Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
File: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft (raw, json)
Hash identifier: iO2RQG0lDSTTaCI34ua0a1ztTE8oRpEonpft6UaxA4c=
Subject key identifier: 8E:8C:F6:B3:86:67:A1:F5:D4:C9:6B:44:DA:98:68:7A:16:80:FC:19
Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
Certificate issuer: /CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Certificate serial: 0196214A2FF1B9DBF5F71D02B7503C265B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
Manifest number: 041E
Signing time: Thu 10 Apr 2025 20:00:32 +0000
Manifest this update: Thu 10 Apr 2025 20:00:32 +0000
Manifest next update: Fri 11 Apr 2025 20:00:32 +0000
Files and hashes: 1: Q8iIFORrHQ7CVyF0u573RC5AZpM.roa (hash: Ui1Waa5hGdzZs2TY0/Jb8NUdFKitTzOn1OfpI/V2JIY=)
2: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl (hash: i3ldQSg5rzYxadd+LXnA3xae8qMLtorUkAkKWC+4ppY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:21:4a:2f:f1:b9:db:f5:f7:1d:02:b7:50:3c:26:5b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Validity
Not Before: Apr 10 20:00:32 2025 GMT
Not After : Apr 11 20:00:32 2025 GMT
Subject: CN=8e8cf6b38667a1f5d4c96b44da98687a1680fc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:20:f8:d2:a7:32:f9:03:9d:eb:46:9e:ca:71:
54:28:78:b7:b4:da:42:f9:2d:19:34:24:cd:cd:e8:
c3:74:c6:c7:f2:1d:b6:62:0e:a2:72:6f:42:14:07:
12:f5:ac:f6:f5:dd:f0:e5:20:1f:f3:e4:b3:98:a0:
9d:9f:c8:22:27:6e:6b:3d:b2:7d:ff:2f:8f:b7:b5:
c1:de:89:96:82:34:28:94:18:e0:e4:ac:2a:53:d2:
27:10:26:07:4d:fe:6c:b0:98:01:2b:cb:f5:e1:aa:
da:f1:d3:a9:c0:0d:ea:d5:6e:31:ef:3b:d2:67:13:
5e:8c:87:e5:6a:ea:c7:94:06:60:39:b3:1c:75:f5:
4c:37:e0:4b:63:08:73:98:49:6d:d8:23:df:14:b7:
6c:51:24:64:f7:67:27:e4:2e:0b:23:22:e3:f9:5e:
db:da:9f:63:5a:2f:43:9a:ea:93:a6:37:68:b1:7b:
93:92:f0:e6:00:44:02:63:56:c0:7a:df:4f:fa:52:
31:b6:96:af:90:ba:3e:98:e3:1d:af:b0:ec:39:28:
b3:7b:f3:da:33:c8:ff:33:c4:c9:84:e9:a4:3b:ca:
92:a7:2d:11:a3:03:3f:8b:7f:39:c2:e8:cd:c7:87:
3b:34:18:2c:ce:66:e9:74:bb:81:d3:bd:81:35:77:
a7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8C:F6:B3:86:67:A1:F5:D4:C9:6B:44:DA:98:68:7A:16:80:FC:19
X509v3 Authority Key Identifier:
keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8a:50:3c:36:c3:81:04:09:e5:09:dd:b1:2d:b9:9d:fd:77:
c2:dd:ab:43:40:e6:1e:60:62:fe:39:2c:b5:ef:e8:62:b6:db:
