Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
File: oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft (raw, json)
Hash identifier: cPLg22woN7O59soEl8X4/4ZQmhQcsxvrV+hptmk0E1A=
Subject key identifier: 92:16:15:2B:E5:48:E2:0C:2E:44:F5:19:1B:26:5C:3A:82:61:CE:20
Authority key identifier: A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
Certificate issuer: /CN=a02bb11d019557e12f5fb6eb903837421160d009
Certificate serial: 019643D74CD07F79364762C569F68AED703D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 13:01:45 +0000
Manifest this update: Thu 17 Apr 2025 13:01:45 +0000
Manifest next update: Fri 18 Apr 2025 13:01:45 +0000
Files and hashes: 1: L99cT_8YQtbahh4i-nNP79DcPFA.roa (hash: +5kyh5yoNHZbQN4E1W2qiCARpK6qPNt6G4mi9GI03Hk=)
2: oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl (hash: MgMM0GsZR+HdLWxSBvspHQ2P9aUfFPIXze4+Xihu79Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d7:4c:d0:7f:79:36:47:62:c5:69:f6:8a:ed:70:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a02bb11d019557e12f5fb6eb903837421160d009
Validity
Not Before: Apr 17 13:01:45 2025 GMT
Not After : Apr 18 13:01:45 2025 GMT
Subject: CN=9216152be548e20c2e44f5191b265c3a8261ce20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dd:ff:b2:4d:83:ee:ae:d6:c1:54:87:60:74:
31:31:47:b9:2b:d1:bf:e8:b4:43:fb:e9:53:e5:0a:
6f:06:6c:1e:f9:d3:44:59:e4:e4:b7:a0:69:22:3e:
8d:62:eb:72:06:f1:e9:d4:4f:9e:14:09:e2:75:55:
11:d3:a5:aa:64:78:c4:de:ad:fd:b9:d1:3b:78:55:
d2:35:e8:47:87:03:4f:d6:e4:e6:fd:28:58:57:5f:
b6:04:29:a6:50:c5:43:2a:71:a7:54:41:d8:4a:ed:
95:4d:06:be:a5:2f:55:57:70:c6:41:9c:9e:6b:9e:
b8:d1:5b:bd:c1:eb:28:d0:e3:e7:82:a6:ca:70:47:
2d:da:30:a8:92:16:64:31:da:1e:a3:1c:73:3b:9f:
f0:e2:9c:e0:db:67:8c:e2:cc:9d:3d:ea:d9:5d:bf:
ab:4b:18:2d:9c:7f:d3:64:b9:f5:0b:30:a0:3e:3e:
3e:a4:df:79:8e:f0:05:73:08:33:ea:cf:97:2e:32:
79:38:72:33:14:31:1e:85:ee:b6:b1:23:e1:63:99:
90:c9:aa:d0:83:8f:29:27:ca:b6:d4:29:a3:2a:2e:
f7:73:46:75:ae:ff:a1:2f:de:04:cd:f9:61:c5:e8:
7e:93:d4:16:33:77:3e:28:32:04:2f:51:c6:a8:5d:
d4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:16:15:2B:E5:48:E2:0C:2E:44:F5:19:1B:26:5C:3A:82:61:CE:20
X509v3 Authority Key Identifier:
keyid:A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:54:9a:9a:63:6a:9a:9e:10:5e:44:e3:2d:64:11:c8:90:71:
7a:a2:a7:f6:da:9a:32:86:83:16:5f:eb:ef:66:93:bd:9a:d7:
