Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier: V64pUB/dOh7MPiW/zRLGD35kDvIYi7CmBd+ER4xFMaA=
Subject key identifier: 92:69:25:F8:CF:F8:41:8E:E9:B1:8C:9C:51:F7:56:46:88:30:B5:9F
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 0197B6D74AEB1B43EFAACA190DCE6B21D99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number: 0AD8
Signing time: Sat 28 Jun 2025 14:00:52 +0000
Manifest this update: Sat 28 Jun 2025 14:00:52 +0000
Manifest next update: Sun 29 Jun 2025 14:00:52 +0000
Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: otY/qrbL+IhPSJg85RxtYHX+CQca4W7qyK0zX+z6yzQ=)
2: cAytH-HDjgmoQUIxFhiNXUzaQk0.roa (hash: WrCK/gy3OkunpeHSieq4WLNSBfAWRn5dFSNNGUA3mvQ=)
3: zlltM2nOjh81UxcytVZozmvMUKM.roa (hash: xAPvFxFilxhJOjDq/sl/DoT41X3vws8/d3NLTmKyCmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4a:eb:1b:43:ef:aa:ca:19:0d:ce:6b:21:d9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Jun 28 14:00:52 2025 GMT
Not After : Jun 29 14:00:52 2025 GMT
Subject: CN=926925f8cff8418ee9b18c9c51f756468830b59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:14:1c:87:b6:45:77:93:3b:92:39:d9:2f:31:
92:95:67:e9:f4:77:34:58:cf:fe:00:88:2f:57:74:
a7:ff:49:13:d7:07:12:a4:7e:c0:02:3b:f7:09:0e:
05:80:bb:14:98:11:e0:cb:cb:42:78:25:8b:a1:c1:
9a:fc:28:8d:32:30:bc:10:01:94:ae:1a:6b:f8:6d:
88:95:9f:34:ff:22:56:09:22:3b:1e:42:ea:5f:0b:
cb:91:c6:d7:5f:a7:7b:b3:11:59:51:05:25:02:dd:
95:9e:db:03:f3:74:c1:33:e3:41:d6:26:69:fe:dd:
d9:87:8e:a9:82:96:96:b9:49:67:4c:1c:d7:ab:e0:
3c:0c:2c:8d:3a:cb:22:56:f4:47:d1:f9:06:05:57:
3c:68:54:8f:ec:6c:c0:89:20:9c:f8:df:0a:82:64:
98:a9:a9:d4:cc:db:87:c1:c1:3a:d9:65:a4:5d:57:
4f:c6:c3:4e:77:0b:ff:ad:7c:76:e4:c1:bb:cc:63:
be:8e:d6:d5:d5:79:bb:ca:17:ee:ce:cc:71:05:68:
4f:92:64:8c:6a:88:f6:a6:f6:33:53:9e:8e:c2:eb:
dd:f6:8e:f0:c1:07:3e:2e:ee:d3:de:b1:cd:0c:d1:
de:c9:e4:17:2e:2b:20:db:ed:f8:78:5b:80:37:7c:
fb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:69:25:F8:CF:F8:41:8E:E9:B1:8C:9C:51:F7:56:46:88:30:B5:9F
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a4:33:eb:90:14:d4:42:13:23:ee:ec:47:c4:9c:71:32:11:
ac:7d:5f:21:97:99:98:21:aa:6c:8d:d6:a9:f0:4b:1d:c8:7e:
73:73:3c:89:97:9f:17:ef:38:bf:9f:31:66:54:2a:30:1f:5e:
10:f6:57:f7:c7:cc:78:21:45:dd:9e:d2:3b:05:43:3a:37:3a:
81:fa:44:f1:7a:10:31:e0:14:a4:81:40:4b:89:97:c3:5f:8e:
1e:b1:e8:dd:88:6d:2b:80:a3:da:b3:8d:91:2d:a4:07:e5:56:
28:83:c7:39:a8:f1:1e:40:b9:0a:8a:57:ef:f8:8c:82:90:ac:
f5:46:11:4f:28:11:d1:79:11:aa:8a:a5:ef:40:92:d5:18:7b:
ad:bb:02:f3:b4:02:d0:0b:5f:14:86:ff:28:bc:c2:8a:52:bd:
95:b7:70:f7:d5:30:81:97:56:eb:15:c1:fd:8c:60:fa:66:ae:
4d:d7:26:d6:0d:87:64:cd:ab:d7:a9:94:d0:bc:2a:4c:41:7a:
99:40:d3:16:d8:e4:7c:14:a7:cc:c7:d2:ea:c0:8e:73:06:2a:
d4:63:b2:45:32:db:96:6d:8d:1e:8e:b4:c6:6b:ad:c0:db:92:
5e:a9:86:48:0e:76:d5:a9:21:ab:f5:c6:1e:64:de:51:c8:e7:
bb:5c:ee:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe210rrG0PvqsoZDc5rIdmfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YTNjZWJiODExMDQ2YTA5NjZlOTU1NGQwN2U1ZDE2YjM2
ZGJmMDQwHhcNMjUwNjI4MTQwMDUyWhcNMjUwNjI5MTQwMDUyWjAzMTEwLwYDVQQD
Eyg5MjY5MjVmOGNmZjg0MThlZTliMThjOWM1MWY3NTY0Njg4MzBiNTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hQch7ZFd5M7kjnZLzGSlWfp9Hc0
WM/+AIgvV3Sn/0kT1wcSpH7AAjv3CQ4FgLsUmBHgy8tCeCWLocGa/CiNMjC8EAGU
rhpr+G2IlZ80/yJWCSI7HkLqXwvLkcbXX6d7sxFZUQUlAt2VntsD83TBM+NB1iZp
/t3Zh46pgpaWuUlnTBzXq+A8DCyNOssiVvRH0fkGBVc8aFSP7GzAiSCc+N8KgmSY
qanUzNuHwcE62WWkXVdPxsNOdwv/rXx25MG7zGO+jtbV1Xm7yhfuzsxxBWhPkmSM
aoj2pvYzU56Owuvd9o7wwQc+Lu7T3rHNDNHeyeQXLisg2+34eFuAN3z79QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJpJfjP+EGO6bGMnFH3VkaIMLWfMB8GA1UdIwQY
MBaAFDmjzruBEEaglm6VVNB+XRazbb8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUt
NmYyMWY0Yzc1MWYzLzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUtNmYyMWY0Yzc1MWYz
LzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArKQz65AU
1EITI+7sR8SccTIRrH1fIZeZmCGqbI3WqfBLHch+c3M8iZefF+84v58xZlQqMB9e
EPZX98fMeCFF3Z7SOwVDOjc6gfpE8XoQMeAUpIFAS4mXw1+OHrHo3YhtK4Cj2rON
kS2kB+VWKIPHOajxHkC5CopX7/iMgpCs9UYRTygR0XkRqoql70CS1Rh7rbsC87QC
0AtfFIb/KLzCilK9lbdw99UwgZdW6xXB/Yxg+mauTdcm1g2HZM2r16mU0LwqTEF6
mUDTFtjkfBSnzMfS6sCOcwYq1GOyRTLblm2NHo60xmutwNuSXqmGSA521akhq/XG
HmTeUcjnu1zumA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:33 2025 by rpki-client