Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.mft
File: oKhjHm5aesZtpPsWD9W0_Kk3iAU.mft (raw, json)
Hash identifier: ni68FOnZzl2ySsXvNggr9v4UXwOO+VLI35eCQ1ZCJ9c=
Subject key identifier: E2:91:CD:94:0F:46:8C:C3:AD:DD:E0:7B:4D:21:D2:52:EE:BE:F3:D4
Authority key identifier: A0:A8:63:1E:6E:5A:7A:C6:6D:A4:FB:16:0F:D5:B4:FC:A9:37:88:05
Certificate issuer: /CN=a0a8631e6e5a7ac66da4fb160fd5b4fca9378805
Certificate serial: 0196538020CD1B58837DA18EF9801E82EE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKhjHm5aesZtpPsWD9W0_Kk3iAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.mft
Manifest number: 1505
Signing time: Sun 20 Apr 2025 14:00:27 +0000
Manifest this update: Sun 20 Apr 2025 14:00:27 +0000
Manifest next update: Mon 21 Apr 2025 14:00:27 +0000
Files and hashes: 1: oKhjHm5aesZtpPsWD9W0_Kk3iAU.crl (hash: 40PnUs0YTNOoj18mNAmwAjvJj6JCyj/S1Pm1ib4Jo9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKhjHm5aesZtpPsWD9W0_Kk3iAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:20:cd:1b:58:83:7d:a1:8e:f9:80:1e:82:ee:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a8631e6e5a7ac66da4fb160fd5b4fca9378805
Validity
Not Before: Apr 20 14:00:27 2025 GMT
Not After : Apr 21 14:00:27 2025 GMT
Subject: CN=e291cd940f468cc3addde07b4d21d252eebef3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:20:f6:9c:63:e9:5e:63:e4:28:de:ab:71:
f7:9e:c3:73:10:6a:86:f7:51:79:02:5f:dd:aa:dd:
26:b1:04:19:26:f1:28:6c:28:35:67:a5:f5:85:27:
03:7a:11:af:ec:71:67:50:56:dd:cd:a8:a1:f7:e3:
2f:07:93:13:d1:14:b4:2b:e6:7e:d6:44:5b:b2:f3:
07:80:40:17:d2:39:37:7a:00:57:4e:c8:c3:f0:0f:
ff:56:23:c3:87:7c:84:75:2a:96:38:fb:0b:3e:bf:
a7:b7:37:00:f9:bc:d8:89:64:8a:7b:19:83:c1:1c:
8d:2a:0e:21:7c:f6:01:62:8e:2b:37:3f:6e:a2:a7:
bc:b8:db:9e:93:ad:ca:62:e7:96:45:23:61:41:57:
6e:0c:21:17:7c:cd:ec:5c:c7:78:20:48:ea:9d:08:
aa:76:6b:71:c5:84:db:f0:ab:f0:55:56:6f:2e:1a:
a6:eb:6a:11:19:fd:25:91:cb:92:7e:01:85:58:b1:
20:70:b2:38:9e:54:43:09:14:90:bc:13:fc:99:9a:
36:ea:a1:3b:1d:f1:50:dd:84:fd:ae:02:27:fa:5c:
c1:2f:d9:b9:a4:bb:ed:d3:d1:15:be:2b:ec:b9:1f:
11:66:fe:df:84:03:cd:fc:9e:aa:9b:cf:d8:18:ba:
f5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:91:CD:94:0F:46:8C:C3:AD:DD:E0:7B:4D:21:D2:52:EE:BE:F3:D4
X509v3 Authority Key Identifier:
keyid:A0:A8:63:1E:6E:5A:7A:C6:6D:A4:FB:16:0F:D5:B4:FC:A9:37:88:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKhjHm5aesZtpPsWD9W0_Kk3iAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:41:b3:db:b7:4b:63:83:1f:39:11:3c:7d:e8:b2:43:4f:50:
8c:10:a4:05:b4:29:ac:bc:a3:4b:0b:4c:6d:88:69:21:e8:79:
17:34:fa:ae:cf:93:3e:17:88:3c:8f:b4:16:3c:61:c4:f3:f6:
57:76:97:77:32:e5:1a:0e:af:03:d7:26:22:6d:07:7b:20:54:
6f:06:56:5d:45:04:c2:c8:fa:e3:9b:a0:2b:60:05:48:1a:86:
2b:93:bf:6a:cc:2b:9e:27:6d:61:38:de:15:21:92:13:f4:78:
d1:e9:41:f5:75:5d:b9:17:0b:d3:fc:69:36:60:e5:8c:7c:64:
e9:bd:fe:d7:f8:e3:02:e4:eb:eb:38:ce:19:8f:82:18:42:5e:
52:e6:30:d4:9c:fb:19:20:e7:e3:47:2e:a7:fa:c8:93:1d:37:
ee:45:b9:f4:f5:e3:f8:bb:ba:6d:7b:ae:26:12:8c:86:2a:41:
69:f2:e7:2c:14:46:ab:bc:ad:8a:ba:17:34:e5:17:2d:59:b8:
55:ee:c3:18:d1:d6:09:ed:33:e9:bc:91:a2:61:db:22:7c:9e:
7e:62:01:07:cf:49:a9:84:a0:f6:97:ac:68:55:fb:11:49:16:
46:f3:53:2a:a5:e8:15:7f:ba:0d:17:3d:cf:51:94:39:d9:d1:
5d:57:ec:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTgCDNG1iDfaGO+YAegu6fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTg2MzFlNmU1YTdhYzY2ZGE0ZmIxNjBmZDViNGZjYTkz
Nzg4MDUwHhcNMjUwNDIwMTQwMDI3WhcNMjUwNDIxMTQwMDI3WjAzMTEwLwYDVQQD
EyhlMjkxY2Q5NDBmNDY4Y2MzYWRkZGUwN2I0ZDIxZDI1MmVlYmVmM2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5Ag9pxj6V5j5Cjeq3H3nsNzEGqG
91F5Al/dqt0msQQZJvEobCg1Z6X1hScDehGv7HFnUFbdzaih9+MvB5MT0RS0K+Z+
1kRbsvMHgEAX0jk3egBXTsjD8A//ViPDh3yEdSqWOPsLPr+ntzcA+bzYiWSKexmD
wRyNKg4hfPYBYo4rNz9uoqe8uNuek63KYueWRSNhQVduDCEXfM3sXMd4IEjqnQiq
dmtxxYTb8KvwVVZvLhqm62oRGf0lkcuSfgGFWLEgcLI4nlRDCRSQvBP8mZo26qE7
HfFQ3YT9rgIn+lzBL9m5pLvt09EVvivsuR8RZv7fhAPN/J6qm8/YGLr1cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKRzZQPRozDrd3ge00h0lLuvvPUMB8GA1UdIwQY
MBaAFKCoYx5uWnrGbaT7Fg/VtPypN4gFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0toakhtNWFlc1p0cFBzV0Q5VzBfS2szaUFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9kZmZhOWItMWQ2OS00ODY5LTlkYzQt
ODY3ZDFkODc3MTQwLzEvb0toakhtNWFlc1p0cFBzV0Q5VzBfS2szaUFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9kZmZhOWItMWQ2OS00ODY5LTlkYzQtODY3ZDFkODc3MTQw
LzEvb0toakhtNWFlc1p0cFBzV0Q5VzBfS2szaUFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkGz27dL
Y4MfORE8feiyQ09QjBCkBbQprLyjSwtMbYhpIeh5FzT6rs+TPheIPI+0FjxhxPP2
V3aXdzLlGg6vA9cmIm0HeyBUbwZWXUUEwsj645ugK2AFSBqGK5O/aswrnidtYTje
FSGSE/R40elB9XVduRcL0/xpNmDljHxk6b3+1/jjAuTr6zjOGY+CGEJeUuYw1Jz7
GSDn40cup/rIkx037kW59PXj+Lu6bXuuJhKMhipBafLnLBRGq7ytiroXNOUXLVm4
Ve7DGNHWCe0z6byRomHbInyefmIBB89JqYSg9pesaFX7EUkWRvNTKqXoFX+6DRc9
z1GUOdnRXVfsQA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:32:50 2025 by rpki-client