Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
File: ouRVapV54gL1TBWTRUWLySRfkOQ.mft (raw, json)
Hash identifier: cACL1v2lV2hWykQ3uyMqsCanzqqQ0jN85JPn3zAVJXc=
Subject key identifier: 4B:4A:A5:30:A0:51:96:E5:18:8D:F0:9B:A3:FF:5F:59:11:E0:14:E4
Authority key identifier: A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
Certificate issuer: /CN=a2e4556a9579e202f54c159345458bc9245f90e4
Certificate serial: 019681348B18E80C2E1054EA5A5EFD2EE1F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
Manifest number: 05D7
Signing time: Tue 29 Apr 2025 11:00:26 +0000
Manifest this update: Tue 29 Apr 2025 11:00:26 +0000
Manifest next update: Wed 30 Apr 2025 11:00:26 +0000
Files and hashes: 1: nEVE0BDUqp5M1Cg6_Jesy_01Zpo.roa (hash: GMRhVws0KpXuhusMgH6+dybXDc5BG6EQU71bIEXKHws=)
2: ouRVapV54gL1TBWTRUWLySRfkOQ.crl (hash: fi6DmL+/X2h71AnxrtzlOoQgBrCsPXy5AqWaVIhBHyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:8b:18:e8:0c:2e:10:54:ea:5a:5e:fd:2e:e1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e4556a9579e202f54c159345458bc9245f90e4
Validity
Not Before: Apr 29 11:00:26 2025 GMT
Not After : Apr 30 11:00:26 2025 GMT
Subject: CN=4b4aa530a05196e5188df09ba3ff5f5911e014e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:84:d1:38:5a:b8:fc:c6:1a:43:d9:da:4a:bb:
c0:68:25:89:ad:3d:1a:2f:b6:e8:2a:3f:16:97:1f:
d4:05:53:46:a7:9e:0a:ff:b6:63:70:4c:80:2c:b5:
9b:c7:ca:d9:64:35:d5:76:ab:83:fa:7f:f1:f7:88:
88:d1:86:2c:f3:67:dd:7a:5f:7a:03:ab:e2:0c:a4:
c7:5d:33:e6:ce:8c:2d:86:b6:d5:d5:af:bf:88:b2:
ac:69:bb:cc:bb:b8:6a:fa:d0:c8:a1:f5:a9:fa:09:
d7:4a:06:96:19:14:a2:c8:cc:d4:31:d4:29:1f:21:
c2:61:88:c5:e9:23:ad:20:48:3c:91:44:ad:ed:be:
b5:ca:9f:9e:51:21:8c:67:c1:31:03:02:4d:1d:ea:
68:2e:71:4e:6c:41:19:b1:ca:35:01:5d:5a:21:70:
7f:9d:b8:30:5b:5e:06:1f:72:e6:eb:8d:f1:8d:28:
10:88:41:66:86:2b:f4:bd:79:ec:0d:38:c8:c9:f1:
25:43:5d:1e:49:34:a8:ca:4d:8b:31:1c:00:53:30:
b6:42:47:a0:08:85:96:b3:31:b9:83:0e:ba:a5:3d:
ee:a9:33:66:df:de:3a:4f:63:69:86:ac:31:6d:be:
b9:a5:1f:d6:a1:18:af:96:d2:bf:7c:0e:66:b0:01:
3d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4A:A5:30:A0:51:96:E5:18:8D:F0:9B:A3:FF:5F:59:11:E0:14:E4
X509v3 Authority Key Identifier:
keyid:A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b6:f8:6e:27:54:e5:7b:ae:d3:dd:50:6f:a7:38:e1:29:ee:
13:e2:af:f1:4e:4b:12:54:41:55:c2:90:2a:2b:0e:45:60:30:
46:cc:6d:83:00:86:91:73:44:5c:ec:22:2f:eb:9d:c1:7c:f6:
da:22:ed:61:68:bf:99:09:1e:20:b9:97:6e:96:ad:7e:a0:a3:
29:31:f7:33:53:2b:52:85:c9:43:5f:99:96:87:f4:73:d0:d3:
b6:3c:1d:0d:6a:e9:92:07:ef:f4:1e:75:64:52:8f:2a:2c:e7:
5b:aa:1e:ab:ea:52:66:12:c9:d4:c4:94:88:19:ec:1a:0d:5b:
f3:2a:c4:09:36:c5:39:92:35:fe:e5:f7:1c:89:4f:19:7f:9d:
9d:13:ea:8b:f5:2e:e0:2a:1b:0a:e0:05:7b:06:17:6d:58:5e:
b9:ca:bd:07:23:a6:da:e8:d2:d0:1a:ec:17:72:1f:e9:da:04:
8c:ba:2f:a7:c8:9b:af:f8:70:e6:dc:d9:27:66:1f:58:37:61:
7a:c9:de:8a:7d:b7:50:9f:02:6c:8c:c6:64:f4:91:96:77:c9:
8b:9a:4e:6c:52:ee:32:1c:47:a3:1b:94:5f:1f:0f:3a:ee:94:
22:93:50:04:43:14:b6:73:13:d5:99:00:78:9b:72:d4:77:8d:
1a:f0:7b:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBNIsY6AwuEFTqWl79LuHyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTQ1NTZhOTU3OWUyMDJmNTRjMTU5MzQ1NDU4YmM5MjQ1
ZjkwZTQwHhcNMjUwNDI5MTEwMDI2WhcNMjUwNDMwMTEwMDI2WjAzMTEwLwYDVQQD
Eyg0YjRhYTUzMGEwNTE5NmU1MTg4ZGYwOWJhM2ZmNWY1OTExZTAxNGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYTROFq4/MYaQ9naSrvAaCWJrT0a
L7boKj8Wlx/UBVNGp54K/7ZjcEyALLWbx8rZZDXVdquD+n/x94iI0YYs82fdel96
A6viDKTHXTPmzowthrbV1a+/iLKsabvMu7hq+tDIofWp+gnXSgaWGRSiyMzUMdQp
HyHCYYjF6SOtIEg8kUSt7b61yp+eUSGMZ8ExAwJNHepoLnFObEEZsco1AV1aIXB/
nbgwW14GH3Lm643xjSgQiEFmhiv0vXnsDTjIyfElQ10eSTSoyk2LMRwAUzC2Qkeg
CIWWszG5gw66pT3uqTNm3946T2Nphqwxbb65pR/WoRivltK/fA5msAE9/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtKpTCgUZblGI3wm6P/X1kR4BTkMB8GA1UdIwQY
MBaAFKLkVWqVeeIC9UwVk0VFi8kkX5DkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84NmU5Y2MtMzZhMC00NmY1LWJhMWUt
YzU1OWUwOTcxZWUwLzEvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy84NmU5Y2MtMzZhMC00NmY1LWJhMWUtYzU1OWUwOTcxZWUw
LzEvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarb4bidU
5Xuu091Qb6c44SnuE+Kv8U5LElRBVcKQKisORWAwRsxtgwCGkXNEXOwiL+udwXz2
2iLtYWi/mQkeILmXbpatfqCjKTH3M1MrUoXJQ1+Zlof0c9DTtjwdDWrpkgfv9B51
ZFKPKiznW6oeq+pSZhLJ1MSUiBnsGg1b8yrECTbFOZI1/uX3HIlPGX+dnRPqi/Uu
4CobCuAFewYXbVheucq9ByOm2ujS0BrsF3If6doEjLovp8ibr/hw5tzZJ2YfWDdh
esnein23UJ8CbIzGZPSRlnfJi5pObFLuMhxHoxuUXx8POu6UIpNQBEMUtnMT1ZkA
eJty1HeNGvB7Vg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:32:39 2025 by rpki-client