Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
File: o4SlYxesgXmFG1cPDjp6oEToCKY.mft (raw, json)
Hash identifier: qJXFEcaPQNdl+ahL+6IQW6B/JL1WCqhDdsX34PWSI0Q=
Subject key identifier: A4:6B:81:50:99:62:B3:DB:BB:11:DF:A8:70:1F:B9:60:23:DC:5D:60
Authority key identifier: A3:84:A5:63:17:AC:81:79:85:1B:57:0F:0E:3A:7A:A0:44:E8:08:A6
Certificate issuer: /CN=a384a56317ac8179851b570f0e3a7aa044e808a6
Certificate serial: 0197B6D727E5E530D21BC79932D74943FA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
Manifest number: 03D6
Signing time: Sat 28 Jun 2025 14:00:43 +0000
Manifest this update: Sat 28 Jun 2025 14:00:43 +0000
Manifest next update: Sun 29 Jun 2025 14:00:43 +0000
Files and hashes: 1: K7qTK9pIyiEZfe3oYQ_ZP0X2yEA.roa (hash: aRm9dSDweAWyai2Lyi7lBDWMUI5ncN0CehfI1VhjASU=)
2: o4SlYxesgXmFG1cPDjp6oEToCKY.crl (hash: mxOdyEbv6glDXI1v0IGKR+lEqoEwaltaoPh5/05RbJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:27:e5:e5:30:d2:1b:c7:99:32:d7:49:43:fa:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a384a56317ac8179851b570f0e3a7aa044e808a6
Validity
Not Before: Jun 28 14:00:43 2025 GMT
Not After : Jun 29 14:00:43 2025 GMT
Subject: CN=a46b81509962b3dbbb11dfa8701fb96023dc5d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d6:28:38:dd:34:6f:da:f1:49:ce:ab:3d:0e:
19:33:50:d9:66:ef:29:6d:66:29:07:16:fd:95:06:
a4:69:c5:77:e1:2a:68:7d:49:72:db:8b:43:3d:25:
9b:c9:f6:4a:92:b7:c7:5b:32:20:45:47:57:f1:8c:
b5:c9:1f:b3:9d:e2:11:67:67:b0:35:bc:6c:00:7c:
75:44:8c:4d:e0:3d:77:a3:0b:b8:89:51:80:90:ce:
d7:f9:85:c8:0b:f8:cd:7f:4b:94:23:e0:60:c5:98:
25:c3:09:4f:f4:d5:aa:cc:c0:ba:e1:7a:fc:a4:a6:
70:84:39:07:49:95:e3:b7:6d:1a:6b:ee:d8:38:b5:
9a:c1:42:8e:88:56:6f:d5:d7:a0:1c:24:ae:e7:c4:
ec:64:9f:f3:ff:de:39:9f:22:6c:37:92:b5:ee:95:
4e:de:d1:07:c9:01:8f:52:25:0d:03:a6:4e:ee:da:
30:d4:a9:67:73:2e:89:05:b9:92:bc:01:95:67:0f:
05:4b:59:ff:97:b6:10:83:2f:d8:d3:80:bc:46:39:
0d:1d:b2:3c:04:9d:c5:2e:9f:22:af:57:f7:33:8f:
ce:55:c7:e5:ed:2f:f1:ab:5c:24:a0:9e:08:b3:44:
15:3a:25:8b:a3:f7:a8:c1:3c:02:d3:eb:66:3e:55:
96:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6B:81:50:99:62:B3:DB:BB:11:DF:A8:70:1F:B9:60:23:DC:5D:60
X509v3 Authority Key Identifier:
keyid:A3:84:A5:63:17:AC:81:79:85:1B:57:0F:0E:3A:7A:A0:44:E8:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:02:2a:7b:28:9f:0b:1c:66:0f:93:20:a0:82:a6:7c:c1:f1:
c9:31:02:8f:ed:ee:47:28:62:72:03:be:56:e1:ab:36:de:de:
ba:2c:f2:eb:d2:fc:b3:b2:91:bd:76:ea:5c:50:e5:8a:53:9e:
ba:72:4b:93:c3:68:36:79:83:72:ff:10:dc:a9:90:1b:ef:fc:
e4:1e:fa:6e:81:04:c1:69:e4:95:7e:1a:8f:f8:e2:9a:70:3e:
e7:c7:6f:ea:82:7d:a9:86:74:ad:28:84:59:26:20:32:bd:f7:
9b:3b:e4:7a:c5:a5:2d:aa:e9:9b:1e:6c:57:bb:fd:11:fb:09:
65:38:e0:cc:c5:2f:0d:71:ff:d2:2e:9b:24:e0:c5:7c:24:35:
2b:ae:a6:6c:02:32:db:94:3d:98:a6:50:36:60:6c:03:e0:de:
02:3a:79:38:b6:ba:8b:51:78:50:59:8f:90:ce:13:e1:b3:bb:
88:e3:f0:3b:4b:4d:6b:3d:5f:77:cd:c7:8c:0c:01:09:64:8f:
c2:45:7b:62:22:e9:0f:1a:35:de:69:fe:6c:e7:96:c1:9d:82:
d1:49:71:29:85:66:1e:25:3e:ad:31:bb:72:91:c1:f7:90:61:
8c:4b:5c:b2:d1:74:22:d5:d2:94:d9:67:f8:7a:7b:5b:86:c9:
53:9f:94:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe21yfl5TDSG8eZMtdJQ/pjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzODRhNTYzMTdhYzgxNzk4NTFiNTcwZjBlM2E3YWEwNDRl
ODA4YTYwHhcNMjUwNjI4MTQwMDQzWhcNMjUwNjI5MTQwMDQzWjAzMTEwLwYDVQQD
EyhhNDZiODE1MDk5NjJiM2RiYmIxMWRmYTg3MDFmYjk2MDIzZGM1ZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNYoON00b9rxSc6rPQ4ZM1DZZu8p
bWYpBxb9lQakacV34SpofUly24tDPSWbyfZKkrfHWzIgRUdX8Yy1yR+zneIRZ2ew
NbxsAHx1RIxN4D13owu4iVGAkM7X+YXIC/jNf0uUI+BgxZglwwlP9NWqzMC64Xr8
pKZwhDkHSZXjt20aa+7YOLWawUKOiFZv1degHCSu58TsZJ/z/945nyJsN5K17pVO
3tEHyQGPUiUNA6ZO7tow1Klncy6JBbmSvAGVZw8FS1n/l7YQgy/Y04C8RjkNHbI8
BJ3FLp8ir1f3M4/OVcfl7S/xq1wkoJ4Is0QVOiWLo/eowTwC0+tmPlWWMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRrgVCZYrPbuxHfqHAfuWAj3F1gMB8GA1UdIwQY
MBaAFKOEpWMXrIF5hRtXDw46eqBE6AimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzRTbFl4ZXNnWG1GRzFjUERqcDZvRVRvQ0tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jMmZiZTEtZGQ5ZC00MjA0LTkwNjYt
ZTIyNWEyNDkzNzhlLzEvbzRTbFl4ZXNnWG1GRzFjUERqcDZvRVRvQ0tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jMmZiZTEtZGQ5ZC00MjA0LTkwNjYtZTIyNWEyNDkzNzhl
LzEvbzRTbFl4ZXNnWG1GRzFjUERqcDZvRVRvQ0tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngIqeyif
CxxmD5MgoIKmfMHxyTECj+3uRyhicgO+VuGrNt7euizy69L8s7KRvXbqXFDlilOe
unJLk8NoNnmDcv8Q3KmQG+/85B76boEEwWnklX4aj/jimnA+58dv6oJ9qYZ0rSiE
WSYgMr33mzvkesWlLarpmx5sV7v9EfsJZTjgzMUvDXH/0i6bJODFfCQ1K66mbAIy
25Q9mKZQNmBsA+DeAjp5OLa6i1F4UFmPkM4T4bO7iOPwO0tNaz1fd83HjAwBCWSP
wkV7YiLpDxo13mn+bOeWwZ2C0UlxKYVmHiU+rTG7cpHB95BhjEtcstF0ItXSlNln
+Hp7W4bJU5+USA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:32 2025 by rpki-client