Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
File: O0d6YmB_uUyOI7WgYseNk9-cvWk.mft (raw, json)
Hash identifier: slxOqO4pk8zebfTCAil+SXQ8tDWb55MQhkdAfH+EnpI=
Subject key identifier: 1A:DF:26:9B:14:19:AA:8D:3D:6E:A8:FC:44:D9:DA:D6:01:7B:6C:7E
Authority key identifier: 3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
Certificate issuer: /CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Certificate serial: 0197B6D7B387B9A73E980B0843A31259AD6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 14:01:18 +0000
Manifest this update: Sat 28 Jun 2025 14:01:18 +0000
Manifest next update: Sun 29 Jun 2025 14:01:18 +0000
Files and hashes: 1: KAady5nIQ7goGP7Rcsy66F2FCTk.roa (hash: NabV/t+jGm2/Hy6psxEDHdFW8WsqCHu/S3YWHXIah24=)
2: O0d6YmB_uUyOI7WgYseNk9-cvWk.crl (hash: eA6YvauO35pzbl/A86G2+j1iDIKmYlWc2goe5KPDZyQ=)
3: r-imVOZ1MKVCPTmznPktWbUEqW8.roa (hash: cRIVP2Lam6u4TX8QNidArFda2a92J/ptBDkcqev/q4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b3:87:b9:a7:3e:98:0b:08:43:a3:12:59:ad:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Validity
Not Before: Jun 28 14:01:18 2025 GMT
Not After : Jun 29 14:01:18 2025 GMT
Subject: CN=1adf269b1419aa8d3d6ea8fc44d9dad6017b6c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:13:f3:f1:f5:24:cd:ea:b6:07:6c:4d:46:d8:
73:40:48:e3:e3:a0:b0:c1:aa:95:03:37:7a:95:5f:
55:4c:14:c6:6f:48:93:6f:05:33:6e:bb:06:bc:07:
5b:d8:25:a1:98:dc:11:53:3c:3a:69:b5:ed:a5:c4:
02:8f:7d:3d:ce:c0:02:02:c3:14:49:58:8e:b4:08:
dd:95:8a:b1:3f:95:e4:0a:07:db:3b:e5:82:5f:57:
64:09:dd:f6:4e:08:5e:e1:a2:ba:8a:ab:af:ba:b9:
90:b3:a9:75:55:b3:d5:87:5e:d9:79:5e:e7:91:30:
b0:e4:a9:3d:72:3e:fa:f2:26:e5:30:29:d5:4d:99:
0f:56:9e:ed:a0:47:e6:95:2b:dd:bf:0b:6c:44:e4:
76:b7:37:d0:55:90:86:eb:22:9c:ec:cd:63:9f:a1:
f1:a9:8a:df:c0:8a:c7:31:58:f1:97:4b:36:a0:7a:
67:60:8b:ff:c1:fb:c8:a7:1c:9e:8d:21:be:54:4c:
81:21:f8:2b:03:ab:5f:7e:b6:17:a2:a0:a6:9d:0b:
57:e4:72:7f:72:b6:c5:de:4a:68:03:5e:d0:0d:a1:
3d:b1:12:da:97:64:b5:b2:a0:ff:d8:77:92:5b:9a:
5d:31:08:0a:0f:7f:68:a3:df:4f:c0:60:c8:16:1c:
58:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DF:26:9B:14:19:AA:8D:3D:6E:A8:FC:44:D9:DA:D6:01:7B:6C:7E
X509v3 Authority Key Identifier:
keyid:3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:58:d1:fe:70:b7:7d:c2:c0:e6:11:90:7d:0e:cd:a4:3b:39:
b8:84:db:9d:21:99:f5:b5:f9:55:82:2c:0d:0d:bd:9e:b1:a0:
