Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
File: 5ozobUCegkN2Vg_jsaFo8roAguM.mft (raw, json)
Hash identifier: c6QOIjwIJOIvOAh33IPVbjdC6h/84pMD1goDHiN7jAY=
Subject key identifier: 3A:7C:46:27:BE:A7:21:2E:FF:C0:71:ED:9B:2A:63:19:FD:D6:70:95
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Certificate issuer: /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial: 01964B591554EB347BE25F64E5BB03E0FE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
Manifest number: 14F7
Signing time: Sat 19 Apr 2025 00:00:51 +0000
Manifest this update: Sat 19 Apr 2025 00:00:51 +0000
Manifest next update: Sun 20 Apr 2025 00:00:51 +0000
Files and hashes: 1: 5ozobUCegkN2Vg_jsaFo8roAguM.crl (hash: RaCoOBv9p6jUNLG7toZgXB+DDR/JWnw5dLFqYdzKmhM=)
2: LVNoSuA7vvTmvNpxT00E4lAvcp4.roa (hash: pPgdCp65TG7QIX5Sq2MoRLP/ea4UDwFHNBTpNrAcJN4=)
3: v3gPT9ihCRL0ZeNIouhjQbTxtd0.roa (hash: yHjYFG2kFwOSEQcA6CVX+o9if+OsdxgeiHLnGMf3Fqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:59:15:54:eb:34:7b:e2:5f:64:e5:bb:03:e0:fe:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Validity
Not Before: Apr 19 00:00:51 2025 GMT
Not After : Apr 20 00:00:51 2025 GMT
Subject: CN=3a7c4627bea7212effc071ed9b2a6319fdd67095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:09:7d:6e:ce:29:30:e9:54:53:09:ea:1b:89:
b9:1f:b5:bf:5b:ba:4f:3b:10:8e:c6:85:4e:79:68:
12:69:85:c6:48:97:72:26:b6:ec:2f:02:1b:24:02:
8d:bc:31:05:bc:09:4e:33:cd:08:39:e2:c9:08:d7:
e1:1a:21:97:d0:05:6b:4e:9e:a9:e2:06:e5:75:94:
6a:6d:80:c7:c7:97:7d:8c:29:77:93:55:9f:36:b4:
13:1c:35:98:09:89:fc:a9:f5:e6:26:59:70:0c:8f:
72:58:a0:8e:e4:4f:e4:4e:6d:e4:cd:66:86:8e:f8:
39:7e:84:1d:6d:fe:9e:f4:51:c7:01:2e:4d:94:46:
dd:cd:9c:3d:30:da:6d:38:66:55:e8:5f:bc:8e:f4:
fe:99:82:8a:34:71:1a:ad:16:08:32:98:07:a3:c0:
1b:59:b6:e9:53:8a:ec:8f:a3:11:ea:5a:7c:17:e2:
d7:73:03:ef:d8:ec:c8:80:b3:62:97:0b:69:69:13:
8c:f2:da:97:94:ba:b1:ab:ad:f2:95:0a:94:e6:62:
e7:65:cb:cf:fd:40:44:c0:ea:e6:c9:b4:71:84:a0:
9a:68:96:fb:e7:d6:16:3f:90:67:c8:f7:88:64:b8:
29:7c:74:f0:81:27:70:67:55:54:89:ee:ab:f5:e7:
69:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7C:46:27:BE:A7:21:2E:FF:C0:71:ED:9B:2A:63:19:FD:D6:70:95
X509v3 Authority Key Identifier:
keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:39:fe:62:be:77:6d:2f:a2:26:c1:0a:69:22:e4:36:b4:db:
f3:b1:09:2f:d7:4d:2d:2f:90:4b:df:bb:72:f7:0b:6b:44:69:
