Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File: OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier: 4x3MJKCOEuMHmbIb9sCxEGJtYsOdxjPjbBKdqsT51xo=
Subject key identifier: 4B:57:3D:47:5F:A9:14:C7:57:53:E5:3C:6B:42:64:4C:09:45:A8:82
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial: 0197B632CBF0FB0916285A19BF3AF43354B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number: 02F4
Signing time: Sat 28 Jun 2025 11:01:11 +0000
Manifest this update: Sat 28 Jun 2025 11:01:11 +0000
Manifest next update: Sun 29 Jun 2025 11:01:11 +0000
Files and hashes: 1: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: /3HlZGuJd/3XDaT4V3JmDwhUuiYVhjNblm6WpSL0Hfg=)
2: byq9jEJ8I-x78db4YmLa9HioKo8.roa (hash: QYVcPpPrnjWxAxRBsq739GpWzHWctl66pKlaoafsOic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:cb:f0:fb:09:16:28:5a:19:bf:3a:f4:33:54:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Validity
Not Before: Jun 28 11:01:11 2025 GMT
Not After : Jun 29 11:01:11 2025 GMT
Subject: CN=4b573d475fa914c75753e53c6b42644c0945a882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:22:fc:7f:10:44:18:fd:1a:30:23:5f:e0:
a8:aa:46:5f:e5:a5:78:b0:7a:11:5e:68:d9:b4:b9:
65:09:d6:a1:55:d7:ea:87:60:19:3a:46:e4:fe:1c:
89:1d:6d:00:f0:c8:5b:dc:e3:16:77:2c:42:79:59:
ad:ba:3f:be:2f:b3:23:96:36:c9:28:37:3d:01:0e:
89:4e:f6:91:08:31:f1:6e:d3:71:cb:97:34:4b:76:
54:94:27:87:bd:ab:3f:54:6f:51:f3:c2:e7:cc:03:
e2:27:bd:b8:fe:1c:72:68:43:01:e5:2c:c8:4f:f8:
cb:5c:5a:05:11:3e:43:80:d9:36:7a:1c:8d:e0:4a:
c3:e9:dd:be:60:99:1a:b1:3e:80:8c:d2:48:0a:cb:
d7:a5:d3:fc:5d:cc:d0:88:47:ae:f5:56:6b:68:2b:
6d:1a:df:a4:6f:be:31:14:ca:7a:1a:f8:35:a0:ae:
fd:c3:80:fb:3e:99:84:92:22:d2:e0:23:61:f8:c9:
ff:69:6c:2f:e1:ab:38:25:11:b5:cb:be:f1:22:26:
26:f1:59:2a:d0:bf:2a:38:6d:72:1e:82:20:f8:2e:
d2:1a:3b:2e:6c:51:40:8d:6a:74:36:8e:93:a6:5c:
c2:56:f8:e7:c9:23:77:b3:80:39:d5:01:03:d2:f2:
1e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:57:3D:47:5F:A9:14:C7:57:53:E5:3C:6B:42:64:4C:09:45:A8:82
X509v3 Authority Key Identifier:
keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:de:96:ed:7e:e4:a4:cd:b2:5f:b4:0f:35:bb:6e:4c:0a:90:
68:cd:e8:06:1d:33:2e:22:f9:d7:a5:58:04:e0:28:85:ff:5e:
02:53:ac:ca:54:9e:82:b9:68:6e:25:d1:66:e6:77:cd:32:b9:
6c:3e:76:4d:33:2c:fc:4c:37:ab:90:f3:77:55:11:60:1e:bd:
0f:6d:83:8e:59:e8:2d:af:da:c9:53:67:77:45:d2:40:89:22:
f6:47:c6:72:e9:85:56:60:2b:87:6d:1f:34:de:3c:19:d4:14:
23:4d:f1:e4:21:f7:ca:8e:c8:c5:c2:70:78:2a:f9:49:ba:d6:
72:03:96:d7:da:92:fb:a8:fd:a4:b3:2d:41:f9:8e:28:96:b0:
92:44:1c:9b:1f:0f:57:1c:f5:a9:a2:d8:4f:ef:ed:95:9c:bd:
17:81:3b:55:1b:14:a2:5f:11:5b:c3:2e:2b:ea:1f:f3:68:d6:
91:9c:fd:7e:f3:56:8b:15:0e:1b:32:ef:0c:a1:48:9b:9d:04:
ec:43:99:21:c1:c6:71:d8:b8:d0:81:94:8c:03:50:21:42:bc:
5d:b8:7b:0f:87:0f:62:a1:01:6c:b5:77:d8:c7:14:d9:1e:cf:
be:64:1b:bf:82:5c:c5:3a:ad:59:a2:f8:ed:44:a3:d2:ac:48:
38:be:d0:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2Msvw+wkWKFoZvzr0M1SxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MmY2ZWU2ZWUzNDZjMzE5MTJiNzYzMGRhYjE0Y2U1M2M0
ZTBjOTkwHhcNMjUwNjI4MTEwMTExWhcNMjUwNjI5MTEwMTExWjAzMTEwLwYDVQQD
Eyg0YjU3M2Q0NzVmYTkxNGM3NTc1M2U1M2M2YjQyNjQ0YzA5NDVhODgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx28i/H8QRBj9GjAjX+CoqkZf5aV4
sHoRXmjZtLllCdahVdfqh2AZOkbk/hyJHW0A8Mhb3OMWdyxCeVmtuj++L7MjljbJ
KDc9AQ6JTvaRCDHxbtNxy5c0S3ZUlCeHvas/VG9R88LnzAPiJ724/hxyaEMB5SzI
T/jLXFoFET5DgNk2ehyN4ErD6d2+YJkasT6AjNJICsvXpdP8XczQiEeu9VZraCtt
Gt+kb74xFMp6Gvg1oK79w4D7PpmEkiLS4CNh+Mn/aWwv4as4JRG1y77xIiYm8Vkq
0L8qOG1yHoIg+C7SGjsubFFAjWp0No6TplzCVvjnySN3s4A51QED0vIe0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtXPUdfqRTHV1PlPGtCZEwJRaiCMB8GA1UdIwQY
MBaAFDkvbubuNGwxkSt2MNqxTOU8TgyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80NWQ5N2UtNDBmZS00N2UwLWIyZTYt
OGE3MmExYjZhZjg1LzEvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80NWQ5N2UtNDBmZS00N2UwLWIyZTYtOGE3MmExYjZhZjg1
LzEvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg96W7X7k
pM2yX7QPNbtuTAqQaM3oBh0zLiL516VYBOAohf9eAlOsylSegrlobiXRZuZ3zTK5
bD52TTMs/Ew3q5Dzd1URYB69D22DjlnoLa/ayVNnd0XSQIki9kfGcumFVmArh20f
NN48GdQUI03x5CH3yo7IxcJweCr5SbrWcgOW19qS+6j9pLMtQfmOKJawkkQcmx8P
Vxz1qaLYT+/tlZy9F4E7VRsUol8RW8MuK+of82jWkZz9fvNWixUOGzLvDKFIm50E
7EOZIcHGcdi40IGUjANQIUK8Xbh7D4cPYqEBbLV32McU2R7PvmQbv4JcxTqtWaL4
7USj0qxIOL7Qcg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:39 2025 by rpki-client