Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json)
Hash identifier: 75GqfYoUgh5RqkQR0NF7ZbDVRNGvvxshoqvEVjtSS6Q=
Subject key identifier: 15:8A:F4:DC:8A:00:99:A1:D7:B9:46:4C:39:D0:FF:08:0D:18:46:11
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 01958CCE0DE2C96E05DD59368AE0887FC660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
Manifest number: 06C3
Signing time: Thu 13 Mar 2025 00:01:08 +0000
Manifest this update: Thu 13 Mar 2025 00:01:08 +0000
Manifest next update: Fri 14 Mar 2025 00:01:08 +0000
Files and hashes: 1: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: 454VNMYrCJ55Y8CAJXTLIQngN6t0SfF4dpykG+8eFmA=)
2: QLu-t4-kWwjTWD2HUVQ3JUjA93E.roa (hash: wwPcnLN7UsFWJVqWb0xH9PzsYRh1MZUdzN16ZynKLqU=)
3: X9-z3qhXpej4BCNHXlOlwIoxiSI.roa (hash: +XeMFApgKN+wHjuGvI8Wb1xE1s+7UuhIUkYxW35SfdA=)
4: hwkpF7GCiN1Fi1Bf-G_kcCT7lXg.roa (hash: owUDYc5hXMNAaSpXWFyOh6YRLado21xVEXGeqVIdneY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:0d:e2:c9:6e:05:dd:59:36:8a:e0:88:7f:c6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Mar 13 00:01:08 2025 GMT
Not After : Mar 14 00:01:08 2025 GMT
Subject: CN=158af4dc8a0099a1d7b9464c39d0ff080d184611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:68:3a:4f:5e:39:a2:b7:91:ef:a1:ef:e4:
05:28:88:d7:f1:c6:e4:99:9d:d6:15:6b:3f:5a:bd:
98:23:1a:ec:6e:84:73:94:90:67:1f:c2:7d:0e:da:
4c:5d:e1:dd:90:a3:2f:f1:f7:71:85:41:75:f9:86:
3d:7f:62:3e:99:f9:15:fd:eb:8c:1a:6c:a1:0e:c4:
d1:0c:7c:62:3f:3e:f0:e9:15:18:51:fe:5e:6b:bc:
5f:8e:63:7e:1c:0d:5b:dc:50:87:c2:de:41:0d:75:
8b:ac:24:d6:7d:d0:ba:7d:c2:f1:76:07:3b:c3:57:
fc:42:3d:4f:7f:5a:33:ba:1c:8c:54:ee:2a:0d:53:
96:bb:49:45:e9:6d:5f:7d:6b:3f:2e:94:e6:3c:4d:
5b:72:3b:1a:f4:c8:4a:b4:e5:08:d7:53:45:19:34:
59:6d:b2:94:26:72:ba:5b:12:25:9d:97:87:5d:b3:
97:3b:ac:49:cb:a6:5e:49:d4:9b:b1:2a:26:2e:a7:
0b:f6:01:c0:5f:31:ef:f1:05:56:8f:7b:08:d2:cb:
84:a1:8c:95:ea:4a:d5:85:d6:65:53:0f:1f:0a:f1:
cc:bb:3c:c1:64:5a:3b:ff:33:90:7d:98:eb:65:8c:
b4:4e:64:66:10:2c:12:6d:38:6d:7b:ce:43:a9:69:
1c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8A:F4:DC:8A:00:99:A1:D7:B9:46:4C:39:D0:FF:08:0D:18:46:11
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:13:3a:e2:14:7a:3b:23:f7:6c:47:5a:c4:aa:ea:f9:4d:3b:
76:f7:47:ae:7f:91:a6:fb:97:65:ce:35:59:30:27:9c:d8:ea:
a7:49:55:82:f2:16:b3:9c:fc:76:41:c4:6b:4b:fa:39:f4:c2:
1c:0e:04:8a:b6:43:c6:0b:e0:8d:1b:17:10:f0:81:0f:03:a8:
02:2f:3a:1a:1d:7d:08:35:bf:1a:7b:d7:12:47:99:b3:3d:23:
c8:bd:48:b9:a4:26:63:8f:f0:ce:55:f8:bf:7e:03:24:fb:33:
85:c7:73:0c:77:3a:42:dc:24:17:32:ef:17:13:95:dc:f1:bd:
4e:e0:62:66:ef:38:4a:88:d7:0d:45:2f:24:5c:1c:25:65:bc:
77:72:66:26:28:06:c5:a6:2d:3b:78:a4:64:d8:9c:69:38:ff:
6c:63:17:db:e7:8d:91:d2:36:d3:26:4b:d9:73:fc:ec:1f:83:
8e:e5:27:b1:5a:15:ff:4f:1a:84:42:2f:c4:a8:8f:eb:a4:aa:
9b:da:11:2c:0d:00:7b:88:42:f9:25:3d:13:42:db:8c:c3:2a:
9d:56:7f:37:ab:a2:a0:42:9f:7f:49:34:bc:b5:de:0c:29:c2:
42:01:d7:88:93:23:5c:88:17:78:1d:4d:c7:e1:fd:ac:e0:14:
a7:02:05:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMzg3iyW4F3Vk2iuCIf8ZgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMDQyOWI1YWVjYWM4MzY0NTQ0YmY2MjNmOTRmMTYzYWZk
Y2U1NjEwHhcNMjUwMzEzMDAwMTA4WhcNMjUwMzE0MDAwMTA4WjAzMTEwLwYDVQQD
EygxNThhZjRkYzhhMDA5OWExZDdiOTQ2NGMzOWQwZmYwODBkMTg0NjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2doOk9eOaK3ke+h7+QFKIjX8cbk
mZ3WFWs/Wr2YIxrsboRzlJBnH8J9DtpMXeHdkKMv8fdxhUF1+YY9f2I+mfkV/euM
GmyhDsTRDHxiPz7w6RUYUf5ea7xfjmN+HA1b3FCHwt5BDXWLrCTWfdC6fcLxdgc7
w1f8Qj1Pf1ozuhyMVO4qDVOWu0lF6W1ffWs/LpTmPE1bcjsa9MhKtOUI11NFGTRZ
bbKUJnK6WxIlnZeHXbOXO6xJy6ZeSdSbsSomLqcL9gHAXzHv8QVWj3sI0suEoYyV
6krVhdZlUw8fCvHMuzzBZFo7/zOQfZjrZYy0TmRmECwSbThte85DqWkcvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWK9NyKAJmh17lGTDnQ/wgNGEYRMB8GA1UdIwQY
MBaAFDoEKbWuysg2RUS/Yj+U8WOv3OVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEt
ODQ3MTJjOWYzNDY0LzEvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEtODQ3MTJjOWYzNDY0
LzEvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuhM64hR6
OyP3bEdaxKrq+U07dvdHrn+RpvuXZc41WTAnnNjqp0lVgvIWs5z8dkHEa0v6OfTC
HA4EirZDxgvgjRsXEPCBDwOoAi86Gh19CDW/GnvXEkeZsz0jyL1IuaQmY4/wzlX4
v34DJPszhcdzDHc6QtwkFzLvFxOV3PG9TuBiZu84SojXDUUvJFwcJWW8d3JmJigG
xaYtO3ikZNicaTj/bGMX2+eNkdI20yZL2XP87B+DjuUnsVoV/08ahEIvxKiP66Sq
m9oRLA0Ae4hC+SU9E0LbjMMqnVZ/N6uioEKff0k0vLXeDCnCQgHXiJMjXIgXeB1N
x+H9rOAUpwIFew==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:03 2025 by rpki-client