Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
File: oLqoCzEKSu7SwjPP54LE83mmYgA.mft (raw, json)
Hash identifier: 6yZ/xEDXo2VYc6jGjNhWan9q6huf+zB+sCGBV4ebd2M=
Subject key identifier: CE:17:81:9E:5D:B1:E4:54:B9:CA:57:38:D7:E5:E8:A5:58:80:1B:9C
Authority key identifier: A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00
Certificate issuer: /CN=a0baa80b310a4aeed2c233cfe782c4f379a66200
Certificate serial: 0196C4271D77883925397F1C3804C8825644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
Manifest number: 5A
Signing time: Mon 12 May 2025 11:00:19 +0000
Manifest this update: Mon 12 May 2025 11:00:19 +0000
Manifest next update: Tue 13 May 2025 11:00:19 +0000
Files and hashes: 1: oLqoCzEKSu7SwjPP54LE83mmYgA.crl (hash: 4lFL26NKXvrT/bJuS9B0NXTKV2feP5ZHN+XBdMcoR74=)
2: sT1fnBcommpqYG28Wvu_VZnisuk.roa (hash: bgoEmCHH3xYPTJAnecz6TfwkrZtOdQNWaY0Or/vvOhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:1d:77:88:39:25:39:7f:1c:38:04:c8:82:56:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0baa80b310a4aeed2c233cfe782c4f379a66200
Validity
Not Before: May 12 11:00:19 2025 GMT
Not After : May 13 11:00:19 2025 GMT
Subject: CN=ce17819e5db1e454b9ca5738d7e5e8a558801b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ad:cd:f2:c3:2f:54:0f:35:4c:61:68:a9:57:
ea:4a:1b:01:18:a6:03:f5:57:e1:0d:b5:13:3f:29:
b2:e5:7f:14:52:e4:db:dc:25:f9:ea:58:23:3a:07:
7c:38:0c:49:0b:6f:95:a7:5d:a7:6a:1e:21:f8:52:
19:50:6b:3d:af:3b:b9:60:b3:e2:f3:3b:94:f4:ae:
20:9e:f0:ae:c9:16:7c:d6:57:a5:28:1f:dc:76:11:
ad:d6:c1:e5:46:f1:da:e6:c7:54:2e:20:ba:9a:4c:
b5:1b:b2:ac:f2:07:45:6f:cd:27:17:ab:44:bb:dc:
b6:19:f4:54:72:27:95:9e:f5:eb:7e:57:46:89:31:
07:95:98:ff:a2:c9:b1:bf:1c:d9:ab:6c:c0:a4:61:
9b:7b:c0:84:24:c2:16:55:2b:a0:74:24:fc:c4:b4:
f8:d3:84:36:dd:b4:ca:38:16:7f:11:13:99:95:b0:
11:c8:0b:f1:e9:67:09:7e:52:a9:a8:4f:30:7e:72:
54:44:ab:29:b3:a7:91:15:e3:da:a6:b8:bf:d0:6b:
4c:4e:50:a8:fc:55:74:08:db:ad:e2:b7:48:91:0c:
8d:d0:b6:a9:f7:98:a0:16:dc:a1:df:dd:80:4c:c5:
0c:f0:ce:6a:ab:a6:21:b5:9b:fb:d8:9c:79:9e:e9:
9d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:17:81:9E:5D:B1:E4:54:B9:CA:57:38:D7:E5:E8:A5:58:80:1B:9C
X509v3 Authority Key Identifier:
keyid:A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:20:54:0c:f0:ca:97:4a:d2:94:bc:15:d5:7a:db:86:e9:25:
58:cc:af:cb:e4:6c:c6:67:a5:fa:9c:79:43:c7:70:ea:60:2c:
37:ca:e9:ad:1c:f7:7c:3d:70:c4:65:51:8e:d3:96:0d:27:47:
43:30:c8:84:18:77:43:22:3f:0e:fd:e3:b1:47:a9:c3:5f:e5:
ce:d7:b6:1a:14:75:e2:a0:33:33:8c:22:b9:fe:c3:51:b6:ff:
ce:73:8e:e3:24:b7:8a:0c:28:56:72:20:5f:09:b4:99:cb:10:
95:7e:20:90:ef:49:98:93:31:b9:ea:fb:c0:6f:d1:00:f2:48:
12:a3:f1:28:76:e8:f2:00:ef:9e:76:0b:28:e1:02:e6:09:a5:
7b:e7:6a:c7:db:e1:63:b8:97:fe:43:78:e5:cc:f0:54:77:e7:
21:53:36:75:44:fe:03:16:30:95:7e:46:9e:88:2d:c4:16:3d:
d7:1e:7d:6f:09:a8:18:16:a0:f1:65:9f:1a:a3:5a:94:a3:01:
d9:df:2a:2f:fc:3d:16:f1:60:4f:60:58:43:c4:b1:69:45:a0:
30:e2:32:07:23:99:2f:b4:d1:17:fe:ab:bb:1e:37:17:9f:1a:
23:6a:23:1e:19:45:51:8a:fe:18:97:f2:4a:6e:f6:fd:8a:70:
9e:20:85:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:47:36 2025 by rpki-client