Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File: oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier: bUgeTe5P9XEiet4hWz0jK9zOH9cXl8kKMLydVgHjn/4=
Subject key identifier: 92:87:DD:DA:75:07:D4:8A:E4:9B:C7:E2:BD:B1:14:24:53:00:4D:FD
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial: 0196556EC6A8EC7C8BF14798D644B4D34311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 23:00:45 +0000
Manifest this update: Sun 20 Apr 2025 23:00:45 +0000
Manifest next update: Mon 21 Apr 2025 23:00:45 +0000
Files and hashes: 1: 7C0eLiHaSivPjWvCeJI7OYyeX0w.roa (hash: QECF5Dw9n/dUuIXbwLPUz1r2SDqHk19ywfPN3IJ1Bjo=)
2: YL2mjFkL3ptl5VIC6FUskxqO4nY.roa (hash: jZ9khSDfHMU1HP/GDGXtwMlzTdVqjL0AwmhZP5bokp4=)
3: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: 4OoHm3nCKdP/fDydYakCPoEKZT05ExBFfHM9D2Z7hHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:c6:a8:ec:7c:8b:f1:47:98:d6:44:b4:d3:43:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Validity
Not Before: Apr 20 23:00:45 2025 GMT
Not After : Apr 21 23:00:45 2025 GMT
Subject: CN=9287ddda7507d48ae49bc7e2bdb1142453004dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:62:0a:77:aa:53:c0:d8:37:06:d8:68:48:
68:90:df:e2:25:67:e2:9a:d5:4d:bb:64:e1:a2:19:
90:e8:03:71:f4:91:1d:02:d2:96:f4:9d:a7:d0:63:
f4:2a:c2:83:19:85:ed:f4:cd:ec:58:50:41:de:3a:
87:cc:9e:15:71:ac:19:7b:05:ef:49:47:15:97:8a:
e0:e6:9c:a9:16:a5:db:87:f0:ea:1e:b7:ac:c4:8b:
95:8d:2d:55:9f:e3:29:c6:79:28:0c:8a:c1:24:cc:
a0:87:05:e9:f8:18:4c:5f:41:dc:ae:9a:b7:ff:5f:
94:fd:5a:c5:04:72:d8:6d:5d:d5:5e:c6:47:53:26:
44:fd:0e:fb:28:a2:12:dd:ea:9a:d6:61:0a:bc:00:
29:3c:44:a0:be:48:5e:5b:ca:76:10:12:88:37:c5:
0a:89:e5:e7:38:2f:67:97:bd:23:2c:40:69:8e:6d:
88:18:0d:12:ec:da:38:27:60:bb:23:2a:50:f4:84:
b2:74:25:e6:05:c5:8e:b3:df:61:dd:d6:5e:f0:18:
3a:f2:61:11:fd:93:eb:d8:a7:ee:ab:63:da:c7:2e:
96:a2:a8:70:28:b2:08:b5:88:6c:11:88:5c:dc:5f:
c8:e9:5b:9d:d1:bf:2c:e9:e5:5e:27:a3:4f:66:79:
92:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:87:DD:DA:75:07:D4:8A:E4:9B:C7:E2:BD:B1:14:24:53:00:4D:FD
X509v3 Authority Key Identifier:
keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:49:dc:b8:fd:0b:ce:a4:4d:dc:cd:66:bd:20:8e:5c:86:70:
87:dc:ff:cf:34:c4:0f:dc:ea:7f:51:fb:8e:64:93:fe:80:6f:
5d:42:33:8d:5a:14:d2:58:e2:ab:1f:4e:39:04:31:8e:53:33:
61:4e:e3:cd:49:fa:ef:db:55:e5:58:5b:db:40:c9:5b:9d:ab:
4e:de:5d:9f:0c:3f:cd:c7:12:e8:ab:4f:6d:2c:f4:ea:dd:35:
71:31:4c:9f:ea:00:b7:e6:09:8a:99:f1:eb:e2:98:da:41:57:
f4:1d:51:7d:0f:4a:71:6c:35:37:25:17:fb:ba:15:ad:43:b3:
1a:b1:4d:c4:4e:a3:2c:6a:74:13:72:e6:14:18:6b:62:7e:43:
64:c6:df:db:9d:ad:7b:83:c1:bf:1a:af:ed:0e:f6:8c:0c:6a:
b9:5c:34:cb:65:39:78:d0:ca:4c:2c:10:bc:84:48:fc:35:71:
25:e3:8b:94:a1:90:99:fe:2b:ee:4c:d9:cf:06:58:cd:9d:aa:
5b:70:d7:de:fe:85:12:1e:98:c3:78:92:54:fa:ab:c2:38:a4:
a5:ee:d9:be:f2:9e:b6:14:14:10:dc:93:55:f6:30:3e:43:67:
3a:98:32:95:e5:f7:88:b8:bf:ca:5d:ed:18:05:15:21:ae:da:
6c:3d:1b:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVbsao7HyL8UeY1kS000MRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNjM5YWRmMWUwYjg0YjlmZjY0ZTRmOGViZTYzOGViYmY1
ZDI3YjkwHhcNMjUwNDIwMjMwMDQ1WhcNMjUwNDIxMjMwMDQ1WjAzMTEwLwYDVQQD
Eyg5Mjg3ZGRkYTc1MDdkNDhhZTQ5YmM3ZTJiZGIxMTQyNDUzMDA0ZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WpiCneqU8DYNwbYaEhokN/iJWfi
mtVNu2ThohmQ6ANx9JEdAtKW9J2n0GP0KsKDGYXt9M3sWFBB3jqHzJ4VcawZewXv
SUcVl4rg5pypFqXbh/DqHresxIuVjS1Vn+MpxnkoDIrBJMyghwXp+BhMX0Hcrpq3
/1+U/VrFBHLYbV3VXsZHUyZE/Q77KKIS3eqa1mEKvAApPESgvkheW8p2EBKIN8UK
ieXnOC9nl70jLEBpjm2IGA0S7No4J2C7IypQ9ISydCXmBcWOs99h3dZe8Bg68mER
/ZPr2Kfuq2Paxy6WoqhwKLIItYhsEYhc3F/I6Vud0b8s6eVeJ6NPZnmSiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKH3dp1B9SK5JvH4r2xFCRTAE39MB8GA1UdIwQY
MBaAFKBjmt8eC4S5/2Tk+OvmOOu/XSe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjIt
ODEzYzVhYWI3ODNlLzEvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjItODEzYzVhYWI3ODNl
LzEvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkncuP0L
zqRN3M1mvSCOXIZwh9z/zzTED9zqf1H7jmST/oBvXUIzjVoU0ljiqx9OOQQxjlMz
YU7jzUn679tV5Vhb20DJW52rTt5dnww/zccS6KtPbSz06t01cTFMn+oAt+YJipnx
6+KY2kFX9B1RfQ9KcWw1NyUX+7oVrUOzGrFNxE6jLGp0E3LmFBhrYn5DZMbf252t
e4PBvxqv7Q72jAxquVw0y2U5eNDKTCwQvIRI/DVxJeOLlKGQmf4r7kzZzwZYzZ2q
W3DX3v6FEh6Yw3iSVPqrwjikpe7ZvvKethQUENyTVfYwPkNnOpgyleX3iLi/yl3t
GAUVIa7abD0b7g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:56 2025 by rpki-client