Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
File: ouOnZzp5md1JaggNu6-hB3rZgPs.mft (raw, json)
Hash identifier: Fin0uxLJRPlQtpP3rCz03dhIbpWKbpgqGJydj6aLA3s=
Subject key identifier: B4:CD:89:22:5C:9C:AF:67:6F:62:95:A4:2F:3E:C6:B4:0B:CC:EB:FE
Authority key identifier: A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB
Certificate issuer: /CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
Certificate serial: 0196C4276A86BD7926EC77CD37C57CFCA4E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
Manifest number: 0841
Signing time: Mon 12 May 2025 11:00:39 +0000
Manifest this update: Mon 12 May 2025 11:00:39 +0000
Manifest next update: Tue 13 May 2025 11:00:39 +0000
Files and hashes: 1: ouOnZzp5md1JaggNu6-hB3rZgPs.crl (hash: BhSqv9B6W2PFJL6GAEONS88Phh4gj5eg7KRHKK5d5Gk=)
2: yh39pVm08WyKzque3ySW6KQ3mm4.roa (hash: aDD+CJaY1WYlwKiV6sPZZhcyKFKZy1s5Oj5KyeAwphE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:6a:86:bd:79:26:ec:77:cd:37:c5:7c:fc:a4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
Validity
Not Before: May 12 11:00:39 2025 GMT
Not After : May 13 11:00:39 2025 GMT
Subject: CN=b4cd89225c9caf676f6295a42f3ec6b40bccebfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:b6:d6:fa:fe:50:a9:f8:31:cc:66:d6:8f:
82:fb:80:7d:7e:1a:70:d7:f6:3e:b6:fb:3e:b0:4b:
e3:13:5c:a4:d9:7d:8d:1f:c2:8b:10:d5:5b:90:fa:
eb:b0:e8:bb:16:43:20:60:c3:16:25:23:e1:0b:4c:
8b:e7:36:d0:4c:3c:c3:d5:1c:5a:33:b3:c8:d4:b9:
31:78:a3:fd:5e:7d:f0:ed:c5:0f:5e:c7:5b:8b:f5:
e5:8b:b5:b7:c3:51:7b:c1:fd:28:98:f4:11:ce:9c:
bb:10:bd:f2:5e:ee:96:2c:66:c3:8a:0d:bc:38:52:
fd:81:10:d3:80:b0:c5:5d:e7:8f:67:2b:90:69:b0:
12:aa:21:42:84:a6:31:f4:cc:0b:1d:15:1a:6a:94:
83:0e:e6:be:d8:2b:f4:e0:71:76:b3:87:98:9e:5a:
c5:3c:0a:32:9b:3c:b9:65:76:5a:c6:e4:b3:8d:81:
f3:35:8b:9f:9d:8d:32:e5:60:ac:5a:d4:d4:fa:04:
60:e3:1b:d9:9b:c3:1f:05:d4:3c:e8:bc:3f:71:c5:
b5:1d:cf:af:86:4d:13:4d:e9:e5:02:7d:03:2d:16:
8a:ad:06:d9:e3:61:10:9a:5b:52:db:d0:15:f8:6c:
b6:10:8d:20:96:1c:5f:cd:53:0f:75:f4:0d:24:90:
34:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CD:89:22:5C:9C:AF:67:6F:62:95:A4:2F:3E:C6:B4:0B:CC:EB:FE
X509v3 Authority Key Identifier:
keyid:A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:00:26:c3:32:dd:a6:69:db:d6:6b:ea:38:ae:6c:f4:95:cb:
8f:88:2c:46:42:57:d2:58:8c:75:6d:de:19:52:2a:0f:3c:be:
f0:74:a0:f7:86:46:40:13:93:1f:b5:e1:c2:f8:71:ec:1e:37:
0e:cc:1f:98:ae:5b:e0:bc:b7:de:d0:a7:34:82:02:76:00:b9:
65:5c:50:cf:cd:3a:be:bc:44:6b:4e:10:f2:4d:c2:75:68:cb:
57:e4:47:48:b7:77:ca:7f:24:d6:38:4b:94:a3:61:ee:b7:ad:
8c:00:1a:07:0f:09:31:73:d8:cb:06:f7:97:26:b6:36:e0:70:
65:11:c1:dd:58:07:1e:f0:44:a1:84:d6:6f:f0:9e:fa:93:d1:
73:8f:ef:eb:ab:40:7b:57:38:21:8c:0f:67:4a:03:f6:8e:02:
20:9f:64:f8:a1:0d:e2:06:20:21:b2:57:c4:43:eb:65:c7:b1:
a0:78:c3:90:b1:62:0f:0f:4d:66:76:46:7c:2c:25:da:35:77:
5f:b7:c9:de:11:59:ad:74:8e:0a:c6:25:34:10:b6:c3:ae:b2:
98:29:ee:50:1a:fc:ff:4c:9a:0a:0c:86:aa:14:a5:82:6f:f7:
72:14:f9:23:86:ff:9f:63:96:35:58:2a:9b:97:2b:64:bf:2e:
d9:8b:00:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEJ2qGvXkm7HfNN8V8/KTkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTNhNzY3M2E3OTk5ZGQ0OTZhMDgwZGJiYWZhMTA3N2Fk
OTgwZmIwHhcNMjUwNTEyMTEwMDM5WhcNMjUwNTEzMTEwMDM5WjAzMTEwLwYDVQQD
EyhiNGNkODkyMjVjOWNhZjY3NmY2Mjk1YTQyZjNlYzZiNDBiY2NlYmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtme21vr+UKn4Mcxm1o+C+4B9fhpw
1/Y+tvs+sEvjE1yk2X2NH8KLENVbkPrrsOi7FkMgYMMWJSPhC0yL5zbQTDzD1Rxa
M7PI1LkxeKP9Xn3w7cUPXsdbi/Xli7W3w1F7wf0omPQRzpy7EL3yXu6WLGbDig28
OFL9gRDTgLDFXeePZyuQabASqiFChKYx9MwLHRUaapSDDua+2Cv04HF2s4eYnlrF
PAoymzy5ZXZaxuSzjYHzNYufnY0y5WCsWtTU+gRg4xvZm8MfBdQ86Lw/ccW1Hc+v
hk0TTenlAn0DLRaKrQbZ42EQmltS29AV+Gy2EI0glhxfzVMPdfQNJJA0gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTNiSJcnK9nb2KVpC8+xrQLzOv+MB8GA1UdIwQY
MBaAFKLjp2c6eZndSWoIDbuvoQd62YD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VPblp6cDVtZDFKYWdnTnU2LWhCM3JaZ1BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9jZWU2ZDAtMmE1YS00N2E1LTlhNmEt
ODUzZDJmMTgzZWI4LzEvb3VPblp6cDVtZDFKYWdnTnU2LWhCM3JaZ1BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9jZWU2ZDAtMmE1YS00N2E1LTlhNmEtODUzZDJmMTgzZWI4
LzEvb3VPblp6cDVtZDFKYWdnTnU2LWhCM3JaZ1BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQAmwzLd
pmnb1mvqOK5s9JXLj4gsRkJX0liMdW3eGVIqDzy+8HSg94ZGQBOTH7Xhwvhx7B43
DswfmK5b4Ly33tCnNIICdgC5ZVxQz806vrxEa04Q8k3CdWjLV+RHSLd3yn8k1jhL
lKNh7retjAAaBw8JMXPYywb3lya2NuBwZRHB3VgHHvBEoYTWb/Ce+pPRc4/v66tA
e1c4IYwPZ0oD9o4CIJ9k+KEN4gYgIbJXxEPrZcexoHjDkLFiDw9NZnZGfCwl2jV3
X7fJ3hFZrXSOCsYlNBC2w66ymCnuUBr8/0yaCgyGqhSlgm/3chT5I4b/n2OWNVgq
m5crZL8u2YsAwg==
-----END CERTIFICATE-----
Generated at Mon May 12 14:32:33 2025 by rpki-client