Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
File: _8OB9T8l28Kg76v4ifyjJBmVjdA.mft (raw, json)
Hash identifier: oq75O82KwpfIGZp+v1GnDmRRoYYHWu6LUhf2+4/aF2k=
Subject key identifier: 67:05:FD:17:C9:CF:05:3C:47:58:7A:08:B1:A0:2E:D9:B8:B3:74:A1
Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Certificate serial: 01964DB51A7018491FC924E8BCD12CF74ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
Manifest number: 05C1
Signing time: Sat 19 Apr 2025 11:00:36 +0000
Manifest this update: Sat 19 Apr 2025 11:00:36 +0000
Manifest next update: Sun 20 Apr 2025 11:00:36 +0000
Files and hashes: 1: KH3_fDhZQRg-yXyq0vBIRyHpscM.roa (hash: 1JhdYACAm2vKjYy3bW6WI11Cv1vQ6ZNSdGqhZ7ecrCc=)
2: OlpTwRewUUoYI7RfJhmlY-YBlzY.roa (hash: uli2QopUr/oh7N8p0+sVfdLGs2dH4jdqNFi2M9558Ko=)
3: _8OB9T8l28Kg76v4ifyjJBmVjdA.crl (hash: HlktRYvtF4xPY3Rgh8OfIIGp8kzbmpMCBklBJhpIXk0=)
4: pdp4IWD2UyEeve8KeCwpZyeSJ_w.roa (hash: sCyo59s5/aOAb3/R/bOCxzJ2qxCJ1t7yaYP6ORycius=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:1a:70:18:49:1f:c9:24:e8:bc:d1:2c:f7:4a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Validity
Not Before: Apr 19 11:00:36 2025 GMT
Not After : Apr 20 11:00:36 2025 GMT
Subject: CN=6705fd17c9cf053c47587a08b1a02ed9b8b374a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:06:ea:94:9f:74:e1:6c:d2:fc:a7:fc:60:
3c:f0:76:0d:fb:e6:db:c7:a5:9e:15:a5:74:fa:9a:
fe:b5:bf:cf:76:32:f1:f0:4d:0e:e4:1d:5d:78:61:
45:a9:03:6d:67:09:2f:e8:e4:70:29:c0:6f:f5:a4:
27:5e:38:5f:00:25:b1:ff:46:84:a2:32:59:f1:d8:
76:48:4f:c5:22:67:a6:94:53:cc:79:f8:64:4c:45:
8b:60:cb:28:eb:7a:78:da:0a:35:1b:28:4f:92:dd:
dc:29:34:1f:b3:d2:16:b1:a0:9d:64:87:43:20:a6:
2a:24:6b:d8:e4:d2:f4:51:b3:38:18:d2:cb:16:3e:
7c:90:6b:5a:f2:7f:7b:3b:d6:76:8a:00:c3:80:ab:
d6:dc:00:f0:1a:1a:80:19:71:05:fb:6c:a6:2c:b0:
5e:6b:59:6c:ff:31:b3:c5:9f:06:90:fa:4b:e6:f8:
47:a1:b0:87:17:f0:1f:ff:e1:33:a3:7a:44:30:72:
35:b1:0c:0a:5f:69:66:2e:18:18:73:6d:04:44:01:
e0:db:92:5b:b6:c6:6f:0d:24:bc:9e:91:ed:f0:6f:
f9:26:c6:d9:9b:40:d2:30:23:0c:c9:6b:fd:dc:3a:
33:e4:5c:48:f2:2c:45:56:66:53:d6:81:34:06:59:
31:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:05:FD:17:C9:CF:05:3C:47:58:7A:08:B1:A0:2E:D9:B8:B3:74:A1
X509v3 Authority Key Identifier:
keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:73:f5:4f:ec:c9:fe:bc:31:f0:bf:a2:e7:28:b6:3d:d9:b8:
