Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
File: 3AOqmk_p1gxc-FOpJIIiafHMdFI.mft (raw, json)
Hash identifier: Om6ubqr4u74ZQXvLgcKnnB3r5MJiLDDE2bZOCb5Fp2s=
Subject key identifier: 68:73:14:A7:31:0B:4F:93:B2:01:29:55:B7:1B:31:5F:10:54:89:64
Authority key identifier: DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
Certificate issuer: /CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Certificate serial: 0196C9F26C540AEB30320AE788161ED25F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
Manifest number: 0AE6
Signing time: Tue 13 May 2025 14:00:29 +0000
Manifest this update: Tue 13 May 2025 14:00:29 +0000
Manifest next update: Wed 14 May 2025 14:00:29 +0000
Files and hashes: 1: 3AOqmk_p1gxc-FOpJIIiafHMdFI.crl (hash: MJ2HDeKTl70u7KR2lMCfKfDqnlsq/Zbm821JYT/jEVg=)
2: qHsLN52OLV40PkdsNg1LTDhrI1k.roa (hash: o2jlcmcZCFuQ0+N7Kss7ufNJs+2izJmB43Pkb+WDd2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:6c:54:0a:eb:30:32:0a:e7:88:16:1e:d2:5f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Validity
Not Before: May 13 14:00:29 2025 GMT
Not After : May 14 14:00:29 2025 GMT
Subject: CN=687314a7310b4f93b2012955b71b315f10548964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:42:c4:2e:11:de:7c:09:74:d6:0d:4e:bc:
52:f3:c6:a7:72:a3:1c:eb:a4:22:b2:67:f3:0b:ca:
fb:a0:e0:d6:89:1c:7b:66:f1:3c:1d:9f:73:92:02:
17:28:b5:24:0e:eb:1d:2c:66:00:0c:3f:b4:de:b8:
2b:40:8d:18:f3:1f:d3:5c:a7:48:d4:72:9b:5d:34:
d8:3c:91:4a:45:a8:b5:7f:f1:21:26:b6:5c:b1:69:
1a:48:50:cc:8f:83:b8:e8:16:63:84:fb:37:d2:6d:
66:d1:06:8a:02:76:25:91:74:55:b7:3d:f6:4a:d4:
d0:c9:10:46:6c:57:26:b5:3f:04:3c:f3:70:7a:f5:
0c:e1:5e:8c:c8:30:c7:8a:d1:a7:68:84:7a:4f:b1:
4a:a7:de:bc:62:e2:78:5c:60:99:a3:6b:a3:7e:be:
a5:4e:18:c7:bd:49:b2:82:f4:53:47:7a:c9:21:1d:
9d:8b:f7:f1:86:ad:be:4b:20:bc:b8:2a:1b:cf:aa:
43:5c:42:f7:63:1c:17:98:5f:63:68:48:fc:00:33:
00:e6:6a:ae:0d:4c:7f:91:dc:01:cf:85:01:56:fa:
be:65:e9:1c:d1:95:7f:21:d4:f7:63:10:5f:76:31:
fe:82:05:17:d0:7f:b1:80:e8:cb:4e:4e:a6:34:c3:
dc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:73:14:A7:31:0B:4F:93:B2:01:29:55:B7:1B:31:5F:10:54:89:64
X509v3 Authority Key Identifier:
keyid:DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2d:7b:59:1b:32:66:bd:aa:61:e1:86:0f:e8:6b:30:e0:a1:
59:29:29:fb:3c:71:b6:9e:ea:c4:ad:ac:94:e0:b5:de:e3:c2:
cc:5e:23:c9:a6:c7:6e:72:0c:3c:7c:52:26:d8:18:5a:9d:47:
12:5a:5a:08:d1:e9:c2:cd:06:b4:6a:31:cb:44:6d:40:ae:5b:
30:12:7f:c1:63:34:79:2e:6f:e2:6a:6d:73:6d:56:64:1f:22:
2d:0d:1b:5a:c7:49:8a:4f:6d:9c:80:8a:fd:a6:de:10:e1:ce:
60:cc:2d:55:58:06:34:1b:91:ee:11:ea:cb:38:66:9a:94:b2:
4f:fe:ab:99:b5:eb:d1:84:da:de:cb:c5:71:8c:04:d6:cc:83:
80:c6:9b:3f:e5:6a:b7:13:6e:33:d0:e7:35:17:c0:8f:6e:7f:
48:f7:aa:0f:c0:9c:a1:a2:d0:1c:03:d5:5f:14:21:cb:41:01:
1e:e0:64:4a:a0:6d:d6:f7:c3:10:42:fb:53:5d:c5:38:21:a8:
25:e7:50:0d:ea:9d:43:7a:f3:b1:20:cc:1f:b8:ef:6d:6d:df:
ed:f2:5b:04:6c:86:ab:4a:3e:be:e2:20:44:16:d5:81:ea:a2:
b1:77:0e:d1:7d:40:2a:71:2c:63:6a:0f:b3:e5:bc:37:0c:3c:
85:d6:7e:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJ8mxUCuswMgrniBYe0l8XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDNhYTlhNGZlOWQ2MGM1Y2Y4NTNhOTI0ODIyMjY5ZjFj
Yzc0NTIwHhcNMjUwNTEzMTQwMDI5WhcNMjUwNTE0MTQwMDI5WjAzMTEwLwYDVQQD
Eyg2ODczMTRhNzMxMGI0ZjkzYjIwMTI5NTViNzFiMzE1ZjEwNTQ4OTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMlCxC4R3nwJdNYNTrxS88ancqMc
66QismfzC8r7oODWiRx7ZvE8HZ9zkgIXKLUkDusdLGYADD+03rgrQI0Y8x/TXKdI
1HKbXTTYPJFKRai1f/EhJrZcsWkaSFDMj4O46BZjhPs30m1m0QaKAnYlkXRVtz32
StTQyRBGbFcmtT8EPPNwevUM4V6MyDDHitGnaIR6T7FKp968YuJ4XGCZo2ujfr6l
ThjHvUmygvRTR3rJIR2di/fxhq2+SyC8uCobz6pDXEL3YxwXmF9jaEj8ADMA5mqu
DUx/kdwBz4UBVvq+Zekc0ZV/IdT3YxBfdjH+ggUX0H+xgOjLTk6mNMPcQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhzFKcxC0+TsgEpVbcbMV8QVIlkMB8GA1UdIwQY
MBaAFNwDqppP6dYMXPhTqSSCImnxzHRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kODRlMWUtY2M1My00Y2MyLWFhYjkt
MWNhNzY2ZmJlZWJhLzEvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kODRlMWUtY2M1My00Y2MyLWFhYjktMWNhNzY2ZmJlZWJh
LzEvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJS17WRsy
Zr2qYeGGD+hrMOChWSkp+zxxtp7qxK2slOC13uPCzF4jyabHbnIMPHxSJtgYWp1H
ElpaCNHpws0GtGoxy0RtQK5bMBJ/wWM0eS5v4mptc21WZB8iLQ0bWsdJik9tnICK
/abeEOHOYMwtVVgGNBuR7hHqyzhmmpSyT/6rmbXr0YTa3svFcYwE1syDgMabP+Vq
txNuM9DnNRfAj25/SPeqD8CcoaLQHAPVXxQhy0EBHuBkSqBt1vfDEEL7U13FOCGo
JedQDeqdQ3rzsSDMH7jvbW3f7fJbBGyGq0o+vuIgRBbVgeqisXcO0X1AKnEsY2oP
s+W8Nww8hdZ+xg==
-----END CERTIFICATE-----
Generated at Tue May 13 20:13:26 2025 by rpki-client