Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
File: OQW37By46JWiW9SsZ7wxZmFdi2I.mft (raw, json)
Hash identifier: 9z6DKH6YeO5h2lD6eqhx0UIYsv0rEUFzh59+IZToFOw=
Subject key identifier: B8:76:93:F1:DB:B1:3E:ED:3A:E7:03:6F:73:17:31:8E:5E:E0:BF:35
Authority key identifier: 39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
Certificate issuer: /CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Certificate serial: 0197B70F340601818A61313CA40F67FCB082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
Manifest number: 0699
Signing time: Sat 28 Jun 2025 15:01:56 +0000
Manifest this update: Sat 28 Jun 2025 15:01:56 +0000
Manifest next update: Sun 29 Jun 2025 15:01:56 +0000
Files and hashes: 1: GzEFY4FMaNIn9ALjdEIyqJJseSE.roa (hash: A0TZx6QvZikNrmKwA+Q10TiJHkrQxZ4XZGZdjheoj80=)
2: OQW37By46JWiW9SsZ7wxZmFdi2I.crl (hash: 64svEnevyNDiM92+yptVtGuLhdsaJrd6H16ODxoviP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:34:06:01:81:8a:61:31:3c:a4:0f:67:fc:b0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Validity
Not Before: Jun 28 15:01:56 2025 GMT
Not After : Jun 29 15:01:56 2025 GMT
Subject: CN=b87693f1dbb13eed3ae7036f7317318e5ee0bf35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f2:77:62:bf:49:95:e3:cb:f4:e9:26:4a:1c:
2c:23:78:fd:66:de:0c:05:3e:0b:84:53:62:1d:55:
02:f7:5a:26:49:a4:3e:cc:93:84:f5:6c:91:a2:07:
63:86:63:44:e9:ee:92:76:69:32:55:12:31:03:9c:
11:5e:f1:0c:5b:5f:ed:77:d9:90:b2:de:b5:61:c9:
6e:b4:4a:87:88:47:26:09:a1:fb:85:67:c2:bf:d3:
29:01:c4:16:ed:bf:b0:4e:d7:a3:83:26:6a:82:8d:
c6:1e:d7:4a:da:34:2e:a1:4a:48:e0:57:0b:15:c7:
58:77:1f:67:48:a8:18:24:af:26:1b:f0:1d:d7:96:
0e:0a:94:5f:7f:5c:83:d3:b3:27:46:8f:e2:04:96:
82:f9:a5:94:4e:fc:8e:29:4d:4d:c2:47:a5:95:3f:
48:93:b1:ae:44:63:60:ef:fd:5e:03:02:1b:d7:05:
43:d8:49:5c:fc:12:8c:97:bb:ae:e0:a4:7b:ba:2b:
2b:8e:19:a5:a9:fe:66:21:47:e8:80:42:79:50:e9:
39:dc:43:df:8e:c3:08:bf:8d:66:07:bc:56:c1:8f:
01:3e:4c:f4:89:3f:d0:aa:85:f7:08:90:13:47:84:
6d:06:38:46:6c:fb:86:d7:21:bb:87:ff:f9:97:aa:
87:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:76:93:F1:DB:B1:3E:ED:3A:E7:03:6F:73:17:31:8E:5E:E0:BF:35
X509v3 Authority Key Identifier:
keyid:39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:47:23:ae:bd:57:78:18:56:ca:40:24:50:88:5c:9d:6a:e6:
0c:34:66:70:74:c6:bf:e1:ab:5c:57:4e:8f:a2:2e:9d:41:e0:
