Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
File: AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft (raw, json)
Hash identifier: h6et7AJg3UrdhRaB7GBYWpnG2hNy84SicQw1OVONbRw=
Subject key identifier: 7B:EF:E8:EA:80:1A:80:36:A7:0D:44:35:DF:CC:2B:A7:19:89:98:79
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 01974A43A47A0CEB7C46D44644612A5F7E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
Manifest number: 133B
Signing time: Sat 07 Jun 2025 12:00:36 +0000
Manifest this update: Sat 07 Jun 2025 12:00:36 +0000
Manifest next update: Sun 08 Jun 2025 12:00:36 +0000
Files and hashes: 1: 05RxvRBbBF0K0L7oHhPtWLGcLm4.roa (hash: lHxh82AwcxG+P9d7k0EW3lrACdc9GnkC9jNymgDYTBo=)
2: 0b2d1c0eIhfqUzknxCXBbc29sBw.roa (hash: fTb/wFQGtnvJhJADby3asBVLbaL6u2JGK1hNUrDdfSE=)
3: AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl (hash: LzMmiRKQwE2xLavHESsBP3P9LtNFjeTg5uIC6cNd1t4=)
4: HWBncZpe-QUdI-UjKtD3KOuOa6Q.roa (hash: aEH99KCRztr3umg4l/8dfloLoZWlqbFbSYPxZ1bxlgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:a4:7a:0c:eb:7c:46:d4:46:44:61:2a:5f:7e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Jun 7 12:00:36 2025 GMT
Not After : Jun 8 12:00:36 2025 GMT
Subject: CN=7befe8ea801a8036a70d4435dfcc2ba719899879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3e:2e:98:56:d8:c3:bc:f5:05:4f:9d:b3:ca:
cf:fa:97:aa:c7:24:4f:30:81:29:3c:8a:f8:c3:4d:
68:b2:e4:0f:61:ac:01:6b:df:af:f8:2d:1d:55:42:
6c:97:d2:6a:95:a2:32:e6:79:79:06:f2:ca:f0:89:
09:8f:16:8e:ad:ee:b1:03:ba:89:74:a5:61:97:43:
dd:be:2c:1a:8f:65:6f:d5:cd:d7:2a:7d:f1:3a:49:
50:bd:34:a5:6b:6c:d0:f2:e9:42:98:ad:1f:f2:25:
4d:6c:21:f8:82:c9:6d:ec:0c:03:1b:a5:dc:c0:aa:
91:f9:cc:f5:2a:38:a2:00:ab:63:06:c9:69:02:73:
44:51:56:52:c0:5b:a0:2b:fd:f7:8b:a2:12:b2:ad:
8c:f1:60:5a:1e:fd:11:fc:f1:7a:5d:48:f5:46:7c:
56:4e:ea:57:59:51:1a:1e:fd:2d:71:b2:4e:1f:ec:
1f:11:58:95:5e:e0:44:19:03:bd:cc:c1:79:5e:e5:
9b:53:12:07:30:c1:cb:26:9f:44:b8:46:89:70:64:
3a:e3:99:e7:0f:52:89:a4:f1:21:ed:50:24:42:60:
5c:5a:2d:90:dc:74:56:67:f3:a8:e2:10:9e:d1:ad:
06:52:d8:b9:54:43:f6:1d:0d:35:ad:ff:5e:bf:7d:
e2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EF:E8:EA:80:1A:80:36:A7:0D:44:35:DF:CC:2B:A7:19:89:98:79
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2b:66:52:64:b3:7d:98:91:3e:cf:9b:2b:25:9d:cf:11:10:
9b:6b:13:f5:51:55:a4:bc:ea:77:40:2b:e9:06:3d:e0:36:3b:
e9:eb:d9:4f:60:91:e2:78:65:01:41:92:a7:37:d3:f2:09:42:
fe:b8:11:74:d3:77:95:cd:55:e0:37:42:05:34:cb:75:90:79:
db:d9:a7:b2:5c:dd:9f:cf:7f:77:a5:0e:20:e7:2c:19:4e:b3:
81:aa:a0:ed:a0:29:68:87:0b:4c:08:0c:6a:a3:a3:18:dc:83:
93:11:07:1f:91:3b:fc:79:74:b5:b0:f5:e0:6f:3a:8b:38:11:
ca:58:b4:f6:c0:ae:98:9e:2b:bf:f9:7e:92:d2:5b:d4:26:5f:
df:46:7d:75:76:e8:27:c7:34:d5:0a:79:70:1e:aa:de:72:fd:
d4:7d:f9:d3:19:29:65:7b:91:ce:9f:48:9a:e9:ee:a8:18:37:
94:3a:51:4e:60:7e:18:50:d4:73:80:e8:94:27:d3:9c:31:99:
b8:60:1e:f5:38:13:58:7d:e4:a0:ae:aa:ac:e2:00:61:74:1e:
cf:72:31:51:8e:5d:92:24:2f:0b:ac:83:ca:2b:d5:ea:22:92:
63:aa:4d:8d:62:25:2a:ff:bf:7f:b2:38:a1:82:d7:37:10:81:
65:45:d4:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ6R6DOt8RtRGRGEqX35mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODNhOGM2OWEyNjMwY2Q4ZjZmYTcwYWYyYTUzZmUwMTlm
MmNjMDcwHhcNMjUwNjA3MTIwMDM2WhcNMjUwNjA4MTIwMDM2WjAzMTEwLwYDVQQD
Eyg3YmVmZThlYTgwMWE4MDM2YTcwZDQ0MzVkZmNjMmJhNzE5ODk5ODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6D4umFbYw7z1BU+ds8rP+peqxyRP
MIEpPIr4w01osuQPYawBa9+v+C0dVUJsl9JqlaIy5nl5BvLK8IkJjxaOre6xA7qJ
dKVhl0Pdviwaj2Vv1c3XKn3xOklQvTSla2zQ8ulCmK0f8iVNbCH4gslt7AwDG6Xc
wKqR+cz1KjiiAKtjBslpAnNEUVZSwFugK/33i6ISsq2M8WBaHv0R/PF6XUj1RnxW
TupXWVEaHv0tcbJOH+wfEViVXuBEGQO9zMF5XuWbUxIHMMHLJp9EuEaJcGQ645nn
D1KJpPEh7VAkQmBcWi2Q3HRWZ/Oo4hCe0a0GUti5VEP2HQ01rf9ev33idwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvv6OqAGoA2pw1ENd/MK6cZiZh5MB8GA1UdIwQY
MBaAFAKDqMaaJjDNj2+nCvKlP+AZ8swHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYzI0YWQtMjRiNC00Yzk4LWE2NTkt
NTkyYzBkY2RhZjc5LzEvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xYzI0YWQtMjRiNC00Yzk4LWE2NTktNTkyYzBkY2RhZjc5
LzEvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCtmUmSz
fZiRPs+bKyWdzxEQm2sT9VFVpLzqd0Ar6QY94DY76evZT2CR4nhlAUGSpzfT8glC
/rgRdNN3lc1V4DdCBTTLdZB529mnslzdn89/d6UOIOcsGU6zgaqg7aApaIcLTAgM
aqOjGNyDkxEHH5E7/Hl0tbD14G86izgRyli09sCumJ4rv/l+ktJb1CZf30Z9dXbo
J8c01Qp5cB6q3nL91H350xkpZXuRzp9ImunuqBg3lDpRTmB+GFDUc4DolCfTnDGZ
uGAe9TgTWH3koK6qrOIAYXQez3IxUY5dkiQvC6yDyivV6iKSY6pNjWIlKv+/f7I4
oYLXNxCBZUXUhg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:25:22 2025 by rpki-client