Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
File: OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft (raw, json)
Hash identifier: Qu1mQrZG3LoKYsSlh33WjkHNBEaMKSCMMCeFw64zkFE=
Subject key identifier: 95:8D:7D:2F:75:F8:8E:5A:7B:31:0C:13:78:30:44:CA:B4:46:26:5A
Authority key identifier: 38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
Certificate issuer: /CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Certificate serial: 0197B632AC30C2634FE5798B7EB8DB182FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
Manifest number: 1251
Signing time: Sat 28 Jun 2025 11:01:03 +0000
Manifest this update: Sat 28 Jun 2025 11:01:03 +0000
Manifest next update: Sun 29 Jun 2025 11:01:03 +0000
Files and hashes: 1: OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl (hash: QWnbcSOSbmGJ5ka/5kloHFlI4RY+aJebeOrF51YuINE=)
2: PQhWLSkGUa_VMVGVuYBQSUZ_P_A.roa (hash: 3kRwsyvbLLbFqSNU/EJCsmBYkp3oO56TR7kGsRhAuv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:ac:30:c2:63:4f:e5:79:8b:7e:b8:db:18:2f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Validity
Not Before: Jun 28 11:01:03 2025 GMT
Not After : Jun 29 11:01:03 2025 GMT
Subject: CN=958d7d2f75f88e5a7b310c13783044cab446265a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7f:5b:a9:74:42:51:51:de:38:77:21:e3:bf:
22:81:ec:74:5a:2f:98:b0:e7:af:b3:97:fa:51:93:
ca:34:ea:c7:73:30:4b:a5:c4:cd:f2:d9:5e:31:b1:
09:5a:d8:a1:4a:c0:6b:e9:6a:8b:77:ed:63:d7:4b:
5c:79:54:a4:56:7d:ad:a1:5c:cb:a5:a9:35:8c:ec:
97:6d:45:57:43:7c:5e:0a:36:9a:7a:63:fb:e7:3c:
61:36:b2:e1:67:1f:c3:ed:cb:85:af:0e:a2:f9:2c:
97:46:b7:44:d9:26:48:26:67:9e:25:e1:94:ae:82:
f9:25:17:a4:8e:5d:d4:14:e6:41:e5:01:95:96:48:
80:85:e2:ba:76:98:7d:04:4e:68:bd:a3:91:5f:91:
ad:21:d3:de:cc:f0:66:59:cf:3f:71:b0:28:a4:b0:
3b:3b:f2:4d:c8:16:5a:41:61:16:e2:63:3e:88:f3:
c1:a2:42:c0:59:76:d3:52:87:b5:ec:78:45:a6:d5:
b3:c1:86:66:ca:98:5a:6c:74:94:0e:e5:dc:2d:d7:
59:b9:8d:8a:28:61:0e:b8:d4:c6:52:a9:ed:44:0f:
e3:43:1b:55:3f:ef:76:62:f9:04:47:a3:cc:f1:49:
72:67:61:82:60:7e:e5:35:1c:76:29:da:1c:7a:0f:
ae:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8D:7D:2F:75:F8:8E:5A:7B:31:0C:13:78:30:44:CA:B4:46:26:5A
X509v3 Authority Key Identifier:
keyid:38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ba:7b:01:4d:ec:c3:8f:71:ed:32:8c:ee:38:71:eb:b2:2a:
6e:25:eb:ce:f1:13:38:8e:86:8a:12:6d:fd:55:79:f9:e2:7e:
