Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier: EBSRRA/dJRExlpniGKNclaQUyTIja58/H6ei6VoIm0w=
Subject key identifier: 5E:0F:E8:C2:C0:BE:7F:71:9A:4B:43:97:EC:09:DA:FE:8A:46:5F:20
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 01964A0FF06BC848469E8DFA759C476F63FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number: 1508
Signing time: Fri 18 Apr 2025 18:01:20 +0000
Manifest this update: Fri 18 Apr 2025 18:01:20 +0000
Manifest next update: Sat 19 Apr 2025 18:01:20 +0000
Files and hashes: 1: VuINTwukw5gk-GpLk8S7BysJ2QQ.roa (hash: /kBRgqE3JbZP3MZS0KUDmcjo+++iqmd1/lk+a59O9c4=)
2: Vz4KDvni-pIG9pERT0AYceBbHa0.roa (hash: pYtbdwqDoFmUa9j2KOPzRaeu3zPU5WrvlE2/yiAXzDw=)
3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: UmRb1m1LSqZEbex9TqcIcc0Kl7oXQW9A0iEqLpHfd90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:f0:6b:c8:48:46:9e:8d:fa:75:9c:47:6f:63:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Apr 18 18:01:20 2025 GMT
Not After : Apr 19 18:01:20 2025 GMT
Subject: CN=5e0fe8c2c0be7f719a4b4397ec09dafe8a465f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:1f:fa:ed:3f:86:83:b3:ec:8e:11:e1:00:
74:36:af:0c:60:62:54:02:f0:f2:6c:a2:fa:dd:a6:
fe:86:2b:e8:4d:91:b8:38:85:11:ff:c0:7a:76:77:
d8:bb:ed:17:c0:d4:32:82:42:f1:ab:f9:ed:36:1e:
56:d9:45:45:f5:ea:a3:4e:96:24:81:4e:aa:0c:cc:
c7:7a:c6:25:a4:00:39:ab:4c:74:2a:73:f4:d4:65:
9f:9d:77:13:6a:1b:09:ff:30:19:4d:11:40:08:04:
3a:44:76:94:4f:51:29:f7:79:e9:68:10:55:1a:1d:
8d:04:3b:45:3e:cc:06:91:bf:06:00:77:e4:75:73:
41:d1:76:7e:b1:99:e2:23:66:a4:96:de:5c:27:e3:
f0:b4:c1:5b:5a:f9:7c:cb:94:98:42:a4:ab:59:9a:
64:9a:9a:d8:12:22:d3:1d:7d:41:f4:56:4b:35:1d:
46:08:4b:80:e4:b6:f4:12:96:17:cc:15:75:c6:e7:
f8:ab:ba:48:39:90:f3:21:44:94:f1:b1:98:f9:54:
2c:30:f1:80:e0:65:03:2f:e2:8f:ae:0c:52:98:85:
60:bf:87:26:4a:2b:6d:81:2b:12:a5:e4:52:f7:2e:
76:54:99:e6:c8:17:5b:28:72:4b:70:89:59:e3:af:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0F:E8:C2:C0:BE:7F:71:9A:4B:43:97:EC:09:DA:FE:8A:46:5F:20
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a2:d3:d6:35:1f:61:30:c9:db:51:ee:99:26:f7:be:1f:95:
fd:df:6f:63:dc:c1:57:74:ef:59:ae:eb:a8:b5:8c:c6:d9:39:
22:02:a3:81:48:d7:17:49:ef:49:59:62:ab:af:3f:40:37:fb:
c7:7b:58:31:64:40:95:89:32:e4:c8:16:70:e6:90:c3:ef:cb:
08:ab:e5:09:21:c4:53:04:15:ef:37:92:a4:45:a2:22:44:88:
30:f3:0f:9d:f0:29:68:7a:c8:4c:b3:94:96:17:78:7d:e3:e9:
ad:2f:13:3e:77:4f:33:8f:e5:4a:b6:4d:5e:64:0c:4b:a7:35:
6b:66:b3:cf:47:b2:a7:dd:fd:bf:01:4b:de:99:59:d6:73:f5:
47:1f:03:47:53:59:84:38:b3:8a:96:cd:53:4a:d0:b5:0e:6c:
b0:ee:e1:cd:20:36:59:c3:84:15:d7:77:b4:84:f7:72:28:6b:
2a:59:f3:14:d4:f8:ed:4a:cb:b8:74:d1:21:f9:a5:4d:c8:9a:
20:53:c8:23:a5:d7:44:14:ca:eb:f3:4e:b8:94:39:51:79:fa:
ad:21:79:ab:7d:15:0a:fa:7b:b6:fc:14:04:8f:8a:1f:95:75:
d2:32:90:80:03:8b:9e:23:c3:e3:62:e4:72:b0:26:49:d2:8e:
8b:8e:31:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKD/BryEhGno36dZxHb2P9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzOWI0OTQzZTdkNmI0YjBlMWRlODVjOWJjMzhiODU3NTU0
ZGQ0N2QwHhcNMjUwNDE4MTgwMTIwWhcNMjUwNDE5MTgwMTIwWjAzMTEwLwYDVQQD
Eyg1ZTBmZThjMmMwYmU3ZjcxOWE0YjQzOTdlYzA5ZGFmZThhNDY1ZjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk4f+u0/hoOz7I4R4QB0Nq8MYGJU
AvDybKL63ab+hivoTZG4OIUR/8B6dnfYu+0XwNQygkLxq/ntNh5W2UVF9eqjTpYk
gU6qDMzHesYlpAA5q0x0KnP01GWfnXcTahsJ/zAZTRFACAQ6RHaUT1Ep93npaBBV
Gh2NBDtFPswGkb8GAHfkdXNB0XZ+sZniI2aklt5cJ+PwtMFbWvl8y5SYQqSrWZpk
mprYEiLTHX1B9FZLNR1GCEuA5Lb0EpYXzBV1xuf4q7pIOZDzIUSU8bGY+VQsMPGA
4GUDL+KPrgxSmIVgv4cmSittgSsSpeRS9y52VJnmyBdbKHJLcIlZ46/0WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4P6MLAvn9xmktDl+wJ2v6KRl8gMB8GA1UdIwQY
MBaAFKObSUPn1rSw4d6Fybw4uFdVTdR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82Y2Y3MTItZGQwYi00YTkwLTk1OGUt
NjkzYmY2N2U2MWYzLzEvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82Y2Y3MTItZGQwYi00YTkwLTk1OGUtNjkzYmY2N2U2MWYz
LzEvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqLT1jUf
YTDJ21HumSb3vh+V/d9vY9zBV3TvWa7rqLWMxtk5IgKjgUjXF0nvSVliq68/QDf7
x3tYMWRAlYky5MgWcOaQw+/LCKvlCSHEUwQV7zeSpEWiIkSIMPMPnfApaHrITLOU
lhd4fePprS8TPndPM4/lSrZNXmQMS6c1a2azz0eyp939vwFL3plZ1nP1Rx8DR1NZ
hDizipbNU0rQtQ5ssO7hzSA2WcOEFdd3tIT3cihrKlnzFNT47UrLuHTRIfmlTcia
IFPII6XXRBTK6/NOuJQ5UXn6rSF5q30VCvp7tvwUBI+KH5V10jKQgAOLniPD42Lk
crAmSdKOi44xOg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:08:46 2025 by rpki-client