Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier: ect7eC8od3HcSbex8+Fxz74XR3AgRoe/mMpcpJsGHLE=
Subject key identifier: 01:2A:FD:EF:AD:58:6E:F9:00:51:2D:5D:B6:62:7F:1D:76:16:02:3B
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 0196C2396695AE1D32285EDD22948FA7A1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number: 12F5
Signing time: Mon 12 May 2025 02:01:03 +0000
Manifest this update: Mon 12 May 2025 02:01:03 +0000
Manifest next update: Tue 13 May 2025 02:01:03 +0000
Files and hashes: 1: DczTrrLnDVPPLA9bSnvmxSynfMo.roa (hash: MShemdRXWsyNt1uZQs1+kFCI4xFOutzLz93AyRjtuLo=)
2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: U8q3rhYW03CyUyRy1BdZDtd0p8sjA8M4aD6QCc8r36w=)
3: c4gvx7z4uTdlMuQhlvQQIKAtTuA.roa (hash: /qFGvLOPcacTCYTbqRVu0f4DWWxHlkhfiQJHtYVDsoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:66:95:ae:1d:32:28:5e:dd:22:94:8f:a7:a1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: May 12 02:01:03 2025 GMT
Not After : May 13 02:01:03 2025 GMT
Subject: CN=012afdefad586ef900512d5db6627f1d7616023b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:0c:43:b8:ad:af:b6:9a:4c:20:9f:f7:c5:
8c:c6:0f:9f:f3:ad:a9:92:87:23:54:10:44:33:48:
1b:5f:5c:de:f7:c8:2a:0e:b6:f1:2d:cd:b9:4c:68:
c9:51:46:34:2d:17:d0:b7:da:d1:07:72:61:aa:e0:
c4:8d:f9:a6:2c:b4:e4:a5:d0:12:5d:91:e7:5b:50:
69:93:51:31:c7:c1:30:25:4c:27:34:c2:5f:9e:f8:
77:7a:14:dc:c3:d1:5e:57:1a:d4:f9:76:8b:ea:11:
00:4e:2e:31:05:78:91:a2:37:75:1a:8e:57:cf:fd:
b0:0a:ab:e9:b9:db:ee:8a:d0:55:73:58:fb:95:75:
bb:c5:ff:7b:72:cc:5e:89:cb:52:88:96:86:9c:98:
b6:e5:6b:f5:8c:01:9b:a2:92:93:b8:43:bd:ad:38:
f0:34:cc:1a:1f:9c:c9:8f:63:21:ff:1f:71:57:e7:
81:55:d4:88:99:1b:ae:f0:af:75:9e:75:73:1d:76:
3c:b4:74:c9:1d:37:ec:12:c8:7d:c1:35:7a:e3:56:
6f:68:22:7c:d4:cc:3c:cd:3b:b2:c4:74:a5:36:13:
73:8a:b9:89:da:dd:b1:c2:9c:ee:66:89:b9:b0:0e:
08:fa:a6:26:2e:f4:8d:b8:54:4a:35:55:8b:72:a1:
51:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2A:FD:EF:AD:58:6E:F9:00:51:2D:5D:B6:62:7F:1D:76:16:02:3B
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d5:bb:7a:9e:ab:46:6b:e5:f6:c6:ec:59:31:46:8f:f3:91:
83:bd:32:54:58:68:48:e5:29:ae:f9:68:fd:af:36:86:57:d8:
7e:15:a5:35:68:4a:5c:7d:67:3d:0f:4c:f2:a3:3d:1b:da:75:
31:ef:28:01:dd:0b:7e:12:db:fd:52:98:f0:c1:d0:e3:1b:d7:
a1:d6:75:63:10:f9:91:27:62:86:61:65:ea:f4:a6:53:f5:ec:
83:54:43:d0:e3:79:b2:41:f8:9c:ab:9e:34:2f:67:fb:bf:6d:
3c:68:a0:a0:e2:65:52:29:27:ec:b5:5b:2c:eb:d1:c1:2f:3a:
4b:78:2a:e7:d1:4e:9e:4b:da:4f:3e:d7:27:19:06:88:24:68:
1b:1e:2e:f9:79:37:5b:a3:ad:f1:60:54:08:13:6c:0a:8b:87:
14:b4:e4:c9:23:f8:17:6b:80:a8:7d:12:21:20:a6:d0:df:33:
b9:43:75:67:79:03:19:53:56:20:3c:f6:02:75:e2:6b:05:0e:
13:04:58:34:d5:49:b4:73:1c:2f:2e:8f:38:f2:de:86:4a:09:
a2:ac:cd:77:07:3e:68:13:2d:59:3e:ad:b1:59:4d:ac:e4:8a:
e9:0c:f0:3a:85:99:43:2c:de:93:4c:5c:2f:76:16:cc:2c:fe:
2c:40:97:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCOWaVrh0yKF7dIpSPp6H0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWViOWU2OTJiYTllOTNkOGI5NWE2NDg4ZDVjODc1NjA5
ZDRhZWMwHhcNMjUwNTEyMDIwMTAzWhcNMjUwNTEzMDIwMTAzWjAzMTEwLwYDVQQD
EygwMTJhZmRlZmFkNTg2ZWY5MDA1MTJkNWRiNjYyN2YxZDc2MTYwMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbAMQ7itr7aaTCCf98WMxg+f862p
kocjVBBEM0gbX1ze98gqDrbxLc25TGjJUUY0LRfQt9rRB3JhquDEjfmmLLTkpdAS
XZHnW1Bpk1Exx8EwJUwnNMJfnvh3ehTcw9FeVxrU+XaL6hEATi4xBXiRojd1Go5X
z/2wCqvpudvuitBVc1j7lXW7xf97csxeictSiJaGnJi25Wv1jAGbopKTuEO9rTjw
NMwaH5zJj2Mh/x9xV+eBVdSImRuu8K91nnVzHXY8tHTJHTfsEsh9wTV641ZvaCJ8
1Mw8zTuyxHSlNhNzirmJ2t2xwpzuZom5sA4I+qYmLvSNuFRKNVWLcqFRiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEq/e+tWG75AFEtXbZifx12FgI7MB8GA1UdIwQY
MBaAFDruueaSup6T2LlaZIjVyHVgnUrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zZTI1OWItYjZkYy00Y2Y0LWFjMTkt
NTAzM2Y4ZDc5YmU3LzEvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zZTI1OWItYjZkYy00Y2Y0LWFjMTktNTAzM2Y4ZDc5YmU3
LzEvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNW7ep6r
Rmvl9sbsWTFGj/ORg70yVFhoSOUprvlo/a82hlfYfhWlNWhKXH1nPQ9M8qM9G9p1
Me8oAd0LfhLb/VKY8MHQ4xvXodZ1YxD5kSdihmFl6vSmU/Xsg1RD0ON5skH4nKue
NC9n+79tPGigoOJlUikn7LVbLOvRwS86S3gq59FOnkvaTz7XJxkGiCRoGx4u+Xk3
W6Ot8WBUCBNsCouHFLTkySP4F2uAqH0SISCm0N8zuUN1Z3kDGVNWIDz2AnXiawUO
EwRYNNVJtHMcLy6POPLehkoJoqzNdwc+aBMtWT6tsVlNrOSK6QzwOoWZQyzek0xc
L3YWzCz+LECXmg==
-----END CERTIFICATE-----
Generated at Mon May 12 10:49:26 2025 by rpki-client