Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
File: OUaa8zYRt5CE9XXpWxPmZVDts4M.mft (raw, json)
Hash identifier: M/aNtdG4cyF7Eevxb5BEOPoD1son1aKoj6SlhhppOwY=
Subject key identifier: BE:EC:2D:3D:26:25:28:C5:DC:38:F2:0D:3A:BE:37:41:2E:7A:F1:73
Authority key identifier: 39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83
Certificate issuer: /CN=39469af33611b79084f575e95b13e66550edb383
Certificate serial: 0197B70EDD706565A62076EABDCEB571A91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:34 +0000
Manifest this update: Sat 28 Jun 2025 15:01:34 +0000
Manifest next update: Sun 29 Jun 2025 15:01:34 +0000
Files and hashes: 1: OUaa8zYRt5CE9XXpWxPmZVDts4M.crl (hash: s+OKs5GB9KVbGivNDvkmSxPQYPu81hOLlqK/pE6qzYo=)
2: es8QJCh0ckzLwfP8fcS7Bv9ovnQ.roa (hash: vTpYfK5q1nJR4gRnUXuRk239gyWGFIrlMOouYSRgbnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:dd:70:65:65:a6:20:76:ea:bd:ce:b5:71:a9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39469af33611b79084f575e95b13e66550edb383
Validity
Not Before: Jun 28 15:01:34 2025 GMT
Not After : Jun 29 15:01:34 2025 GMT
Subject: CN=beec2d3d262528c5dc38f20d3abe37412e7af173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4a:8f:17:18:a3:3d:28:d5:1b:42:69:d5:5b:
b6:23:b9:5e:8a:4b:36:ee:f8:b4:77:10:31:7f:5d:
33:f1:82:dc:e1:8a:31:5f:98:54:c6:05:33:1b:0e:
53:eb:c1:1e:38:1d:f8:2f:f1:e2:64:e3:d5:a1:2c:
fc:8a:40:a0:71:f7:98:73:ef:2a:1e:a3:12:6a:73:
e0:2b:27:44:7e:6b:14:2a:12:15:56:d6:e5:75:fd:
6c:c0:6f:b1:77:67:e3:01:2d:7e:73:f5:c0:b3:93:
38:c9:95:7f:96:7e:57:e4:da:c0:d4:a3:05:e7:a3:
2d:bc:fb:ee:ef:5f:26:a2:c9:00:fc:ea:09:61:f9:
bb:d3:7f:f6:15:34:ff:3e:32:5d:fb:33:f0:f5:26:
29:d8:e9:00:82:33:f1:e6:22:a1:ad:b7:65:0f:e6:
23:46:c6:6a:15:e5:85:dd:45:27:0e:e8:e1:39:c0:
bf:26:44:12:e4:4f:dc:2d:80:51:a4:1b:b8:0b:d4:
84:9a:54:40:c3:d4:ae:90:46:b9:50:47:77:7c:18:
66:24:39:2c:31:87:1d:15:71:92:a3:75:4c:d0:b8:
e7:8c:24:06:95:c4:5c:4e:cb:7f:1c:91:81:a9:ea:
e5:0b:4c:d6:34:31:10:67:06:e3:ff:0c:bb:33:c5:
81:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EC:2D:3D:26:25:28:C5:DC:38:F2:0D:3A:BE:37:41:2E:7A:F1:73
X509v3 Authority Key Identifier:
keyid:39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:85:21:71:16:53:b6:f9:d7:19:6c:13:a4:50:9b:9b:7e:56:
5a:a6:e7:c9:49:a0:33:43:12:f8:de:bf:3d:fe:8c:9d:ef:f6:
