Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
File: OXh5r_LENp0GxPEZpv16WhPbhpc.mft (raw, json)
Hash identifier: hFHzDs6TPjg7coVxFS+hkFYVINMquV041Od8/mwlI6c=
Subject key identifier: 6B:68:24:9A:39:E5:3F:84:1B:EB:BA:33:7E:DC:F3:35:3B:D6:A2:50
Authority key identifier: 39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
Certificate issuer: /CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Certificate serial: 01965EDF69833318AD75E16E1273CDFD5870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
Manifest number: 1503
Signing time: Tue 22 Apr 2025 19:00:21 +0000
Manifest this update: Tue 22 Apr 2025 19:00:21 +0000
Manifest next update: Wed 23 Apr 2025 19:00:21 +0000
Files and hashes: 1: OXh5r_LENp0GxPEZpv16WhPbhpc.crl (hash: +twbyqT/28ZXw+Zii8SdDk0u7ehCd3lRWDyXyeuJCdQ=)
2: WSWkyM6MFxA1ZA-zAVUSwdgeJWI.roa (hash: 5tkFh2eMBLLpaXb8k6oCA+R1YYUjz+3ZjunAdpKVKWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:df:69:83:33:18:ad:75:e1:6e:12:73:cd:fd:58:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Validity
Not Before: Apr 22 19:00:21 2025 GMT
Not After : Apr 23 19:00:21 2025 GMT
Subject: CN=6b68249a39e53f841bebba337edcf3353bd6a250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:87:68:91:97:14:f2:83:85:9c:d5:62:27:
14:8f:43:c6:84:e7:44:aa:2b:0d:79:5b:ff:8c:61:
f0:27:7f:15:c2:18:68:4d:f6:42:62:7d:83:55:98:
1c:e8:d0:72:ab:1e:04:5e:55:65:3d:ed:75:c1:c9:
83:f9:d3:c0:f7:0b:a9:4c:96:3b:6c:4c:db:c1:85:
e5:ba:db:4a:ef:9a:c0:68:86:e1:b9:fb:e8:e3:2f:
84:c3:f5:c8:c1:1e:c3:d6:42:40:8b:76:57:4c:22:
4c:ad:a1:d3:76:f8:3c:45:a2:26:a0:77:55:cd:f3:
36:67:17:6b:3a:ee:e2:f2:34:c2:62:30:08:7b:3b:
17:99:59:51:73:b7:0d:68:b1:f3:48:84:fc:d2:2e:
3c:c9:aa:93:ff:97:50:a0:14:f4:5e:89:41:6d:d0:
78:94:80:c3:32:91:ce:b4:94:81:db:c2:79:dc:6a:
6e:73:af:4b:97:2a:6a:9e:29:f8:7a:37:c7:b6:40:
41:20:6e:fb:c5:8e:d6:b0:1e:e0:6d:dd:a6:4e:02:
a7:40:19:de:64:8a:9e:61:2d:4c:ae:7d:ba:95:de:
84:66:28:15:0a:22:b1:64:6d:3d:03:bf:5e:2f:ef:
c2:b6:3d:67:00:08:24:af:9c:c7:de:60:4c:d4:a1:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:68:24:9A:39:E5:3F:84:1B:EB:BA:33:7E:DC:F3:35:3B:D6:A2:50
X509v3 Authority Key Identifier:
keyid:39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f2:17:7a:8d:bc:70:ae:94:34:9f:d1:42:79:f5:e4:01:06:
eb:38:94:8d:7d:bf:20:50:32:ad:c9:e4:6d:0c:19:b3:e0:5f:
