Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
File: ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft (raw, json)
Hash identifier: vOYU87vmeMpNvS0yI+rAlr0NIVwZ9TCJ8ILObmMS5bk=
Subject key identifier: C1:25:5C:E1:47:8C:6D:4D:26:17:CB:51:78:96:E3:E0:8C:95:83:CB
Authority key identifier: A2:E6:8A:E9:9C:24:B2:07:3A:0A:C3:28:03:24:3C:3B:EA:1E:67:CE
Certificate issuer: /CN=a2e68ae99c24b2073a0ac32803243c3bea1e67ce
Certificate serial: 0196C26FDA12F4B1F40EE594743F8480A8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
Manifest number: 04EF
Signing time: Mon 12 May 2025 03:00:32 +0000
Manifest this update: Mon 12 May 2025 03:00:32 +0000
Manifest next update: Tue 13 May 2025 03:00:32 +0000
Files and hashes: 1: QTH68uA3y3zqOE98H-X27hlKLHg.roa (hash: POyUR/thMzWlT6agcEoWXyNHRaqJHhqSVA15ql0XP6U=)
2: ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl (hash: wFAfIi9pa0K8wDYODiyrGjKqqSN7CfCGXWVEDVKpjJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:da:12:f4:b1:f4:0e:e5:94:74:3f:84:80:a8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e68ae99c24b2073a0ac32803243c3bea1e67ce
Validity
Not Before: May 12 03:00:32 2025 GMT
Not After : May 13 03:00:32 2025 GMT
Subject: CN=c1255ce1478c6d4d2617cb517896e3e08c9583cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:36:de:02:c2:94:4e:40:b8:b8:5f:31:22:
d3:ee:dd:66:21:7e:95:29:bd:b7:d5:54:fc:58:1c:
d3:41:35:7c:00:a1:4c:a0:60:1d:31:df:23:a8:ed:
16:b3:54:04:8c:d6:cf:b4:6e:8b:da:b3:5d:ed:99:
76:01:f0:d7:7a:9a:68:b0:d8:5c:b8:a0:c2:cb:f9:
39:84:89:0b:bc:86:2f:8b:18:d5:2f:40:c8:b8:84:
60:be:ac:0d:51:bc:d1:82:4d:12:e4:26:0c:96:63:
34:03:02:01:d5:fa:58:c1:9c:d4:04:43:50:d9:fc:
12:43:43:2f:bb:a6:55:9d:91:11:60:8c:70:8a:fb:
99:8f:28:7b:a2:72:eb:57:a4:ef:d0:8f:66:e2:64:
c3:74:69:be:99:f2:fc:62:01:31:01:8c:c3:f9:7b:
11:08:c2:93:b9:3f:bb:d7:eb:40:25:f1:e3:c5:8d:
27:4f:c3:74:1b:44:6a:46:94:af:e1:9f:7d:dc:71:
6b:8a:29:92:cc:a0:08:0f:d5:db:03:31:d3:57:09:
d3:af:61:51:e8:aa:8b:b3:ad:bb:25:9d:1e:71:01:
4b:6b:cf:49:6d:16:bf:c9:09:23:5a:02:b5:3d:b9:
24:cb:00:36:37:32:78:c9:00:d4:1f:fa:11:ac:f5:
c7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:25:5C:E1:47:8C:6D:4D:26:17:CB:51:78:96:E3:E0:8C:95:83:CB
X509v3 Authority Key Identifier:
keyid:A2:E6:8A:E9:9C:24:B2:07:3A:0A:C3:28:03:24:3C:3B:EA:1E:67:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:71:2d:f8:02:24:bd:8c:66:08:2c:f6:b9:cf:e5:89:ad:e9:
