Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
File: od5FbU1AXG9CktY2iGds4VDn8H4.mft (raw, json)
Hash identifier: /85Uf1oSc37/2VoJonTNCaizvn8wI8CWpi1lYzrl3z0=
Subject key identifier: 01:AA:28:6E:7A:A6:C1:06:B8:F9:36:C6:E3:5C:8B:41:21:87:06:D1
Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
Certificate issuer: /CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Certificate serial: 019650ED2981A84F59C704828DA18B4688AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
Manifest number: 0A6D
Signing time: Sun 20 Apr 2025 02:00:42 +0000
Manifest this update: Sun 20 Apr 2025 02:00:42 +0000
Manifest next update: Mon 21 Apr 2025 02:00:42 +0000
Files and hashes: 1: dqExZg0GTgu9TOznJg-Erf9mkrI.roa (hash: h4iiYtbEAvUkqkzgU+RKRv7Gvi0HY66tI3dhqgvZQ0E=)
2: od5FbU1AXG9CktY2iGds4VDn8H4.crl (hash: d8ehX6n5kMXlc27e1GrZ/qTkWdbxU6x03QDCByeNaV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:ed:29:81:a8:4f:59:c7:04:82:8d:a1:8b:46:88:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Validity
Not Before: Apr 20 02:00:42 2025 GMT
Not After : Apr 21 02:00:42 2025 GMT
Subject: CN=01aa286e7aa6c106b8f936c6e35c8b41218706d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:70:d0:4e:f2:1e:6c:6c:3d:f8:da:43:fa:fb:
b4:c2:b1:bf:54:91:6c:ad:db:50:4d:73:fc:81:9c:
8b:90:fa:6a:36:e5:c3:d2:7a:ae:43:b1:20:6e:33:
a8:f0:08:ea:65:09:53:64:4d:9d:48:37:5e:8c:b7:
d2:0c:4c:83:41:28:7f:f8:96:57:92:d8:2b:fe:03:
c3:27:76:67:b8:9d:15:e7:61:68:f7:8f:26:c0:f1:
2a:54:44:91:c9:a1:c6:74:e3:c5:37:04:ad:cd:7e:
78:d3:68:0d:f1:6e:88:77:15:a5:50:4f:af:e5:a0:
c4:79:61:4c:33:bc:25:47:68:16:4d:44:b8:cf:a4:
2d:11:17:d8:b7:8e:ae:69:90:fb:db:bb:54:67:46:
68:01:7b:4f:8f:c0:c2:4b:85:2a:80:65:41:6c:40:
68:16:b0:76:52:c9:e8:f1:9e:20:08:aa:fb:be:f0:
d1:31:3b:60:31:b2:30:42:55:17:54:6a:ad:dd:67:
88:56:ae:02:24:50:03:58:42:10:6a:98:d9:ec:b3:
34:86:f2:86:a7:ce:58:aa:57:e6:e7:1d:70:f6:29:
c7:ff:9b:ad:a9:6c:16:79:da:f9:5f:89:50:6c:8b:
22:dc:30:a7:3f:11:6d:b8:49:b9:50:0d:23:e0:bb:
73:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AA:28:6E:7A:A6:C1:06:B8:F9:36:C6:E3:5C:8B:41:21:87:06:D1
X509v3 Authority Key Identifier:
keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0f:aa:0e:5f:70:8f:62:3a:17:a8:5f:17:e5:fd:c1:9f:04:
d8:5f:93:a0:3d:b4:3d:5b:8a:88:b1:a6:89:55:13:fa:d6:b6:
51:a6:86:5a:9a:87:5c:05:08:ca:64:8a:14:f3:d0:55:85:19:
