Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
File: o8cchkWd50u9NaPMv9iuXZy00tg.mft (raw, json)
Hash identifier: 0cqorfcECfa9FfgraWdTJqYxPcBryiv1PF766s6PHMc=
Subject key identifier: B5:5F:2A:59:7D:21:39:98:04:BE:C3:9B:34:7B:34:1A:E4:39:79:DA
Authority key identifier: A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
Certificate issuer: /CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Certificate serial: 0197B6A06584926D2353356FC6DF75BF3D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
Manifest number: 0E67
Signing time: Sat 28 Jun 2025 13:00:54 +0000
Manifest this update: Sat 28 Jun 2025 13:00:54 +0000
Manifest next update: Sun 29 Jun 2025 13:00:54 +0000
Files and hashes: 1: UK3kp7DVS-fpdp_PyKKZBPAEkaQ.roa (hash: 8KxM7G0u96R3lRI3p6WhEJjK8omSDAMQXe8llr10HQ8=)
2: o8cchkWd50u9NaPMv9iuXZy00tg.crl (hash: zLpBAL3pPdjrbebGA0BpgUBFFKO5BT+9VAxirAwOooo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:65:84:92:6d:23:53:35:6f:c6:df:75:bf:3d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Validity
Not Before: Jun 28 13:00:54 2025 GMT
Not After : Jun 29 13:00:54 2025 GMT
Subject: CN=b55f2a597d21399804bec39b347b341ae43979da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b5:4a:c8:52:93:67:df:0f:01:32:7d:a5:3f:
8b:6b:01:e0:7a:46:a3:73:21:ea:52:cb:fa:53:08:
dc:21:96:8b:8e:5e:67:ae:2e:81:6d:aa:b7:8b:c6:
51:0a:03:5b:e0:03:c9:eb:0a:6e:6a:c8:f3:d8:8c:
03:d8:ed:7b:53:31:b4:39:38:da:99:81:07:00:60:
d8:19:1c:23:a2:bb:fe:6c:e1:0a:72:e8:68:3b:44:
17:13:21:4f:19:61:7e:03:09:57:d2:dc:b1:73:7b:
16:96:8c:04:b8:df:94:96:00:d4:b7:a7:d6:21:88:
fd:a4:6b:18:ee:4f:92:c7:a4:dc:8c:2d:8e:84:38:
80:17:6f:bb:ef:4a:23:3c:9c:c6:c8:10:b1:13:8d:
46:04:02:87:c5:57:ed:b1:eb:18:f0:91:88:cc:9f:
04:f1:07:54:6f:ed:c3:63:78:60:9b:bf:44:07:21:
47:34:e9:f8:dc:8d:ed:84:99:97:2f:7e:ce:4e:e3:
83:63:47:cf:3e:f4:45:6a:06:e1:3b:99:1a:52:94:
aa:ac:e5:7d:91:e3:92:46:7a:20:cf:62:d0:09:ae:
34:12:cb:c8:f0:a5:0e:6e:38:30:b9:f2:b0:b2:df:
b4:21:a6:91:00:91:cd:82:a0:d5:70:d5:01:2c:1c:
7e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5F:2A:59:7D:21:39:98:04:BE:C3:9B:34:7B:34:1A:E4:39:79:DA
X509v3 Authority Key Identifier:
keyid:A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:cf:fc:a3:18:fc:c9:26:be:d9:3b:4c:1f:c2:51:73:9a:2c:
f7:a0:8c:ae:7d:8a:3b:31:7a:6b:6c:bb:f7:b8:a4:09:4a:b5:
