Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
File: oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft (raw, json)
Hash identifier: A8siNbf7qRSHc7bIqznhSMUofcW1IlMInBUPmpPAFuk=
Subject key identifier: EB:8E:AB:89:E8:8F:81:95:4E:F1:22:FB:15:5C:87:B2:01:90:FA:85
Authority key identifier: A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8
Certificate issuer: /CN=a0937525577cb2af1b285c96431dbd600f57cbe8
Certificate serial: 0197C6820BCB62F3A63DA2454C59C8794F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
Manifest number: 1209
Signing time: Tue 01 Jul 2025 15:01:40 +0000
Manifest this update: Tue 01 Jul 2025 15:01:40 +0000
Manifest next update: Wed 02 Jul 2025 15:01:40 +0000
Files and hashes: 1: cGnnbkiVLX_2V8eckMDBKTSh5es.roa (hash: 17Bbtx++8vEIOl6usyCHj+Kebb1Ac8VgiDnBmWVz9UM=)
2: oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl (hash: aMBER8dFaSsIAPhZXXTwJHBuwhXzS+KiDVGQmqIFOBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:82:0b:cb:62:f3:a6:3d:a2:45:4c:59:c8:79:4f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0937525577cb2af1b285c96431dbd600f57cbe8
Validity
Not Before: Jul 1 15:01:40 2025 GMT
Not After : Jul 2 15:01:40 2025 GMT
Subject: CN=eb8eab89e88f81954ef122fb155c87b20190fa85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ee:4a:31:fc:f8:60:98:ed:15:3d:74:4b:07:
30:fa:aa:5c:d7:6a:a7:2a:a9:33:27:e7:bf:9d:e8:
90:54:ec:14:44:4f:97:78:56:61:1b:ee:9f:30:86:
fd:4d:c3:90:6a:4a:29:b1:5b:18:4d:0f:d3:cd:f6:
69:08:53:fe:5a:5a:5b:7f:6f:ef:ec:51:09:53:06:
d4:ae:3b:a5:d9:43:10:16:aa:94:59:6e:cb:24:31:
aa:5e:9b:b9:f2:96:57:5e:32:89:9f:d0:33:95:3c:
64:5c:37:7f:ce:84:a1:22:74:06:35:22:b9:98:c1:
dc:47:9f:c4:2f:e1:76:a5:fb:2a:e0:9f:4d:a0:0e:
f3:b3:15:79:3f:c7:63:dd:e2:7d:e5:c0:fc:5f:7d:
60:22:74:80:e7:25:c6:7c:10:8d:b6:ac:d7:c2:51:
67:a1:3c:a0:55:5d:84:ca:df:af:e6:01:80:b2:75:
28:7a:db:0d:cf:e4:be:7d:85:2f:85:ff:c8:a7:0d:
84:36:cb:30:55:92:d8:b6:7b:e0:27:69:b3:cc:b6:
83:44:14:03:9a:e0:27:80:ec:e6:ab:95:a6:04:8a:
60:ac:36:0c:45:83:bf:55:64:ea:9f:61:d3:99:01:
fc:2d:c4:07:d9:cf:eb:ea:ed:a2:ce:ce:79:30:74:
c4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8E:AB:89:E8:8F:81:95:4E:F1:22:FB:15:5C:87:B2:01:90:FA:85
X509v3 Authority Key Identifier:
keyid:A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b6:4b:ed:d9:4d:dd:2e:20:91:56:33:fc:38:b6:41:50:c2:
bb:19:75:a9:4d:10:25:da:fe:4f:b5:19:67:a6:5d:7e:d1:d6:
2a:1f:6e:91:a5:7a:32:8c:20:56:e5:e4:d5:9b:45:5c:42:10:
90:61:98:fa:b5:34:2a:ad:3d:04:b7:1b:1d:fc:f6:48:08:05:
fe:b4:4d:65:40:47:da:cb:1b:7e:3d:f4:16:96:d2:a5:a2:b5:
30:ae:7e:6e:57:fd:ed:7f:7c:e0:30:8a:00:1d:c8:ff:43:dc:
62:28:91:77:a9:e1:5c:33:3d:19:36:dd:50:9e:f7:40:4d:cf:
be:16:6b:88:df:b6:b0:8b:79:71:be:da:db:dd:41:c3:ed:5e:
e3:ec:1a:f9:28:88:0f:fe:e5:03:54:f8:14:57:30:53:f2:97:
c5:44:4a:3c:ff:1a:02:79:0d:2d:ec:a8:a6:c0:a1:9a:db:12:
bc:9f:ca:ad:23:06:ea:bb:37:03:3e:6e:6c:8f:08:38:c1:cb:
3a:be:3c:a4:02:06:d6:b7:05:6a:8b:71:3e:f0:cb:24:17:fa:
78:18:64:dd:8f:d1:a0:06:64:52:33:a8:ce:56:36:5c:22:2d:
b4:4a:5e:2a:21:be:f8:c8:8a:79:3c:5a:1c:78:c1:10:de:ab:
17:ed:93:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfGggvLYvOmPaJFTFnIeU8ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOTM3NTI1NTc3Y2IyYWYxYjI4NWM5NjQzMWRiZDYwMGY1
N2NiZTgwHhcNMjUwNzAxMTUwMTQwWhcNMjUwNzAyMTUwMTQwWjAzMTEwLwYDVQQD
EyhlYjhlYWI4OWU4OGY4MTk1NGVmMTIyZmIxNTVjODdiMjAxOTBmYTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu5KMfz4YJjtFT10Swcw+qpc12qn
KqkzJ+e/neiQVOwURE+XeFZhG+6fMIb9TcOQakopsVsYTQ/TzfZpCFP+Wlpbf2/v
7FEJUwbUrjul2UMQFqqUWW7LJDGqXpu58pZXXjKJn9AzlTxkXDd/zoShInQGNSK5
mMHcR5/EL+F2pfsq4J9NoA7zsxV5P8dj3eJ95cD8X31gInSA5yXGfBCNtqzXwlFn
oTygVV2Eyt+v5gGAsnUoetsNz+S+fYUvhf/Ipw2ENsswVZLYtnvgJ2mzzLaDRBQD
muAngOzmq5WmBIpgrDYMRYO/VWTqn2HTmQH8LcQH2c/r6u2izs55MHTEzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuOq4noj4GVTvEi+xVch7IBkPqFMB8GA1UdIwQY
MBaAFKCTdSVXfLKvGyhclkMdvWAPV8voMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0pOMUpWZDhzcThiS0Z5V1F4MjlZQTlYeS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kMjdkYTItMjc1NC00ZDdiLWFmOTAt
NmUwMmFmMGE0OTk0LzEvb0pOMUpWZDhzcThiS0Z5V1F4MjlZQTlYeS1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kMjdkYTItMjc1NC00ZDdiLWFmOTAtNmUwMmFmMGE0OTk0
LzEvb0pOMUpWZDhzcThiS0Z5V1F4MjlZQTlYeS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLZL7dlN
3S4gkVYz/Di2QVDCuxl1qU0QJdr+T7UZZ6ZdftHWKh9ukaV6MowgVuXk1ZtFXEIQ
kGGY+rU0Kq09BLcbHfz2SAgF/rRNZUBH2ssbfj30FpbSpaK1MK5+blf97X984DCK
AB3I/0PcYiiRd6nhXDM9GTbdUJ73QE3PvhZriN+2sIt5cb7a291Bw+1e4+wa+SiI
D/7lA1T4FFcwU/KXxURKPP8aAnkNLeyopsChmtsSvJ/KrSMG6rs3Az5ubI8IOMHL
Or48pAIG1rcFaotxPvDLJBf6eBhk3Y/RoAZkUjOozlY2XCIttEpeKiG++MiKeTxa
HHjBEN6rF+2TYA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 16:11:14 2025 by rpki-client