Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
File: oisfTQq0ODaycVOQgo2QdyzJ2No.mft (raw, json)
Hash identifier: 9QB4nWvPGMhDx0wavSEI8fvVhoMOi0zEL2RtUSDYlZs=
Subject key identifier: 69:E3:E2:5D:5F:34:F0:40:97:7A:08:10:A8:55:FB:B2:C7:9F:02:03
Authority key identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
Certificate issuer: /CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Certificate serial: 019699E1D352AF12AF04B7B98876EDE70F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
Manifest number: 03EA
Signing time: Sun 04 May 2025 06:00:35 +0000
Manifest this update: Sun 04 May 2025 06:00:35 +0000
Manifest next update: Mon 05 May 2025 06:00:35 +0000
Files and hashes: 1: k7Y-Fi38UuRFP0meJSeQGqi_KaA.roa (hash: JhnVrlDDk0WiXfNjueDV4ScJZ+zIOFgIC2tv2w+Bb00=)
2: oisfTQq0ODaycVOQgo2QdyzJ2No.crl (hash: wjcM+q4rPI804r8ghPugPmoA/uueXNEnaa+s7UM8t3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:e1:d3:52:af:12:af:04:b7:b9:88:76:ed:e7:0f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Validity
Not Before: May 4 06:00:35 2025 GMT
Not After : May 5 06:00:35 2025 GMT
Subject: CN=69e3e25d5f34f040977a0810a855fbb2c79f0203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:cc:60:e1:a6:2e:4c:e4:71:ab:4f:3e:41:
70:1a:cf:a6:2a:e5:dc:de:cd:17:3d:07:24:16:84:
4b:69:5e:69:0d:8f:c2:86:ef:17:90:9a:8f:c8:09:
14:c6:a9:71:77:a0:ea:50:8e:57:04:7d:cf:be:2d:
5c:57:5d:6e:4b:d2:bd:8f:bf:0c:22:52:9c:26:c0:
35:40:32:70:de:38:46:8f:3f:ab:d4:d1:66:52:0d:
02:1d:09:52:a9:46:19:5e:37:f2:de:f8:d6:70:b9:
97:1c:67:13:93:41:48:bf:55:03:4f:45:23:10:ce:
ef:c1:8e:b3:df:88:18:74:79:2f:ec:eb:66:e1:12:
9b:b0:62:6f:c4:f0:14:81:be:ea:81:ed:84:7c:53:
f2:a4:01:c0:f4:93:aa:75:88:10:f6:91:df:b5:5e:
cd:f4:a3:43:78:a4:cb:5e:61:f8:c4:5f:08:f6:75:
04:25:de:b9:cc:c0:b2:39:57:fb:95:6e:d8:6d:35:
09:1d:13:12:13:db:eb:bc:3b:da:91:68:d4:8d:76:
4b:7c:7f:4f:1f:0f:2b:2e:8f:d5:42:5a:b6:27:65:
ca:6e:a4:ef:23:75:24:a1:76:cb:8e:1b:b4:f9:8d:
76:28:c2:05:b2:3e:7a:b2:18:3c:8e:90:42:f2:50:
39:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E3:E2:5D:5F:34:F0:40:97:7A:08:10:A8:55:FB:B2:C7:9F:02:03
X509v3 Authority Key Identifier:
keyid:A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d4:dc:4c:ac:62:79:f3:1b:83:49:82:ac:b8:3b:c5:eb:ca:
aa:54:16:6f:0d:ac:43:bd:b2:99:5a:d3:5b:94:f1:a4:7c:79:
de:54:33:b6:dd:a4:46:0b:d5:54:ad:01:b2:b8:20:86:ce:81:
81:c4:91:93:53:ba:29:89:0f:9c:13:d6:9b:23:69:46:ee:80:
63:0d:0e:86:d1:53:b1:7f:1c:75:81:62:52:82:6c:d7:33:51:
60:8d:18:df:af:c3:7f:db:9f:3c:36:84:7a:d3:e5:7f:1d:63:
e4:6c:62:f7:19:9d:95:9b:a1:ec:f0:01:a0:e2:ab:52:d8:46:
2d:05:ba:0e:21:74:f2:90:59:6d:23:6f:51:7e:65:f3:07:59:
32:7f:43:5e:69:a2:10:16:0f:55:0c:1d:83:76:d9:9b:88:29:
ae:5c:87:64:d6:b8:d1:eb:4d:92:7b:70:2d:9d:15:d2:62:8b:
a6:ee:15:f7:3e:f5:1a:2a:ee:c1:f8:43:3c:9a:dc:41:e6:dc:
8d:0d:ca:06:79:a3:e6:27:bc:fa:fe:e0:a8:16:10:1e:06:bc:
76:14:df:65:84:22:f8:2a:36:1c:2c:26:76:82:03:fd:1a:59:
64:a2:0c:05:da:1c:01:f6:34:49:5f:53:95:7e:14:66:7c:48:
a2:fe:00:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaZ4dNSrxKvBLe5iHbt5w+eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMmIxZjRkMGFiNDM4MzZiMjcxNTM5MDgyOGQ5MDc3MmNj
OWQ4ZGEwHhcNMjUwNTA0MDYwMDM1WhcNMjUwNTA1MDYwMDM1WjAzMTEwLwYDVQQD
Eyg2OWUzZTI1ZDVmMzRmMDQwOTc3YTA4MTBhODU1ZmJiMmM3OWYwMjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW/MYOGmLkzkcatPPkFwGs+mKuXc
3s0XPQckFoRLaV5pDY/Chu8XkJqPyAkUxqlxd6DqUI5XBH3Pvi1cV11uS9K9j78M
IlKcJsA1QDJw3jhGjz+r1NFmUg0CHQlSqUYZXjfy3vjWcLmXHGcTk0FIv1UDT0Uj
EM7vwY6z34gYdHkv7Otm4RKbsGJvxPAUgb7qge2EfFPypAHA9JOqdYgQ9pHftV7N
9KNDeKTLXmH4xF8I9nUEJd65zMCyOVf7lW7YbTUJHRMSE9vrvDvakWjUjXZLfH9P
Hw8rLo/VQlq2J2XKbqTvI3UkoXbLjhu0+Y12KMIFsj56shg8jpBC8lA5IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnj4l1fNPBAl3oIEKhV+7LHnwIDMB8GA1UdIwQY
MBaAFKIrH00KtDg2snFTkIKNkHcsydjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wZWY0MDMtOWVmZi00MDQ4LTg3MmUt
NGY0MzE5NWQxOTZmLzEvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wZWY0MDMtOWVmZi00MDQ4LTg3MmUtNGY0MzE5NWQxOTZm
LzEvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNTcTKxi
efMbg0mCrLg7xevKqlQWbw2sQ72ymVrTW5TxpHx53lQztt2kRgvVVK0Bsrgghs6B
gcSRk1O6KYkPnBPWmyNpRu6AYw0OhtFTsX8cdYFiUoJs1zNRYI0Y36/Df9ufPDaE
etPlfx1j5Gxi9xmdlZuh7PABoOKrUthGLQW6DiF08pBZbSNvUX5l8wdZMn9DXmmi
EBYPVQwdg3bZm4gprlyHZNa40etNkntwLZ0V0mKLpu4V9z71GiruwfhDPJrcQebc
jQ3KBnmj5ie8+v7gqBYQHga8dhTfZYQi+Co2HCwmdoID/RpZZKIMBdocAfY0SV9T
lX4UZnxIov4AIQ==
-----END CERTIFICATE-----
Generated at Sun May 4 15:31:31 2025 by rpki-client