Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
File: O0ExZKE8JMp3hHd0putXEF7ngJ8.mft (raw, json)
Hash identifier: 9S/hgBfiWGMJdaJqiDhlTCofbsCPwbC9bMXs22WoUoY=
Subject key identifier: 06:C5:3B:95:B5:FF:D7:FB:9E:CE:01:4A:95:8C:A8:42:E7:09:D5:97
Authority key identifier: 3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
Certificate issuer: /CN=3b413164a13c24ca77847774a6eb57105ee7809f
Certificate serial: 0196C871B5EA807BE69ED515965A42898D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
Manifest number: 123E
Signing time: Tue 13 May 2025 07:00:17 +0000
Manifest this update: Tue 13 May 2025 07:00:17 +0000
Manifest next update: Wed 14 May 2025 07:00:17 +0000
Files and hashes: 1: O0ExZKE8JMp3hHd0putXEF7ngJ8.crl (hash: Y7JTTixIx+PqZyZ/UYwK4xWXf5YKYompnwSLDrTRqsI=)
2: hv7umvI_Ed2T9Pd9d7RaxMNZ_A4.roa (hash: JaoBtJPnKetAcsAKSYzZugD1L/s0rkCRonZhSkC43s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:71:b5:ea:80:7b:e6:9e:d5:15:96:5a:42:89:8d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b413164a13c24ca77847774a6eb57105ee7809f
Validity
Not Before: May 13 07:00:17 2025 GMT
Not After : May 14 07:00:17 2025 GMT
Subject: CN=06c53b95b5ffd7fb9ece014a958ca842e709d597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:97:d7:fd:c2:58:fa:7d:36:bd:fd:d7:86:c7:
c2:47:e2:db:3e:56:19:07:60:ea:75:3a:99:0c:b0:
a3:0f:74:95:74:8d:a5:72:5f:f9:03:7d:89:93:87:
e0:4b:69:5d:d6:26:67:dd:9e:89:4b:67:6c:35:3a:
42:da:66:5d:cf:03:db:dc:57:c8:69:45:7f:35:6d:
35:38:cf:13:53:12:9f:f4:93:e6:31:7f:18:a6:b3:
18:5b:50:e3:17:62:a7:2a:d5:37:c2:ac:62:30:2a:
97:e9:e0:bf:ae:a1:5d:be:57:49:cc:db:fe:1b:f5:
f9:af:8f:cd:cf:4b:44:9d:70:89:5e:1d:82:8c:16:
0a:9a:a4:fe:fe:56:d9:7b:9c:e1:03:f4:77:17:a5:
8c:30:28:47:c4:cf:ed:3f:ef:14:8c:01:5f:6c:1c:
a8:bd:57:7c:88:6e:e3:9e:c2:d2:0f:61:7d:a2:5c:
6b:3d:25:b8:a9:c2:7e:58:ac:31:5d:fd:27:4b:f1:
a1:2e:7f:46:0c:a8:d2:cc:3d:eb:24:84:07:eb:53:
14:ef:3e:a6:8b:92:29:af:26:33:a3:5c:9c:69:18:
fb:6f:80:f3:ce:08:24:1c:d7:4c:1b:19:1f:d3:b4:
a6:80:a2:f6:ab:0f:7b:d2:ca:a4:fa:79:d8:56:87:
92:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C5:3B:95:B5:FF:D7:FB:9E:CE:01:4A:95:8C:A8:42:E7:09:D5:97
X509v3 Authority Key Identifier:
keyid:3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d5:66:e8:d0:4c:00:4d:53:69:b8:af:bf:83:28:d4:a8:1b:
e3:4b:7d:78:e2:54:86:e2:0e:32:70:b2:ad:ae:91:f5:62:d9:
