Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
File: Onb8XJAQtBEZymjca5lQul_3Mn4.mft (raw, json)
Hash identifier: pOp3M47LFJyBh8dxg3VGqLXYNX7dOxgIjhu7ypOqOzo=
Subject key identifier: D6:2E:EE:A0:B4:3F:7B:07:EA:C6:65:C6:B0:15:5B:CB:3E:32:C8:D8
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial: 01964F35A9A8E65E3AEEDC85634BE0540697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
Manifest number: 0ED7
Signing time: Sat 19 Apr 2025 18:00:38 +0000
Manifest this update: Sat 19 Apr 2025 18:00:38 +0000
Manifest next update: Sun 20 Apr 2025 18:00:38 +0000
Files and hashes: 1: Onb8XJAQtBEZymjca5lQul_3Mn4.crl (hash: ZFUnxKjNgHug8FaecjPSBVnM4UI0uOnAVJ9NEv4E3ps=)
2: aLeS6kJNMMsXR_fWm4nfBJc0RbY.roa (hash: 2eZg5Esd5JZxUzRdKZEfMd9ilMWbL+Zmx8dFdFF5esA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 18:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:a9:a8:e6:5e:3a:ee:dc:85:63:4b:e0:54:06:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Validity
Not Before: Apr 19 18:00:38 2025 GMT
Not After : Apr 20 18:00:38 2025 GMT
Subject: CN=d62eeea0b43f7b07eac665c6b0155bcb3e32c8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:44:c0:24:54:8f:65:b1:7e:9f:ab:94:8c:
84:9c:b5:b0:25:96:cd:94:3b:83:10:f3:21:23:ee:
1f:3c:90:fa:71:9e:24:21:2b:df:5d:31:f3:97:07:
d1:08:f6:77:37:d8:4e:b4:09:db:7d:7e:7e:0b:b7:
98:04:1a:64:6c:9f:16:65:b7:e0:98:45:2e:dc:59:
05:02:8e:36:ad:44:41:16:c9:e5:b1:16:16:8c:ba:
17:b5:94:c4:65:d5:43:87:df:4a:b6:28:30:3f:70:
32:27:60:dd:ad:a7:34:f6:7d:bc:ad:e7:b9:e2:7b:
91:d0:09:57:33:0a:c2:25:a1:82:11:2f:96:cd:d9:
b5:11:01:4e:5f:b5:5a:d5:69:fe:f4:a5:bc:40:11:
74:81:cb:9e:4c:4b:dd:c9:e8:48:98:c4:44:36:49:
8c:85:e7:3a:1b:cd:10:8f:1e:d3:7d:0b:f4:15:2e:
89:86:e1:fb:9b:b8:8d:84:0c:bc:9a:b2:46:94:a6:
19:93:18:01:70:f2:a9:4a:02:ff:4d:76:77:22:f1:
93:1f:eb:31:10:14:05:84:4b:72:35:08:6b:d6:e5:
34:37:6e:37:5f:9e:15:ab:c7:b1:94:27:5f:2d:fa:
df:67:d3:50:24:f4:dd:ac:13:7d:c4:7b:7c:69:3b:
00:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2E:EE:A0:B4:3F:7B:07:EA:C6:65:C6:B0:15:5B:CB:3E:32:C8:D8
X509v3 Authority Key Identifier:
keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ae:02:04:d3:32:ba:5f:53:a1:bb:e2:7e:37:4b:fe:2e:d8:
26:d6:16:9b:1f:ef:1d:e5:d6:26:ff:e2:3a:61:76:10:45:28:
7a:96:7f:57:b4:71:a5:f0:24:73:83:d5:bd:57:2c:f2:14:47:
58:1b:b4:71:da:ae:0d:25:63:c3:ed:15:c5:34:98:70:c2:a1:
cf:82:62:4e:74:44:cf:ad:07:8a:04:4b:38:58:52:51:47:83:
9e:31:20:ee:0c:f7:ae:87:e8:f4:d7:af:20:ff:c6:66:75:29:
d4:4b:6d:03:f9:38:93:dc:1b:a5:d8:dc:a5:60:39:74:b5:46:
6b:57:3f:5c:9e:b3:7e:5e:67:31:e3:47:85:9b:2e:2e:aa:3d:
cc:77:32:9e:77:66:c8:90:af:9b:75:7b:bb:18:6f:0c:1c:98:
7f:2a:60:c3:d2:e4:2d:6c:82:cd:db:65:6c:ec:17:40:ad:aa:
64:27:33:ca:61:31:27:6f:51:00:a4:cd:a3:4f:5f:5a:60:16:
1d:5b:d4:cf:08:8d:5a:52:b4:c0:77:74:26:aa:d0:f0:fe:c9:
cb:73:fd:e1:f7:61:78:b3:30:d0:fb:0f:11:bd:eb:ed:ec:1e:
27:08:46:f6:bf:3f:1a:4c:76:37:5d:55:22:0e:fe:18:1a:24:
8a:e4:72:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPNamo5l467tyFY0vgVAaXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNzZmYzVjOTAxMGI0MTExOWNhNjhkYzZiOTk1MGJhNWZm
NzMyN2UwHhcNMjUwNDE5MTgwMDM4WhcNMjUwNDIwMTgwMDM4WjAzMTEwLwYDVQQD
EyhkNjJlZWVhMGI0M2Y3YjA3ZWFjNjY1YzZiMDE1NWJjYjNlMzJjOGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoREwCRUj2Wxfp+rlIyEnLWwJZbN
lDuDEPMhI+4fPJD6cZ4kISvfXTHzlwfRCPZ3N9hOtAnbfX5+C7eYBBpkbJ8WZbfg
mEUu3FkFAo42rURBFsnlsRYWjLoXtZTEZdVDh99KtigwP3AyJ2Ddrac09n28ree5
4nuR0AlXMwrCJaGCES+Wzdm1EQFOX7Va1Wn+9KW8QBF0gcueTEvdyehImMRENkmM
hec6G80Qjx7TfQv0FS6JhuH7m7iNhAy8mrJGlKYZkxgBcPKpSgL/TXZ3IvGTH+sx
EBQFhEtyNQhr1uU0N243X54Vq8exlCdfLfrfZ9NQJPTdrBN9xHt8aTsAkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYu7qC0P3sH6sZlxrAVW8s+MsjYMB8GA1UdIwQY
MBaAFDp2/FyQELQRGcpo3GuZULpf9zJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2Qt
YmRmYTdjNGY4YjBhLzEvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2QtYmRmYTdjNGY4YjBh
LzEvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaK4CBNMy
ul9TobvifjdL/i7YJtYWmx/vHeXWJv/iOmF2EEUoepZ/V7RxpfAkc4PVvVcs8hRH
WBu0cdquDSVjw+0VxTSYcMKhz4JiTnREz60HigRLOFhSUUeDnjEg7gz3rofo9Nev
IP/GZnUp1EttA/k4k9wbpdjcpWA5dLVGa1c/XJ6zfl5nMeNHhZsuLqo9zHcynndm
yJCvm3V7uxhvDByYfypgw9LkLWyCzdtlbOwXQK2qZCczymExJ29RAKTNo09fWmAW
HVvUzwiNWlK0wHd0JqrQ8P7Jy3P94fdheLMw0PsPEb3r7eweJwhG9r8/Gkx2N11V
Ig7+GBokiuRyeg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:11 2025 by rpki-client