Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: v/7YLFBMHmz/hTFPLfSsd21gihFm1JCxvEL8OritU6s=
Subject key identifier: 53:7A:26:D2:3C:82:8B:27:2D:E1:7B:93:D2:4C:12:6F:AF:DE:5C:13
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 01958C29796B49C2274CCE1710161C8D79AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 1493
Signing time: Wed 12 Mar 2025 21:01:22 +0000
Manifest this update: Wed 12 Mar 2025 21:01:22 +0000
Manifest next update: Thu 13 Mar 2025 21:01:22 +0000
Files and hashes: 1: EPNaozHQAjVOYQy-Vt2Z_kxiWS0.roa (hash: WsqXo+AMtH2w9AGoDi4Cn3lAEUdfpStLLlDa9sz3f6I=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: EC4GToAb1UvYRnf19cI0CBls2Fm4r7w3dfDVjIB5dAs=)
3: oyDkuFI7Lh8_-ReZkAMKowiORyM.roa (hash: 3yAZCKM7m/E+YP0xth4LuRn5Dda6av4q64pWFUUvg/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:79:6b:49:c2:27:4c:ce:17:10:16:1c:8d:79:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Mar 12 21:01:22 2025 GMT
Not After : Mar 13 21:01:22 2025 GMT
Subject: CN=537a26d23c828b272de17b93d24c126fafde5c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:49:5c:cf:5f:67:07:f8:cf:4f:59:76:7f:
cb:01:0a:ec:73:5a:05:fd:f1:f1:1e:59:5c:ec:41:
fb:24:77:b0:80:4c:6b:56:cc:46:f4:57:41:2e:c1:
b4:3e:70:2f:45:05:38:53:3b:06:ae:aa:4c:e5:f3:
c4:d3:30:5f:00:b1:33:ad:8c:8b:6b:51:6f:a3:cf:
4b:04:11:72:49:e1:c9:c8:f7:b5:60:f4:f3:67:67:
07:56:f6:df:22:21:0f:18:1b:f7:94:b7:6d:a5:88:
fa:d0:89:de:4e:93:91:07:04:6e:fb:ae:04:64:06:
1f:ef:cc:13:ef:bd:55:e1:32:bc:65:81:88:eb:12:
df:ec:e8:4f:d4:b5:64:86:bc:8c:cd:8e:ab:e2:e7:
ec:40:0d:cb:6d:1e:f1:ae:c1:8c:22:b8:90:73:54:
9c:48:96:44:77:d8:42:5b:46:bb:6c:84:f9:3d:3f:
1d:b2:17:66:03:a6:ca:13:b0:fd:1d:e1:24:6c:54:
d9:a0:8e:4d:57:43:fd:7d:19:fc:34:02:f0:ac:25:
d7:b4:7b:ad:7c:86:2c:32:2f:3b:8d:51:fb:40:64:
a9:7f:2c:2c:ca:14:a7:d7:15:87:4c:cf:ad:5b:bf:
03:e4:98:e1:87:ee:be:d5:c4:6f:9c:4f:7c:85:c9:
e3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7A:26:D2:3C:82:8B:27:2D:E1:7B:93:D2:4C:12:6F:AF:DE:5C:13
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f3:21:4a:99:7a:1d:8b:59:b3:dc:82:41:26:c6:46:ee:3e:
ba:ca:63:d4:09:63:4f:c2:24:69:f0:8f:ad:b4:2f:41:47:12:
8c:96:f0:55:83:f9:c7:5f:b1:21:74:23:05:be:80:70:c4:34:
24:3d:8d:13:a6:fb:fe:33:32:59:6c:3a:3f:34:08:21:09:48:
e2:a0:f4:01:a7:8a:9b:97:5e:2d:c6:51:58:a6:9e:98:c1:71:
00:ba:61:f8:30:7e:40:57:fb:94:79:4e:66:29:2b:6c:d0:13:
4d:b7:1f:dc:9d:18:a5:d9:11:e2:55:98:3b:a4:60:b2:08:f4:
c1:58:79:2f:03:43:88:97:39:70:34:ef:8f:26:81:2d:53:a3:
82:99:ed:59:90:e8:88:7a:05:f7:71:67:f0:b3:27:34:b3:a7:
55:2c:cf:cc:67:ec:50:d1:1c:c1:63:af:49:c3:d3:d5:f4:eb:
c4:43:9d:03:d3:ae:df:ae:96:fc:4f:a0:42:5d:fe:70:5f:14:
72:44:2b:56:df:e9:c8:ee:d8:92:51:8b:36:1d:b4:7b:b3:89:
6d:5f:24:4b:1e:1f:c0:a2:35:c6:ca:7f:e0:53:ba:3c:4b:d7:
2c:ba:54:49:0d:8a:90:1c:48:1e:f1:aa:60:23:ed:42:32:92:
5a:2a:78:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMKXlrScInTM4XEBYcjXmsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZTNiYTg3ZTNhOTM0NjhjYzNiM2MzZjYwZmE2M2Q1ZTg1
M2MzMTQwHhcNMjUwMzEyMjEwMTIyWhcNMjUwMzEzMjEwMTIyWjAzMTEwLwYDVQQD
Eyg1MzdhMjZkMjNjODI4YjI3MmRlMTdiOTNkMjRjMTI2ZmFmZGU1YzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI1JXM9fZwf4z09Zdn/LAQrsc1oF
/fHxHllc7EH7JHewgExrVsxG9FdBLsG0PnAvRQU4UzsGrqpM5fPE0zBfALEzrYyL
a1Fvo89LBBFySeHJyPe1YPTzZ2cHVvbfIiEPGBv3lLdtpYj60IneTpORBwRu+64E
ZAYf78wT771V4TK8ZYGI6xLf7OhP1LVkhryMzY6r4ufsQA3LbR7xrsGMIriQc1Sc
SJZEd9hCW0a7bIT5PT8dshdmA6bKE7D9HeEkbFTZoI5NV0P9fRn8NALwrCXXtHut
fIYsMi87jVH7QGSpfywsyhSn1xWHTM+tW78D5Jjhh+6+1cRvnE98hcnjhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFN6JtI8gosnLeF7k9JMEm+v3lwTMB8GA1UdIwQY
MBaAFGjjuofjqTRozDs8P2D6Y9XoU8MUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xZWZmMTctNjVlYy00NWVhLWE3NWQt
OTZlYjA3Zjc4MjViLzEvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xZWZmMTctNjVlYy00NWVhLWE3NWQtOTZlYjA3Zjc4MjVi
LzEvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavMhSpl6
HYtZs9yCQSbGRu4+uspj1AljT8IkafCPrbQvQUcSjJbwVYP5x1+xIXQjBb6AcMQ0
JD2NE6b7/jMyWWw6PzQIIQlI4qD0AaeKm5deLcZRWKaemMFxALph+DB+QFf7lHlO
ZikrbNATTbcf3J0YpdkR4lWYO6Rgsgj0wVh5LwNDiJc5cDTvjyaBLVOjgpntWZDo
iHoF93Fn8LMnNLOnVSzPzGfsUNEcwWOvScPT1fTrxEOdA9Ou366W/E+gQl3+cF8U
ckQrVt/pyO7YklGLNh20e7OJbV8kSx4fwKI1xsp/4FO6PEvXLLpUSQ2KkBxIHvGq
YCPtQjKSWip48g==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:44 2025 by rpki-client