Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
File: oum7stw2HxSLUadQgNjgtPeKH4I.mft (raw, json)
Hash identifier: X8lyQYz93NDyoBPOb9qjhNeIdenxy+6rcWbE89Fqoq0=
Subject key identifier: 18:58:9B:C5:45:F7:A7:D0:B1:A2:71:5D:58:40:E3:97:C6:4E:63:91
Authority key identifier: A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
Certificate issuer: /CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Certificate serial: 0197488C9CA4CAB19ED38A5617BE2D89CA5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 04:01:04 +0000
Manifest this update: Sat 07 Jun 2025 04:01:04 +0000
Manifest next update: Sun 08 Jun 2025 04:01:04 +0000
Files and hashes: 1: f_wGHHPcfp4gWwowZYMDfcJ1Mog.roa (hash: An25AbmP3oyWt72GnalaU42kIKjPDFrI7RZhZqfvEO8=)
2: oum7stw2HxSLUadQgNjgtPeKH4I.crl (hash: PWCE5mSkvxpADgcCbJgHWBgJVJ07csf4ELiNM2ZZR70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:9c:a4:ca:b1:9e:d3:8a:56:17:be:2d:89:ca:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Validity
Not Before: Jun 7 04:01:04 2025 GMT
Not After : Jun 8 04:01:04 2025 GMT
Subject: CN=18589bc545f7a7d0b1a2715d5840e397c64e6391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:7d:38:48:4d:9e:3d:e2:7c:11:a0:36:36:
fc:dc:05:d5:97:4c:b4:da:60:b7:1b:bc:98:ab:2d:
d6:b9:60:ee:89:d0:38:41:9e:7d:91:0b:3d:0d:07:
40:8a:11:e8:e8:7b:fd:7a:be:25:02:03:44:f2:8b:
67:89:11:99:16:b1:46:38:53:43:ff:3f:26:72:2f:
df:7a:00:4b:8c:34:94:4c:ce:5e:91:fe:37:28:14:
c8:f6:c0:9d:48:26:ea:15:60:64:7c:66:4e:82:59:
f2:8e:96:10:9c:14:c4:fc:23:10:ad:e2:64:e2:3c:
6a:c7:46:c8:3b:2a:6f:cf:7a:71:58:dc:b2:60:7c:
be:31:9f:4b:83:f2:14:0b:e6:b6:ec:b4:b0:78:ab:
1d:d8:27:8b:1d:c7:db:14:03:e7:5d:45:26:55:d9:
83:b9:e4:ad:ff:3c:35:bf:e5:8b:73:22:90:9d:e7:
70:d3:65:44:27:83:55:db:39:80:b3:21:12:6b:38:
bc:64:19:af:6b:23:0a:c3:9f:a1:17:49:46:5e:64:
c6:85:32:25:48:f4:7e:12:76:88:2f:4c:80:9a:9a:
c2:99:82:ed:aa:cb:c5:91:ad:83:5e:c8:6c:0f:13:
2c:13:eb:2c:ec:cf:d9:24:f5:d6:44:6c:3d:d4:87:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:58:9B:C5:45:F7:A7:D0:B1:A2:71:5D:58:40:E3:97:C6:4E:63:91
X509v3 Authority Key Identifier:
keyid:A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ac:38:46:43:8d:28:0a:69:9f:28:22:7d:36:a1:35:b0:5f:
45:62:e0:ba:9c:63:69:1d:e6:2e:25:28:3b:5d:e9:23:53:a1:
d1:40:da:96:20:8b:ee:26:5b:c6:09:9d:3c:c6:a9:a8:df:6b:
f1:f7:4a:09:c8:42:68:d9:89:7b:86:d1:5b:65:02:14:40:fd:
c3:39:38:59:6c:ed:cb:b7:92:21:db:10:e5:79:a2:e6:27:dc:
6c:ec:d4:be:cf:00:71:29:26:00:c9:2e:ca:46:30:d4:2b:47:
db:b2:15:03:e4:50:e9:12:70:f4:9a:59:4a:05:de:3a:af:85:
b4:37:ea:f5:1c:be:dc:53:c2:3f:9b:86:f7:65:ea:7c:ae:67:
7a:7c:8c:fa:60:bb:3a:8b:ce:ca:fb:a6:24:34:c3:5a:a2:ff:
6c:ae:13:73:fa:ee:2f:06:dc:0a:44:fc:1e:e8:7c:29:2b:59:
81:62:99:97:f1:da:fa:d1:31:a4:c4:5a:10:cd:ce:2c:11:44:
c5:64:22:18:75:38:cb:5a:46:bc:ac:71:eb:5d:f1:17:f0:0f:
2b:b7:c2:eb:1c:47:ff:5e:56:97:2e:e9:61:36:0a:b0:82:c5:
54:ca:38:88:80:68:a4:4c:44:59:02:6a:1c:7f:64:0c:cc:f4:
e6:c0:bc:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjJykyrGe04pWF74ticpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTliYmIyZGMzNjFmMTQ4YjUxYTc1MDgwZDhlMGI0Zjc4
YTFmODIwHhcNMjUwNjA3MDQwMTA0WhcNMjUwNjA4MDQwMTA0WjAzMTEwLwYDVQQD
EygxODU4OWJjNTQ1ZjdhN2QwYjFhMjcxNWQ1ODQwZTM5N2M2NGU2MzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXl9OEhNnj3ifBGgNjb83AXVl0y0
2mC3G7yYqy3WuWDuidA4QZ59kQs9DQdAihHo6Hv9er4lAgNE8otniRGZFrFGOFND
/z8mci/fegBLjDSUTM5ekf43KBTI9sCdSCbqFWBkfGZOglnyjpYQnBTE/CMQreJk
4jxqx0bIOypvz3pxWNyyYHy+MZ9Lg/IUC+a27LSweKsd2CeLHcfbFAPnXUUmVdmD
ueSt/zw1v+WLcyKQnedw02VEJ4NV2zmAsyESazi8ZBmvayMKw5+hF0lGXmTGhTIl
SPR+EnaIL0yAmprCmYLtqsvFka2DXshsDxMsE+ss7M/ZJPXWRGw91IcmcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhYm8VF96fQsaJxXVhA45fGTmORMB8GA1UdIwQY
MBaAFKLpu7LcNh8Ui1GnUIDY4LT3ih+CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYTk5MjItZTkyYy00MTA1LTgzNjUt
MDQwMTI5YWViMGJmLzEvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hYTk5MjItZTkyYy00MTA1LTgzNjUtMDQwMTI5YWViMGJm
LzEvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaw4RkON
KAppnygifTahNbBfRWLgupxjaR3mLiUoO13pI1Oh0UDaliCL7iZbxgmdPMapqN9r
8fdKCchCaNmJe4bRW2UCFED9wzk4WWzty7eSIdsQ5Xmi5ifcbOzUvs8AcSkmAMku
ykYw1CtH27IVA+RQ6RJw9JpZSgXeOq+FtDfq9Ry+3FPCP5uG92XqfK5nenyM+mC7
OovOyvumJDTDWqL/bK4Tc/ruLwbcCkT8Huh8KStZgWKZl/Ha+tExpMRaEM3OLBFE
xWQiGHU4y1pGvKxx613xF/APK7fC6xxH/15Wly7pYTYKsILFVMo4iIBopExEWQJq
HH9kDMz05sC8Dg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:18:49 2025 by rpki-client