ba:28:44:90:79:dd:d5:5d:98:e4:bb:01:9e:8d:a1:60:76:29:
e2:77:31:20:42:4c:58:f1:d7:be:91:da:9a:61:08:6f:f0:e7:
78:81:c0:3d:d6:d0:ad:64:4c:29:64:0d:74:6f:f6:c0:83:28:
04:3f:21:9a:d1:08:fe:73:83:d6:19:07:ff:68:97:2b:1c:a3:
15:ee:9b:b4:46:13:e5:22:b4:04:36:5e:c8:60:c4:ee:06:3c:
29:a6:08:c6:8f:d3:00:66:ca:fd:1e:b5:8f:41:32:f9:5a:70:
bd:cd:28:7a:d3:8d:b1:57:f7:c4:81:6a:4e:b3:74:4a:00:38:
1c:b9:05:b7:b1:62:0b:c7:63:26:5a:d8:0a:d9:4d:f2:d3:8e:
79:86:69:5b:c5:af:2b:38:51:6f:1c:3e:a3:b7:85:cc:ec:04:
24:8a:a8:23:e8:42:1f:de:7e:1c:d1:85:9f:ba:24:ea:82:9a:
c6:ca:ec:67:c8:ba:b5:5d:37:2a:d1:9a:b0:b4:c6:16:1e:cc:
67:a2:de:66:31:32:dc:2b:27:fb:1d:c5:72:4a:65:aa:de:ff:
a9:34:27:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MqwwwmNP5XmLfrjbGC/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NTNhZjUwMTQ0OTliMmZiNWNkMmMxZTY4YTI0ZmY4MjU2
ZDBkMGQwHhcNMjUwNjI4MTEwMTAzWhcNMjUwNjI5MTEwMTAzWjAzMTEwLwYDVQQD
Eyg5NThkN2QyZjc1Zjg4ZTVhN2IzMTBjMTM3ODMwNDRjYWI0NDYyNjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm39bqXRCUVHeOHch478igex0Wi+Y
sOevs5f6UZPKNOrHczBLpcTN8tleMbEJWtihSsBr6WqLd+1j10tceVSkVn2toVzL
pak1jOyXbUVXQ3xeCjaaemP75zxhNrLhZx/D7cuFrw6i+SyXRrdE2SZIJmeeJeGU
roL5JRekjl3UFOZB5QGVlkiAheK6dph9BE5ovaORX5GtIdPezPBmWc8/cbAopLA7
O/JNyBZaQWEW4mM+iPPBokLAWXbTUoe17HhFptWzwYZmyphabHSUDuXcLddZuY2K
KGEOuNTGUqntRA/jQxtVP+92YvkER6PM8UlyZ2GCYH7lNRx2Kdoceg+uLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWNfS91+I5aezEME3gwRMq0RiZaMB8GA1UdIwQY
MBaAFDhTr1AUSZsvtc0sHmiiT/glbQ0NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0ZPdlVCUkpteS0xelN3ZWFLSlAtQ1Z0RFEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zMGNjNDEtOGFhYi00NDYzLTk5Zjgt
ZGNiNTZhY2I3NzdmLzEvT0ZPdlVCUkpteS0xelN3ZWFLSlAtQ1Z0RFEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zMGNjNDEtOGFhYi00NDYzLTk5ZjgtZGNiNTZhY2I3Nzdm
LzEvT0ZPdlVCUkpteS0xelN3ZWFLSlAtQ1Z0RFEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbp7AU3s
w49x7TKM7jhx67IqbiXrzvETOI6GihJt/VV5+eJ+uihEkHnd1V2Y5LsBno2hYHYp
4ncxIEJMWPHXvpHammEIb/DneIHAPdbQrWRMKWQNdG/2wIMoBD8hmtEI/nOD1hkH
/2iXKxyjFe6btEYT5SK0BDZeyGDE7gY8KaYIxo/TAGbK/R61j0Ey+Vpwvc0oetON
sVf3xIFqTrN0SgA4HLkFt7FiC8djJlrYCtlN8tOOeYZpW8WvKzhRbxw+o7eFzOwE
JIqoI+hCH95+HNGFn7ok6oKaxsrsZ8i6tV03KtGasLTGFh7MZ6LeZjEy3Csn+x3F
ckplqt7/qTQnCQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:14 2025 by rpki-client