Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json)
Hash identifier: gyd7X7NgT5TCzGeHcX6tBgODYP6sAKCTYHOl0SV3y1o=
Subject key identifier: 0F:6F:9F:3D:00:35:72:9D:35:30:95:E2:51:40:0C:FC:B8:6E:33:30
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 01964FDA5DBB32BAFEE937700DE38290EB4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
Manifest number: 0728
Signing time: Sat 19 Apr 2025 21:00:33 +0000
Manifest this update: Sat 19 Apr 2025 21:00:33 +0000
Manifest next update: Sun 20 Apr 2025 21:00:33 +0000
Files and hashes: 1: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: xOIMj/Nng+hzjjUe73+6IJxLO4yUVuoXsccKkkegs50=)
2: QLu-t4-kWwjTWD2HUVQ3JUjA93E.roa (hash: wwPcnLN7UsFWJVqWb0xH9PzsYRh1MZUdzN16ZynKLqU=)
3: X9-z3qhXpej4BCNHXlOlwIoxiSI.roa (hash: +XeMFApgKN+wHjuGvI8Wb1xE1s+7UuhIUkYxW35SfdA=)
4: hwkpF7GCiN1Fi1Bf-G_kcCT7lXg.roa (hash: owUDYc5hXMNAaSpXWFyOh6YRLado21xVEXGeqVIdneY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:5d:bb:32:ba:fe:e9:37:70:0d:e3:82:90:eb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Apr 19 21:00:33 2025 GMT
Not After : Apr 20 21:00:33 2025 GMT
Subject: CN=0f6f9f3d0035729d353095e251400cfcb86e3330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:49:04:23:78:79:71:e4:83:55:29:dd:06:
ea:71:b5:50:d7:92:2a:6f:ec:7d:8f:5b:b4:e6:87:
95:4e:d7:0b:0f:01:89:3d:ef:6d:91:25:d5:12:83:
f5:77:60:85:d7:6e:0c:1e:88:a7:e4:e5:54:64:75:
4d:7e:27:9c:4f:e8:fc:5a:7c:4b:c2:0b:10:6b:f2:
df:b5:80:8e:5c:3c:0e:ab:e5:92:98:37:b6:18:c8:
fd:c7:e5:3c:c7:ba:b2:fd:1f:be:10:19:b3:33:d9:
82:74:76:e9:d6:dc:81:54:be:e3:ba:f7:35:c3:46:
0d:99:a2:dc:d9:f2:fb:e6:24:b6:bf:50:1f:6b:9b:
73:67:68:3f:68:f9:b8:a9:fe:3a:04:ad:60:6e:c5:
c6:f2:ec:47:07:b7:18:fc:1a:be:80:f2:31:08:ab:
4f:64:a8:89:25:78:f6:fc:65:f6:f7:cb:79:dd:da:
ec:c5:66:f0:09:1a:a3:8a:e4:73:0f:2c:ec:10:04:
50:6b:19:57:41:63:24:c5:89:6a:d0:df:4f:00:c9:
2c:2c:10:49:94:60:f9:44:c9:84:ee:8c:7a:86:38:
38:b8:87:91:8b:59:99:f9:76:36:17:ba:47:62:ab:
c3:fd:b2:2f:2d:f9:1e:a9:84:cd:e3:f2:ab:f4:b9:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6F:9F:3D:00:35:72:9D:35:30:95:E2:51:40:0C:FC:B8:6E:33:30
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6f:84:73:27:56:be:9e:61:ba:d4:3b:f5:07:2c:36:5d:1a:
92:bc:4d:f8:24:3c:d4:c7:a0:ca:d5:9e:7f:4a:5e:a3:53:f8:
32:ab:7d:a9:50:25:c7:74:9d:e3:f4:b4:61:ac:e5:01:34:94:
97:ff:02:71:e0:8c:ed:9f:60:a4:e6:dc:9d:7d:f8:b0:71:63:
10:e7:32:d3:44:c1:a4:a3:a7:eb:a7:52:35:dc:ce:22:f3:75:
08:5b:fe:9a:23:96:22:68:2d:fa:25:66:ab:87:f2:34:d5:6e:
9d:84:ab:98:d7:0d:fc:43:ed:47:15:bf:14:ea:db:69:ff:e2:
5b:2b:48:a3:0d:a6:53:7d:a3:77:74:2f:bc:86:ad:55:74:7f:
9b:6f:3b:50:a0:ee:bd:06:91:a2:7f:dc:14:f7:14:63:95:be:
df:dd:1e:c1:88:c9:f1:5b:b5:c2:b0:a2:97:2e:4d:62:cb:8a:
9c:2f:8e:30:44:bc:d3:2a:c5:a8:66:75:8b:31:a3:51:08:9c:
ac:be:4c:44:19:f9:f5:26:c3:15:92:7a:c5:f7:b5:0c:77:44:
db:38:33:f4:f2:4a:9b:91:08:6d:22:e1:bb:8d:8c:ad:e7:6a:
c4:19:ba:7e:ab:1a:65:f3:51:f5:de:ec:ca:3f:57:e2:91:c6:
68:4f:fa:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZP2l27Mrr+6TdwDeOCkOtKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMDQyOWI1YWVjYWM4MzY0NTQ0YmY2MjNmOTRmMTYzYWZk
Y2U1NjEwHhcNMjUwNDE5MjEwMDMzWhcNMjUwNDIwMjEwMDMzWjAzMTEwLwYDVQQD
EygwZjZmOWYzZDAwMzU3MjlkMzUzMDk1ZTI1MTQwMGNmY2I4NmUzMzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMJJBCN4eXHkg1Up3QbqcbVQ15Iq
b+x9j1u05oeVTtcLDwGJPe9tkSXVEoP1d2CF124MHoin5OVUZHVNfiecT+j8WnxL
wgsQa/LftYCOXDwOq+WSmDe2GMj9x+U8x7qy/R++EBmzM9mCdHbp1tyBVL7juvc1
w0YNmaLc2fL75iS2v1Afa5tzZ2g/aPm4qf46BK1gbsXG8uxHB7cY/Bq+gPIxCKtP
ZKiJJXj2/GX298t53drsxWbwCRqjiuRzDyzsEARQaxlXQWMkxYlq0N9PAMksLBBJ
lGD5RMmE7ox6hjg4uIeRi1mZ+XY2F7pHYqvD/bIvLfkeqYTN4/Kr9LkF6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9vnz0ANXKdNTCV4lFADPy4bjMwMB8GA1UdIwQY
MBaAFDoEKbWuysg2RUS/Yj+U8WOv3OVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEt
ODQ3MTJjOWYzNDY0LzEvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEtODQ3MTJjOWYzNDY0
LzEvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2+EcydW
vp5hutQ79QcsNl0akrxN+CQ81MegytWef0peo1P4Mqt9qVAlx3Sd4/S0YazlATSU
l/8CceCM7Z9gpObcnX34sHFjEOcy00TBpKOn66dSNdzOIvN1CFv+miOWImgt+iVm
q4fyNNVunYSrmNcN/EPtRxW/FOrbaf/iWytIow2mU32jd3QvvIatVXR/m287UKDu
vQaRon/cFPcUY5W+390ewYjJ8Vu1wrCily5NYsuKnC+OMES80yrFqGZ1izGjUQic
rL5MRBn59SbDFZJ6xfe1DHdE2zgz9PJKm5EIbSLhu42MredqxBm6fqsaZfNR9d7s
yj9X4pHGaE/6lA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:01 2025 by rpki-client