Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
File: ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft (raw, json)
Hash identifier: Pjrv4nk/IUGxYNb+/uMQm8HBnydqstyGL2swtEYJTXs=
Subject key identifier: 8C:21:9D:B1:B3:AD:88:75:C1:4F:31:7C:CF:4D:1A:D3:FE:BC:B6:8C
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Certificate issuer: /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial: 0196553866FDB234B4F480615BA87DE254B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 22:01:21 +0000
Manifest this update: Sun 20 Apr 2025 22:01:21 +0000
Manifest next update: Mon 21 Apr 2025 22:01:21 +0000
Files and hashes: 1: 1Sndi7er7bpQydqDqOMh1TcWi2c.roa (hash: 1MEp25vqqZ0ufx7FrXXarnt6HcRltVfMx9pP8jk/+jU=)
2: G3ZIKi5NlW3jvdkfzVqAJ4xyXOo.roa (hash: rwjhfMhSY3LA1PgrA0qmqDeuJnCpkzyImzevDSh2Ji4=)
3: ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl (hash: dU4GWDy5XRmyNJDi6lccf+9mDNfy7GCT4E+bvbrPkos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:66:fd:b2:34:b4:f4:80:61:5b:a8:7d:e2:54:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Validity
Not Before: Apr 20 22:01:21 2025 GMT
Not After : Apr 21 22:01:21 2025 GMT
Subject: CN=8c219db1b3ad8875c14f317ccf4d1ad3febcb68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5b:28:3a:63:21:80:ed:2e:fd:6f:48:e9:26:
5b:c6:68:2f:88:49:4c:bd:25:67:55:c4:42:88:fb:
a8:bf:08:32:5f:f1:1a:79:a7:5f:4c:fd:be:a6:f0:
01:48:78:e9:6f:c2:a1:7a:85:43:6d:e9:f9:a2:25:
69:b1:37:7b:fa:e3:8b:a3:62:98:e0:11:2d:62:a6:
7e:a4:48:94:77:0d:c5:08:fd:5d:ef:f9:8b:07:89:
35:22:79:70:a4:5d:32:ea:d7:26:ea:fd:fb:8c:26:
31:ca:7e:0c:e9:fa:bf:c8:e1:2b:0f:3e:18:d1:58:
55:eb:af:26:07:d9:56:e4:36:48:9b:c0:79:48:b2:
68:c7:fc:f5:f0:4f:47:90:62:b7:53:a5:b0:b2:bd:
f3:9b:9b:b4:0b:ba:8d:06:e5:a5:85:bc:7f:59:99:
d4:99:8c:39:40:62:5c:e8:57:ae:04:79:82:ce:4d:
65:f2:a4:a6:b8:6b:e7:b8:5f:0a:ea:55:ac:b2:ed:
0b:98:9b:82:b3:74:b1:f2:eb:fb:5d:9c:f2:c7:cf:
61:47:10:8a:d6:e9:58:8c:f5:e1:47:67:1b:2f:82:
e3:62:29:ff:6b:a7:1d:cb:ae:a9:fb:75:48:98:56:
4f:d9:e6:53:80:39:b5:12:0f:ad:c3:c6:52:21:85:
6f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:21:9D:B1:B3:AD:88:75:C1:4F:31:7C:CF:4D:1A:D3:FE:BC:B6:8C
X509v3 Authority Key Identifier:
keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a4:e8:52:9c:02:72:aa:e4:b3:29:a2:c1:cf:66:dd:8b:eb:
0c:33:15:7f:e5:e6:79:6f:9f:06:6d:d3:72:3a:8f:33:05:63:
