Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier: eez/fY4Yr1WM52EhVUuRbjvB+E6MnoOkIvlQ+UDwlMw=
Subject key identifier: A1:4C:DE:2F:30:3F:95:4E:0C:3C:FF:AF:32:DD:DB:96:F3:F1:15:41
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 019652DBA6E59C6B29AEF3768260186AE38C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number: 0218
Signing time: Sun 20 Apr 2025 11:00:48 +0000
Manifest this update: Sun 20 Apr 2025 11:00:48 +0000
Manifest next update: Mon 21 Apr 2025 11:00:48 +0000
Files and hashes: 1: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: dzZ3eMW/pFwTPb6xiv1bQtXgUCNmV/K+7ELzFg5fg+U=)
2: xmi3fJrgJjbuIQRSW7_29egRqxw.roa (hash: ls6p+3WnPBbAThIcDQa0gnCwKorxkU+YFEDzxCOD1ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:a6:e5:9c:6b:29:ae:f3:76:82:60:18:6a:e3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: Apr 20 11:00:48 2025 GMT
Not After : Apr 21 11:00:48 2025 GMT
Subject: CN=a14cde2f303f954e0c3cffaf32dddb96f3f11541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:43:d5:0d:ff:22:00:35:f4:50:e1:88:fb:
14:af:f5:a2:65:5e:8b:f8:88:e7:01:33:64:07:3b:
4a:38:33:1d:18:25:7a:af:a7:fa:21:3e:7e:22:bd:
69:08:e4:e4:e6:58:31:af:32:cc:5f:6e:f3:0a:34:
5a:d0:55:a2:12:42:27:cc:bc:38:61:eb:00:25:04:
12:42:23:18:49:da:0f:ec:2c:16:3f:be:95:4a:89:
93:3f:a9:57:27:f6:02:03:95:0c:0c:3f:0f:b3:2d:
6e:d0:9c:5c:27:b7:d5:23:5c:27:38:ef:0f:1d:90:
1c:a6:3c:b0:f8:96:88:78:e4:df:a9:b3:92:fd:78:
d2:12:9f:05:fd:dc:e0:f0:83:49:b1:61:ff:e0:45:
f8:c0:62:2e:8f:ec:4a:80:1e:7e:12:1f:2f:a9:e0:
31:18:e0:14:15:24:1e:47:5d:75:0b:e6:16:18:b2:
44:52:ef:96:b7:89:1e:63:4b:bf:35:c0:c6:36:81:
ab:db:b1:1b:09:55:d6:2b:44:45:71:ec:a9:29:39:
a4:0b:12:b7:54:55:27:d1:af:b7:39:d1:a1:62:0e:
27:e3:41:e9:a0:fd:fe:39:8d:ce:da:43:c7:3d:c4:
59:3f:42:24:0d:00:3a:10:c7:ce:5f:0f:92:ae:9a:
dc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4C:DE:2F:30:3F:95:4E:0C:3C:FF:AF:32:DD:DB:96:F3:F1:15:41
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:00:ef:72:f5:51:1b:37:c8:e9:c4:11:0e:73:5d:87:c0:4a:
79:e6:bb:53:6c:03:df:70:09:20:7d:bb:25:70:a0:4c:97:99:
f1:91:ef:fb:7b:55:b6:7c:91:65:7d:d4:ee:c3:34:a9:41:b0:
a6:47:2a:4d:bb:c0:ba:87:19:e1:d1:80:b5:ce:5b:8d:79:19:
b8:f8:cb:ab:8f:e4:57:bd:16:d4:98:67:62:00:09:90:7b:06:
a8:87:77:51:94:1a:5f:8d:26:20:18:fc:64:62:0e:e1:57:a9:
6e:65:94:e6:b5:b4:92:7a:5c:3b:7b:54:8c:a5:e4:3b:45:7f:
ad:8d:39:59:d0:df:34:23:ae:68:63:63:34:78:bc:8a:2f:1c:
bb:52:d3:3f:c8:ac:f1:50:97:1e:10:d9:e1:98:0d:62:fb:95:
76:0c:77:3c:78:60:66:f6:55:3f:ca:17:77:ce:19:56:bd:16:
da:da:ec:11:60:cc:a0:95:e8:41:36:cc:1f:a9:2f:9c:77:3e:
83:5a:49:7d:d4:48:66:ea:9d:8c:bc:96:fd:a5:51:dc:34:a4:
27:8a:72:b8:3a:e1:53:7c:78:f0:0b:3f:f9:16:6c:76:04:b8:
c6:77:9a:3a:2c:fb:8f:91:98:6b:4c:61:ee:e0:c2:39:14:45:
3e:aa:4f:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZS26blnGsprvN2gmAYauOMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYjYyMzcxZWM2MmVmZDBmNDM4NWZhMDQ3MzA1NmYwODgx
OGRlNzMwHhcNMjUwNDIwMTEwMDQ4WhcNMjUwNDIxMTEwMDQ4WjAzMTEwLwYDVQQD
EyhhMTRjZGUyZjMwM2Y5NTRlMGMzY2ZmYWYzMmRkZGI5NmYzZjExNTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM5D1Q3/IgA19FDhiPsUr/WiZV6L
+IjnATNkBztKODMdGCV6r6f6IT5+Ir1pCOTk5lgxrzLMX27zCjRa0FWiEkInzLw4
YesAJQQSQiMYSdoP7CwWP76VSomTP6lXJ/YCA5UMDD8Psy1u0JxcJ7fVI1wnOO8P
HZAcpjyw+JaIeOTfqbOS/XjSEp8F/dzg8INJsWH/4EX4wGIuj+xKgB5+Eh8vqeAx
GOAUFSQeR111C+YWGLJEUu+Wt4keY0u/NcDGNoGr27EbCVXWK0RFceypKTmkCxK3
VFUn0a+3OdGhYg4n40HpoP3+OY3O2kPHPcRZP0IkDQA6EMfOXw+SrprcswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFM3i8wP5VODDz/rzLd25bz8RVBMB8GA1UdIwQY
MBaAFKK2I3HsYu/Q9DhfoEcwVvCIGN5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8wYmU1NTEtZDYwZC00OWJiLThjYWQt
Njc1ZTA3MjM1NjU3LzEvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8wYmU1NTEtZDYwZC00OWJiLThjYWQtNjc1ZTA3MjM1NjU3
LzEvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZADvcvVR
GzfI6cQRDnNdh8BKeea7U2wD33AJIH27JXCgTJeZ8ZHv+3tVtnyRZX3U7sM0qUGw
pkcqTbvAuocZ4dGAtc5bjXkZuPjLq4/kV70W1JhnYgAJkHsGqId3UZQaX40mIBj8
ZGIO4VepbmWU5rW0knpcO3tUjKXkO0V/rY05WdDfNCOuaGNjNHi8ii8cu1LTP8is
8VCXHhDZ4ZgNYvuVdgx3PHhgZvZVP8oXd84ZVr0W2trsEWDMoJXoQTbMH6kvnHc+
g1pJfdRIZuqdjLyW/aVR3DSkJ4pyuDrhU3x48As/+RZsdgS4xneaOiz7j5GYa0xh
7uDCORRFPqpPFQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:03:27 2025 by rpki-client