8f:30:25:3a:e2:f6:d4:d6:4e:80:62:39:4e:fd:df:a2:a2:33:
31:92:80:17:8c:26:48:c9:60:b5:ca:dc:dd:f4:5e:cf:09:2d:
d8:55:1c:05:0d:a0:d6:7d:ee:fe:ec:fa:5f:0e:8f:4a:3f:0f:
de:59:6a:0c:f8:40:f9:33:55:bd:dc:fe:ba:31:d0:15:4e:0c:
7a:34:2f:e4:11:5f:c0:af:7e:de:6d:dc:9b:c0:37:6c:64:ef:
3f:43:65:25:9d:f2:b8:8e:c2:cd:ce:aa:b6:eb:36:81:6a:8c:
df:c0:73:3a:f2:e7:68:1f:fb:6f:f9:f4:61:cb:fe:ee:82:37:
d7:8f:4b:18:f4:38:cc:8d:42:56:46:f4:0c:58:aa:76:65:01:
33:26:70:bd:e2:25:1a:01:d8:36:50:9d:bb:e3:9f:af:0b:4f:
62:ff:13:58:e3:3f:24:6b:6f:4f:a7:88:36:08:b7:1a:9d:ed:
56:9a:65:e5:46:ce:3c:7f:a7:3f:cc:26:d7:a2:3d:d2:11:07:
4a:0f:a8:bd:74:29:44:f1:6a:d5:a5:92:93:48:d8:71:82:e3:
c4:19:a5:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe217OHuac+mAsIQ6MSWa1uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc3YTYyNjA3ZmI5NGM4ZTIzYjVhMDYyYzc4ZDkzZGY5
Y2JkNjkwHhcNMjUwNjI4MTQwMTE4WhcNMjUwNjI5MTQwMTE4WjAzMTEwLwYDVQQD
EygxYWRmMjY5YjE0MTlhYThkM2Q2ZWE4ZmM0NGQ5ZGFkNjAxN2I2YzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRPz8fUkzeq2B2xNRthzQEjj46Cw
waqVAzd6lV9VTBTGb0iTbwUzbrsGvAdb2CWhmNwRUzw6abXtpcQCj309zsACAsMU
SViOtAjdlYqxP5XkCgfbO+WCX1dkCd32Tghe4aK6iquvurmQs6l1VbPVh17ZeV7n
kTCw5Kk9cj768iblMCnVTZkPVp7toEfmlSvdvwtsROR2tzfQVZCG6yKc7M1jn6Hx
qYrfwIrHMVjxl0s2oHpnYIv/wfvIpxyejSG+VEyBIfgrA6tffrYXoqCmnQtX5HJ/
crbF3kpoA17QDaE9sRLal2S1sqD/2HeSW5pdMQgKD39oo99PwGDIFhxYdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrfJpsUGaqNPW6o/ETZ2tYBe2x+MB8GA1UdIwQY
MBaAFDtHemJgf7lMjiO1oGLHjZPfnL1pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkNlltQl91VXlPSTdXZ1lzZU5rOS1jdldrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mMzMzNzktNjNkOS00ZjJiLThlNjUt
MzBhNmMzYWY5MDk1LzEvTzBkNlltQl91VXlPSTdXZ1lzZU5rOS1jdldrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9mMzMzNzktNjNkOS00ZjJiLThlNjUtMzBhNmMzYWY5MDk1
LzEvTzBkNlltQl91VXlPSTdXZ1lzZU5rOS1jdldrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1jR/nC3
fcLA5hGQfQ7NpDs5uITbnSGZ9bX5VYIsDQ29nrGgjzAlOuL21NZOgGI5Tv3foqIz
MZKAF4wmSMlgtcrc3fRezwkt2FUcBQ2g1n3u/uz6Xw6PSj8P3llqDPhA+TNVvdz+
ujHQFU4MejQv5BFfwK9+3m3cm8A3bGTvP0NlJZ3yuI7Czc6qtus2gWqM38BzOvLn
aB/7b/n0Ycv+7oI3149LGPQ4zI1CVkb0DFiqdmUBMyZwveIlGgHYNlCdu+OfrwtP
Yv8TWOM/JGtvT6eINgi3Gp3tVppl5UbOPH+nP8wm16I90hEHSg+ovXQpRPFq1aWS
k0jYcYLjxBml1g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:24:57 2025 by rpki-client