Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
File: OIeaeKWKSFzNiXDwQy2489dxcls.mft (raw, json)
Hash identifier: O2eTiVFsoHO6sEf4Ejhb9+X5A1DpnN9VY/l1Lxiq2z4=
Subject key identifier: 0A:70:3F:C0:9A:72:07:19:59:18:D6:58:DD:92:E3:1A:F3:13:E9:8F
Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b
Certificate serial: 01964FDA136898900DDAC9AFCBC6821CC74F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 21:00:13 +0000
Manifest this update: Sat 19 Apr 2025 21:00:13 +0000
Manifest next update: Sun 20 Apr 2025 21:00:13 +0000
Files and hashes: 1: OIeaeKWKSFzNiXDwQy2489dxcls.crl (hash: prw0u0EQU8teVFBg24YhhF9UmfCFQbBA2I/shvIcoJ0=)
2: aJF-_eUqR8Yma02F31ybPienJuY.roa (hash: duGwNDtPKrkB5Se3luyctTXBg25/A0K/ZPMK4FyGebo=)
3: xj83lBqnCiYenkchlr_-eEoB-30.roa (hash: rDaj6xDIGI3i5anidMQG7nyOyM3UPZwMFnNZdzH+C5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:13:68:98:90:0d:da:c9:af:cb:c6:82:1c:c7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b
Validity
Not Before: Apr 19 21:00:13 2025 GMT
Not After : Apr 20 21:00:13 2025 GMT
Subject: CN=0a703fc09a7207195918d658dd92e31af313e98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:98:d4:da:cd:14:9d:e2:31:e6:df:d7:90:
e2:54:a7:35:98:47:c7:2e:af:6a:3c:ee:d0:9e:8a:
56:ce:07:8f:4d:45:d3:94:8a:6f:fb:e0:a3:3a:48:
a0:76:c6:1c:21:d3:b4:0e:d9:a0:db:50:c4:7b:1d:
fa:13:f2:ee:85:10:ac:08:90:2f:67:e0:82:c7:09:
f8:2c:51:f2:db:b5:11:3b:f7:8f:2c:86:ea:11:10:
df:e9:ad:cd:ba:5c:69:f9:13:46:8a:2a:62:69:62:
0f:f0:5b:bd:e6:03:6e:4e:f2:24:13:15:17:02:5e:
db:be:9b:63:df:f1:cb:b3:3a:ef:f9:bf:1f:f5:65:
8a:c4:08:fc:78:a7:87:d7:3a:9b:63:27:ec:c7:32:
23:ba:e1:b9:2b:c2:c9:a4:b1:af:41:73:a7:95:3f:
a7:36:8f:cb:f7:38:e0:67:74:16:e6:ba:13:b4:06:
f8:e2:0e:fa:8e:e7:15:32:71:59:b0:cd:77:79:6f:
50:4a:eb:9e:6c:aa:43:87:6f:96:30:77:dd:0b:43:
ae:3e:6e:b2:79:67:f9:b4:3d:b5:46:cf:01:a9:76:
e1:7c:b3:41:92:8f:91:df:39:1d:48:3a:b7:b6:b8:
74:55:1e:8a:d6:44:67:30:c8:2c:c5:3d:eb:9e:27:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:70:3F:C0:9A:72:07:19:59:18:D6:58:DD:92:E3:1A:F3:13:E9:8F
X509v3 Authority Key Identifier:
keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:29:30:50:3c:e6:1f:c6:77:f1:f5:9d:54:d3:8d:d4:96:a4:
af:2b:78:d3:6d:0f:82:7d:ac:20:e8:3b:ad:39:44:51:10:ae:
75:14:6c:a7:38:62:eb:21:59:61:95:21:61:b1:a7:73:30:6d:
0a:25:ac:8a:5c:3a:3f:00:29:54:46:13:54:85:94:d7:d8:1e:
3f:7c:2f:6c:89:97:77:3c:de:b7:8a:31:ae:b4:47:97:40:bf:
29:e3:28:34:7c:e6:eb:f1:e4:6e:ae:e4:27:ba:b7:50:35:12:
5e:46:e0:5f:48:7e:5e:53:06:71:ee:e7:62:82:8f:78:c6:7c:
0e:c2:e2:fa:2a:e9:83:88:c7:db:f4:00:55:7a:f0:34:44:f6:
15:d0:00:86:4e:fb:b3:af:85:db:25:1a:a5:9f:a0:b3:d8:78:
20:dc:73:9b:47:de:2b:02:19:84:29:f1:ab:36:cd:5c:96:2f:
cd:a9:a5:d9:52:de:8a:9f:f2:ea:04:4c:e3:ee:0c:b8:3e:63:
b8:a4:0b:fa:5e:f9:7e:5f:af:05:a8:02:d7:c0:fc:3a:24:9d:
71:85:ac:6c:3a:7a:22:9e:e7:84:09:40:08:30:86:56:10:07:
7d:13:d4:1d:e8:54:b8:b1:0d:a8:eb:3c:2d:8a:5e:d7:93:14:
25:53:7f:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZP2hNomJAN2smvy8aCHMdPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ODc5YTc4YTU4YTQ4NWNjZDg5NzBmMDQzMmRiOGYzZDc3
MTcyNWIwHhcNMjUwNDE5MjEwMDEzWhcNMjUwNDIwMjEwMDEzWjAzMTEwLwYDVQQD
EygwYTcwM2ZjMDlhNzIwNzE5NTkxOGQ2NThkZDkyZTMxYWYzMTNlOThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ+Y1NrNFJ3iMebf15DiVKc1mEfH
Lq9qPO7QnopWzgePTUXTlIpv++CjOkigdsYcIdO0Dtmg21DEex36E/LuhRCsCJAv
Z+CCxwn4LFHy27URO/ePLIbqERDf6a3Nulxp+RNGiipiaWIP8Fu95gNuTvIkExUX
Al7bvptj3/HLszrv+b8f9WWKxAj8eKeH1zqbYyfsxzIjuuG5K8LJpLGvQXOnlT+n
No/L9zjgZ3QW5roTtAb44g76jucVMnFZsM13eW9QSuuebKpDh2+WMHfdC0OuPm6y
eWf5tD21Rs8BqXbhfLNBko+R3zkdSDq3trh0VR6K1kRnMMgsxT3rnifueQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApwP8CacgcZWRjWWN2S4xrzE+mPMB8GA1UdIwQY
MBaAFDiHmnilikhczYlw8EMtuPPXcXJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jMzg3OTctZDdmYS00YTU3LTlmODMt
YTE2YTM0YzQ2ZjMwLzEvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jMzg3OTctZDdmYS00YTU3LTlmODMtYTE2YTM0YzQ2ZjMw
LzEvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCkwUDzm
H8Z38fWdVNON1Jakryt4020Pgn2sIOg7rTlEURCudRRspzhi6yFZYZUhYbGnczBt
CiWsilw6PwApVEYTVIWU19geP3wvbImXdzzet4oxrrRHl0C/KeMoNHzm6/Hkbq7k
J7q3UDUSXkbgX0h+XlMGce7nYoKPeMZ8DsLi+irpg4jH2/QAVXrwNET2FdAAhk77
s6+F2yUapZ+gs9h4INxzm0feKwIZhCnxqzbNXJYvzaml2VLeip/y6gRM4+4MuD5j
uKQL+l75fl+vBagC18D8OiSdcYWsbDp6Ip7nhAlACDCGVhAHfRPUHehUuLENqOs8
LYpe15MUJVN/nA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:17 2025 by rpki-client