Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
File: t_OeNnC0P1fxURt43eIIWWQBdFU.mft (raw, json)
Hash identifier: EoUOROMlInDf5Jae7y+4gx3YE8Iz+1FzVvTF5SlVHPw=
Subject key identifier: D7:84:39:E1:37:97:FB:DF:F5:33:7B:20:68:EF:62:61:6A:72:90:2D
Authority key identifier: B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
Certificate issuer: /CN=b7f39e3670b43f57f1511b78dde2085964017455
Certificate serial: 0197B77C6C9F494D9D9C40BAA67DCEC9F0EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
Manifest number: 0D3E
Signing time: Sat 28 Jun 2025 17:01:14 +0000
Manifest this update: Sat 28 Jun 2025 17:01:14 +0000
Manifest next update: Sun 29 Jun 2025 17:01:14 +0000
Files and hashes: 1: 8O-ebwvzNaF3Yh7dq1L36qyebRQ.roa (hash: oH6KdsOd3RvUnrt12CiU1fvS0cagxnl2TsnQPrOACrc=)
2: t_OeNnC0P1fxURt43eIIWWQBdFU.crl (hash: mWV/e1HElmulLmeFMxvmoOqNR0AEJaCDR7f1S6pOxyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:6c:9f:49:4d:9d:9c:40:ba:a6:7d:ce:c9:f0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f39e3670b43f57f1511b78dde2085964017455
Validity
Not Before: Jun 28 17:01:14 2025 GMT
Not After : Jun 29 17:01:14 2025 GMT
Subject: CN=d78439e13797fbdff5337b2068ef62616a72902d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:df:1e:3a:57:43:7a:6a:98:70:ce:e7:ca:
31:8b:40:81:d5:6c:99:24:8b:45:cd:69:78:5d:c0:
cf:77:84:20:07:9e:09:08:e4:c9:6e:cd:ad:58:3b:
91:a9:90:dc:8c:3e:f8:fd:74:22:04:64:80:76:81:
cd:25:b5:60:f3:50:2c:d0:0a:9c:de:40:7b:87:f1:
0b:f9:2d:da:62:61:2d:d9:81:12:86:a0:e0:40:26:
2f:7e:10:3c:9d:3c:79:b0:8f:f9:d9:fc:9e:cc:9a:
b7:ad:e5:0d:6b:78:3e:de:f0:1c:53:c0:b0:9e:8b:
95:d2:b7:8a:6a:0e:a1:95:ac:31:06:6e:a0:1b:16:
09:03:87:b1:b7:5a:dc:c1:5c:a3:51:7a:47:44:d5:
44:3c:fd:66:36:fb:cb:1f:f5:e7:9a:7f:5b:47:fb:
75:ca:10:80:94:8a:32:de:ac:e3:b3:b6:4f:4a:d8:
04:6e:78:96:c0:d9:75:8b:d9:d5:b5:5e:7f:11:9b:
96:10:df:a7:5f:f7:25:21:f1:1f:9e:d8:36:f1:c9:
b5:64:c9:fc:ea:f5:d1:8f:55:b9:05:dd:8b:d7:22:
3f:5c:f9:24:f1:85:14:be:e0:bb:36:5a:e4:bd:41:
bf:7e:b8:0f:26:8e:a0:90:a0:a3:97:05:e5:dc:65:
5a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:84:39:E1:37:97:FB:DF:F5:33:7B:20:68:EF:62:61:6A:72:90:2D
X509v3 Authority Key Identifier:
keyid:B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2d:e1:93:13:ef:65:ea:ae:bf:0b:c8:f6:b1:46:3e:76:0c:
cf:a4:a4:47:2f:42:f4:e7:86:77:8d:ff:d5:2e:fc:55:5f:4d:
18:d9:f7:fd:64:31:33:68:8a:87:72:a9:e4:d4:22:4d:de:ec:
69:a7:7e:f8:d0:2d:db:1b:d6:ab:d0:50:cb:22:27:e1:c4:d9:
a7:70:bd:d4:18:58:8f:82:8a:5f:f8:ba:02:7f:a7:9d:2e:ae:
a7:3d:c6:c0:7c:a2:fa:5a:f3:f3:a1:98:13:44:c1:f0:39:06:
18:0e:ea:00:d9:76:ac:81:b1:de:99:0e:0c:af:1d:3a:f1:61:
88:8a:d3:7f:4a:ad:ca:2f:19:4f:cb:8c:dc:64:99:5b:5f:14:
c7:02:08:a7:18:49:2d:03:69:67:10:d0:70:cd:6b:df:16:41:
9a:ab:d3:ba:8b:8c:e7:56:b5:8c:b0:9a:be:3a:3b:91:f1:9c:
e3:84:64:62:49:ea:71:ee:5a:9b:3a:b2:28:60:70:b0:d7:14:
ee:b5:70:92:de:e0:22:ce:64:68:88:6d:33:86:37:66:93:b9:
ba:32:cf:51:93:f1:ef:27:6f:63:c5:5c:8d:c4:31:da:93:c0:
34:26:78:57:01:3d:ed:02:55:47:60:73:dc:e3:bf:c1:55:52:
cf:25:f0:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fGyfSU2dnEC6pn3OyfDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ZjM5ZTM2NzBiNDNmNTdmMTUxMWI3OGRkZTIwODU5NjQw
MTc0NTUwHhcNMjUwNjI4MTcwMTE0WhcNMjUwNjI5MTcwMTE0WjAzMTEwLwYDVQQD
EyhkNzg0MzllMTM3OTdmYmRmZjUzMzdiMjA2OGVmNjI2MTZhNzI5MDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH3fHjpXQ3pqmHDO58oxi0CB1WyZ
JItFzWl4XcDPd4QgB54JCOTJbs2tWDuRqZDcjD74/XQiBGSAdoHNJbVg81As0Aqc
3kB7h/EL+S3aYmEt2YEShqDgQCYvfhA8nTx5sI/52fyezJq3reUNa3g+3vAcU8Cw
nouV0reKag6hlawxBm6gGxYJA4ext1rcwVyjUXpHRNVEPP1mNvvLH/Xnmn9bR/t1
yhCAlIoy3qzjs7ZPStgEbniWwNl1i9nVtV5/EZuWEN+nX/clIfEfntg28cm1ZMn8
6vXRj1W5Bd2L1yI/XPkk8YUUvuC7NlrkvUG/frgPJo6gkKCjlwXl3GVamQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeEOeE3l/vf9TN7IGjvYmFqcpAtMB8GA1UdIwQY
MBaAFLfznjZwtD9X8VEbeN3iCFlkAXRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdF9PZU5uQzBQMWZ4VVJ0NDNlSUlXV1FCZEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTY0Y2ItYTdmNS00MmIwLWFjMTUt
Y2UyOWZkMzUyNmE4LzEvdF9PZU5uQzBQMWZ4VVJ0NDNlSUlXV1FCZEZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80YTY0Y2ItYTdmNS00MmIwLWFjMTUtY2UyOWZkMzUyNmE4
LzEvdF9PZU5uQzBQMWZ4VVJ0NDNlSUlXV1FCZEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYi3hkxPv
ZequvwvI9rFGPnYMz6SkRy9C9OeGd43/1S78VV9NGNn3/WQxM2iKh3Kp5NQiTd7s
aad++NAt2xvWq9BQyyIn4cTZp3C91BhYj4KKX/i6An+nnS6upz3GwHyi+lrz86GY
E0TB8DkGGA7qANl2rIGx3pkODK8dOvFhiIrTf0qtyi8ZT8uM3GSZW18UxwIIpxhJ
LQNpZxDQcM1r3xZBmqvTuouM51a1jLCavjo7kfGc44RkYknqce5amzqyKGBwsNcU
7rVwkt7gIs5kaIhtM4Y3ZpO5ujLPUZPx7ydvY8VcjcQx2pPANCZ4VwE97QJVR2Bz
3OO/wVVSzyXw+Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:55 2025 by rpki-client