ec:92:8f:e1:ba:fa:ae:db:65:d9:5f:67:d8:c2:e8:0a:07:34:
c8:bc:4b:c2:d1:11:36:5d:e0:0c:57:1a:6a:90:06:79:3c:b2:
91:ae:f7:6d:f9:bd:1c:df:ec:e2:3f:c3:e8:1a:49:bd:63:61:
ca:d3:02:92:fa:1d:bc:7b:3b:b5:60:1c:fa:85:4d:09:fe:ea:
c7:79:76:c3:5c:9f:f8:71:8d:d3:4d:a1:0e:9d:bf:b1:fa:2a:
a6:01:ec:7a:8e:e6:5c:27:98:c3:f0:05:71:55:af:55:b8:9b:
67:90:15:3f:57:f4:4a:6d:f6:3b:ac:01:89:50:df:78:4d:c0:
44:f0:f3:c7:a7:b9:d5:d1:21:e2:da:56:df:ff:6a:3f:b9:3f:
7f:6e:6e:06:75:b6:39:52:1f:95:5e:bf:16:53:63:fa:3e:0c:
35:c1:63:23:30:d5:ea:64:cb:9e:5f:9d:58:50:5a:f7:14:15:
74:ea:b2:24:20:57:00:e5:a2:e8:a7:de:38:19:d5:63:44:99:
df:b9:01:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQ7SmBqE9ZxwSCjaGLRoivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZGU0NTZkNGQ0MDVjNmY0MjkyZDYzNjg4Njc2Y2UxNTBl
N2YwN2UwHhcNMjUwNDIwMDIwMDQyWhcNMjUwNDIxMDIwMDQyWjAzMTEwLwYDVQQD
EygwMWFhMjg2ZTdhYTZjMTA2YjhmOTM2YzZlMzVjOGI0MTIxODcwNmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnDQTvIebGw9+NpD+vu0wrG/VJFs
rdtQTXP8gZyLkPpqNuXD0nquQ7EgbjOo8AjqZQlTZE2dSDdejLfSDEyDQSh/+JZX
ktgr/gPDJ3ZnuJ0V52Fo948mwPEqVESRyaHGdOPFNwStzX5402gN8W6IdxWlUE+v
5aDEeWFMM7wlR2gWTUS4z6QtERfYt46uaZD727tUZ0ZoAXtPj8DCS4UqgGVBbEBo
FrB2Usno8Z4gCKr7vvDRMTtgMbIwQlUXVGqt3WeIVq4CJFADWEIQapjZ7LM0hvKG
p85Yqlfm5x1w9inH/5utqWwWedr5X4lQbIsi3DCnPxFtuEm5UA0j4Ltz+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGqKG56psEGuPk2xuNci0EhhwbRMB8GA1UdIwQY
MBaAFKHeRW1NQFxvQpLWNohnbOFQ5/B+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2Q1RmJVMUFYRzlDa3RZMmlHZHM0VkRuOEg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80MGU0MDUtYTM4Zi00NzgxLThkNTUt
MGM5ZTBjZjdlOWZjLzEvb2Q1RmJVMUFYRzlDa3RZMmlHZHM0VkRuOEg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80MGU0MDUtYTM4Zi00NzgxLThkNTUtMGM5ZTBjZjdlOWZj
LzEvb2Q1RmJVMUFYRzlDa3RZMmlHZHM0VkRuOEg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASg+qDl9w
j2I6F6hfF+X9wZ8E2F+ToD20PVuKiLGmiVUT+ta2UaaGWpqHXAUIymSKFPPQVYUZ
7JKP4br6rttl2V9n2MLoCgc0yLxLwtERNl3gDFcaapAGeTyyka73bfm9HN/s4j/D
6BpJvWNhytMCkvodvHs7tWAc+oVNCf7qx3l2w1yf+HGN002hDp2/sfoqpgHseo7m
XCeYw/AFcVWvVbibZ5AVP1f0Sm32O6wBiVDfeE3ARPDzx6e51dEh4tpW3/9qP7k/
f25uBnW2OVIflV6/FlNj+j4MNcFjIzDV6mTLnl+dWFBa9xQVdOqyJCBXAOWi6Kfe
OBnVY0SZ37kBlw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:21:12 2025 by rpki-client