Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json)
Hash identifier: bFQ0gacEfNPosPTCnDWmwtExjm+6tiDg9PiUnEj2wUc=
Subject key identifier: 03:54:0E:3C:9A:E4:2E:DA:9D:7C:56:46:05:2A:19:8C:A3:AE:2D:68
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial: 0196417A00721F5B74EAA4CC4C03BD888728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
Manifest number: 144C
Signing time: Thu 17 Apr 2025 02:00:36 +0000
Manifest this update: Thu 17 Apr 2025 02:00:36 +0000
Manifest next update: Fri 18 Apr 2025 02:00:36 +0000
Files and hashes: 1: XK1HmfxcdTbRAdHlqNq8V7yYy_A.roa (hash: sq5IFjKXmmj7aEDxsZ6+3DEVQrRJ2eRe1t+cEED93OE=)
2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: jo5TWqKftA3axExYXnTMsxc44jm96asRiGBs11nvJnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:7a:00:72:1f:5b:74:ea:a4:cc:4c:03:bd:88:87:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Validity
Not Before: Apr 17 02:00:36 2025 GMT
Not After : Apr 18 02:00:36 2025 GMT
Subject: CN=03540e3c9ae42eda9d7c5646052a198ca3ae2d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ab:ab:75:3a:8b:1f:78:d8:d4:26:8e:d1:ca:
bf:be:6c:8c:60:43:b6:0b:b5:9d:ca:ae:b2:ef:71:
e0:26:9b:67:8c:f2:d5:9b:58:ed:0e:48:4a:ca:29:
7e:dd:e2:2b:c9:3a:c1:43:fd:75:e3:25:2c:24:ba:
e3:9b:ff:fe:98:4b:9d:b3:23:8d:ce:3b:9e:69:da:
ce:e6:4a:a5:d6:88:10:89:5c:57:34:21:1d:eb:06:
8f:6b:ca:ae:c7:42:4b:92:a5:64:e8:94:3c:2a:34:
c5:6f:bb:f4:1c:22:1c:d9:8b:16:2c:d2:0e:15:6d:
99:86:d8:f4:f2:6b:43:99:b1:5e:91:db:7d:db:c9:
7e:0b:37:77:f8:a1:1e:18:fe:ec:06:8b:93:93:b9:
e3:e3:e3:55:17:9e:30:4c:6d:dd:dd:ce:78:18:50:
6b:02:fa:55:ed:55:0a:8c:e5:07:3c:62:d1:42:4f:
c2:48:08:20:16:73:46:d7:a1:d2:4c:ef:bd:60:32:
f6:15:e9:20:ae:b1:75:0e:67:04:00:5f:f4:18:61:
b9:d2:1c:47:ce:af:3b:97:17:ba:f2:61:48:e7:ea:
06:ad:04:d9:45:9c:7d:bf:1e:67:9f:05:a5:0a:6f:
13:54:b7:8d:cd:f6:d8:29:50:fd:9b:e6:a7:31:b4:
a2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:54:0E:3C:9A:E4:2E:DA:9D:7C:56:46:05:2A:19:8C:A3:AE:2D:68
X509v3 Authority Key Identifier:
keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ca:f2:d6:f7:74:fd:1b:6e:4d:f9:62:18:7a:ab:64:a2:98:
86:04:1f:9e:ec:00:8f:ab:51:7e:f6:d7:a7:8d:c9:48:2b:16:
d9:20:ff:0e:49:bd:08:c2:9d:28:02:ac:1b:f2:be:57:25:40:
91:0a:f6:db:7d:2d:a1:a4:e2:21:20:37:42:cb:fa:eb:e3:e6:
79:58:e0:e8:0c:40:f8:4a:96:ce:54:e6:64:10:fa:dc:6d:ad:
c4:75:2a:56:a6:1e:fe:f2:b5:9e:3a:7d:26:3e:6f:e0:3b:71:
93:da:7d:ba:f6:03:c4:98:62:a2:cf:2d:b2:e9:c6:0b:cf:d5:
cd:c0:e0:d5:c3:bb:4d:92:bf:da:ed:75:82:b0:ae:50:a4:d5:
e7:6b:9d:6b:23:8f:6d:f0:44:0a:d1:b4:62:d3:6b:62:47:29:
20:7a:4a:3c:d3:bf:00:a3:42:3d:1e:d7:ff:57:11:2d:df:0b:
97:0f:0b:9a:a9:bb:f4:36:21:fd:05:82:cc:d0:f0:af:35:d0:
d5:f0:60:8a:ba:65:ef:7d:83:0d:e6:36:1a:ae:46:54:54:1f:
d7:a6:72:d4:ea:08:ad:c9:76:cb:13:d9:4c:63:73:0b:87:3e:
ae:82:dd:f4:19:69:d4:46:39:7e:47:e3:db:58:3a:83:e7:50:
2d:ac:38:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZBegByH1t06qTMTAO9iIcoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOGUwYWVmMWNkMWU5ZDMyYTYxNmFkZjU4MjQ1YTNhYjg4
YTU1NGIwHhcNMjUwNDE3MDIwMDM2WhcNMjUwNDE4MDIwMDM2WjAzMTEwLwYDVQQD
EygwMzU0MGUzYzlhZTQyZWRhOWQ3YzU2NDYwNTJhMTk4Y2EzYWUyZDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aurdTqLH3jY1CaO0cq/vmyMYEO2
C7Wdyq6y73HgJptnjPLVm1jtDkhKyil+3eIryTrBQ/114yUsJLrjm//+mEudsyON
zjueadrO5kql1ogQiVxXNCEd6waPa8qux0JLkqVk6JQ8KjTFb7v0HCIc2YsWLNIO
FW2Zhtj08mtDmbFekdt928l+Czd3+KEeGP7sBouTk7nj4+NVF54wTG3d3c54GFBr
AvpV7VUKjOUHPGLRQk/CSAggFnNG16HSTO+9YDL2FekgrrF1DmcEAF/0GGG50hxH
zq87lxe68mFI5+oGrQTZRZx9vx5nnwWlCm8TVLeNzfbYKVD9m+anMbSiIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANUDjya5C7anXxWRgUqGYyjri1oMB8GA1UdIwQY
MBaAFKCOCu8c0enTKmFq31gkWjq4ilVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYmU3YjQtN2Y0Mi00MjE3LTgxOWIt
MjQ3NjI5MWQ3MGVlLzEvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zYmU3YjQtN2Y0Mi00MjE3LTgxOWItMjQ3NjI5MWQ3MGVl
LzEvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8ry1vd0
/RtuTfliGHqrZKKYhgQfnuwAj6tRfvbXp43JSCsW2SD/Dkm9CMKdKAKsG/K+VyVA
kQr2230toaTiISA3Qsv66+PmeVjg6AxA+EqWzlTmZBD63G2txHUqVqYe/vK1njp9
Jj5v4Dtxk9p9uvYDxJhios8tsunGC8/VzcDg1cO7TZK/2u11grCuUKTV52udayOP
bfBECtG0YtNrYkcpIHpKPNO/AKNCPR7X/1cRLd8Llw8Lmqm79DYh/QWCzNDwrzXQ
1fBgirpl732DDeY2Gq5GVFQf16Zy1OoIrcl2yxPZTGNzC4c+roLd9Blp1EY5fkfj
21g6g+dQLaw4Tw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 05:39:44 2025 by rpki-client