Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
File: OJsvo2UTg6f8aoatulbHxiB9dWg.mft (raw, json)
Hash identifier: RrfZTdvjpEwzWXoyCUv20GcMUnbXJ0HOzvyM36jgmEw=
Subject key identifier: A0:26:65:D3:CE:1A:C5:0B:47:78:E5:9B:56:1E:65:01:11:DA:1A:58
Authority key identifier: 38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
Certificate issuer: /CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Certificate serial: 01958C96F06E061C97009FD0AA08D9C6D34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
Manifest number: 0C7F
Signing time: Wed 12 Mar 2025 23:00:56 +0000
Manifest this update: Wed 12 Mar 2025 23:00:56 +0000
Manifest next update: Thu 13 Mar 2025 23:00:56 +0000
Files and hashes: 1: LVniV-fBUsD2XHyiKXh59lNaKck.roa (hash: e7ROoJyN3pM39RDR+x9hRmjX8OTAnl8OOTQ8mCyFwtU=)
2: OJsvo2UTg6f8aoatulbHxiB9dWg.crl (hash: KMCcz335MNuWol+KRTlqv+3VU3qIi21eY+7aMknkZkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:96:f0:6e:06:1c:97:00:9f:d0:aa:08:d9:c6:d3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Validity
Not Before: Mar 12 23:00:56 2025 GMT
Not After : Mar 13 23:00:56 2025 GMT
Subject: CN=a02665d3ce1ac50b4778e59b561e650111da1a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:c4:29:65:ae:ec:f5:2a:ff:e9:ad:79:bc:
f2:6b:d5:65:57:0d:69:3e:5c:1c:a9:46:0b:9a:55:
aa:76:0c:c2:75:87:b8:2f:b6:8b:5b:ed:8e:0a:c6:
5e:95:68:ed:cc:da:34:98:04:92:24:5b:17:94:08:
c1:97:4c:49:e2:6f:c4:92:3e:81:fe:dd:15:ca:8d:
a5:47:ff:4f:54:89:6e:df:f0:a8:96:3d:48:e8:37:
40:73:aa:20:7a:fe:3b:50:fb:63:47:d0:f0:00:b4:
01:3e:90:ab:1c:00:db:0a:c1:a0:ef:98:9e:c3:39:
d6:ab:71:4d:65:19:35:e2:61:cb:ad:c4:07:40:18:
1e:52:75:ca:4f:6b:f7:7b:9d:90:74:1d:1b:eb:e5:
87:2f:f8:90:1a:30:4a:cd:f4:43:04:83:0c:e7:fd:
48:11:4e:14:d9:d3:43:c8:87:79:aa:c8:0c:57:32:
83:5d:5c:36:c1:74:27:34:35:54:5a:e1:db:be:fa:
93:32:f0:51:29:4a:7b:71:1e:11:5d:83:0a:46:5c:
81:8c:f0:19:a8:05:07:75:4c:ba:ee:a5:48:37:ce:
f2:c6:25:84:d5:19:e1:6c:be:9b:9e:7a:b3:b6:40:
89:a2:f4:ad:df:82:65:0d:d6:5f:45:02:e9:f7:b2:
43:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:26:65:D3:CE:1A:C5:0B:47:78:E5:9B:56:1E:65:01:11:DA:1A:58
X509v3 Authority Key Identifier:
keyid:38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5e:ff:bd:5f:ae:93:5f:70:77:0e:d2:e5:71:72:3f:28:87:
1c:82:c4:28:f2:2e:ec:68:7f:b7:95:32:ad:b2:06:91:7a:66:
38:0e:cd:a4:07:ba:dc:84:5c:76:ff:ca:bc:bb:54:15:56:c4:
7a:99:70:c2:8d:88:71:8f:8b:16:42:cd:9e:08:dd:f3:d3:53:
8d:9a:2c:3a:2a:94:88:98:a1:ce:1f:0a:3a:1e:a0:a7:9e:60:
1f:22:67:e5:44:22:88:0f:68:0a:e4:6a:b9:1e:d5:bd:5a:69:
40:8c:58:a2:b1:e5:87:92:0d:2a:9e:90:84:76:3b:42:95:4f:
a2:1b:78:58:f6:c8:5d:81:5a:94:55:b7:82:8e:75:42:97:87:
6f:14:93:ab:24:cd:e7:55:fc:33:a7:37:e6:a3:bc:20:4c:60:
38:36:f7:4e:b3:6f:8a:e3:8f:d8:ca:84:81:03:d5:cd:fa:d5:
db:bc:6d:35:02:cc:2c:51:cf:33:fa:da:c8:9c:9a:cb:d1:e8:
25:66:e2:48:a0:f0:81:73:94:69:96:10:80:80:d1:c7:e9:b2:
88:17:46:48:9f:5d:3d:3f:3d:88:ae:7b:78:da:5b:75:d3:62:
53:7b:c6:cd:39:2f:05:6e:c4:23:be:01:8a:2d:c2:9a:02:a6:
d9:d6:02:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMlvBuBhyXAJ/QqgjZxtNOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OWIyZmEzNjUxMzgzYTdmYzZhODZhZGJhNTZjN2M2MjA3
ZDc1NjgwHhcNMjUwMzEyMjMwMDU2WhcNMjUwMzEzMjMwMDU2WjAzMTEwLwYDVQQD
EyhhMDI2NjVkM2NlMWFjNTBiNDc3OGU1OWI1NjFlNjUwMTExZGExYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto7EKWWu7PUq/+mtebzya9VlVw1p
PlwcqUYLmlWqdgzCdYe4L7aLW+2OCsZelWjtzNo0mASSJFsXlAjBl0xJ4m/Ekj6B
/t0Vyo2lR/9PVIlu3/Colj1I6DdAc6ogev47UPtjR9DwALQBPpCrHADbCsGg75ie
wznWq3FNZRk14mHLrcQHQBgeUnXKT2v3e52QdB0b6+WHL/iQGjBKzfRDBIMM5/1I
EU4U2dNDyId5qsgMVzKDXVw2wXQnNDVUWuHbvvqTMvBRKUp7cR4RXYMKRlyBjPAZ
qAUHdUy67qVIN87yxiWE1RnhbL6bnnqztkCJovSt34JlDdZfRQLp97JD9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAmZdPOGsULR3jlm1YeZQER2hpYMB8GA1UdIwQY
MBaAFDibL6NlE4On/GqGrbpWx8YgfXVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0pzdm8yVVRnNmY4YW9hdHVsYkh4aUI5ZFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYWQyNmYtYTMzZS00MDY5LWE4MDIt
MzczYjUyMmE4MjFkLzEvT0pzdm8yVVRnNmY4YW9hdHVsYkh4aUI5ZFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xYWQyNmYtYTMzZS00MDY5LWE4MDItMzczYjUyMmE4MjFk
LzEvT0pzdm8yVVRnNmY4YW9hdHVsYkh4aUI5ZFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEl7/vV+u
k19wdw7S5XFyPyiHHILEKPIu7Gh/t5UyrbIGkXpmOA7NpAe63IRcdv/KvLtUFVbE
eplwwo2IcY+LFkLNngjd89NTjZosOiqUiJihzh8KOh6gp55gHyJn5UQiiA9oCuRq
uR7VvVppQIxYorHlh5INKp6QhHY7QpVPoht4WPbIXYFalFW3go51QpeHbxSTqyTN
51X8M6c35qO8IExgODb3TrNviuOP2MqEgQPVzfrV27xtNQLMLFHPM/rayJyay9Ho
JWbiSKDwgXOUaZYQgIDRx+myiBdGSJ9dPT89iK57eNpbddNiU3vGzTkvBW7EI74B
ii3CmgKm2dYCdQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:48 2025 by rpki-client