79:57:77:44:7e:a3:13:84:37:42:02:ec:25:87:76:03:f3:97:
a3:89:b5:53:62:58:e2:b1:c6:9e:bb:a7:47:40:d1:68:42:32:
61:99:f9:a4:ea:81:87:d4:45:49:25:c4:b4:9c:31:eb:41:a3:
a3:07:93:b1:08:50:52:35:12:bd:a9:53:5b:46:4c:0b:d1:11:
64:e0:f3:5f:0f:19:06:2f:2b:38:a3:6e:44:e1:25:53:b3:57:
e2:8e:ea:9b:f3:b5:a3:91:16:d3:61:c6:ea:b7:33:e1:99:45:
f5:a1:6d:27:f7:5e:b5:b4:c6:27:7c:38:b5:18:2c:8d:5d:19:
c0:f6:0d:2f:86:b6:34:2b:ff:6c:19:b8:b8:ef:bd:5c:0b:b0:
30:85:ae:a6:45:ba:59:78:1a:09:85:79:e1:f1:2e:7c:e3:84:
09:3b:4d:ea:ad:31:2a:40:fc:3a:0e:1e:a0:ae:21:7b:fa:2a:
ff:09:dc:a3:e7:96:43:84:25:16:31:68:ec:9d:f4:fc:ff:22:
b7:b5:cb:79:37:cf:ef:f9:de:63:b1:fa:2e:44:46:f7:e5:53:
35:48:07:54:58:4c:46:b4:6d:d2:8c:20:01:86:c8:90:e7:4a:
4b:cc:5e:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNtRpwGEkfySTovNEs90rbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYzM4MWY1M2YyNWRiYzJhMGVmYWJmODg5ZmNhMzI0MTk5
NThkZDAwHhcNMjUwNDE5MTEwMDM2WhcNMjUwNDIwMTEwMDM2WjAzMTEwLwYDVQQD
Eyg2NzA1ZmQxN2M5Y2YwNTNjNDc1ODdhMDhiMWEwMmVkOWI4YjM3NGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq4G6pSfdOFs0vyn/GA88HYN++bb
x6WeFaV0+pr+tb/PdjLx8E0O5B1deGFFqQNtZwkv6ORwKcBv9aQnXjhfACWx/0aE
ojJZ8dh2SE/FImemlFPMefhkTEWLYMso63p42go1GyhPkt3cKTQfs9IWsaCdZIdD
IKYqJGvY5NL0UbM4GNLLFj58kGta8n97O9Z2igDDgKvW3ADwGhqAGXEF+2ymLLBe
a1ls/zGzxZ8GkPpL5vhHobCHF/Af/+Ezo3pEMHI1sQwKX2lmLhgYc20ERAHg25Jb
tsZvDSS8npHt8G/5JsbZm0DSMCMMyWv93Doz5FxI8ixFVmZT1oE0BlkxZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcF/RfJzwU8R1h6CLGgLtm4s3ShMB8GA1UdIwQY
MBaAFP/DgfU/JdvCoO+r+In8oyQZlY3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNjRlNDItYjlkZS00YzY2LTllZDkt
NmZlMzQ4MDVhNmM2LzEvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9iNjRlNDItYjlkZS00YzY2LTllZDktNmZlMzQ4MDVhNmM2
LzEvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3P1T+zJ
/rwx8L+i5yi2Pdm4eVd3RH6jE4Q3QgLsJYd2A/OXo4m1U2JY4rHGnrunR0DRaEIy
YZn5pOqBh9RFSSXEtJwx60GjoweTsQhQUjUSvalTW0ZMC9ERZODzXw8ZBi8rOKNu
ROElU7NX4o7qm/O1o5EW02HG6rcz4ZlF9aFtJ/detbTGJ3w4tRgsjV0ZwPYNL4a2
NCv/bBm4uO+9XAuwMIWupkW6WXgaCYV54fEufOOECTtN6q0xKkD8Og4eoK4he/oq
/wnco+eWQ4QlFjFo7J30/P8it7XLeTfP7/neY7H6LkRG9+VTNUgHVFhMRrRt0owg
AYbIkOdKS8xeCw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:01:31 2025 by rpki-client