
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File: 4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier: ZZUShGj+89nXpT5z8Us6QgPlgonfWHV3465pu/CUNro=
Subject key identifier: A7:44:DB:F4:C3:BF:6D:46:C0:3B:37:EE:D2:59:AA:28:1D:6D:8E:89
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer: /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial: 0196C34C82C0C43ADF670DEBDAA88A342EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 07:01:33 +0000
Manifest this update: Mon 12 May 2025 07:01:33 +0000
Manifest next update: Tue 13 May 2025 07:01:33 +0000
Files and hashes: 1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: 4QsAp+E7OwX0GdKBeuqBLLYP1+hswd7vcPhqfttZzMA=)
2: zkyq_bkRmP7y8uEpa3W6vwIy36k.roa (hash: rvIkZjLBjiZPMwp1YJD6TUGI2vyzFxSQs2biVpfUSoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:82:c0:c4:3a:df:67:0d:eb:da:a8:8a:34:2e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Validity
Not Before: May 12 07:01:33 2025 GMT
Not After : May 13 07:01:33 2025 GMT
Subject: CN=a744dbf4c3bf6d46c03b37eed259aa281d6d8e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:ce:47:1d:31:93:b0:12:ca:cb:e6:41:fe:
89:bf:f6:da:14:b3:f1:2e:63:d1:15:a8:28:7c:03:
df:53:03:40:30:51:bd:fe:d5:a0:49:05:49:a4:4e:
d7:64:e6:65:4f:9d:0b:02:7e:a0:5b:10:70:e5:c9:
f8:af:29:6c:70:21:5f:81:3e:bb:4a:8a:3b:f8:7b:
06:ea:a1:fc:d7:82:1e:53:b9:a9:0f:18:3d:93:e2:
aa:6c:58:96:08:bc:b3:2c:cf:4b:9c:5f:39:35:3e:
2c:66:c2:27:07:48:7d:10:eb:ab:eb:2a:ec:e3:d5:
df:ef:b9:d6:d4:65:21:84:b2:58:5e:37:99:f7:f5:
72:90:e1:3e:e2:4f:d6:3d:86:25:ce:46:6f:67:46:
e0:d1:7f:06:63:57:99:54:90:8c:ba:33:85:16:63:
e7:34:7a:81:47:54:47:8d:fb:49:9d:4e:c6:cf:ac:
a0:b1:7c:d5:1f:8c:69:83:7d:da:8d:9a:42:33:fb:
55:75:fa:27:b0:2b:67:bf:1d:c2:f6:b6:06:63:5d:
38:27:cd:35:8c:e3:8c:31:35:03:57:11:55:af:2a:
d3:8f:07:04:6c:bb:85:c9:e2:48:59:f8:1d:84:08:
5d:7e:98:94:f2:4a:43:c2:99:35:f3:e7:b1:24:61:
21:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:44:DB:F4:C3:BF:6D:46:C0:3B:37:EE:D2:59:AA:28:1D:6D:8E:89
X509v3 Authority Key Identifier:
keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:47:46:d3:fe:25:d7:b0:29:fe:81:49:cc:fe:00:72:d3:70:
69:52:83:01:00:0e:ef:b8:23:e9:ad:5d:27:04:78:d5:1f:53:
56:9b:fa:dd:fe:a9:c8:99:46:64:53:f6:40:e5:d9:c7:3e:c5:
ef:92:85:1f:3c:15:1f:1e:f1:1b:3b:88:77:e8:26:c8:43:0d:
6d:ac:cd:c4:00:eb:48:7a:7c:6f:43:78:87:be:26:5b:e0:84:
53:c7:5a:9c:27:c9:bb:0b:78:b4:17:2c:ad:f3:36:de:f2:69:
fe:39:c6:fb:c3:02:27:e6:e1:7a:56:80:52:8b:4d:a3:85:fb:
b2:15:e5:96:13:96:17:e0:e1:22:5d:b4:da:88:b5:49:01:be:
cf:6e:6d:50:45:10:0b:2e:e0:cd:3a:bd:5a:d5:8c:56:c2:02:
2a:7b:0e:66:ce:40:5a:f8:6a:49:d1:24:3b:60:72:36:f2:3e:
99:b8:ab:37:ce:88:62:43:de:4c:2f:35:33:40:30:33:b7:3a:
b7:12:85:34:83:e8:d2:05:0a:e9:7c:40:48:36:3e:d4:54:0a:
e8:4f:e5:a6:72:4c:3f:75:11:f4:5e:15:56:62:cc:01:9f:b6:
c5:00:00:41:21:8a:58:73:3b:0d:e5:4b:c4:3d:f9:0f:07:d1:
e9:1f:62:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:06:04 2025 by rpki-client