e9:ce:39:7d:ad:b4:50:8c:9a:39:a2:48:ed:e5:9f:da:35:bc:
07:0b:e5:7e:bf:b4:e5:85:9a:9b:4f:5c:e8:61:f5:16:06:63:
3c:62:6f:56:30:71:c8:fc:05:d1:07:50:c2:46:fa:16:39:55:
bc:68:10:56:59:e4:af:f3:f8:cd:eb:e6:06:ff:94:3a:33:64:
d2:ec:51:8d:5c:84:46:c9:2a:e8:55:ce:39:fd:f5:0c:ff:93:
b4:fb:53:16:9f:15:fc:40:cc:34:39:5f:d9:20:bd:70:35:89:
b0:01:4e:c4:61:d9:e1:cb:45:8f:60:75:23:ec:46:1b:ee:04:
4d:2a:a3:0c:1e:39:6a:16:34:51:ee:ce:ac:6a:78:b1:17:0c:
90:02:f7:05:7e:27:23:33:50:32:68:29:d0:55:50:76:4c:e8:
e5:fd:87:26:5d:f4:bf:7f:d6:d7:8a:97:06:54:53:44:47:d4:
a6:f1:03:df:4e:32:20:12:24:9c:49:f3:20:de:0a:14:4a:c5:
4a:8b:e9:48:1d:40:a6:93:a3:b4:30:95:75:3e:a3:80:31:e0:
42:17:e1:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZe32mDMxitdeFuEnPN/VhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5Nzg3OWFmZjJjNDM2OWQwNmM0ZjExOWE2ZmQ3YTVhMTNk
Yjg2OTcwHhcNMjUwNDIyMTkwMDIxWhcNMjUwNDIzMTkwMDIxWjAzMTEwLwYDVQQD
Eyg2YjY4MjQ5YTM5ZTUzZjg0MWJlYmJhMzM3ZWRjZjMzNTNiZDZhMjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUiHaJGXFPKDhZzVYicUj0PGhOdE
qisNeVv/jGHwJ38VwhhoTfZCYn2DVZgc6NByqx4EXlVlPe11wcmD+dPA9wupTJY7
bEzbwYXluttK75rAaIbhufvo4y+Ew/XIwR7D1kJAi3ZXTCJMraHTdvg8RaImoHdV
zfM2ZxdrOu7i8jTCYjAIezsXmVlRc7cNaLHzSIT80i48yaqT/5dQoBT0XolBbdB4
lIDDMpHOtJSB28J53Gpuc69Llypqnin4ejfHtkBBIG77xY7WsB7gbd2mTgKnQBne
ZIqeYS1Mrn26ld6EZigVCiKxZG09A79eL+/Ctj1nAAgkr5zH3mBM1KHr6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtoJJo55T+EG+u6M37c8zU71qJQMB8GA1UdIwQY
MBaAFDl4ea/yxDadBsTxGab9eloT24aXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hoNXJfTEVOcDBHeFBFWnB2MTZXaFBiaHBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84NmVkNmQtZTEyNi00Mjc5LWFkOTgt
NjY5MmZjNjE5NTY3LzEvT1hoNXJfTEVOcDBHeFBFWnB2MTZXaFBiaHBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy84NmVkNmQtZTEyNi00Mjc5LWFkOTgtNjY5MmZjNjE5NTY3
LzEvT1hoNXJfTEVOcDBHeFBFWnB2MTZXaFBiaHBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvIXeo28
cK6UNJ/RQnn15AEG6ziUjX2/IFAyrcnkbQwZs+Bf6c45fa20UIyaOaJI7eWf2jW8
Bwvlfr+05YWam09c6GH1FgZjPGJvVjBxyPwF0QdQwkb6FjlVvGgQVlnkr/P4zevm
Bv+UOjNk0uxRjVyERskq6FXOOf31DP+TtPtTFp8V/EDMNDlf2SC9cDWJsAFOxGHZ
4ctFj2B1I+xGG+4ETSqjDB45ahY0Ue7OrGp4sRcMkAL3BX4nIzNQMmgp0FVQdkzo
5f2HJl30v3/W14qXBlRTREfUpvED304yIBIknEnzIN4KFErFSovpSB1AppOjtDCV
dT6jgDHgQhfhug==
-----END CERTIFICATE-----
Generated at Tue Apr 22 22:04:14 2025 by rpki-client