cb:51:a9:fe:10:7d:83:30:8a:9a:75:b8:4f:2a:8a:dc:07:a0:
b9:6d:7f:52:f6:98:9c:75:9f:2e:a3:16:78:be:35:79:60:6a:
51:db:01:bb:02:d0:84:5b:28:73:3b:af:67:cd:95:92:90:2e:
eb:97:f0:01:ff:7e:64:91:d1:54:e2:9f:c4:19:d1:64:ac:5a:
7d:69:db:ef:75:f9:22:45:c9:10:32:7b:1a:bd:2b:5c:1d:3b:
fe:46:f1:9f:83:3a:a1:20:69:c1:bf:8e:33:f1:34:83:e8:f3:
bd:ef:31:ec:3e:1f:6e:93:98:ee:80:97:bc:38:3f:73:8a:80:
d9:9b:46:5b:36:7e:97:7c:e5:d9:68:c5:7e:9d:a5:39:1e:95:
5b:f4:a4:e5:f9:5b:e0:36:f9:7b:34:8c:26:ef:a7:c4:ac:cc:
a0:41:d7:63:a9:e1:16:17:fd:01:cb:9b:5e:ce:a1:c4:10:9d:
07:67:c9:bd:df:8f:a7:63:31:88:10:fe:ac:40:e0:cf:a2:5e:
cb:3b:95:1f:30:93:0e:b8:96:b8:b3:6c:01:1e:d4:63:6b:90:
cb:86:3a:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dt1wZWWmIHbqvc61cakbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NDY5YWYzMzYxMWI3OTA4NGY1NzVlOTViMTNlNjY1NTBl
ZGIzODMwHhcNMjUwNjI4MTUwMTM0WhcNMjUwNjI5MTUwMTM0WjAzMTEwLwYDVQQD
EyhiZWVjMmQzZDI2MjUyOGM1ZGMzOGYyMGQzYWJlMzc0MTJlN2FmMTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UqPFxijPSjVG0Jp1Vu2I7leiks2
7vi0dxAxf10z8YLc4YoxX5hUxgUzGw5T68EeOB34L/HiZOPVoSz8ikCgcfeYc+8q
HqMSanPgKydEfmsUKhIVVtbldf1swG+xd2fjAS1+c/XAs5M4yZV/ln5X5NrA1KMF
56MtvPvu718moskA/OoJYfm703/2FTT/PjJd+zPw9SYp2OkAgjPx5iKhrbdlD+Yj
RsZqFeWF3UUnDujhOcC/JkQS5E/cLYBRpBu4C9SEmlRAw9SukEa5UEd3fBhmJDks
MYcdFXGSo3VM0LjnjCQGlcRcTst/HJGBqerlC0zWNDEQZwbj/wy7M8WB5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7sLT0mJSjF3DjyDTq+N0EuevFzMB8GA1UdIwQY
MBaAFDlGmvM2EbeQhPV16VsT5mVQ7bODMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1VhYTh6WVJ0NUNFOVhYcFd4UG1aVkR0czRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yNWUzOGYtYTA5MS00ZTVjLWJmNjMt
NjZkZDJhOTFmYWNhLzEvT1VhYTh6WVJ0NUNFOVhYcFd4UG1aVkR0czRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yNWUzOGYtYTA5MS00ZTVjLWJmNjMtNjZkZDJhOTFmYWNh
LzEvT1VhYTh6WVJ0NUNFOVhYcFd4UG1aVkR0czRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYUhcRZT
tvnXGWwTpFCbm35WWqbnyUmgM0MS+N6/Pf6Mne/2y1Gp/hB9gzCKmnW4TyqK3Aeg
uW1/UvaYnHWfLqMWeL41eWBqUdsBuwLQhFsoczuvZ82VkpAu65fwAf9+ZJHRVOKf
xBnRZKxafWnb73X5IkXJEDJ7Gr0rXB07/kbxn4M6oSBpwb+OM/E0g+jzve8x7D4f
bpOY7oCXvDg/c4qA2ZtGWzZ+l3zl2WjFfp2lOR6VW/Sk5flb4Db5ezSMJu+nxKzM
oEHXY6nhFhf9AcubXs6hxBCdB2fJvd+Pp2MxiBD+rEDgz6JeyzuVHzCTDriWuLNs
AR7UY2uQy4Y6nw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:36 2025 by rpki-client