM1ZUSwtpLFfjNFasgmzZGMX2lbMM=
Subject key identifier: 74:09:16:79:6E:B7:FE:E2:05:E2:E4:82:3C:EF:C4:D5:5D:8F:B7:9C
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial: 01958C294A308BF4779275342051E764DEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number: 0885
Signing time: Wed 12 Mar 2025 21:01:11 +0000
Manifest this update: Wed 12 Mar 2025 21:01:11 +0000
Manifest next update: Thu 13 Mar 2025 21:01:11 +0000
Files and hashes: 1: E6bot_tKJqCzADpBxFeKtsutgCs.roa (hash: IzVVajCV/IB0bxI8d5Bqo7CZjFjDagAuPrwaJPvu9o8=)
2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: bQRznrDPEKEgWTFjQhNQQvvT5VIVVT2Eys6+byuzisg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:4a:30:8b:f4:77:92:75:34:20:51:e7:64:de:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Validity
Not Before: Mar 12 21:01:11 2025 GMT
Not After : Mar 13 21:01:11 2025 GMT
Subject: CN=740916796eb7fee205e2e4823cefc4d55d8fb79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:73:da:21:8e:2f:95:36:fa:fc:90:08:ff:
d4:aa:20:cb:d6:e9:fe:6f:d8:9e:73:35:8f:a2:09:
aa:11:ae:36:eb:b3:2a:8a:e9:60:84:f6:c0:5e:8a:
13:87:8d:c6:12:07:4b:57:d4:3e:b3:60:27:85:c6:
b8:13:90:98:97:f5:c4:fd:ba:06:cc:17:2a:86:1c:
82:1a:68:34:78:0d:05:49:97:89:1c:f2:bf:35:ac:
06:97:0d:f1:3e:84:2c:11:75:93:3b:a2:be:1c:ef:
c8:b9:69:23:b1:b4:a3:b2:40:56:19:5c:cc:e2:5e:
1a:43:90:2b:20:85:56:90:85:78:f3:ba:f1:14:7b:
b8:7e:3d:7c:65:57:26:a2:3e:74:5b:de:06:95:5b:
d8:a0:b6:86:74:b1:4b:7e:8d:40:4f:5a:2c:ce:d6:
81:d1:d6:34:10:61:3f:03:65:e9:d2:66:c8:04:0c:
99:8f:26:7b:73:aa:36:cc:20:97:33:f3:dc:bc:37:
16:d4:77:bb:f7:9d:9c:23:2c:c4:5e:d6:e0:92:dd:
42:72:c3:ea:4f:c3:ca:53:21:63:ad:90:8c:99:bc:
61:53:22:1f:fe:86:c4:8c:c4:82:76:ba:6d:16:2d:
07:35:5c:23:99:f2:78:16:15:cc:e5:d9:40:c8:6c:
c5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:09:16:79:6E:B7:FE:E2:05:E2:E4:82:3C:EF:C4:D5:5D:8F:B7:9C
X509v3 Authority Key Identifier:
keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d4:39:ba:a4:66:57:f1:dc:eb:db:75:d1:87:70:86:d0:8d:
9e:cc:b9:ed:80:2a:24:96:dc:b3:d2:f6:fb:04:27:68:29:a7:
4e:1d:ea:ea:8a:f0:bc:56:48:d1:f2:30:fa:97:93:b8:0e:e5:
78:92:84:cb:2f:1c:37:5d:80:78:c3:6d:52:32:fe:b8:81:29:
ab:33:9a:db:7e:fb:ee:88:81:86:70:bd:df:d3:fb:bc:88:03:
50:ee:09:b1:ac:e9:49:e2:2a:68:94:c5:d0:c4:33:e4:b7:13:
30:53:1c:d1:7e:b4:27:6c:9c:68:44:a3:9b:d8:48:24:d7:90:
e7:fc:a6:e1:f0:1c:36:e2:90:7a:5c:2b:13:0e:84:5c:70:60:
5e:66:3b:ae:f8:90:c4:6c:fb:e8:e4:4a:cc:ec:a6:4b:31:41:
a8:47:ec:46:5c:56:0d:10:b7:ca:c1:c4:a9:99:cb:12:f9:de:
5b:76:73:7f:d5:0e:5d:a6:b2:c7:a1:19:e8:4d:4a:7c:6e:51:
b8:8d:cd:54:2e:81:23:9f:b8:02:5f:1f:ee:08:17:75:8f:ac:
6a:8a:75:f0:bf:9b:0e:84:b5:59:0c:6f:7c:69:82:d1:52:23:
cd:ca:b3:9a:86:5f:70:f3:e0:58:fd:db:5c:c2:8b:49:9a:25:
13:a2:f8:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMKUowi/R3knU0IFHnZN7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZWYxOWJjYjIzYTJmMDRjNTg2YWMxMzExYTkxYmM3Y2Ey
YTk3NjUwHhcNMjUwMzEyMjEwMTExWhcNMjUwMzEzMjEwMTExWjAzMTEwLwYDVQQD
Eyg3NDA5MTY3OTZlYjdmZWUyMDVlMmU0ODIzY2VmYzRkNTVkOGZiNzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8Nz2iGOL5U2+vyQCP/UqiDL1un+
b9ieczWPogmqEa4267MqiulghPbAXooTh43GEgdLV9Q+s2Anhca4E5CYl/XE/boG
zBcqhhyCGmg0eA0FSZeJHPK/NawGlw3xPoQsEXWTO6K+HO/IuWkjsbSjskBWGVzM
4l4aQ5ArIIVWkIV487rxFHu4fj18ZVcmoj50W94GlVvYoLaGdLFLfo1AT1osztaB
0dY0EGE/A2Xp0mbIBAyZjyZ7c6o2zCCXM/PcvDcW1He7952cIyzEXtbgkt1CcsPq
T8PKUyFjrZCMmbxhUyIf/obEjMSCdrptFi0HNVwjmfJ4FhXM5dlAyGzFpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQJFnlut/7iBeLkgjzvxNVdj7ecMB8GA1UdIwQY
MBaAFLDvGbyyOi8ExYasExGpG8fKKpdlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc084WnZMSTZMd1RGaHF3VEVha2J4OG9xbDJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hZjNlNTEtNzlkNi00MDc4LWE1Njkt
ZDAwMDNhNmI1MjI0LzEvc084WnZMSTZMd1RGaHF3VEVha2J4OG9xbDJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9hZjNlNTEtNzlkNi00MDc4LWE1NjktZDAwMDNhNmI1MjI0
LzEvc084WnZMSTZMd1RGaHF3VEVha2J4OG9xbDJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9Q5uqRm
V/Hc69t10YdwhtCNnsy57YAqJJbcs9L2+wQnaCmnTh3q6orwvFZI0fIw+peTuA7l
eJKEyy8cN12AeMNtUjL+uIEpqzOa23777oiBhnC939P7vIgDUO4JsazpSeIqaJTF
0MQz5LcTMFMc0X60J2ycaESjm9hIJNeQ5/ym4fAcNuKQelwrEw6EXHBgXmY7rviQ
xGz76ORKzOymSzFBqEfsRlxWDRC3ysHEqZnLEvneW3Zzf9UOXaayx6EZ6E1KfG5R
uI3NVC6BI5+4Al8f7ggXdY+saop18L+bDoS1WQxvfGmC0VIjzcqzmoZfcPPgWP3b
XMKLSZolE6L4pQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:19 2025 by rpki-client