Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
File: OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft (raw, json)
Hash identifier: 1u3ebz6uqHbakDZCPOccK4vkhgi7V2TFBTRBBbPBsi8=
Subject key identifier: 02:FF:11:23:47:EE:0E:C2:42:39:53:0D:83:70:1E:F2:2D:0D:1B:E3
Authority key identifier: 39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
Certificate issuer: /CN=39abeb591716e908345d329fffd3700352315b98
Certificate serial: 0196515BDDD7EE5FD52B59CF800E82D299FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
Manifest number: 1190
Signing time: Sun 20 Apr 2025 04:01:37 +0000
Manifest this update: Sun 20 Apr 2025 04:01:37 +0000
Manifest next update: Mon 21 Apr 2025 04:01:37 +0000
Files and hashes: 1: OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl (hash: vXGxdtzPAJS820mYE3UnKknQ7dnb/ZbTtrWOu2E64gw=)
2: sRj9HIjhF6xAzSk8DsZiSona3z0.roa (hash: CKtuOB2HNTtxCaJDk6aobi//RFXR4AYliP1W8tH3cu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:dd:d7:ee:5f:d5:2b:59:cf:80:0e:82:d2:99:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39abeb591716e908345d329fffd3700352315b98
Validity
Not Before: Apr 20 04:01:37 2025 GMT
Not After : Apr 21 04:01:37 2025 GMT
Subject: CN=02ff112347ee0ec24239530d83701ef22d0d1be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4c:c8:2f:27:ca:b4:4a:c6:53:e2:2c:73:f4:
45:bf:88:b3:58:b3:11:80:57:26:95:c2:1f:d9:97:
b5:7f:62:3c:0b:4b:a1:a7:b7:fd:4e:33:b2:1b:3e:
ae:fb:be:37:23:ca:98:17:6e:a6:9a:f4:58:96:27:
b1:26:89:74:0f:8d:cd:03:9b:9e:02:2e:02:14:6e:
04:b7:4c:06:0d:13:aa:7c:0f:60:b0:d0:06:1c:3d:
02:04:da:5d:f7:1f:6a:a2:9a:51:e4:3c:2e:1f:9e:
ff:43:39:19:ab:df:50:18:bd:a5:80:c3:ea:1a:2a:
60:60:af:d4:6a:48:16:79:82:97:00:62:fa:c5:95:
c8:1a:0f:d6:02:9d:0a:6b:fe:5a:dc:6d:90:5d:e0:
d3:5d:0d:19:e9:9a:43:4c:b6:65:70:36:d6:2e:ae:
5e:ed:c4:23:b0:f0:9e:f5:d6:e3:9d:93:e3:7c:79:
6d:02:cf:0d:e1:50:d7:fd:04:0b:8a:fd:9a:a9:34:
cd:6a:88:77:46:9c:ee:99:28:3d:e7:04:bd:dd:68:
ca:dc:f7:ee:7a:41:35:fa:af:66:6e:5c:09:f4:75:
19:04:c7:4e:60:e0:c7:c1:ba:be:67:2a:94:9d:52:
d7:f0:05:a7:c8:f6:0a:33:da:14:e9:4d:cd:08:b7:
d8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FF:11:23:47:EE:0E:C2:42:39:53:0D:83:70:1E:F2:2D:0D:1B:E3
X509v3 Authority Key Identifier:
keyid:39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d3:8a:e3:ed:2d:0b:ac:a8:12:f7:96:55:c2:96:27:ff:e2:
d4:cc:26:43:4c:4f:38:8e:65:0c:c8:9a:48:f0:f6:c9:9e:3b:
6e:5d:40:2c:d6:31:eb:99:eb:ce:b0:72:92:ab:19:15:8f:e5:
e7:d3:4a:16:0f:48:89:36:ff:78:cd:e5:47:c3:e0:d5:50:7d:
00:5c:2c:13:03:50:f5:77:9d:87:51:01:ba:94:93:ee:27:08:
83:da:39:fa:71:f1:6c:5e:d8:c5:01:38:ae:bf:36:e3:3d:e7:
1c:d6:91:79:94:2e:f1:2b:93:fb:91:28:3f:96:f9:8c:c3:93:
aa:a4:25:69:90:59:cb:4e:b8:3f:91:55:63:9f:9f:12:81:bf:
c7:d8:30:fd:2c:5e:db:40:2c:7c:45:b0:34:e0:49:6a:ab:7a:
81:f3:97:30:17:5c:3b:48:0f:d2:e8:59:c2:b1:53:91:28:68:
d2:fc:eb:bb:57:eb:77:ce:b7:75:af:a5:ea:1a:f6:91:54:6c:
7a:8d:f8:5a:8b:4f:c7:e2:53:f9:5f:f2:c9:3f:6d:e8:87:1e:
ed:88:5e:41:fa:a8:8b:e6:58:6f:fb:ae:2d:0b:48:17:a3:a5:
0d:24:09:c6:c5:4d:ee:1c:29:3a:14:0b:51:02:03:27:ad:06:
d6:4e:0f:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRW93X7l/VK1nPgA6C0pn8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YWJlYjU5MTcxNmU5MDgzNDVkMzI5ZmZmZDM3MDAzNTIz
MTViOTgwHhcNMjUwNDIwMDQwMTM3WhcNMjUwNDIxMDQwMTM3WjAzMTEwLwYDVQQD
EygwMmZmMTEyMzQ3ZWUwZWMyNDIzOTUzMGQ4MzcwMWVmMjJkMGQxYmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kzILyfKtErGU+Isc/RFv4izWLMR
gFcmlcIf2Ze1f2I8C0uhp7f9TjOyGz6u+743I8qYF26mmvRYliexJol0D43NA5ue
Ai4CFG4Et0wGDROqfA9gsNAGHD0CBNpd9x9qoppR5DwuH57/QzkZq99QGL2lgMPq
GipgYK/UakgWeYKXAGL6xZXIGg/WAp0Ka/5a3G2QXeDTXQ0Z6ZpDTLZlcDbWLq5e
7cQjsPCe9dbjnZPjfHltAs8N4VDX/QQLiv2aqTTNaoh3RpzumSg95wS93WjK3Pfu
ekE1+q9mblwJ9HUZBMdOYODHwbq+ZyqUnVLX8AWnyPYKM9oU6U3NCLfYXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAL/ESNH7g7CQjlTDYNwHvItDRvjMB8GA1UdIwQY
MBaAFDmr61kXFukINF0yn//TcANSMVuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iMDhmMjItMTFmNi00ZWU1LWEyMzEt
YjdjZDQ0OTBhOTgzLzEvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9iMDhmMjItMTFmNi00ZWU1LWEyMzEtYjdjZDQ0OTBhOTgz
LzEvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddOK4+0t
C6yoEveWVcKWJ//i1MwmQ0xPOI5lDMiaSPD2yZ47bl1ALNYx65nrzrBykqsZFY/l
59NKFg9IiTb/eM3lR8Pg1VB9AFwsEwNQ9Xedh1EBupST7icIg9o5+nHxbF7YxQE4
rr824z3nHNaReZQu8SuT+5EoP5b5jMOTqqQlaZBZy064P5FVY5+fEoG/x9gw/Sxe
20AsfEWwNOBJaqt6gfOXMBdcO0gP0uhZwrFTkSho0vzru1frd863da+l6hr2kVRs
eo34WotPx+JT+V/yyT9t6Ice7YheQfqoi+ZYb/uuLQtIF6OlDSQJxsVN7hwpOhQL
UQIDJ60G1k4Pxw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:11:10 2025 by rpki-client