80:fc:ed:b6:d6:dc:83:cb:57:30:2e:d1:ac:10:2e:99:c7:5f:
77:69:16:95:5d:24:d7:13:64:49:9d:fb:8f:ee:87:53:30:47:
c4:e0:12:43:b5:0a:64:b7:03:49:f4:19:39:32:3d:d1:83:3b:
8c:32:f1:c2:d6:f4:3e:b6:32:72:ef:ab:38:65:6c:f9:fc:a9:
2d:19:71:34:12:ca:ca:4f:26:4e:35:c8:6d:98:e2:66:86:52:
25:11:eb:9a:be:16:cb:12:ce:a5:4e:a1:d1:4b:4f:95:b8:78:
eb:c2:03:2d:d9:bf:e5:40:a8:0d:41:2c:87:34:9d:f9:f3:94:
2b:42:bb:6b:b9:82:ba:36:1f:4f:b0:c2:3a:02:fc:96:1b:00:
db:ce:4f:bd:e8:90:5f:2c:39:8d:8c:e5:43:4d:cf:9e:e2:8d:
3a:36:92:80:83:2b:fe:40:ca:2f:29:28:53:25:af:1b:42:f1:
68:86:3d:bf:b2:1d:b2:43:21:7c:aa:c4:f9:13:d6:4c:73:4a:
67:ca:82:45:69:0c:0f:88:27:b7:f0:28:a2:65:9c:5c:a2:46:
1b:be:24:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIcbXqgHvmntUVllpCiY2UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDEzMTY0YTEzYzI0Y2E3Nzg0Nzc3NGE2ZWI1NzEwNWVl
NzgwOWYwHhcNMjUwNTEzMDcwMDE3WhcNMjUwNTE0MDcwMDE3WjAzMTEwLwYDVQQD
EygwNmM1M2I5NWI1ZmZkN2ZiOWVjZTAxNGE5NThjYTg0MmU3MDlkNTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5fX/cJY+n02vf3XhsfCR+LbPlYZ
B2DqdTqZDLCjD3SVdI2lcl/5A32Jk4fgS2ld1iZn3Z6JS2dsNTpC2mZdzwPb3FfI
aUV/NW01OM8TUxKf9JPmMX8YprMYW1DjF2KnKtU3wqxiMCqX6eC/rqFdvldJzNv+
G/X5r4/Nz0tEnXCJXh2CjBYKmqT+/lbZe5zhA/R3F6WMMChHxM/tP+8UjAFfbByo
vVd8iG7jnsLSD2F9olxrPSW4qcJ+WKwxXf0nS/GhLn9GDKjSzD3rJIQH61MU7z6m
i5IpryYzo1ycaRj7b4DzzggkHNdMGxkf07SmgKL2qw970sqk+nnYVoeSmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbFO5W1/9f7ns4BSpWMqELnCdWXMB8GA1UdIwQY
MBaAFDtBMWShPCTKd4R3dKbrVxBe54CfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBFeFpLRThKTXAzaEhkMHB1dFhFRjduZ0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85YWEwNTgtMzg0Yy00MjM0LWI0OTIt
YzY4ZDdmOWM3ODE4LzEvTzBFeFpLRThKTXAzaEhkMHB1dFhFRjduZ0o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85YWEwNTgtMzg0Yy00MjM0LWI0OTItYzY4ZDdmOWM3ODE4
LzEvTzBFeFpLRThKTXAzaEhkMHB1dFhFRjduZ0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAatVm6NBM
AE1Tabivv4Mo1Kgb40t9eOJUhuIOMnCyra6R9WLZgPztttbcg8tXMC7RrBAumcdf
d2kWlV0k1xNkSZ37j+6HUzBHxOASQ7UKZLcDSfQZOTI90YM7jDLxwtb0PrYycu+r
OGVs+fypLRlxNBLKyk8mTjXIbZjiZoZSJRHrmr4WyxLOpU6h0UtPlbh468IDLdm/
5UCoDUEshzSd+fOUK0K7a7mCujYfT7DCOgL8lhsA285PveiQXyw5jYzlQ03PnuKN
OjaSgIMr/kDKLykoUyWvG0LxaIY9v7IdskMhfKrE+RPWTHNKZ8qCRWkMD4gnt/Ao
omWcXKJGG74kTA==
-----END CERTIFICATE-----
Generated at Tue May 13 09:51:48 2025 by rpki-client