Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier: j58VVVkxD8Bi9l5heQYWUMeoRQRtq0v5xbDXcia+1fc=
Subject key identifier: 55:4A:88:B0:04:EE:E8:05:56:46:44:F6:46:CC:B0:2F:8B:EC:3A:A6
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 0197B7B35DC5F414B8A2660825066B4F0CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 18:01:14 +0000
Manifest this update: Sat 28 Jun 2025 18:01:14 +0000
Manifest next update: Sun 29 Jun 2025 18:01:14 +0000
Files and hashes: 1: ZI8Cc8TbOXHSTT6aTy4qes85u18.roa (hash: Gcf7oNxz6hoE1nbwGxOkKAeIU8snb4fxphzbF+WsHH8=)
2: hQJK6zQLhYj5qTjnWHPVq5_Ggwc.roa (hash: qWKatLGe/VjD4eV5U12XcGzsbBr23W6H5teeHc7VO7g=)
3: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: wE94dzt5P3bzZScSaFz+3BB9bVA5dQ3+//1iq2WArZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:5d:c5:f4:14:b8:a2:66:08:25:06:6b:4f:0c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Jun 28 18:01:14 2025 GMT
Not After : Jun 29 18:01:14 2025 GMT
Subject: CN=554a88b004eee805564644f646ccb02f8bec3aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:b4:08:26:f6:7c:0e:57:74:c4:d6:80:93:
42:57:95:da:eb:c1:0d:c8:29:8b:0d:b5:22:9a:5b:
31:f9:07:c1:af:2d:37:30:96:0b:28:7d:58:93:bf:
6b:d9:56:5b:5a:68:07:1b:ad:48:72:e0:1a:ff:35:
b3:42:bb:f3:4b:21:91:7a:9a:4b:11:68:30:18:65:
68:29:20:f2:53:f1:5f:89:20:ce:81:ab:fd:63:ba:
be:71:42:a2:6f:8f:22:a2:26:20:6b:fc:41:b1:06:
a2:1b:c8:4c:03:4a:d0:8b:48:0c:df:5c:27:2e:1d:
49:5f:69:34:cf:6d:f2:b9:39:4f:bf:77:43:6a:6b:
96:68:9b:b6:dc:c1:e0:0d:8e:41:a2:d1:a5:2b:5b:
b1:03:8e:ea:04:87:c4:59:7d:1b:0a:a7:32:ce:5b:
e9:2b:98:87:05:20:17:e8:1c:63:af:67:96:34:2c:
0a:b0:64:20:1d:de:a6:40:58:05:ab:d2:a5:11:3c:
24:54:ba:97:bd:f9:bc:2e:bb:fe:73:e4:3c:0f:6b:
69:23:48:17:eb:1b:ae:45:b5:2d:45:75:35:39:14:
f6:37:10:aa:48:38:67:e0:28:68:9e:83:e1:7b:9f:
fd:80:f0:94:8d:18:c6:6a:60:83:dd:ad:4c:75:2b:
cb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4A:88:B0:04:EE:E8:05:56:46:44:F6:46:CC:B0:2F:8B:EC:3A:A6
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:34:92:91:db:e7:09:7f:b4:6b:a4:fe:f9:b8:da:e4:3b:ab:
d9:8d:34:9b:3f:f1:73:27:16:71:77:33:0f:ee:e0:ce:54:2b:
8b:4e:4e:20:75:14:ca:c7:68:90:27:48:c2:d6:e9:59:0e:2d:
2d:6b:90:52:0a:a0:b8:4c:55:63:23:f6:f6:a3:05:1b:05:41:
7c:8c:99:23:33:fc:92:96:1b:a7:7e:4f:92:a9:98:5e:ab:82:
9f:1b:28:b7:a3:92:74:bd:9b:c5:fa:29:d9:85:ea:2d:18:6a:
fc:da:02:81:61:56:5c:25:4a:22:65:94:4d:e6:a7:e3:01:d5:
a3:fb:20:8d:62:35:ed:3d:5e:d5:d7:2d:61:f8:2e:5b:6e:d0:
e7:26:45:1d:20:9f:6e:4d:06:f2:2a:25:79:cb:13:7a:3e:c9:
45:2f:46:a7:2d:5d:9d:69:ce:ea:fc:37:55:90:40:55:ce:c7:
71:66:ac:12:49:fe:bc:e6:b9:b1:87:58:0e:5b:33:99:6b:87:
6a:d0:bc:86:ab:41:94:d2:f6:76:ef:38:ed:79:dd:79:50:ce:
26:af:b9:9b:43:45:19:7a:c3:2e:f7:15:06:4d:b9:26:ba:d7:
ea:2c:c6:58:bd:84:64:07:9a:59:b2:8b:80:42:5b:21:10:25:
3b:a8:46:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s13F9BS4omYIJQZrTwz8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZjc4ODI4NjFjMjllZDU5OWJlNGE5Mzc0ODBjNGQxM2Uy
NWJmYzIwHhcNMjUwNjI4MTgwMTE0WhcNMjUwNjI5MTgwMTE0WjAzMTEwLwYDVQQD
Eyg1NTRhODhiMDA0ZWVlODA1NTY0NjQ0ZjY0NmNjYjAyZjhiZWMzYWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxC0CCb2fA5XdMTWgJNCV5Xa68EN
yCmLDbUimlsx+QfBry03MJYLKH1Yk79r2VZbWmgHG61IcuAa/zWzQrvzSyGReppL
EWgwGGVoKSDyU/FfiSDOgav9Y7q+cUKib48ioiYga/xBsQaiG8hMA0rQi0gM31wn
Lh1JX2k0z23yuTlPv3dDamuWaJu23MHgDY5BotGlK1uxA47qBIfEWX0bCqcyzlvp
K5iHBSAX6Bxjr2eWNCwKsGQgHd6mQFgFq9KlETwkVLqXvfm8Lrv+c+Q8D2tpI0gX
6xuuRbUtRXU1ORT2NxCqSDhn4ChonoPhe5/9gPCUjRjGamCD3a1MdSvLtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVKiLAE7ugFVkZE9kbMsC+L7DqmMB8GA1UdIwQY
MBaAFKH3iChhwp7Vmb5Kk3SAxNE+Jb/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAt
YzM3YTU5ODJmNDY2LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAtYzM3YTU5ODJmNDY2
LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTSSkdvn
CX+0a6T++bja5Dur2Y00mz/xcycWcXczD+7gzlQri05OIHUUysdokCdIwtbpWQ4t
LWuQUgqguExVYyP29qMFGwVBfIyZIzP8kpYbp35PkqmYXquCnxsot6OSdL2bxfop
2YXqLRhq/NoCgWFWXCVKImWUTean4wHVo/sgjWI17T1e1dctYfguW27Q5yZFHSCf
bk0G8iolecsTej7JRS9Gpy1dnWnO6vw3VZBAVc7HcWasEkn+vOa5sYdYDlszmWuH
atC8hqtBlNL2du847XndeVDOJq+5m0NFGXrDLvcVBk25JrrX6izGWL2EZAeaWbKL
gEJbIRAlO6hG2w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:28 2025 by rpki-client