
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
File: 5ozobUCegkN2Vg_jsaFo8roAguM.mft (raw, json)
Hash identifier: Izs+LOKbHbIynk1eWvEk2Iyzus3JQLGi/ZsERi6TfpA=
Subject key identifier: BA:99:3E:EE:70:E7:AB:59:30:72:36:4C:54:3C:FE:83:7F:C4:2C:00
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Certificate issuer: /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial: 01968EF0868B2A027F918210CDF0AA023F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
Manifest number: 151A
Signing time: Fri 02 May 2025 03:00:49 +0000
Manifest this update: Fri 02 May 2025 03:00:49 +0000
Manifest next update: Sat 03 May 2025 03:00:49 +0000
Files and hashes: 1: 5ozobUCegkN2Vg_jsaFo8roAguM.crl (hash: devFl2obUnoz0B0AX+CXA01Nru40qgzoDPX0kgWftA4=)
2: LVNoSuA7vvTmvNpxT00E4lAvcp4.roa (hash: pPgdCp65TG7QIX5Sq2MoRLP/ea4UDwFHNBTpNrAcJN4=)
3: v3gPT9ihCRL0ZeNIouhjQbTxtd0.roa (hash: yHjYFG2kFwOSEQcA6CVX+o9if+OsdxgeiHLnGMf3Fqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:f0:86:8b:2a:02:7f:91:82:10:cd:f0:aa:02:3f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Validity
Not Before: May 2 03:00:49 2025 GMT
Not After : May 3 03:00:49 2025 GMT
Subject: CN=ba993eee70e7ab593072364c543cfe837fc42c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:72:e8:41:db:64:0c:c0:1b:68:70:a3:1a:15:
ae:3d:c8:17:5e:14:2e:bf:27:09:e8:cc:57:65:12:
a4:6c:37:6c:cf:9e:28:c4:b9:a3:7a:0b:04:46:be:
f7:2f:01:c9:43:93:a8:4e:6d:52:c6:94:df:b3:d1:
14:6b:73:b8:51:ab:34:fa:02:b2:5e:ff:16:bc:6a:
8f:77:76:6e:ad:c9:3e:91:ec:64:3c:fe:b9:8e:b0:
82:fb:44:d9:62:76:6e:fe:2b:4e:39:92:80:dc:67:
93:d5:e2:44:04:95:ed:c5:a8:02:57:9a:78:03:0e:
97:c4:19:58:79:e0:9e:00:6e:86:e8:f0:ad:db:66:
ba:e7:36:b9:07:7c:33:95:e5:39:2b:e7:ed:65:5b:
b0:2d:cd:00:a5:bb:bd:8a:84:2a:4f:35:cb:bb:06:
b9:86:54:b5:6e:b5:29:3a:16:3f:3c:d3:8f:32:4b:
5e:77:0c:72:df:0d:93:98:bc:64:d4:c9:3b:29:6c:
c0:93:5a:42:33:c3:66:92:63:de:09:29:f9:f5:6e:
0a:3f:bf:fd:ea:41:e3:f5:c8:b6:fc:de:31:cc:3a:
ed:1a:4a:32:84:ee:e0:e9:a9:90:30:c5:df:f5:59:
d0:28:f5:7e:5f:c7:36:70:6a:e6:e0:3e:3c:4c:f8:
78:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:99:3E:EE:70:E7:AB:59:30:72:36:4C:54:3C:FE:83:7F:C4:2C:00
X509v3 Authority Key Identifier:
keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:56:00:94:74:b3:cf:24:f1:ff:98:4d:34:b9:df:f0:8a:3c:
ab:28:d5:de:7c:50:41:f3:57:40:dd:4d:d8:3c:aa:f6:58:bf:
b8:0c:76:a2:39:8e:66:72:cc:01:f0:70:8c:d5:96:19:db:a2:
19:a4:bc:55:e1:d9:c3:b5:74:41:48:86:c0:e0:31:53:a0:5c:
8e:0a:fe:64:eb:3e:d1:38:e0:2a:9a:05:a3:18:c2:5a:1f:c3:
3f:00:68:ef:c2:91:65:54:10:88:60:56:4d:b9:83:47:f5:c8:
f9:30:40:21:b8:e7:33:be:87:8f:15:0c:99:86:ad:69:9e:eb:
16:ff:09:ef:71:23:df:2e:b7:ca:c0:28:c6:49:e9:f0:9a:02:
e4:61:b4:72:aa:93:36:dd:76:ea:b7:32:9e:c2:7b:1a:43:6d:
b9:bd:c7:d5:8e:be:8c:22:ed:49:73:31:81:68:3a:19:b0:48:
d0:55:64:20:0b:26:9e:a4:09:61:2e:6c:21:a9:d6:eb:ca:c2:
fe:70:83:64:dd:0b:98:2e:58:0b:a5:ed:b7:47:2f:79:aa:d3:
bd:21:44:5d:13:0e:8c:e3:6c:db:e7:e6:3f:df:29:45:89:de:
a5:a8:ae:dc:72:33:82:d2:b8:f6:7d:fd:f9:48:fd:a8:2c:81:
e7:06:8d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:13:27 2025 by rpki-client