aa:a4:00:85:fa:00:72:dd:8c:70:d8:94:c0:50:f8:c5:87:72:
8f:5e:43:79:49:21:42:86:1d:a4:cd:20:b8:b4:74:d4:94:a7:
71:7b:09:7f:1a:b6:4d:88:73:8f:af:45:28:aa:b9:36:e1:9d:
5f:6c:63:a4:77:8f:bb:ea:51:c3:cf:ac:51:39:92:cd:2d:f3:
f9:05:37:1d:eb:b6:0e:18:54:90:d0:29:b7:de:c6:18:87:17:
ac:7b:9d:f1:65:fa:fc:5c:4e:97:67:2c:a4:a7:fc:55:d9:46:
7d:99:8e:df:c3:d3:71:9a:b7:ea:70:93:f9:48:1b:65:19:96:
c9:86:c3:23:71:32:bc:76:a0:98:af:d5:bc:99:6d:d4:f6:8c:
3a:d0:19:40:4e:80:5c:53:ef:03:7b:0c:96:4a:f3:ca:e5:25:
00:04:84:5a:35:40:fc:b4:07:b8:85:04:d1:22:63:7c:ac:3d:
65:09:d0:f2:87:e6:c6:51:21:cb:c5:9e:0b:fb:e6:7a:50:85:
2a:c7:44:03:86:7b:71:98:e8:f8:88:62:dc:70:5e:6d:c9:8d:
bc:c7:10:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DzQGAYGKYTE8pA9n/LCCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MDViN2VjMWNiOGU4OTVhMjViZDRhYzY3YmMzMTY2NjE1
ZDhiNjIwHhcNMjUwNjI4MTUwMTU2WhcNMjUwNjI5MTUwMTU2WjAzMTEwLwYDVQQD
EyhiODc2OTNmMWRiYjEzZWVkM2FlNzAzNmY3MzE3MzE4ZTVlZTBiZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/J3Yr9JlePL9OkmShwsI3j9Zt4M
BT4LhFNiHVUC91omSaQ+zJOE9WyRogdjhmNE6e6SdmkyVRIxA5wRXvEMW1/td9mQ
st61YclutEqHiEcmCaH7hWfCv9MpAcQW7b+wTtejgyZqgo3GHtdK2jQuoUpI4FcL
FcdYdx9nSKgYJK8mG/Ad15YOCpRff1yD07MnRo/iBJaC+aWUTvyOKU1NwkellT9I
k7GuRGNg7/1eAwIb1wVD2Elc/BKMl7uu4KR7uisrjhmlqf5mIUfogEJ5UOk53EPf
jsMIv41mB7xWwY8BPkz0iT/QqoX3CJATR4RtBjhGbPuG1yG7h//5l6qHFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLh2k/HbsT7tOucDb3MXMY5e4L81MB8GA1UdIwQY
MBaAFDkFt+wcuOiVolvUrGe8MWZhXYtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1FXMzdCeTQ2SldpVzlTc1o3d3habUZkaTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80ZTZiNDMtMTNkNy00ZDNiLTkyZWQt
ZDlhZWJlNDNlZjQyLzEvT1FXMzdCeTQ2SldpVzlTc1o3d3habUZkaTJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80ZTZiNDMtMTNkNy00ZDNiLTkyZWQtZDlhZWJlNDNlZjQy
LzEvT1FXMzdCeTQ2SldpVzlTc1o3d3habUZkaTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUcjrr1X
eBhWykAkUIhcnWrmDDRmcHTGv+GrXFdOj6IunUHgqqQAhfoAct2McNiUwFD4xYdy
j15DeUkhQoYdpM0guLR01JSncXsJfxq2TYhzj69FKKq5NuGdX2xjpHePu+pRw8+s
UTmSzS3z+QU3Heu2DhhUkNApt97GGIcXrHud8WX6/FxOl2cspKf8VdlGfZmO38PT
cZq36nCT+UgbZRmWyYbDI3EyvHagmK/VvJlt1PaMOtAZQE6AXFPvA3sMlkrzyuUl
AASEWjVA/LQHuIUE0SJjfKw9ZQnQ8ofmxlEhy8WeC/vmelCFKsdEA4Z7cZjo+Ihi
3HBebcmNvMcQag==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:41 2025 by rpki-client