Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
File: Og6YCIquzFusI9Wg5intsMVT5y4.mft (raw, json)
Hash identifier: C7Z8Sj9nFvr7KXAXPbk/OkBvnMPadmBzpYxxoUnivX0=
Subject key identifier: 7C:A1:4D:4F:03:30:37:C2:6A:8A:93:CB:EA:6A:DA:35:06:9D:15:54
Authority key identifier: 3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
Certificate issuer: /CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Certificate serial: 01957910B610050C89FC61716B786E283AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
Manifest number: 10A8
Signing time: Sun 09 Mar 2025 04:01:32 +0000
Manifest this update: Sun 09 Mar 2025 04:01:32 +0000
Manifest next update: Mon 10 Mar 2025 04:01:32 +0000
Files and hashes: 1: Og6YCIquzFusI9Wg5intsMVT5y4.crl (hash: q6eerLfKnnsggPw/qEAk5Ca6bw47jQZQHIlhzloY/Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:10:b6:10:05:0c:89:fc:61:71:6b:78:6e:28:3a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Validity
Not Before: Mar 9 04:01:32 2025 GMT
Not After : Mar 10 04:01:32 2025 GMT
Subject: CN=7ca14d4f033037c26a8a93cbea6ada35069d1554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:21:6e:85:e2:31:29:6e:e9:6e:b6:9a:92:
9e:ac:f9:d2:29:36:c3:55:a6:14:fc:b7:3b:f5:6d:
d5:c0:9c:ca:ab:f8:e8:3a:27:7a:51:19:e9:0c:b0:
f9:4b:8c:fd:7a:97:e8:3a:4a:27:20:f3:f7:57:d6:
91:77:ae:30:52:9a:ff:ad:5f:b3:3b:dc:80:0b:fe:
82:70:34:52:75:3a:88:6c:cb:b8:ce:47:d2:67:71:
1c:15:eb:55:ec:a1:65:02:fe:80:cf:87:b6:7b:e8:
55:a9:6c:5e:98:1b:c8:44:a4:32:24:4c:9f:38:14:
93:3a:10:0c:e2:7a:c4:d2:cf:52:75:03:62:9a:bb:
c4:7f:17:bb:8b:c6:17:dd:75:d7:5a:55:5a:03:40:
44:f8:af:5d:08:3a:b3:a7:42:23:44:01:0e:88:78:
32:90:a9:2c:a1:b9:ee:03:bb:41:87:31:f8:46:2b:
35:53:f9:d0:2c:68:6f:0c:38:29:98:ad:7f:9c:29:
25:55:b2:98:7c:e1:72:d4:80:16:89:d8:0c:47:59:
0e:44:47:17:0b:37:bd:50:97:42:de:59:1b:2b:81:
40:f8:b5:08:15:1d:6a:ea:d9:04:db:df:b4:c0:2c:
14:a3:9c:42:0d:00:f1:72:1b:c7:d1:74:43:52:91:
20:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A1:4D:4F:03:30:37:C2:6A:8A:93:CB:EA:6A:DA:35:06:9D:15:54
X509v3 Authority Key Identifier:
keyid:3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a0:cd:0d:e9:f6:06:95:8f:9f:45:16:3a:99:96:44:89:72:
0b:b6:8d:77:aa:81:c3:e3:42:12:4f:40:0a:2d:65:2d:e6:4e:
e4:c2:e7:a9:02:f6:84:f7:6e:ac:36:4a:22:06:e4:52:cb:88:
f9:31:48:58:d9:6d:67:2c:b0:5a:d1:77:2a:a1:f7:db:16:48:
05:ed:c5:c7:00:dd:87:e8:ae:56:c5:69:ac:9a:eb:bd:20:89:
f5:16:53:70:42:89:ba:94:ce:a9:5c:bc:3f:0e:d9:fe:7d:da:
89:7c:af:f4:2d:1e:0e:86:bf:f7:84:bd:90:40:64:18:8f:58:
ee:c8:a7:83:12:2e:9a:80:4d:84:30:f3:87:7f:8d:64:e6:eb:
74:76:21:e0:17:7e:01:18:6c:e1:f4:38:84:bf:07:23:47:f4:
8f:0c:16:1d:8c:b8:5c:26:00:1d:39:83:6a:74:61:a1:0e:be:
ae:b1:35:05:87:dc:92:38:ee:22:e6:59:76:42:8a:fc:17:b5:
b2:bc:7a:b8:73:9b:cb:c6:d1:29:36:1f:be:54:e4:b3:07:17:
a2:7a:aa:e9:ec:dc:c1:57:11:2f:5f:67:81:fc:b4:e6:28:b2:
87:66:bb:72:49:43:83:5c:85:6f:56:bb:6a:42:92:33:11:ee:
74:29:46:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV5ELYQBQyJ/GFxa3huKDqmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMGU5ODA4OGFhZWNjNWJhYzIzZDVhMGU2MjllZGIwYzU1
M2U3MmUwHhcNMjUwMzA5MDQwMTMyWhcNMjUwMzEwMDQwMTMyWjAzMTEwLwYDVQQD
Eyg3Y2ExNGQ0ZjAzMzAzN2MyNmE4YTkzY2JlYTZhZGEzNTA2OWQxNTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIYhboXiMSlu6W62mpKerPnSKTbD
VaYU/Lc79W3VwJzKq/joOid6URnpDLD5S4z9epfoOkonIPP3V9aRd64wUpr/rV+z
O9yAC/6CcDRSdTqIbMu4zkfSZ3EcFetV7KFlAv6Az4e2e+hVqWxemBvIRKQyJEyf
OBSTOhAM4nrE0s9SdQNimrvEfxe7i8YX3XXXWlVaA0BE+K9dCDqzp0IjRAEOiHgy
kKksobnuA7tBhzH4Ris1U/nQLGhvDDgpmK1/nCklVbKYfOFy1IAWidgMR1kOREcX
Cze9UJdC3lkbK4FA+LUIFR1q6tkE29+0wCwUo5xCDQDxchvH0XRDUpEg4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyhTU8DMDfCaoqTy+pq2jUGnRVUMB8GA1UdIwQY
MBaAFDoOmAiKrsxbrCPVoOYp7bDFU+cuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2c2WUNJcXV6RnVzSTlXZzVpbnRzTVZUNXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85YmEzODUtNmM3Yy00MzA3LTk5NDYt
YTVjZDhlMjIxNDZiLzEvT2c2WUNJcXV6RnVzSTlXZzVpbnRzTVZUNXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS85YmEzODUtNmM3Yy00MzA3LTk5NDYtYTVjZDhlMjIxNDZi
LzEvT2c2WUNJcXV6RnVzSTlXZzVpbnRzTVZUNXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEaDNDen2
BpWPn0UWOpmWRIlyC7aNd6qBw+NCEk9ACi1lLeZO5MLnqQL2hPdurDZKIgbkUsuI
+TFIWNltZyywWtF3KqH32xZIBe3FxwDdh+iuVsVprJrrvSCJ9RZTcEKJupTOqVy8
Pw7Z/n3aiXyv9C0eDoa/94S9kEBkGI9Y7singxIumoBNhDDzh3+NZObrdHYh4Bd+
ARhs4fQ4hL8HI0f0jwwWHYy4XCYAHTmDanRhoQ6+rrE1BYfckjjuIuZZdkKK/Be1
srx6uHOby8bRKTYfvlTkswcXonqq6ezcwVcRL19ngfy05iiyh2a7cklDg1yFb1a7
akKSMxHudClGxg==
-----END CERTIFICATE-----
Generated at Sun Mar 9 11:37:49 2025 by rpki-client