Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
File: oKFURB35Yj7rWhlhONIb71gktEE.mft (raw, json)
Hash identifier: 7qI+9zFDF5nK20EtgahKX5STjblDjozCBuIlmOCrXYQ=
Subject key identifier: 64:A7:98:1A:3B:19:80:52:03:34:A8:4D:22:80:D4:0B:EC:BD:17:9E
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 01967DFC8836A1DE830BD3B12BA9ED9C04F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
Manifest number: 151A
Signing time: Mon 28 Apr 2025 20:00:24 +0000
Manifest this update: Mon 28 Apr 2025 20:00:24 +0000
Manifest next update: Tue 29 Apr 2025 20:00:24 +0000
Files and hashes: 1: cqMIZbZG_XjFMjyio64LoSb9JEM.roa (hash: xBYH5ZrjKUuPI62l0z0GQBA4FW4u95fkTkxgETr+i9Q=)
2: oKFURB35Yj7rWhlhONIb71gktEE.crl (hash: QwYibwep0c08CGQiqlcAHH9tBb1KyWh790eNb37JjlY=)
3: wlqxE5iuLQB304PN7hVNM4_5h14.roa (hash: xdHQ2e13Tky6CrFmxy2+w5Er25IzDfQGHtx/iyo+wSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:88:36:a1:de:83:0b:d3:b1:2b:a9:ed:9c:04:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Apr 28 20:00:24 2025 GMT
Not After : Apr 29 20:00:24 2025 GMT
Subject: CN=64a7981a3b1980520334a84d2280d40becbd179e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:08:aa:f5:d3:a5:45:50:80:c8:45:27:ee:c4:
57:68:4b:99:c8:a9:82:41:25:d6:d8:e6:13:7d:c8:
14:56:fa:e4:54:32:93:a1:42:5a:d2:f1:43:76:fa:
bf:12:7a:b2:98:c6:9c:e6:08:1e:77:d4:98:9a:4c:
72:64:69:5d:10:df:ab:22:fd:46:fb:a9:a0:ca:ad:
82:ad:9e:5d:9b:50:ea:c4:d1:1d:0f:89:84:16:a3:
0a:63:72:86:48:a7:e9:9a:5b:ae:36:99:eb:90:d2:
a9:8a:5e:50:18:e5:e6:56:54:31:62:d4:3e:ca:35:
9f:ff:07:a5:8a:15:63:1d:65:7b:f2:9d:e9:cd:68:
6a:2d:2a:5d:ba:33:d3:e3:b0:b4:30:2c:2e:fd:9a:
a5:4e:0b:c9:ff:36:5c:56:6b:a0:2a:67:af:78:0c:
9f:c7:88:8e:a4:33:50:da:b8:72:3c:2a:47:09:38:
eb:da:d7:68:55:92:83:30:de:df:2f:91:da:d2:f0:
da:3f:df:8e:7c:60:14:dc:44:db:54:9e:d4:4b:c5:
c2:c2:cf:87:bc:5d:63:bf:56:b8:42:a1:d9:e1:8a:
83:58:9d:95:d6:fe:52:da:51:9d:e3:4c:59:e0:c0:
e9:dc:e9:5b:28:ed:e6:65:d7:4f:57:40:b9:e9:09:
76:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A7:98:1A:3B:19:80:52:03:34:A8:4D:22:80:D4:0B:EC:BD:17:9E
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:cd:df:10:10:9d:e6:70:d2:6a:80:65:06:8b:0f:43:7f:44:
87:e7:85:ea:c1:1a:b3:69:58:39:56:f8:61:1c:b7:a7:3f:8a:
35:2a:b7:9f:95:49:a0:e0:eb:c0:e3:61:59:04:d0:42:50:b9:
4e:cf:eb:51:c1:e2:fd:21:2a:b9:85:ee:0a:a8:87:4c:f7:f9:
05:59:db:98:c2:29:4e:e7:6c:64:11:47:8d:68:4b:37:03:62:
7a:60:64:15:08:71:38:b2:08:76:75:cf:72:23:7b:55:cc:e2:
a5:7a:70:d8:d5:a9:da:c4:0b:29:05:2f:33:45:6b:aa:d5:09:
58:b2:ce:16:98:66:c9:56:48:30:13:db:ec:4a:51:3e:df:15:
f3:07:f0:41:f4:0a:ba:4b:e9:5f:bf:bc:4d:80:be:2c:98:93:
6e:ef:8f:b7:cc:a9:e1:ca:99:b9:37:d0:48:a1:7d:9c:8f:df:
40:f0:93:75:1a:39:55:e7:1a:c2:a4:dd:86:b7:5a:10:97:23:
a4:1b:19:0e:48:e6:ab:31:69:f4:41:52:d5:3a:70:73:4e:f8:
5a:20:e8:74:1d:24:c7:c0:e2:42:5e:71:c2:1e:fd:bc:66:29:
04:49:5f:83:6d:44:0b:c6:ff:8f:2b:2c:0c:a1:3f:5d:e4:fe:
ef:0d:21:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9/Ig2od6DC9OxK6ntnAT2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTE1NDQ0MWRmOTYyM2VlYjVhMTk2MTM4ZDIxYmVmNTgy
NGI0NDEwHhcNMjUwNDI4MjAwMDI0WhcNMjUwNDI5MjAwMDI0WjAzMTEwLwYDVQQD
Eyg2NGE3OTgxYTNiMTk4MDUyMDMzNGE4NGQyMjgwZDQwYmVjYmQxNzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Aiq9dOlRVCAyEUn7sRXaEuZyKmC
QSXW2OYTfcgUVvrkVDKToUJa0vFDdvq/EnqymMac5gged9SYmkxyZGldEN+rIv1G
+6mgyq2CrZ5dm1DqxNEdD4mEFqMKY3KGSKfpmluuNpnrkNKpil5QGOXmVlQxYtQ+
yjWf/welihVjHWV78p3pzWhqLSpdujPT47C0MCwu/ZqlTgvJ/zZcVmugKmeveAyf
x4iOpDNQ2rhyPCpHCTjr2tdoVZKDMN7fL5Ha0vDaP9+OfGAU3ETbVJ7US8XCws+H
vF1jv1a4QqHZ4YqDWJ2V1v5S2lGd40xZ4MDp3OlbKO3mZddPV0C56Ql28wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSnmBo7GYBSAzSoTSKA1AvsvReeMB8GA1UdIwQY
MBaAFKChVEQd+WI+61oZYTjSG+9YJLRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmIt
OWQ5NDM2NzFhOGEzLzEvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmItOWQ5NDM2NzFhOGEz
LzEvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVM3fEBCd
5nDSaoBlBosPQ39Eh+eF6sEas2lYOVb4YRy3pz+KNSq3n5VJoODrwONhWQTQQlC5
Ts/rUcHi/SEquYXuCqiHTPf5BVnbmMIpTudsZBFHjWhLNwNiemBkFQhxOLIIdnXP
ciN7VczipXpw2NWp2sQLKQUvM0VrqtUJWLLOFphmyVZIMBPb7EpRPt8V8wfwQfQK
ukvpX7+8TYC+LJiTbu+Pt8yp4cqZuTfQSKF9nI/fQPCTdRo5VecawqTdhrdaEJcj
pBsZDkjmqzFp9EFS1Tpwc074WiDodB0kx8DiQl5xwh79vGYpBElfg21EC8b/jyss
DKE/XeT+7w0hkw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:50:00 2025 by rpki-client