af:7e:13:0d:10:3c:7c:bd:de:8f:0a:8f:0f:af:b8:99:16:45:
12:b5:8b:bc:8b:73:71:85:b6:8e:0e:a2:a3:23:c1:ba:f7:d9:
b4:8b:32:f8:d6:f8:ed:5d:84:89:0b:70:e0:c4:43:d9:4d:e4:
fa:0a:c4:dc:5c:4e:50:1c:8a:6f:11:40:14:9a:e6:f5:d9:cd:
7e:f6:fd:f1:68:56:25:a6:99:24:a6:08:22:9d:5e:5e:c1:56:
e4:98:34:62:d0:51:c6:2f:ef:0b:6a:df:19:58:ce:56:d9:99:
0d:c7:f6:19:a4:98:9a:15:a3:a2:67:e5:8f:09:15:fa:97:d2:
1b:6a:45:97:bc:b1:b3:f5:d7:66:3e:5d:e1:b0:db:d7:4f:2c:
76:28:fa:ba:98:08:0c:9f:29:7d:0a:ce:42:3b:c9:34:cf:f5:
84:de:68:2f:ff:15:1c:d8:02:e9:9b:ed:8e:5b:84:41:5b:9e:
3b:16:bf:93:9c:8f:8d:f2:2e:f9:fc:b8:52:2d:61:73:0a:3c:
7c:f2:2a:52:be:e4:42:19:a2:3b:8d:ff:08:17:b0:fd:61:73:
cc:de:22:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZD10zQf3k2R2LFafaK7XA9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMmJiMTFkMDE5NTU3ZTEyZjVmYjZlYjkwMzgzNzQyMTE2
MGQwMDkwHhcNMjUwNDE3MTMwMTQ1WhcNMjUwNDE4MTMwMTQ1WjAzMTEwLwYDVQQD
Eyg5MjE2MTUyYmU1NDhlMjBjMmU0NGY1MTkxYjI2NWMzYTgyNjFjZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt3/sk2D7q7WwVSHYHQxMUe5K9G/
6LRD++lT5QpvBmwe+dNEWeTkt6BpIj6NYutyBvHp1E+eFAnidVUR06WqZHjE3q39
udE7eFXSNehHhwNP1uTm/ShYV1+2BCmmUMVDKnGnVEHYSu2VTQa+pS9VV3DGQZye
a5640Vu9weso0OPngqbKcEct2jCokhZkMdoeoxxzO5/w4pzg22eM4sydPerZXb+r
SxgtnH/TZLn1CzCgPj4+pN95jvAFcwgz6s+XLjJ5OHIzFDEehe62sSPhY5mQyarQ
g48pJ8q21CmjKi73c0Z1rv+hL94Ezflhxeh+k9QWM3c+KDIEL1HGqF3USQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIWFSvlSOIMLkT1GRsmXDqCYc4gMB8GA1UdIwQY
MBaAFKArsR0BlVfhL1+265A4N0IRYNAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0N1eEhRR1ZWLUV2WDdicmtEZzNRaEZnMEFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85ZDZjYTItMGRhYy00NTk3LTgwZjUt
N2JkM2FiNzNlMTcyLzEvb0N1eEhRR1ZWLUV2WDdicmtEZzNRaEZnMEFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi85ZDZjYTItMGRhYy00NTk3LTgwZjUtN2JkM2FiNzNlMTcy
LzEvb0N1eEhRR1ZWLUV2WDdicmtEZzNRaEZnMEFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlSammNq
mp4QXkTjLWQRyJBxeqKn9tqaMoaDFl/r72aTvZrXr34TDRA8fL3ejwqPD6+4mRZF
ErWLvItzcYW2jg6ioyPBuvfZtIsy+Nb47V2EiQtw4MRD2U3k+grE3FxOUByKbxFA
FJrm9dnNfvb98WhWJaaZJKYIIp1eXsFW5Jg0YtBRxi/vC2rfGVjOVtmZDcf2GaSY
mhWjomfljwkV+pfSG2pFl7yxs/XXZj5d4bDb108sdij6upgIDJ8pfQrOQjvJNM/1
hN5oL/8VHNgC6ZvtjluEQVueOxa/k5yPjfIu+fy4Ui1hcwo8fPIqUr7kQhmiO43/
CBew/WFzzN4iNQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:51 2025 by rpki-client