Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: /67iNcIv5qoTU4tkd5acCqpGktcnxivcUNZ1GSiXYv8=
Subject key identifier: 7B:AB:5B:B1:3F:07:9A:D0:72:45:41:A4:6B:F4:62:44:7B:83:E7:54
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 0196440CD144C2355164D09B481D8ABF3D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 14F4
Signing time: Thu 17 Apr 2025 14:00:12 +0000
Manifest this update: Thu 17 Apr 2025 14:00:12 +0000
Manifest next update: Fri 18 Apr 2025 14:00:12 +0000
Files and hashes: 1: DFvO543buXO6QAD6iga-2ghdPJM.roa (hash: OwW2BWhEe6SpLOjaLPnDoeeE6qmWEx2kPzz7nMDDwRs=)
2: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: iEqa+1E7Vy8pAfVbzuBtzyEL7RrNeYcyZKr2UAT2cZo=)
3: b0sJmSxqykyJp2ZxTmsozr8_J8Q.roa (hash: phtYuXPVmT4EIKYX0FwVqQycRaEtVPLsT/EPqn9XD1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0c:d1:44:c2:35:51:64:d0:9b:48:1d:8a:bf:3d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Apr 17 14:00:12 2025 GMT
Not After : Apr 18 14:00:12 2025 GMT
Subject: CN=7bab5bb13f079ad0724541a46bf462447b83e754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:b7:26:64:30:5f:92:4a:3f:e6:2c:40:19:
5c:1a:9b:75:80:93:af:2a:92:f4:e5:80:92:06:13:
4a:f4:e1:0a:7b:9c:73:86:2c:8d:fb:2f:8c:a7:b7:
e9:5b:42:3a:0b:98:3a:0e:78:78:f9:9b:dc:45:17:
77:28:7e:bc:5b:e7:4a:65:aa:d2:10:cf:07:df:eb:
26:8f:89:98:25:af:09:b1:43:bc:01:b1:28:56:53:
ac:90:f7:fc:52:90:2b:36:90:81:09:ba:f5:c9:36:
70:dc:0f:73:2b:01:0f:3c:50:b7:f4:42:82:87:6f:
ac:05:82:bc:15:4d:25:00:3d:47:24:b8:4d:ba:3e:
97:d1:e1:4b:fd:b5:68:56:8f:7a:df:1c:35:b9:02:
2c:74:c6:47:49:c5:da:0a:d2:af:07:82:96:6a:fa:
bd:71:07:7f:ae:58:18:73:b1:73:47:86:23:4b:72:
04:45:f8:4e:e2:5d:c6:43:b9:16:fd:9a:18:43:7c:
cf:92:42:5f:5e:45:1a:13:7d:00:99:da:06:f5:e8:
30:6d:9b:34:41:81:5e:74:35:1d:a4:7f:eb:25:a3:
c5:7b:b8:d5:99:09:b0:07:96:43:23:a7:b1:dc:31:
34:de:35:3e:90:96:09:bc:06:6c:7b:21:17:d2:bc:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AB:5B:B1:3F:07:9A:D0:72:45:41:A4:6B:F4:62:44:7B:83:E7:54
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b3:94:cd:fe:e9:15:76:18:21:38:7f:05:99:28:cb:7f:2f:
ee:28:70:df:cd:b9:32:80:07:c4:22:04:5a:03:bd:4e:92:50:
60:b3:28:e1:f1:a5:03:8c:bb:e0:da:10:ab:41:da:b9:b5:00:
f7:5f:4d:8a:f8:96:bf:41:38:1b:a7:a9:ff:7c:6e:f0:e1:ce:
a4:29:e3:c5:5b:3a:cd:38:81:be:88:e3:ea:5b:c8:f1:3e:62:
cc:20:27:90:84:55:84:27:8a:6f:45:11:32:30:4d:83:54:f2:
df:b8:7c:be:0a:0f:8a:f2:7e:aa:cf:ac:6d:f6:17:bb:a9:fd:
58:35:47:85:f4:de:9b:a4:f7:08:2e:b9:9f:31:74:4b:21:e2:
b4:eb:c7:47:2b:c9:0e:17:bf:07:67:a1:46:5c:d4:d0:c4:7e:
b3:5c:d3:4b:df:c2:6d:04:45:3d:d3:7d:d2:8a:31:89:23:44:
55:a8:74:b8:26:a0:6c:9c:77:53:9d:9e:0a:8a:9e:21:56:c3:
c8:e6:ba:40:da:4c:79:b2:5c:cc:ee:ee:c4:78:88:26:d5:27:
22:a2:90:16:c5:e8:a3:83:91:7f:e0:24:e0:89:ca:2e:e7:26:
30:62:b3:db:ca:79:e6:1b:2e:d3:26:56:eb:a9:bc:bc:d3:47:
b8:94:b1:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEDNFEwjVRZNCbSB2Kvz0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNDhjMjcwMTczNWNkNWQyMzE3ZDEwYWM2M2Q3ZjJlYzY2
MThjZTAwHhcNMjUwNDE3MTQwMDEyWhcNMjUwNDE4MTQwMDEyWjAzMTEwLwYDVQQD
Eyg3YmFiNWJiMTNmMDc5YWQwNzI0NTQxYTQ2YmY0NjI0NDdiODNlNzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ+3JmQwX5JKP+YsQBlcGpt1gJOv
KpL05YCSBhNK9OEKe5xzhiyN+y+Mp7fpW0I6C5g6Dnh4+ZvcRRd3KH68W+dKZarS
EM8H3+smj4mYJa8JsUO8AbEoVlOskPf8UpArNpCBCbr1yTZw3A9zKwEPPFC39EKC
h2+sBYK8FU0lAD1HJLhNuj6X0eFL/bVoVo963xw1uQIsdMZHScXaCtKvB4KWavq9
cQd/rlgYc7FzR4YjS3IERfhO4l3GQ7kW/ZoYQ3zPkkJfXkUaE30AmdoG9egwbZs0
QYFedDUdpH/rJaPFe7jVmQmwB5ZDI6ex3DE03jU+kJYJvAZseyEX0rw8NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHurW7E/B5rQckVBpGv0YkR7g+dUMB8GA1UdIwQY
MBaAFDpIwnAXNc1dIxfRCsY9fy7GYYzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2tqQ2NCYzF6VjBqRjlFS3hqMV9Mc1poak9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9lNzQ1OTUtZDY1Ny00YWI0LTgzMDkt
MGQ1N2M5NDEwMTI3LzEvT2tqQ2NCYzF6VjBqRjlFS3hqMV9Mc1poak9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9lNzQ1OTUtZDY1Ny00YWI0LTgzMDktMGQ1N2M5NDEwMTI3
LzEvT2tqQ2NCYzF6VjBqRjlFS3hqMV9Mc1poak9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfbOUzf7p
FXYYITh/BZkoy38v7ihw3825MoAHxCIEWgO9TpJQYLMo4fGlA4y74NoQq0HaubUA
919NiviWv0E4G6ep/3xu8OHOpCnjxVs6zTiBvojj6lvI8T5izCAnkIRVhCeKb0UR
MjBNg1Ty37h8vgoPivJ+qs+sbfYXu6n9WDVHhfTem6T3CC65nzF0SyHitOvHRyvJ
Dhe/B2ehRlzU0MR+s1zTS9/CbQRFPdN90ooxiSNEVah0uCagbJx3U52eCoqeIVbD
yOa6QNpMebJczO7uxHiIJtUnIqKQFsXoo4ORf+Ak4InKLucmMGKz28p55hsu0yZW
66m8vNNHuJSxpw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:12:41 2025 by rpki-client