Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
File: 5ozobUCegkN2Vg_jsaFo8roAguM.mft (raw, json)
Hash identifier: KW3qoK5/ScaCsaLFzFovnUco8E72jsTCYgIMRtoP+Jc=
Subject key identifier: 1C:A3:CF:8D:13:48:26:85:B8:01:19:E6:12:51:0F:C6:86:00:42:9F
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Certificate issuer: /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial: 0197B88F17DF8F70D72CCCDA62A7C4D6FA40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 22:01:14 +0000
Manifest this update: Sat 28 Jun 2025 22:01:14 +0000
Manifest next update: Sun 29 Jun 2025 22:01:14 +0000
Files and hashes: 1: 5ozobUCegkN2Vg_jsaFo8roAguM.crl (hash: sa10hyDTZ/Z7+JgDae+ZuNAN+JPvIEMyM3SV5lSs5tA=)
2: LVNoSuA7vvTmvNpxT00E4lAvcp4.roa (hash: pPgdCp65TG7QIX5Sq2MoRLP/ea4UDwFHNBTpNrAcJN4=)
3: v3gPT9ihCRL0ZeNIouhjQbTxtd0.roa (hash: yHjYFG2kFwOSEQcA6CVX+o9if+OsdxgeiHLnGMf3Fqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:17:df:8f:70:d7:2c:cc:da:62:a7:c4:d6:fa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Validity
Not Before: Jun 28 22:01:14 2025 GMT
Not After : Jun 29 22:01:14 2025 GMT
Subject: CN=1ca3cf8d13482685b80119e612510fc68600429f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:50:64:06:cf:d4:0b:a4:01:b5:22:76:4e:65:
6f:95:fe:1a:4b:09:cf:82:a6:8f:f7:09:72:78:48:
92:38:12:0a:43:67:cf:fb:ce:3a:dd:f7:94:ad:3a:
d1:79:6b:ac:6d:4d:45:a9:6a:e7:a8:e7:2d:4f:f6:
88:a8:ee:d8:37:c6:6e:bb:7b:0a:5b:ef:ff:8a:89:
9b:14:d3:33:b2:2d:b8:2b:b1:40:18:a9:ac:ce:61:
93:4d:1e:2e:62:e3:37:17:98:40:65:1b:0a:91:00:
db:54:82:0e:09:80:87:a2:04:5b:01:f7:ea:9f:af:
c5:89:17:e9:dc:50:aa:82:ab:a3:35:b6:81:4e:e3:
0d:90:81:10:89:2c:40:17:e0:79:8c:f4:75:53:c6:
cd:ef:88:8e:f9:65:f8:be:01:3a:4f:0d:a5:59:02:
f6:ab:33:da:13:85:7a:f1:e7:a2:38:24:56:b0:85:
f1:21:5c:36:13:d3:6f:40:70:7f:b1:a5:b1:51:74:
03:49:25:ba:8e:77:bc:2d:f4:4e:c1:bf:6c:54:b7:
36:2e:3e:07:77:c2:85:93:b6:aa:a5:27:07:ba:11:
4b:87:fb:6b:71:10:9b:ee:2a:32:22:a6:be:a1:cc:
8b:a1:b4:85:2d:d1:24:cc:28:56:95:7c:f0:77:bb:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A3:CF:8D:13:48:26:85:B8:01:19:E6:12:51:0F:C6:86:00:42:9F
X509v3 Authority Key Identifier:
keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8e:fd:e4:cd:7b:04:3e:1d:1d:93:50:de:9b:a3:b0:77:f0:
6f:1a:af:9c:20:d6:94:76:1b:78:85:71:ab:6d:10:ca:a0:fe:
b7:0e:40:b1:56:38:56:bd:38:86:3a:17:86:5e:70:90:f0:ab:
6d:76:bc:93:b8:90:48:97:90:dc:e4:50:29:7f:37:87:a0:06:
13:13:e1:1f:9f:29:60:e2:85:5c:fb:89:5d:ba:6e:60:0b:57:
8e:ee:1e:3f:c9:5c:d2:68:f3:ec:2b:a4:ad:dd:ef:65:0e:b8:
e7:eb:98:01:02:b3:cc:43:2d:ca:37:45:4b:a2:c2:ee:d1:33:
77:24:16:60:6a:9e:f5:f2:4d:2a:7d:ab:ae:83:e5:19:74:d6:
ad:0f:8f:9f:19:ea:dc:31:eb:06:68:3c:fe:18:bd:16:7b:fd:
70:6e:38:0e:74:48:6f:84:1c:f1:8b:71:9b:ea:68:c4:2e:7b:
5d:e7:c6:64:9e:a6:4d:fc:cf:df:ab:84:43:0c:c6:ae:56:85:
51:5d:6d:a8:68:19:67:cd:68:40:d8:ff:78:3a:57:6c:47:88:
ac:0e:47:ca:ad:73:33:f7:ae:23:cb:7a:08:95:1c:d8:79:bb:
81:7b:1e:e0:06:67:23:31:03:e6:da:16:8e:99:b1:6d:f6:7b:
7e:6c:29:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:54 2025 by rpki-client