Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: jNYyCUkEMXzLZbblO5nSq/fxNJ0MIMxRg+iLrrWfsmM=
Subject key identifier: 48:3F:29:96:FC:D1:3B:E6:81:7B:2D:DE:7B:36:30:0A:F9:26:88:AA
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 0196BB5B072B875AEFFD54D0CCB890A3B8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 18:00:27 +0000
Manifest this update: Sat 10 May 2025 18:00:27 +0000
Manifest next update: Sun 11 May 2025 18:00:27 +0000
Files and hashes: 1: EPNaozHQAjVOYQy-Vt2Z_kxiWS0.roa (hash: WsqXo+AMtH2w9AGoDi4Cn3lAEUdfpStLLlDa9sz3f6I=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: HRpNse9K15D+JJapK30mAIKdaEoRPLLcUJ8ktXhu1Is=)
3: oyDkuFI7Lh8_-ReZkAMKowiORyM.roa (hash: 3yAZCKM7m/E+YP0xth4LuRn5Dda6av4q64pWFUUvg/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:07:2b:87:5a:ef:fd:54:d0:cc:b8:90:a3:b8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: May 10 18:00:27 2025 GMT
Not After : May 11 18:00:27 2025 GMT
Subject: CN=483f2996fcd13be6817b2dde7b36300af92688aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:af:9f:04:8f:29:ee:db:3d:00:13:8a:bb:32:
75:db:c3:50:9e:75:35:4d:d5:9b:7d:8d:ca:4c:b2:
53:f9:eb:14:1e:0e:b9:12:77:2f:c7:3e:1a:cf:28:
9d:5c:12:7e:02:37:9e:7c:18:75:1c:e7:cf:18:95:
e0:b4:cb:eb:da:76:62:42:48:ce:5a:9f:c8:a0:a1:
1c:ce:20:73:02:7a:75:42:5e:fe:09:01:2c:56:a9:
aa:c0:dc:42:fb:4b:b8:26:02:c9:41:3a:96:83:bf:
17:54:f1:9b:e0:a2:9f:c2:cd:e0:85:cc:ae:2a:9f:
0c:36:0d:49:f7:76:d7:0b:4f:84:e8:b4:93:70:08:
be:d0:1f:c7:1d:88:9b:96:42:ef:33:4d:8d:a2:cf:
1c:a1:c5:2c:80:c6:1a:e2:43:c0:91:26:1e:34:6c:
32:51:c5:40:2b:71:85:5f:9d:9a:7e:64:aa:45:a6:
f1:3c:b0:54:fe:8d:d0:69:54:4f:32:b5:89:c7:1c:
0c:db:f4:bc:84:b4:06:9f:ae:d6:8a:45:16:14:cd:
20:c2:9c:79:d9:e6:d5:db:de:07:ad:dc:ec:9e:b8:
18:19:7a:3d:aa:f4:97:94:df:8a:0a:81:85:8a:29:
d3:de:20:64:a2:f8:a1:66:98:c8:86:85:c7:b5:8b:
e6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3F:29:96:FC:D1:3B:E6:81:7B:2D:DE:7B:36:30:0A:F9:26:88:AA
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3e:d9:93:6a:85:28:d1:20:01:02:1a:9b:35:49:74:12:e4:
24:94:41:0f:ba:b4:0b:9b:1d:ec:52:df:7e:24:1d:aa:14:02:
61:63:04:94:d0:ec:df:0e:d9:03:c2:d8:eb:02:c3:c2:37:71:
4d:1d:6b:8c:02:28:f7:25:a3:13:8c:2b:41:49:bc:8a:55:d9:
0c:c8:f8:ea:f4:b8:7e:0d:28:7a:fb:bc:d9:72:dd:d0:0e:fc:
d4:3b:57:b1:93:6d:e8:fc:bd:1c:27:06:62:54:f4:61:5b:3f:
5c:22:9e:4f:76:0c:ce:8e:07:59:ed:ad:dd:f3:0e:31:23:09:
d9:07:66:7f:a5:bb:37:8a:8b:54:b3:af:11:ed:0e:be:c5:e5:
ea:8d:95:80:f4:50:b2:e3:21:59:c3:7f:78:67:b6:3f:ae:75:
53:78:4d:45:f2:4c:ff:aa:29:aa:aa:8e:39:23:f0:3c:14:52:
ec:05:4d:b6:1d:07:90:e3:ff:6f:8a:20:a2:49:a2:63:b5:ca:
df:b6:a5:a1:09:18:39:2d:d7:dc:74:a6:8a:6e:d6:c0:dc:9c:
a0:fa:d9:5e:5b:e9:29:b9:fe:9c:57:0d:1a:7c:22:28:40:a1:
41:e5:6e:b7:d4:77:76:3a:07:f5:48:20:0b:c2:85:c9:d6:da:
31:32:e9:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7Wwcrh1rv/VTQzLiQo7isMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZTNiYTg3ZTNhOTM0NjhjYzNiM2MzZjYwZmE2M2Q1ZTg1
M2MzMTQwHhcNMjUwNTEwMTgwMDI3WhcNMjUwNTExMTgwMDI3WjAzMTEwLwYDVQQD
Eyg0ODNmMjk5NmZjZDEzYmU2ODE3YjJkZGU3YjM2MzAwYWY5MjY4OGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4a+fBI8p7ts9ABOKuzJ128NQnnU1
TdWbfY3KTLJT+esUHg65Encvxz4azyidXBJ+AjeefBh1HOfPGJXgtMvr2nZiQkjO
Wp/IoKEcziBzAnp1Ql7+CQEsVqmqwNxC+0u4JgLJQTqWg78XVPGb4KKfws3ghcyu
Kp8MNg1J93bXC0+E6LSTcAi+0B/HHYiblkLvM02Nos8cocUsgMYa4kPAkSYeNGwy
UcVAK3GFX52afmSqRabxPLBU/o3QaVRPMrWJxxwM2/S8hLQGn67WikUWFM0gwpx5
2ebV294HrdzsnrgYGXo9qvSXlN+KCoGFiinT3iBkovihZpjIhoXHtYvmjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEg/KZb80TvmgXst3ns2MAr5JoiqMB8GA1UdIwQY
MBaAFGjjuofjqTRozDs8P2D6Y9XoU8MUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xZWZmMTctNjVlYy00NWVhLWE3NWQt
OTZlYjA3Zjc4MjViLzEvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xZWZmMTctNjVlYy00NWVhLWE3NWQtOTZlYjA3Zjc4MjVi
LzEvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFT7Zk2qF
KNEgAQIamzVJdBLkJJRBD7q0C5sd7FLffiQdqhQCYWMElNDs3w7ZA8LY6wLDwjdx
TR1rjAIo9yWjE4wrQUm8ilXZDMj46vS4fg0oevu82XLd0A781DtXsZNt6Py9HCcG
YlT0YVs/XCKeT3YMzo4HWe2t3fMOMSMJ2Qdmf6W7N4qLVLOvEe0OvsXl6o2VgPRQ
suMhWcN/eGe2P651U3hNRfJM/6opqqqOOSPwPBRS7AVNth0HkOP/b4ogokmiY7XK
37aloQkYOS3X3HSmim7WwNycoPrZXlvpKbn+nFcNGnwiKEChQeVut9R3djoH9Ugg
C8KFydbaMTLpFA==
-----END CERTIFICATE-----
Generated at Sun May 11 01:07:03 2025 by rpki-client