6f:a3:a0:29:9c:75:4c:86:5e:6e:ae:79:f7:d2:46:a0:0b:69:
11:e3:19:6b:f4:eb:a1:ad:75:02:5e:8a:a4:bb:aa:c7:27:1a:
49:ba:03:7b:e1:b9:9c:98:74:65:33:69:e4:57:ab:d1:dd:cc:
94:bb:81:59:46:b6:32:4f:b5:8d:a8:6a:a4:04:b7:cb:e0:a8:
38:2b:7a:cb:6e:85:2d:a2:7b:6e:db:9d:46:d8:fc:49:8d:41:
e5:f9:cd:5c:73:ed:40:00:fa:38:68:fb:12:36:7f:07:8a:e4:
03:fa:b5:aa:cc:23:93:24:3f:66:55:20:6c:3b:3f:d1:10:1e:
5c:6c:6e:bf:d1:14:7c:96:cc:ae:93:ae:ae:06:6c:76:82:ae:
29:2e:34:d7:20:3e:cd:8f:a1:ab:30:2b:1d:29:0c:29:4e:03:
6d:f0:d9:2c:42:57:2c:33:91:ec:91:af:02:4a:37:00:bf:33:
5d:ee:fe:7f:59:2e:e2:5e:78:da:f2:9c:60:69:99:35:20:a1:
a6:b4:38:18:c3:5b:f9:3f:45:49:6b:d1:28:2f:9a:85:da:0f:
4f:47:ad:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oGWEkm0jUzVvxt91vz0eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYzcxYzg2NDU5ZGU3NGJiZDM1YTNjY2JmZDhhZTVkOWNi
NGQyZDgwHhcNMjUwNjI4MTMwMDU0WhcNMjUwNjI5MTMwMDU0WjAzMTEwLwYDVQQD
EyhiNTVmMmE1OTdkMjEzOTk4MDRiZWMzOWIzNDdiMzQxYWU0Mzk3OWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLVKyFKTZ98PATJ9pT+LawHgekaj
cyHqUsv6UwjcIZaLjl5nri6Bbaq3i8ZRCgNb4APJ6wpuasjz2IwD2O17UzG0OTja
mYEHAGDYGRwjorv+bOEKcuhoO0QXEyFPGWF+AwlX0tyxc3sWlowEuN+UlgDUt6fW
IYj9pGsY7k+Sx6TcjC2OhDiAF2+770ojPJzGyBCxE41GBAKHxVftsesY8JGIzJ8E
8QdUb+3DY3hgm79EByFHNOn43I3thJmXL37OTuODY0fPPvRFagbhO5kaUpSqrOV9
keOSRnogz2LQCa40EsvI8KUObjgwufKwst+0IaaRAJHNgqDVcNUBLBx+7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVfKll9ITmYBL7DmzR7NBrkOXnaMB8GA1UdIwQY
MBaAFKPHHIZFnedLvTWjzL/Yrl2ctNLYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzhjY2hrV2Q1MHU5TmFQTXY5aXVYWnkwMHRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jYzhlN2EtZTQxMy00M2ZmLWFhNTkt
MDkxNGFkMjRhM2U0LzEvbzhjY2hrV2Q1MHU5TmFQTXY5aXVYWnkwMHRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9jYzhlN2EtZTQxMy00M2ZmLWFhNTktMDkxNGFkMjRhM2U0
LzEvbzhjY2hrV2Q1MHU5TmFQTXY5aXVYWnkwMHRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXc/8oxj8
ySa+2TtMH8JRc5os96CMrn2KOzF6a2y797ikCUq1b6OgKZx1TIZebq5599JGoAtp
EeMZa/Troa11Al6KpLuqxycaSboDe+G5nJh0ZTNp5Fer0d3MlLuBWUa2Mk+1jahq
pAS3y+CoOCt6y26FLaJ7btudRtj8SY1B5fnNXHPtQAD6OGj7EjZ/B4rkA/q1qswj
kyQ/ZlUgbDs/0RAeXGxuv9EUfJbMrpOurgZsdoKuKS401yA+zY+hqzArHSkMKU4D
bfDZLEJXLDOR7JGvAko3AL8zXe7+f1ku4l542vKcYGmZNSChprQ4GMNb+T9FSWvR
KC+ahdoPT0etww==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:49 2025 by rpki-client