Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
File: oInbclD9hHbImK7gpfvyqYg0Af4.mft (raw, json)
Hash identifier: pgiuYkxf/Cz5MJn80NDmAp8dT77mx311O80aupfxEyQ=
Subject key identifier: 82:04:67:2D:C4:6A:43:5B:7F:06:E9:1E:8C:5B:1D:3C:4D:84:D7:1B
Authority key identifier: A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
Certificate issuer: /CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Certificate serial: 01964D7DE6BC43A6B7EEDC6B66ED3BF21696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 10:00:18 +0000
Manifest this update: Sat 19 Apr 2025 10:00:18 +0000
Manifest next update: Sun 20 Apr 2025 10:00:18 +0000
Files and hashes: 1: PRBRLMqw-2-Iz8UAT3zfg4Sw6lo.roa (hash: GVRCRwJe0CJRmQR55/f83gphK42VF5Ywz7text0ZVtk=)
2: oInbclD9hHbImK7gpfvyqYg0Af4.crl (hash: INORJ4GXDpDdTajSjRYr5nvoplIehMECYztSLTo2IwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7d:e6:bc:43:a6:b7:ee:dc:6b:66:ed:3b:f2:16:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Validity
Not Before: Apr 19 10:00:18 2025 GMT
Not After : Apr 20 10:00:18 2025 GMT
Subject: CN=8204672dc46a435b7f06e91e8c5b1d3c4d84d71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:aa:ed:f4:4b:6d:c1:a1:f5:39:6a:e9:fb:
3f:7e:95:6b:7c:cb:f8:99:be:68:86:e0:05:ed:ef:
05:87:81:02:fd:af:ba:12:b4:17:9c:26:fd:f3:18:
fc:a0:0b:ce:2a:e6:97:a4:b8:1c:ba:30:1c:d5:b5:
77:24:3e:4a:9a:b8:96:6f:30:bc:47:9f:79:0d:0d:
82:49:e7:35:d6:fa:a4:27:0e:1c:92:7b:a2:67:ab:
5b:79:27:91:ed:7a:a1:e2:04:c3:56:b6:76:11:0f:
9a:5e:62:d0:70:38:f1:cc:36:2a:4b:48:6e:e1:ae:
9b:ff:00:76:4e:cf:81:c3:b3:ee:37:76:02:fb:19:
85:6b:01:04:3a:15:0f:c6:8c:54:b2:5f:92:ed:21:
c3:df:05:ff:e7:ae:fc:31:08:db:a4:82:ec:8e:2c:
41:08:bd:c3:e8:24:b7:e9:33:c0:c7:40:f5:f8:a1:
2e:9f:f8:75:6d:5d:50:73:0a:30:b4:91:c7:57:91:
75:5f:ec:19:b3:61:b8:dd:59:e0:00:0d:3e:ac:8c:
bc:b6:04:de:dd:52:9b:59:9e:06:e9:52:4a:d6:6e:
6a:73:ff:ec:66:1b:df:5a:ea:a5:17:6c:bb:7c:13:
e0:f5:58:11:1a:80:7a:95:01:ba:22:c2:98:9f:44:
de:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:04:67:2D:C4:6A:43:5B:7F:06:E9:1E:8C:5B:1D:3C:4D:84:D7:1B
X509v3 Authority Key Identifier:
keyid:A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:88:eb:5e:5f:36:24:b8:ed:8b:a1:64:30:0f:9e:d0:19:1a:
9e:d3:80:c4:77:ba:a3:37:57:14:ed:fc:6e:80:a0:a0:cb:91:
e7:0a:c7:39:86:74:1f:c1:19:44:7b:77:c9:a8:42:66:c6:f8:
45:93:2e:2e:0d:d4:27:4a:f1:c4:b1:f0:55:9e:87:3e:ce:c9:
e9:c9:11:63:5f:2e:89:91:9a:a6:35:bb:12:44:b7:c5:24:49:
ef:3c:33:e7:9c:cb:b2:56:3a:2d:dc:f2:59:98:29:c5:bc:d4:
9e:df:b2:2d:5b:11:74:11:92:44:de:93:3d:3d:ab:b4:de:d4:
2f:d2:e6:ec:03:96:26:67:48:e1:ad:91:71:ee:86:e5:16:e7:
8d:d8:44:cf:91:17:00:f6:fc:1d:31:64:51:ee:66:99:91:85:
98:3d:b2:0a:e8:57:28:49:4d:61:35:81:62:eb:de:34:0b:5e:
ee:dc:35:db:13:12:ef:58:71:24:13:6f:4e:70:b4:76:bf:58:
e9:51:cf:1e:99:d0:7b:4f:34:2a:92:e7:02:27:1a:15:d4:1a:
c3:08:42:94:72:cb:63:1c:0d:e7:bb:3a:1c:d1:07:ca:1b:ed:
5d:4a:f9:c3:6d:11:d3:25:03:4d:76:1c:b6:c8:75:3c:c4:99:
16:98:28:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfea8Q6a37txrZu078haWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwODlkYjcyNTBmZDg0NzZjODk4YWVlMGE1ZmJmMmE5ODgz
NDAxZmUwHhcNMjUwNDE5MTAwMDE4WhcNMjUwNDIwMTAwMDE4WjAzMTEwLwYDVQQD
Eyg4MjA0NjcyZGM0NmE0MzViN2YwNmU5MWU4YzViMWQzYzRkODRkNzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyyq7fRLbcGh9Tlq6fs/fpVrfMv4
mb5ohuAF7e8Fh4EC/a+6ErQXnCb98xj8oAvOKuaXpLgcujAc1bV3JD5KmriWbzC8
R595DQ2CSec11vqkJw4cknuiZ6tbeSeR7Xqh4gTDVrZ2EQ+aXmLQcDjxzDYqS0hu
4a6b/wB2Ts+Bw7PuN3YC+xmFawEEOhUPxoxUsl+S7SHD3wX/5678MQjbpILsjixB
CL3D6CS36TPAx0D1+KEun/h1bV1QcwowtJHHV5F1X+wZs2G43VngAA0+rIy8tgTe
3VKbWZ4G6VJK1m5qc//sZhvfWuqlF2y7fBPg9VgRGoB6lQG6IsKYn0TeAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIEZy3EakNbfwbpHoxbHTxNhNcbMB8GA1UdIwQY
MBaAFKCJ23JQ/YR2yJiu4KX78qmINAH+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0luYmNsRDloSGJJbUs3Z3BmdnlxWWcwQWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yYTg4MzItY2RkNi00ZDhjLTkzZjMt
ZDgyNWQwMzY1Nzg5LzEvb0luYmNsRDloSGJJbUs3Z3BmdnlxWWcwQWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8yYTg4MzItY2RkNi00ZDhjLTkzZjMtZDgyNWQwMzY1Nzg5
LzEvb0luYmNsRDloSGJJbUs3Z3BmdnlxWWcwQWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYjrXl82
JLjti6FkMA+e0BkantOAxHe6ozdXFO38boCgoMuR5wrHOYZ0H8EZRHt3yahCZsb4
RZMuLg3UJ0rxxLHwVZ6HPs7J6ckRY18uiZGapjW7EkS3xSRJ7zwz55zLslY6Ldzy
WZgpxbzUnt+yLVsRdBGSRN6TPT2rtN7UL9Lm7AOWJmdI4a2Rce6G5RbnjdhEz5EX
APb8HTFkUe5mmZGFmD2yCuhXKElNYTWBYuveNAte7tw12xMS71hxJBNvTnC0dr9Y
6VHPHpnQe080KpLnAicaFdQawwhClHLLYxwN57s6HNEHyhvtXUr5w20R0yUDTXYc
tsh1PMSZFpgoLg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:01:55 2025 by rpki-client