Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
File: oeqN4xzspVgDzzrxTUpyea6ERtA.mft (raw, json)
Hash identifier: BBbOZ7nfBeZ3E/QTtOgfeiXV/Z3wiCMzBI3xdLKfNRs=
Subject key identifier: 7A:8C:FF:EB:24:61:54:5E:5A:BA:E6:DE:A2:E0:AA:B8:FA:EB:27:D4
Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
Certificate issuer: /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Certificate serial: 0197C5A5E8CA21B81EE1D2C3EB4F52FE54D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
Manifest number: 1288
Signing time: Tue 01 Jul 2025 11:01:13 +0000
Manifest this update: Tue 01 Jul 2025 11:01:13 +0000
Manifest next update: Wed 02 Jul 2025 11:01:13 +0000
Files and hashes: 1: ZsbPyFKfDnHSbXB5Rdfyon4nTbQ.roa (hash: f+ETlYVDvmS9d48p0ZYmqykWIOKGSt0JzwDEXRuMaVs=)
2: oeqN4xzspVgDzzrxTUpyea6ERtA.crl (hash: VrUPSXoUXK30i3mWRFneJ0ZyYjMzxFzxrvHQW3eQhaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:a5:e8:ca:21:b8:1e:e1:d2:c3:eb:4f:52:fe:54:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Validity
Not Before: Jul 1 11:01:13 2025 GMT
Not After : Jul 2 11:01:13 2025 GMT
Subject: CN=7a8cffeb2461545e5abae6dea2e0aab8faeb27d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:0e:3e:30:15:bb:41:22:e5:36:7e:d3:ae:
77:08:45:7b:d3:6d:03:3f:04:6c:10:e9:f6:b3:c8:
75:e4:ef:b8:28:ba:de:62:15:c2:55:ad:be:b7:14:
f5:c7:b3:1b:f4:ea:d3:83:53:8f:65:75:e1:83:13:
23:59:08:10:df:b3:a1:38:c8:e7:97:01:27:40:64:
c1:ad:ba:79:da:5b:b1:ba:22:a3:76:94:61:58:40:
e1:a2:e8:a5:a9:0b:d0:b0:83:d7:06:fc:21:4d:9c:
92:fc:6b:4f:69:cd:29:7a:f9:f0:b2:dd:ff:d1:fd:
ef:f0:f8:f2:5c:c1:22:99:24:d8:ca:28:03:1b:b5:
d6:6e:66:95:31:e7:b9:29:63:09:08:17:94:11:e2:
cc:5c:70:eb:ae:87:8c:27:51:e1:8c:40:a5:9a:be:
56:26:ce:13:bc:a2:1a:4a:8d:6b:50:c2:26:fd:6b:
98:98:91:be:08:8f:1e:f2:67:8e:74:9f:2b:84:1d:
96:11:cb:2b:53:ed:df:8b:0f:ea:fc:23:92:41:9d:
1b:53:a3:5e:e9:63:07:b2:7e:c8:80:96:4a:3c:06:
4e:af:f6:9f:37:7b:e9:7c:9d:de:65:b6:24:bf:25:
54:cc:ca:c7:b0:23:b5:8f:54:5e:89:3e:48:90:9b:
4d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8C:FF:EB:24:61:54:5E:5A:BA:E6:DE:A2:E0:AA:B8:FA:EB:27:D4
X509v3 Authority Key Identifier:
keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:97:80:94:45:aa:01:99:29:cd:34:e6:4f:07:b1:c6:3e:b4:
ec:d2:a9:5b:4c:74:4f:f4:30:a0:7b:94:36:3b:17:ab:69:0d:
06:9a:35:89:f8:0b:31:67:42:a7:98:ac:f5:08:d2:45:c9:05:
d3:12:55:bd:e4:c1:c6:6a:af:63:1c:77:e5:71:9a:33:48:17:
82:7a:af:f4:8d:74:d2:80:cb:20:e1:02:28:9a:9f:de:91:2e:
e9:d7:f3:e8:74:06:26:22:77:5e:6f:c8:1b:13:df:5a:63:23:
b4:80:27:91:29:f4:eb:f7:9b:36:93:fe:88:8c:cd:fc:63:7d:
f6:ab:16:03:1b:71:7c:a3:4a:24:07:bd:bc:06:a7:90:c9:10:
9a:47:a5:3e:d1:1e:59:43:39:34:64:61:6b:a6:a0:4c:58:61:
26:f9:d8:1b:82:70:12:98:de:ce:53:70:ba:6f:e4:38:41:b4:
58:cc:62:ef:fc:46:52:17:fd:99:b1:e1:42:82:23:21:0b:07:
96:0f:68:97:72:aa:ab:fe:d4:56:ef:bf:ec:e4:b7:4d:48:13:
fd:25:b6:1b:6e:5f:db:9d:75:e3:33:a9:03:0a:d9:75:89:b9:
56:cf:f8:1d:fd:b7:8e:9a:41:9c:97:ea:96:88:dc:d9:f5:f4:
e0:ba:88:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfFpejKIbge4dLD609S/lTYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZWE4ZGUzMWNlY2E1NTgwM2NmM2FmMTRkNGE3Mjc5YWU4
NDQ2ZDAwHhcNMjUwNzAxMTEwMTEzWhcNMjUwNzAyMTEwMTEzWjAzMTEwLwYDVQQD
Eyg3YThjZmZlYjI0NjE1NDVlNWFiYWU2ZGVhMmUwYWFiOGZhZWIyN2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8EOPjAVu0Ei5TZ+0653CEV7020D
PwRsEOn2s8h15O+4KLreYhXCVa2+txT1x7Mb9OrTg1OPZXXhgxMjWQgQ37OhOMjn
lwEnQGTBrbp52luxuiKjdpRhWEDhouilqQvQsIPXBvwhTZyS/GtPac0pevnwst3/
0f3v8PjyXMEimSTYyigDG7XWbmaVMee5KWMJCBeUEeLMXHDrroeMJ1HhjEClmr5W
Js4TvKIaSo1rUMIm/WuYmJG+CI8e8meOdJ8rhB2WEcsrU+3fiw/q/COSQZ0bU6Ne
6WMHsn7IgJZKPAZOr/afN3vpfJ3eZbYkvyVUzMrHsCO1j1ReiT5IkJtN2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqM/+skYVReWrrm3qLgqrj66yfUMB8GA1UdIwQY
MBaAFKHqjeMc7KVYA8868U1KcnmuhEbQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYTk5ZDgtODUyNy00NWI4LWFmNmEt
NzY1MjYyZjI5ZWFmLzEvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jYTk5ZDgtODUyNy00NWI4LWFmNmEtNzY1MjYyZjI5ZWFm
LzEvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJeAlEWq
AZkpzTTmTwexxj607NKpW0x0T/QwoHuUNjsXq2kNBpo1ifgLMWdCp5is9QjSRckF
0xJVveTBxmqvYxx35XGaM0gXgnqv9I100oDLIOECKJqf3pEu6dfz6HQGJiJ3Xm/I
GxPfWmMjtIAnkSn06/ebNpP+iIzN/GN99qsWAxtxfKNKJAe9vAankMkQmkelPtEe
WUM5NGRha6agTFhhJvnYG4JwEpjezlNwum/kOEG0WMxi7/xGUhf9mbHhQoIjIQsH
lg9ol3Kqq/7UVu+/7OS3TUgT/SW2G25f25114zOpAwrZdYm5Vs/4Hf23jppBnJfq
lojc2fX04LqIcg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:55:52 2025 by rpki-client