Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
File: OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft (raw, json)
Hash identifier: 0YPDz+v6hHeu7c7TwK5hVj8SkbDzM6NEB5STNtxYkC4=
Subject key identifier: C4:D3:25:4D:D7:CC:F9:B7:48:A1:03:72:19:AE:26:D6:88:35:B1:12
Authority key identifier: 39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
Certificate issuer: /CN=39abeb591716e908345d329fffd3700352315b98
Certificate serial: 0197B6A1F6507D49B8076412DB684A3D9DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
Manifest number: 1249
Signing time: Sat 28 Jun 2025 13:02:37 +0000
Manifest this update: Sat 28 Jun 2025 13:02:37 +0000
Manifest next update: Sun 29 Jun 2025 13:02:37 +0000
Files and hashes: 1: OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl (hash: +SJGuiYjWn2Mc71wE77sL9AhPzLW5fKDRZWlJju7VQY=)
2: sRj9HIjhF6xAzSk8DsZiSona3z0.roa (hash: CKtuOB2HNTtxCaJDk6aobi//RFXR4AYliP1W8tH3cu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f6:50:7d:49:b8:07:64:12:db:68:4a:3d:9d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39abeb591716e908345d329fffd3700352315b98
Validity
Not Before: Jun 28 13:02:37 2025 GMT
Not After : Jun 29 13:02:37 2025 GMT
Subject: CN=c4d3254dd7ccf9b748a1037219ae26d68835b112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:03:68:0e:fa:fd:33:9f:1f:b9:cd:ee:03:
9f:e7:dd:60:dc:e4:fc:cf:e7:a7:7e:9a:3d:ec:89:
85:bf:b9:02:b3:f3:c6:09:02:1a:d0:49:4b:b0:21:
c5:4e:84:6d:23:97:22:a3:72:f9:0d:27:6e:67:3f:
e0:56:39:38:e7:e0:ec:3b:d5:8c:f7:fa:ff:d9:f2:
f7:fa:4c:ae:11:98:43:db:c0:91:63:e0:7e:a5:f9:
01:a4:37:69:1d:fe:6e:76:40:50:4b:42:d3:c8:9e:
03:f3:62:58:82:23:5d:b4:cd:74:4d:96:0a:c2:e1:
9a:43:23:ab:91:d8:37:dc:66:40:6c:46:3b:b3:51:
af:9c:3a:5b:a7:df:3e:12:ac:f6:98:67:dd:a0:91:
fc:36:5f:0d:1c:29:61:c4:d0:53:6c:8a:61:a8:c7:
5b:f2:ec:0a:aa:f4:30:0b:b4:b5:29:80:55:d7:49:
7b:fd:de:17:f7:2d:e2:11:fb:2d:61:bc:54:43:96:
a5:d7:b5:fe:93:d1:56:27:53:e3:9b:17:ed:d5:08:
cc:2c:ca:98:25:09:45:51:7a:76:73:9a:d0:64:e6:
1d:27:98:01:aa:66:53:dc:e9:ea:8f:14:7d:53:ab:
cb:b5:b6:b9:c9:2d:25:60:52:15:f6:4c:c6:60:2d:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D3:25:4D:D7:CC:F9:B7:48:A1:03:72:19:AE:26:D6:88:35:B1:12
X509v3 Authority Key Identifier:
keyid:39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:8e:f7:79:40:39:c7:7e:a4:3f:e1:03:f5:57:05:53:b7:6a:
41:f5:e9:d4:df:6f:7c:35:cd:ff:c8:bc:a0:46:b4:10:0b:54:
7b:91:80:8e:c2:49:8e:15:65:ad:aa:d8:86:68:12:4b:37:45:
bb:3f:2a:98:4b:9d:a3:77:10:46:ea:16:8e:4f:65:25:27:0a:
8e:72:01:18:ff:29:52:2b:fd:29:d2:b9:72:ec:77:fc:81:8a:
95:83:e7:f4:96:b5:98:0a:ed:9a:53:fb:a3:21:23:9b:0e:79:
75:2d:6f:4f:00:1b:64:d2:c8:cf:fd:22:e0:86:31:86:38:26:
f5:b0:41:5f:68:4c:c6:09:13:10:71:95:50:a0:92:19:8d:0e:
64:4e:6b:80:96:42:76:8b:33:e6:7a:41:cc:90:5f:2b:45:6b:
72:e3:11:e3:89:54:a6:3b:0f:75:6d:ef:ea:2d:85:4e:94:45:
99:23:2a:a3:0f:05:cf:ab:40:fa:cf:7c:dd:7d:c5:63:d2:ee:
9a:80:8a:51:37:66:db:65:cd:0f:9c:4d:c5:54:14:82:83:ec:
12:2d:1d:0c:46:b0:53:69:9d:8e:9a:2d:5d:d8:11:22:ce:93:
9c:67:c4:26:f5:bb:e7:dd:d4:f4:3e:c4:25:3c:d6:ef:6f:6f:
8f:81:62:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ofZQfUm4B2QS22hKPZ3lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YWJlYjU5MTcxNmU5MDgzNDVkMzI5ZmZmZDM3MDAzNTIz
MTViOTgwHhcNMjUwNjI4MTMwMjM3WhcNMjUwNjI5MTMwMjM3WjAzMTEwLwYDVQQD
EyhjNGQzMjU0ZGQ3Y2NmOWI3NDhhMTAzNzIxOWFlMjZkNjg4MzViMTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWgDaA76/TOfH7nN7gOf591g3OT8
z+enfpo97ImFv7kCs/PGCQIa0ElLsCHFToRtI5cio3L5DSduZz/gVjk45+DsO9WM
9/r/2fL3+kyuEZhD28CRY+B+pfkBpDdpHf5udkBQS0LTyJ4D82JYgiNdtM10TZYK
wuGaQyOrkdg33GZAbEY7s1GvnDpbp98+Eqz2mGfdoJH8Nl8NHClhxNBTbIphqMdb
8uwKqvQwC7S1KYBV10l7/d4X9y3iEfstYbxUQ5al17X+k9FWJ1Pjmxft1QjMLMqY
JQlFUXp2c5rQZOYdJ5gBqmZT3OnqjxR9U6vLtba5yS0lYFIV9kzGYC2PUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTTJU3XzPm3SKEDchmuJtaINbESMB8GA1UdIwQY
MBaAFDmr61kXFukINF0yn//TcANSMVuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iMDhmMjItMTFmNi00ZWU1LWEyMzEt
YjdjZDQ0OTBhOTgzLzEvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9iMDhmMjItMTFmNi00ZWU1LWEyMzEtYjdjZDQ0OTBhOTgz
LzEvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeI73eUA5
x36kP+ED9VcFU7dqQfXp1N9vfDXN/8i8oEa0EAtUe5GAjsJJjhVlrarYhmgSSzdF
uz8qmEudo3cQRuoWjk9lJScKjnIBGP8pUiv9KdK5cux3/IGKlYPn9Ja1mArtmlP7
oyEjmw55dS1vTwAbZNLIz/0i4IYxhjgm9bBBX2hMxgkTEHGVUKCSGY0OZE5rgJZC
dosz5npBzJBfK0VrcuMR44lUpjsPdW3v6i2FTpRFmSMqow8Fz6tA+s983X3FY9Lu
moCKUTdm22XND5xNxVQUgoPsEi0dDEawU2mdjpotXdgRIs6TnGfEJvW7593U9D7E
JTzW729vj4Finw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:30 2025 by rpki-client