5c:f4:1c:dc:02:34:58:47:fb:05:74:25:6a:02:5c:c6:64:1c:
73:b6:68:f5:4c:b2:6e:f7:c0:64:1e:2f:2b:be:3f:1c:72:8a:
12:29:14:ba:39:d5:0f:0b:ca:23:54:84:fd:99:96:9e:6f:c2:
51:4f:e4:0e:ac:c6:0c:b1:cb:00:19:2a:31:43:15:e7:62:63:
30:6b:44:d5:ed:a2:b9:0f:71:f4:ad:51:be:59:a9:c8:f3:54:
d9:2c:16:b7:18:57:a3:9a:17:f3:a6:03:76:9b:39:bd:1b:c4:
c4:1d:24:bb:fc:23:e9:79:75:4f:4f:46:6c:41:be:89:28:4e:
4d:0f:c2:12:52:38:da:a9:49:a0:fb:9a:e7:78:b4:c0:19:de:
c0:38:21:43:76:62:b8:c6:41:34:a2:5e:41:fa:d5:94:58:50:
a5:f0:6b:3c:c3:51:57:b1:84:54:19:6f:37:90:24:63:da:ac:
7c:24:2b:d9:dc:23:08:6a:b7:b0:88:e3:ca:d2:33:53:79:9b:
f6:a2:60:e3:76:0c:fc:38:4b:69:a9:9a:36:39:40:b6:4b:13:
59:27:5b:65:6f:28:33:d3:86:a9:0c:8c:d9:95:67:87:bc:da:
b1:0c:6e:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCb9oS9LH0DuWUdD+EgKipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTY4YWU5OWMyNGIyMDczYTBhYzMyODAzMjQzYzNiZWEx
ZTY3Y2UwHhcNMjUwNTEyMDMwMDMyWhcNMjUwNTEzMDMwMDMyWjAzMTEwLwYDVQQD
EyhjMTI1NWNlMTQ3OGM2ZDRkMjYxN2NiNTE3ODk2ZTNlMDhjOTU4M2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ423gLClE5AuLhfMSLT7t1mIX6V
Kb231VT8WBzTQTV8AKFMoGAdMd8jqO0Ws1QEjNbPtG6L2rNd7Zl2AfDXepposNhc
uKDCy/k5hIkLvIYvixjVL0DIuIRgvqwNUbzRgk0S5CYMlmM0AwIB1fpYwZzUBENQ
2fwSQ0Mvu6ZVnZERYIxwivuZjyh7onLrV6Tv0I9m4mTDdGm+mfL8YgExAYzD+XsR
CMKTuT+71+tAJfHjxY0nT8N0G0RqRpSv4Z993HFriimSzKAID9XbAzHTVwnTr2FR
6KqLs627JZ0ecQFLa89JbRa/yQkjWgK1PbkkywA2NzJ4yQDUH/oRrPXHRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMElXOFHjG1NJhfLUXiW4+CMlYPLMB8GA1UdIwQY
MBaAFKLmiumcJLIHOgrDKAMkPDvqHmfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VhSzZad2tzZ2M2Q3NNb0F5UThPLW9lWjg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lODRjNzctNTI3Mi00MTJiLWIzZmQt
YzRkZTY3ZTEzZWIwLzEvb3VhSzZad2tzZ2M2Q3NNb0F5UThPLW9lWjg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9lODRjNzctNTI3Mi00MTJiLWIzZmQtYzRkZTY3ZTEzZWIw
LzEvb3VhSzZad2tzZ2M2Q3NNb0F5UThPLW9lWjg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHEt+AIk
vYxmCCz2uc/lia3pXPQc3AI0WEf7BXQlagJcxmQcc7Zo9UyybvfAZB4vK74/HHKK
EikUujnVDwvKI1SE/ZmWnm/CUU/kDqzGDLHLABkqMUMV52JjMGtE1e2iuQ9x9K1R
vlmpyPNU2SwWtxhXo5oX86YDdps5vRvExB0ku/wj6Xl1T09GbEG+iShOTQ/CElI4
2qlJoPua53i0wBnewDghQ3ZiuMZBNKJeQfrVlFhQpfBrPMNRV7GEVBlvN5AkY9qs
fCQr2dwjCGq3sIjjytIzU3mb9qJg43YM/DhLaamaNjlAtksTWSdbZW8oM9OGqQyM
2ZVnh7zasQxuVA==
-----END CERTIFICATE-----
Generated at Mon May 12 07:15:23 2025 by rpki-client