0e:97:2f:d4:3e:a3:ac:13:e5:06:d1:ed:52:2c:0e:33:5e:23:
1b:d4:08:46:e7:44:86:d1:46:be:4a:80:8a:3d:61:52:86:da:
9d:eb:1b:6d:4a:96:e2:dd:3e:c8:50:48:3b:44:f4:c0:af:83:
2d:73:56:d1:55:d5:52:92:a5:29:b0:4f:e8:86:f9:9f:fe:3c:
af:97:8e:32:82:11:b0:95:7e:30:39:13:ff:3f:60:67:ce:f0:
ad:2b:9d:e6:6f:37:db:74:31:04:f1:be:11:6d:40:8e:37:61:
4c:1f:cf:19:18:d2:d6:a2:aa:50:c4:6c:ab:90:21:99:80:6c:
7a:77:73:7b:48:2d:43:94:32:4d:ba:3c:c8:eb:79:94:77:d1:
8d:ec:68:0c:9a:03:84:6c:9f:63:4c:c3:05:9f:61:91:22:2f:
a1:23:1a:75:3a:ec:82:fc:45:ed:19:2a:27:ce:5c:b3:c9:6e:
16:39:dc:11:d5:97:25:2d:c4:a4:ef:6a:ff:9c:cd:15:6d:90:
fc:82:95:e3:e0:7a:92:04:9f:04:f4:8f:bd:02:7d:f4:55:c2:
e2:67:29:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYhSi/xudv19x0Ct1A8JluJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZjFiMjJiMjA1NDUwMmJmZDM4ODkxMzgyOTExMDNkODNi
NmE1MGUwHhcNMjUwNDEwMjAwMDMyWhcNMjUwNDExMjAwMDMyWjAzMTEwLwYDVQQD
Eyg4ZThjZjZiMzg2NjdhMWY1ZDRjOTZiNDRkYTk4Njg3YTE2ODBmYzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCD40qcy+QOd60aeynFUKHi3tNpC
+S0ZNCTNzejDdMbH8h22Yg6icm9CFAcS9az29d3w5SAf8+SzmKCdn8giJ25rPbJ9
/y+Pt7XB3omWgjQolBjg5KwqU9InECYHTf5ssJgBK8v14ara8dOpwA3q1W4x7zvS
ZxNejIflaurHlAZgObMcdfVMN+BLYwhzmElt2CPfFLdsUSRk92cn5C4LIyLj+V7b
2p9jWi9DmuqTpjdosXuTkvDmAEQCY1bAet9P+lIxtpavkLo+mOMdr7DsOSize/Pa
M8j/M8TJhOmkO8qSpy0RowM/i385wujNx4c7NBgszmbpdLuB072BNXenTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6M9rOGZ6H11MlrRNqYaHoWgPwZMB8GA1UdIwQY
MBaAFKPxsisgVFAr/TiJE4KRED2DtqUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb19HeUt5QlVVQ3Y5T0lrVGdwRVFQWU8ycFE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hOGFhZmYtMTJhMS00NjQxLThiOWQt
MjRkMjcyY2UxMWUzLzEvb19HeUt5QlVVQ3Y5T0lrVGdwRVFQWU8ycFE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9hOGFhZmYtMTJhMS00NjQxLThiOWQtMjRkMjcyY2UxMWUz
LzEvb19HeUt5QlVVQ3Y5T0lrVGdwRVFQWU8ycFE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIpQPDbD
gQQJ5QndsS25nf13wt2rQ0DmHmBi/jkste/oYrbbDpcv1D6jrBPlBtHtUiwOM14j
G9QIRudEhtFGvkqAij1hUobanesbbUqW4t0+yFBIO0T0wK+DLXNW0VXVUpKlKbBP
6Ib5n/48r5eOMoIRsJV+MDkT/z9gZ87wrSud5m8323QxBPG+EW1AjjdhTB/PGRjS
1qKqUMRsq5AhmYBsendze0gtQ5QyTbo8yOt5lHfRjexoDJoDhGyfY0zDBZ9hkSIv
oSMadTrsgvxF7RkqJ85cs8luFjncEdWXJS3EpO9q/5zNFW2Q/IKV4+B6kgSfBPSP
vQJ99FXC4mcpow==
-----END CERTIFICATE-----
Generated at Fri Apr 11 02:34:33 2025 by rpki-client