Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
File: oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json)
Hash identifier: uxYQ/xKifesQ8kJZ5Kti4AvMMUtGCanlzow6flDcUMQ=
Subject key identifier: 01:A5:FF:BC:25:0F:A1:06:8A:27:8F:D1:FA:E3:38:09:94:43:87:69
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Certificate issuer: /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial: 0196A0F6D88BC4AE1713EAE1E891DE963A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
Manifest number: 152C
Signing time: Mon 05 May 2025 15:00:53 +0000
Manifest this update: Mon 05 May 2025 15:00:53 +0000
Manifest next update: Tue 06 May 2025 15:00:53 +0000
Files and hashes: 1: 4VXryZNlGszOvVCrHsnCqJ1trsE.roa (hash: k+VFLGrGtXyTFaFbYpVCIVsEOX3gC2kjUfFrAgtlCzk=)
2: EzrvXLF-MmLybEmZJ2eW2xEONHs.roa (hash: RF6Dl/sCu3vkVuvkH1yCtoGTVf/6WBZmKUrbuif2lko=)
3: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: 6ZgT/uugMzHM5Dro7Uxt3/RNv+hi6I/lpvyxkmdOM1g=)
4: ruIwqLknbql4jBEA51u8Ov6Q1Tk.roa (hash: Z0E5RF1yfzZZiEr9zy9z5xXvvb8+Wc07OPz1Qm4MGWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:d8:8b:c4:ae:17:13:ea:e1:e8:91:de:96:3a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Validity
Not Before: May 5 15:00:53 2025 GMT
Not After : May 6 15:00:53 2025 GMT
Subject: CN=01a5ffbc250fa1068a278fd1fae3380994438769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:cd:aa:95:92:13:db:dc:8b:e9:f0:75:65:
5d:a5:9f:1d:11:a3:f3:78:bb:d4:1b:3f:de:14:34:
69:94:61:95:1f:61:63:fd:68:47:90:b0:89:2c:82:
8f:b0:40:8a:eb:c4:e0:20:4a:4b:0c:04:ef:29:21:
cf:fc:01:74:02:6e:f3:1d:af:02:35:1d:92:b1:97:
63:0e:b0:8a:5f:d1:73:a5:cc:63:10:c1:3a:72:0b:
c9:95:af:d1:42:27:d0:fb:ed:7a:bf:c5:10:5d:27:
d8:cd:c1:82:53:f1:6b:37:cf:25:f4:4b:54:41:8f:
69:bf:61:c0:ee:1f:27:af:01:a8:3d:c4:58:be:89:
ae:8e:63:f7:ab:c0:f4:11:aa:29:65:01:71:83:17:
a3:50:d1:a6:a6:58:1b:dd:47:f8:f6:d3:50:39:d1:
8d:2c:5c:4b:69:3f:a8:c6:4b:c5:68:0c:da:d3:d5:
a4:f6:1b:ad:56:23:c3:7e:58:5e:eb:bb:33:a6:fb:
33:69:d9:23:90:6b:b5:45:15:b3:a4:3e:55:f4:40:
41:43:99:2d:4f:75:da:d1:c3:36:11:86:a6:a8:2d:
f8:68:86:d3:65:47:90:12:13:66:dc:e3:9a:73:5f:
72:ef:c7:f6:ac:10:35:e3:51:cc:d9:c0:6d:58:b5:
eb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A5:FF:BC:25:0F:A1:06:8A:27:8F:D1:FA:E3:38:09:94:43:87:69
X509v3 Authority Key Identifier:
keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a6:95:fc:ae:18:ac:cf:9a:73:a5:ae:05:51:0a:40:dd:7c:
cc:93:7e:0d:e9:a6:95:7f:fd:f1:f7:55:2d:1a:a6:fb:44:f9:
aa:84:36:96:ed:97:44:23:0f:4a:03:bb:b6:a2:2e:81:ca:cd:
f4:fe:6a:9b:0d:76:bc:e4:ed:a6:db:75:c1:ef:4f:14:bb:7b:
65:ae:ee:c2:08:86:04:97:e2:6d:8d:25:d8:51:4e:24:8f:6d:
0c:d2:9b:92:bc:b0:40:18:0d:e2:98:7b:f6:20:2b:95:96:3a:
37:84:e4:86:e5:90:59:a0:5a:f7:13:d5:33:5a:7a:42:33:c6:
d8:fa:4c:f5:11:de:36:2f:a5:5d:75:cc:6e:8f:5e:de:e4:8d:
b2:29:e1:f7:82:c0:84:ac:1c:e4:9b:50:78:6d:a2:d6:5e:0d:
aa:7a:8e:87:c4:21:fc:f6:11:ab:37:42:91:42:fb:48:73:8d:
14:85:0b:69:75:8d:22:19:82:c0:cf:1a:0c:f0:db:2f:e8:ae:
c0:a2:45:ca:7f:90:9c:dd:71:4f:75:94:0f:e4:4a:cb:09:63:
18:b6:de:4d:d4:d8:60:63:b8:e4:62:89:aa:e7:e3:bb:56:a8:
43:27:82:3f:34:af:47:fa:9e:37:56:bc:de:41:1c:00:2d:58:
80:3a:9b:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZag9tiLxK4XE+rh6JHeljpvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYTJkNjM3Y2IwYWNjZjg3MjFmNDNlMjY2Y2UyMTNmOGVk
ZGQyNmEwHhcNMjUwNTA1MTUwMDUzWhcNMjUwNTA2MTUwMDUzWjAzMTEwLwYDVQQD
EygwMWE1ZmZiYzI1MGZhMTA2OGEyNzhmZDFmYWUzMzgwOTk0NDM4NzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmzNqpWSE9vci+nwdWVdpZ8dEaPz
eLvUGz/eFDRplGGVH2Fj/WhHkLCJLIKPsECK68TgIEpLDATvKSHP/AF0Am7zHa8C
NR2SsZdjDrCKX9FzpcxjEME6cgvJla/RQifQ++16v8UQXSfYzcGCU/FrN88l9EtU
QY9pv2HA7h8nrwGoPcRYvomujmP3q8D0EaopZQFxgxejUNGmplgb3Uf49tNQOdGN
LFxLaT+oxkvFaAza09Wk9hutViPDflhe67szpvszadkjkGu1RRWzpD5V9EBBQ5kt
T3Xa0cM2EYamqC34aIbTZUeQEhNm3OOac19y78f2rBA141HM2cBtWLXrBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGl/7wlD6EGiieP0frjOAmUQ4dpMB8GA1UdIwQY
MBaAFKGi1jfLCsz4ch9D4mbOIT+O3dJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lZGJmNDQtMzczMi00NGZmLWE5NDQt
ZTIxOTc0YTI5NGJhLzEvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9lZGJmNDQtMzczMi00NGZmLWE5NDQtZTIxOTc0YTI5NGJh
LzEvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKaV/K4Y
rM+ac6WuBVEKQN18zJN+DemmlX/98fdVLRqm+0T5qoQ2lu2XRCMPSgO7tqIugcrN
9P5qmw12vOTtptt1we9PFLt7Za7uwgiGBJfibY0l2FFOJI9tDNKbkrywQBgN4ph7
9iArlZY6N4TkhuWQWaBa9xPVM1p6QjPG2PpM9RHeNi+lXXXMbo9e3uSNsinh94LA
hKwc5JtQeG2i1l4NqnqOh8Qh/PYRqzdCkUL7SHONFIULaXWNIhmCwM8aDPDbL+iu
wKJFyn+QnN1xT3WUD+RKywljGLbeTdTYYGO45GKJqufju1aoQyeCPzSvR/qeN1a8
3kEcAC1YgDqbBQ==
-----END CERTIFICATE-----
Generated at Mon May 5 22:22:24 2025 by rpki-client