bc:2f:ba:83:f4:07:b6:a3:a7:d5:b2:17:04:d0:c6:b1:72:e0:
ae:35:eb:57:b8:44:bf:9d:77:3b:17:18:ad:16:44:43:85:8b:
01:76:6e:f8:cf:b8:7d:bb:b8:a3:8b:bd:7b:11:3f:6d:67:84:
8e:7e:a5:5e:71:a2:84:d4:87:72:bb:8c:f8:06:39:62:c9:77:
3a:e9:f3:db:61:0e:26:d9:7a:c8:90:98:e1:b2:b5:81:b5:1f:
9d:e2:9e:af:13:0d:58:7d:47:ac:c6:25:77:5e:0a:d2:21:f6:
e6:fe:f0:f1:b1:3f:fc:17:94:37:fa:d1:9c:a4:67:2f:06:cf:
c3:2b:f8:47:81:56:4b:b9:9b:a6:6b:d3:f1:ea:31:38:67:1f:
4c:f3:f3:35:a4:37:19:f0:52:ad:7f:11:92:42:8f:49:99:5a:
21:2c:6b:24:5b:43:23:ac:43:31:e8:64:48:ad:62:83:7c:51:
0a:51:18:34:b5:78:5d:1b:77:47:4a:6c:3c:33:78:2c:de:47:
c6:63:f1:79:7a:6b:bb:51:bd:3a:8d:b0:8e:78:2f:23:0d:6f:
51:d4:dc:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZLWRVU6zR74l9k5bsD4P4NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2OGNlODZkNDA5ZTgyNDM3NjU2MGZlM2IxYTE2OGYyYmEw
MDgyZTMwHhcNMjUwNDE5MDAwMDUxWhcNMjUwNDIwMDAwMDUxWjAzMTEwLwYDVQQD
EygzYTdjNDYyN2JlYTcyMTJlZmZjMDcxZWQ5YjJhNjMxOWZkZDY3MDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ql9bs4pMOlUUwnqG4m5H7W/W7pP
OxCOxoVOeWgSaYXGSJdyJrbsLwIbJAKNvDEFvAlOM80IOeLJCNfhGiGX0AVrTp6p
4gbldZRqbYDHx5d9jCl3k1WfNrQTHDWYCYn8qfXmJllwDI9yWKCO5E/kTm3kzWaG
jvg5foQdbf6e9FHHAS5NlEbdzZw9MNptOGZV6F+8jvT+mYKKNHEarRYIMpgHo8Ab
WbbpU4rsj6MR6lp8F+LXcwPv2OzIgLNilwtpaROM8tqXlLqxq63ylQqU5mLnZcvP
/UBEwOrmybRxhKCaaJb759YWP5BnyPeIZLgpfHTwgSdwZ1VUie6r9edpfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDp8Rie+pyEu/8Bx7ZsqYxn91nCVMB8GA1UdIwQY
MBaAFOaM6G1AnoJDdlYP47GhaPK6AILjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW96b2JVQ2Vna04yVmdfanNhRm84cm9BZ3VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yMzVlNjEtNDJlNC00MjI1LThmYTYt
MGNhZGQ4NDc0NDhiLzEvNW96b2JVQ2Vna04yVmdfanNhRm84cm9BZ3VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8yMzVlNjEtNDJlNC00MjI1LThmYTYtMGNhZGQ4NDc0NDhi
LzEvNW96b2JVQ2Vna04yVmdfanNhRm84cm9BZ3VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjn+Yr53
bS+iJsEKaSLkNrTb87EJL9dNLS+QS9+7cvcLa0RpvC+6g/QHtqOn1bIXBNDGsXLg
rjXrV7hEv513OxcYrRZEQ4WLAXZu+M+4fbu4o4u9exE/bWeEjn6lXnGihNSHcruM
+AY5Ysl3Ounz22EOJtl6yJCY4bK1gbUfneKerxMNWH1HrMYld14K0iH25v7w8bE/
/BeUN/rRnKRnLwbPwyv4R4FWS7mbpmvT8eoxOGcfTPPzNaQ3GfBSrX8RkkKPSZla
ISxrJFtDI6xDMehkSK1ig3xRClEYNLV4XRt3R0psPDN4LN5HxmPxeXpru1G9Oo2w
jngvIw1vUdTcEw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:41:56 2025 by rpki-client