Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier: pEJdGZflXGXa1i4/O/lDpdUdYKM3u5LwU/o0oTYgYFI=
Subject key identifier: AF:4F:2E:0A:D5:74:F7:3D:E4:6C:E3:3B:7B:2D:D5:79:A8:EB:E8:B6
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 0197B8C5EECE0F508F6CC4AC0A08886E96F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number: 0C58
Signing time: Sat 28 Jun 2025 23:01:08 +0000
Manifest this update: Sat 28 Jun 2025 23:01:08 +0000
Manifest next update: Sun 29 Jun 2025 23:01:08 +0000
Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: XI6ldoa0fxS+EmOVMln6wJo6IjxOCrgIabpjRpclo8w=)
2: QFnY02YmfQGJ4URcdKc-UJCZjYo.roa (hash: cz0+d02fJHBBngQvBEuS7ucPucnAX57nkrsYbr2NfQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:ee:ce:0f:50:8f:6c:c4:ac:0a:08:88:6e:96:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: Jun 28 23:01:08 2025 GMT
Not After : Jun 29 23:01:08 2025 GMT
Subject: CN=af4f2e0ad574f73de46ce33b7b2dd579a8ebe8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:8e:12:83:f4:92:6e:d9:6c:af:c1:c1:2d:
8d:a3:90:7c:6d:72:56:9b:a4:71:b5:a9:7d:9c:9c:
4b:87:be:6f:ab:f3:78:4b:ec:af:d1:2d:ae:e5:bd:
ae:36:d8:69:5f:0c:d4:d8:db:83:9d:a2:f7:48:b4:
b0:8b:b6:d1:a0:2b:44:ff:a4:c2:e5:bf:b5:60:9a:
33:69:13:20:cf:88:1b:92:69:a8:67:44:95:10:e8:
82:2d:a0:96:9c:8f:de:33:5d:07:03:39:ed:11:14:
d6:42:be:38:4b:0e:42:a3:c7:b0:51:84:67:af:66:
cd:64:cc:85:c9:18:98:4e:3c:d7:24:5b:b1:c1:fc:
f4:42:28:89:65:f7:3a:e6:cd:ca:ff:2b:fe:69:50:
27:43:e8:db:71:37:42:5b:e7:7b:9a:a5:cc:20:73:
76:c5:fa:28:6d:68:80:65:94:b3:c6:77:25:9d:97:
6c:68:c0:ff:b6:07:ef:d5:7b:cd:87:ef:51:7b:bd:
cd:30:59:08:32:bb:24:d0:15:a8:a9:0e:5f:bf:9a:
2d:be:e3:5f:c5:8e:54:82:a3:c0:db:ed:02:d5:21:
03:45:81:19:a8:90:e7:09:da:d8:da:7a:c0:51:6b:
77:88:0a:b1:29:bf:12:f1:98:bb:76:96:cb:7d:45:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4F:2E:0A:D5:74:F7:3D:E4:6C:E3:3B:7B:2D:D5:79:A8:EB:E8:B6
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:bd:89:e7:38:a3:6e:92:54:f5:b5:27:c4:28:62:da:3b:a6:
02:90:b0:91:76:1f:0b:7c:0a:a0:26:24:5e:ce:26:2b:01:87:
ca:ed:5a:2c:48:68:b8:c5:29:2a:a8:dc:cf:32:fc:0a:ed:b8:
f0:a5:08:4d:6c:8f:0a:c4:94:01:09:84:cd:e5:69:2e:02:10:
92:53:a8:04:be:3f:05:27:aa:66:de:24:55:dd:ca:d6:18:20:
47:4b:c4:dd:be:28:eb:5d:0d:86:04:7a:63:f3:59:5e:d7:29:
c2:68:42:c8:c7:8c:98:2f:dc:e9:42:c3:1e:7b:0e:4f:6b:f9:
55:d4:45:f3:38:a2:17:6f:af:14:a8:06:d2:e5:d8:a8:07:32:
2b:06:f4:ed:aa:7c:71:42:80:85:3c:f2:68:a1:61:c3:2f:47:
8c:35:97:8b:92:be:ce:33:fc:1b:59:46:d1:d5:2d:0f:4b:e1:
43:db:be:6c:1f:b6:44:ba:6e:f7:6f:1d:a5:7f:53:15:b8:6f:
a1:78:74:51:24:62:97:d8:34:7a:8b:e1:a5:62:63:61:31:35:
2f:3d:2e:5b:d8:e0:59:18:a0:4a:88:dc:08:ff:53:48:58:43:
9f:67:4d:a7:4b:60:ac:00:1e:4f:bb:51:ab:82:38:21:63:f3:
be:84:0d:67
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe4xe7OD1CPbMSsCgiIbpb0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhODFkYzQ2Y2NlMzljMTZjMjQzOTZmNTVlNjI2M2E2Njlj
N2U3NjkwHhcNMjUwNjI4MjMwMTA4WhcNMjUwNjI5MjMwMTA4WjAzMTEwLwYDVQQD
EyhhZjRmMmUwYWQ1NzRmNzNkZTQ2Y2UzM2I3YjJkZDU3OWE4ZWJlOGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4aOEoP0km7ZbK/BwS2No5B8bXJW
m6Rxtal9nJxLh75vq/N4S+yv0S2u5b2uNthpXwzU2NuDnaL3SLSwi7bRoCtE/6TC
5b+1YJozaRMgz4gbkmmoZ0SVEOiCLaCWnI/eM10HAzntERTWQr44Sw5Co8ewUYRn
r2bNZMyFyRiYTjzXJFuxwfz0QiiJZfc65s3K/yv+aVAnQ+jbcTdCW+d7mqXMIHN2
xfoobWiAZZSzxnclnZdsaMD/tgfv1XvNh+9Re73NMFkIMrsk0BWoqQ5fv5otvuNf
xY5UgqPA2+0C1SEDRYEZqJDnCdrY2nrAUWt3iAqxKb8S8Zi7dpbLfUXZRQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFK9PLgrVdPc95GzjO3st1Xmo6+i2MB8GA1UdIwQY
MBaAFPqB3EbM45wWwkOW9V5iY6Zpx+dpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1vSGNSc3pqbkJiQ1E1YjFYbUpqcG1uSDUyay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvOGYwMTgwLTJiNWItNDQxOS1hZDM2
LWY0YjhjYTM3YTFmYi8xLzEtb0hjUnN6am5CYkNRNWIxWG1KanBtbkg1MmsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNjLzhmMDE4MC0yYjViLTQ0MTktYWQzNi1mNGI4Y2EzN2Ex
ZmIvMS8xLW9IY1JzempuQmJDUTViMVhtSmpwbW5INTJrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyb2J
5zijbpJU9bUnxChi2jumApCwkXYfC3wKoCYkXs4mKwGHyu1aLEhouMUpKqjczzL8
Cu248KUITWyPCsSUAQmEzeVpLgIQklOoBL4/BSeqZt4kVd3K1hggR0vE3b4o610N
hgR6Y/NZXtcpwmhCyMeMmC/c6ULDHnsOT2v5VdRF8ziiF2+vFKgG0uXYqAcyKwb0
7ap8cUKAhTzyaKFhwy9HjDWXi5K+zjP8G1lG0dUtD0vhQ9u+bB+2RLpu928dpX9T
FbhvoXh0USRil9g0eovhpWJjYTE1Lz0uW9jgWRigSojcCP9TSFhDn2dNp0tgrAAe
T7tRq4I4IWPzvoQNZw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:19:24 2025 by rpki-client