31:e8:e5:c5:c7:7e:ef:12:22:0a:94:ba:0d:c0:66:41:84:29:
c6:b4:db:6e:7b:bd:33:3b:18:22:cc:a2:05:80:f5:e2:28:a5:
fc:ac:1e:e8:07:bd:8b:9c:67:04:55:51:98:ae:6e:b9:56:88:
83:b2:67:7e:08:2e:81:fc:49:4a:66:96:2e:e5:85:dc:c8:d9:
d6:02:05:fa:db:ee:7d:6f:16:53:c6:d5:2f:65:13:ab:31:72:
9c:dd:07:ff:89:1c:c0:20:ef:a5:4d:0e:ee:57:37:44:59:5e:
9e:d3:33:f9:2a:0c:5b:3d:e2:cc:02:65:71:6a:87:76:89:1b:
c4:6b:b9:6d:14:5f:d2:86:8d:50:12:63:d9:57:7e:20:b5:fa:
64:cc:4a:83:fe:9d:a8:39:da:ac:2d:4b:27:80:76:a6:39:06:
c2:24:dd:25:43:8b:f1:58:32:72:ff:7c:72:fc:6d:4f:6d:6e:
ae:b3:40:ce:e9:f2:d3:c7:fb:04:b8:f1:bb:36:34:3a:33:9b:
14:b2:8a:08:f7:bb:96:c5:04:7e:19:55:ba:b0:56:cb:03:ee:
b7:63:92:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVOGb9sjS09IBhW6h94lS0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTYwNmM3ZTkzZmVkMzZlZjkwZDQyY2U0YTk3MjYwYmI4
YWE5YzEwHhcNMjUwNDIwMjIwMTIxWhcNMjUwNDIxMjIwMTIxWjAzMTEwLwYDVQQD
Eyg4YzIxOWRiMWIzYWQ4ODc1YzE0ZjMxN2NjZjRkMWFkM2ZlYmNiNjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVsoOmMhgO0u/W9I6SZbxmgviElM
vSVnVcRCiPuovwgyX/EaeadfTP2+pvABSHjpb8KheoVDben5oiVpsTd7+uOLo2KY
4BEtYqZ+pEiUdw3FCP1d7/mLB4k1InlwpF0y6tcm6v37jCYxyn4M6fq/yOErDz4Y
0VhV668mB9lW5DZIm8B5SLJox/z18E9HkGK3U6Wwsr3zm5u0C7qNBuWlhbx/WZnU
mYw5QGJc6FeuBHmCzk1l8qSmuGvnuF8K6lWssu0LmJuCs3Sx8uv7XZzyx89hRxCK
1ulYjPXhR2cbL4LjYin/a6cdy66p+3VImFZP2eZTgDm1Eg+tw8ZSIYVvoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwhnbGzrYh1wU8xfM9NGtP+vLaMMB8GA1UdIwQY
MBaAFKLmBsfpP+0275DULOSpcmC7iqnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VZR3gta183VGJ2a05RczVLbHlZTHVLcWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kM2UyM2YtMGU1YS00OTIzLWFiMmYt
YTllYTIwNTcwNDJiLzEvb3VZR3gta183VGJ2a05RczVLbHlZTHVLcWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9kM2UyM2YtMGU1YS00OTIzLWFiMmYtYTllYTIwNTcwNDJi
LzEvb3VZR3gta183VGJ2a05RczVLbHlZTHVLcWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApaToUpwC
cqrksymiwc9m3YvrDDMVf+XmeW+fBm3TcjqPMwVjMejlxcd+7xIiCpS6DcBmQYQp
xrTbbnu9MzsYIsyiBYD14iil/Kwe6Ae9i5xnBFVRmK5uuVaIg7JnfggugfxJSmaW
LuWF3MjZ1gIF+tvufW8WU8bVL2UTqzFynN0H/4kcwCDvpU0O7lc3RFlentMz+SoM
Wz3izAJlcWqHdokbxGu5bRRf0oaNUBJj2Vd+ILX6ZMxKg/6dqDnarC1LJ4B2pjkG
wiTdJUOL8Vgycv98cvxtT21urrNAzuny08f7BLjxuzY0OjObFLKKCPe7lsUEfhlV
urBWywPut2OS1w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:23 2025 by rpki-client