Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
File: RotoFBeWypXkxy9L-mlqzqUIOvM.mft (raw, json)
Hash identifier: dmTUVZxDkI2cKpCFeFuOWsB2UpGGTFMA2oKr5MBaEvo=
Subject key identifier: 0A:E9:A3:6D:25:06:58:2F:B0:1D:97:4D:98:7E:62:5C:17:18:F4:4C
Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
Certificate issuer: /CN=468b68141796ca95e4c72f4bfa696acea5083af3
Certificate serial: 019650ED1A7C450F7B890ED8E1E004485364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
Manifest number: 0818
Signing time: Sun 20 Apr 2025 02:00:38 +0000
Manifest this update: Sun 20 Apr 2025 02:00:38 +0000
Manifest next update: Mon 21 Apr 2025 02:00:38 +0000
Files and hashes: 1: OZ7XXs5-vTfiSAWKoDmEkN7zWeQ.roa (hash: l/UsCgIJDNyf/l0N4v4B7v81nHJghd1pRCptDGkln1E=)
2: RotoFBeWypXkxy9L-mlqzqUIOvM.crl (hash: qOSna9N0PuwfKKirJ1RmHxrQZCymkptu6UcqGlDkGcI=)
3: bollIzhNfRvYanh5m9u8c1tqdcM.roa (hash: h9HWb5No43oY67BT/CufDxfVRQJTjdQZn1o0Ans09NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:ed:1a:7c:45:0f:7b:89:0e:d8:e1:e0:04:48:53:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3
Validity
Not Before: Apr 20 02:00:38 2025 GMT
Not After : Apr 21 02:00:38 2025 GMT
Subject: CN=0ae9a36d2506582fb01d974d987e625c1718f44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:36:61:95:26:f8:11:4c:2c:8e:4d:43:da:
90:69:76:43:f5:0b:0b:40:56:fe:6f:fd:cf:ce:c0:
df:2f:50:89:96:0b:56:77:cb:95:ec:bd:c0:41:bb:
c9:6b:4b:98:65:25:61:ab:a1:e7:b6:50:7d:2d:68:
fc:59:07:16:11:3d:9d:2a:2e:55:8b:0a:83:d0:6d:
f8:8d:42:3d:6c:54:a6:5d:a2:22:5a:b1:23:db:44:
43:1a:3e:4d:ca:f1:a8:ae:1b:96:48:f5:04:be:d6:
74:15:e8:04:73:12:f4:53:62:34:ab:94:61:66:14:
fd:79:c2:f7:c0:00:9f:75:81:a9:a0:01:44:3c:8e:
4f:e4:bf:39:e3:6d:f0:68:43:fb:6c:c8:c3:9a:c9:
eb:d4:b1:f5:2b:cb:c0:40:db:22:20:1d:3d:95:45:
df:49:0c:46:18:02:60:76:39:de:de:f8:2e:0a:36:
a9:3b:fb:32:62:1c:88:7f:16:fb:be:6a:b8:28:a3:
4a:19:d6:5b:c4:6f:89:3a:16:c6:35:4a:36:80:33:
2d:cb:50:c3:b9:0a:18:97:66:20:da:24:cd:98:e4:
34:4b:e7:46:e5:12:16:44:c7:dc:78:41:8e:40:cd:
10:92:39:5b:fe:e2:91:29:79:82:b3:e9:d3:f1:07:
59:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E9:A3:6D:25:06:58:2F:B0:1D:97:4D:98:7E:62:5C:17:18:F4:4C
X509v3 Authority Key Identifier:
keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:cf:01:4c:81:8f:50:3c:02:65:47:e6:81:8c:28:86:ff:32:
e1:81:11:a0:ca:b2:fb:b0:27:64:5e:bc:7e:16:e1:41:06:f2:
08:d8:eb:e3:c1:2e:88:7e:72:fe:72:e5:16:b9:8e:60:b8:1a:
58:af:86:56:f7:7f:e3:d6:7f:86:46:cd:0b:f8:1d:1e:34:1e:
47:20:1b:9c:34:f4:6c:31:36:42:df:ee:36:1a:72:3a:22:bf:
b3:0e:17:ef:60:d6:13:54:c1:b9:73:52:ec:f8:70:aa:a8:a5:
c1:c3:26:f3:1d:0e:83:01:6d:5c:9e:cf:1e:e9:ae:9d:30:6b:
8f:94:5b:bd:cb:56:d9:49:8b:af:9f:ce:34:ff:6c:19:8c:34:
d3:82:aa:91:e4:b4:92:08:34:c7:55:53:b8:a0:86:51:a9:3f:
65:74:d0:1e:17:a1:8f:90:5d:1e:6e:89:72:b1:9b:4a:f9:ba:
da:db:6d:89:dc:29:08:8c:ae:d3:a3:25:77:0b:a5:89:1f:01:
26:49:4e:bf:f1:0f:31:a3:60:f4:37:49:3b:2f:e7:1a:45:4e:
d9:b0:1e:49:c7:8e:4a:40:6e:ec:77:d9:80:e3:3a:a5:99:02:
da:b5:3d:74:fa:30:52:9e:3d:8b:22:b5:33:94:30:25:21:23:
02:d4:2a:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQ7Rp8RQ97iQ7Y4eAESFNkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGI2ODE0MTc5NmNhOTVlNGM3MmY0YmZhNjk2YWNlYTUw
ODNhZjMwHhcNMjUwNDIwMDIwMDM4WhcNMjUwNDIxMDIwMDM4WjAzMTEwLwYDVQQD
EygwYWU5YTM2ZDI1MDY1ODJmYjAxZDk3NGQ5ODdlNjI1YzE3MThmNDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJA2YZUm+BFMLI5NQ9qQaXZD9QsL
QFb+b/3PzsDfL1CJlgtWd8uV7L3AQbvJa0uYZSVhq6HntlB9LWj8WQcWET2dKi5V
iwqD0G34jUI9bFSmXaIiWrEj20RDGj5NyvGorhuWSPUEvtZ0FegEcxL0U2I0q5Rh
ZhT9ecL3wACfdYGpoAFEPI5P5L85423waEP7bMjDmsnr1LH1K8vAQNsiIB09lUXf
SQxGGAJgdjne3vguCjapO/syYhyIfxb7vmq4KKNKGdZbxG+JOhbGNUo2gDMty1DD
uQoYl2Yg2iTNmOQ0S+dG5RIWRMfceEGOQM0Qkjlb/uKRKXmCs+nT8QdZRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArpo20lBlgvsB2XTZh+YlwXGPRMMB8GA1UdIwQY
MBaAFEaLaBQXlsqV5McvS/ppas6lCDrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81OThlOGItYTYzZi00MjVlLWI0Zjct
NDUyZDZkMzgyNmY3LzEvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81OThlOGItYTYzZi00MjVlLWI0ZjctNDUyZDZkMzgyNmY3
LzEvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhM8BTIGP
UDwCZUfmgYwohv8y4YERoMqy+7AnZF68fhbhQQbyCNjr48EuiH5y/nLlFrmOYLga
WK+GVvd/49Z/hkbNC/gdHjQeRyAbnDT0bDE2Qt/uNhpyOiK/sw4X72DWE1TBuXNS
7PhwqqilwcMm8x0OgwFtXJ7PHumunTBrj5RbvctW2UmLr5/ONP9sGYw004KqkeS0
kgg0x1VTuKCGUak/ZXTQHhehj5BdHm6JcrGbSvm62tttidwpCIyu06MldwuliR8B
JklOv/EPMaNg9DdJOy/nGkVO2bAeSceOSkBu7HfZgOM6pZkC2rU9dPowUp49iyK1
M5QwJSEjAtQqJg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:16:58 2025 by rpki-client