Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
File: a-OcMb6T9W5jvSbVscBy3HdTGeY.mft (raw, json)
Hash identifier: zj/rrBL1WyTzXmknwqm/3cbIpR8ENDVsT2o+ipcFaEc=
Subject key identifier: FD:41:02:26:AA:AF:0F:7F:AD:74:D9:AF:20:45:55:CC:74:F0:B1:97
Authority key identifier: 6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
Certificate issuer: /CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Certificate serial: 0197B7EA5827BE66B8E556A0ADA7C7578C29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
Manifest number: 0386
Signing time: Sat 28 Jun 2025 19:01:17 +0000
Manifest this update: Sat 28 Jun 2025 19:01:17 +0000
Manifest next update: Sun 29 Jun 2025 19:01:17 +0000
Files and hashes: 1: a-OcMb6T9W5jvSbVscBy3HdTGeY.crl (hash: KAkwNyE+qirzAW6X1Y9sy1Xn2l9bGJyBUz/qo1qjfjI=)
2: avdVBk-rHRbW-M4AabpJX7CSjxg.roa (hash: XlwxkSLG5mJnTFp/kB80ylCJ16RiA9KQHhkduE06FV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:58:27:be:66:b8:e5:56:a0:ad:a7:c7:57:8c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Validity
Not Before: Jun 28 19:01:17 2025 GMT
Not After : Jun 29 19:01:17 2025 GMT
Subject: CN=fd410226aaaf0f7fad74d9af204555cc74f0b197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:54:a8:0b:cc:1c:1c:73:58:80:05:67:ee:
c0:4c:b7:71:ae:5d:67:9f:20:b8:b8:c1:80:a9:da:
55:9c:79:63:24:97:62:0a:34:4d:68:63:b1:4a:e8:
61:ac:3a:b2:ce:f9:89:5a:dc:a9:e5:0f:e1:18:c1:
58:52:d7:51:f5:4e:32:88:0b:3e:7a:45:a8:a4:54:
10:52:e4:64:2a:97:c9:23:35:75:b9:4a:51:bb:09:
96:8d:5a:fe:32:4a:11:81:d3:94:3c:ca:76:52:e9:
24:e4:ef:c6:fa:d7:4d:b5:34:3f:22:1e:15:78:44:
1b:66:31:85:26:a6:3f:c4:57:83:96:7f:44:6e:76:
08:9e:f6:b8:a8:b0:10:ad:3f:ac:a6:e9:cc:d9:75:
e0:e9:94:f2:19:34:ce:0e:8e:45:af:b5:02:21:5e:
6d:bc:8b:84:aa:f9:e4:c8:0c:7c:51:74:b0:e1:03:
ae:5c:c7:32:48:4e:29:33:ff:79:16:0b:a0:79:e8:
b5:d4:a5:27:b8:28:ed:8f:fb:69:d6:b8:b8:58:69:
07:da:ea:b9:9d:05:20:b2:71:b0:f4:dc:8e:d2:e0:
ff:24:f5:f8:4c:c7:d0:92:20:46:03:d8:9b:7b:39:
3a:54:9f:6a:28:aa:86:38:55:cf:ef:8f:9a:34:b5:
08:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:41:02:26:AA:AF:0F:7F:AD:74:D9:AF:20:45:55:CC:74:F0:B1:97
X509v3 Authority Key Identifier:
keyid:6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f9:44:f7:79:6a:e6:e8:51:96:3e:45:fe:15:28:b4:7c:15:
bd:aa:bb:68:9d:75:9d:03:66:93:16:af:40:55:68:cf:a5:d2:
94:18:5e:82:65:cd:b7:fd:14:cf:68:14:10:5b:be:a1:4c:cc:
ef:81:2a:da:6a:22:6b:6b:96:00:0f:e4:52:f5:b9:b3:19:95:
34:98:e9:b3:8e:8f:2d:ba:b5:86:72:6d:07:ab:4c:f4:a5:f1:
c8:2a:f8:0e:dc:7b:de:03:f3:60:ed:cb:8c:05:82:11:42:70:
c4:79:11:7c:2e:36:3e:bc:71:4c:68:f0:af:0c:bc:fa:19:03:
41:21:fc:cf:0c:eb:09:2f:f1:d4:a8:98:67:be:11:ef:1b:21:
7b:74:a7:24:38:b1:2b:c5:29:ce:ac:2e:dc:41:ac:07:97:45:
09:f5:c1:e5:ac:7b:50:6f:56:71:53:e3:b4:b1:52:18:e2:85:
e6:2f:b3:ab:30:7c:56:83:90:1a:ec:c5:27:d8:02:06:75:0a:
19:3e:33:59:a8:2e:50:37:85:71:a2:32:65:aa:f3:df:27:5f:
96:a1:cf:71:c5:13:78:fc:99:5f:a2:ff:67:de:75:0a:e6:6b:
c6:71:5a:ef:3a:a3:d0:40:56:f2:28:ca:87:33:7d:f2:6c:ea:
d3:ca:b0:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36lgnvma45VagrafHV4wpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZTM5YzMxYmU5M2Y1NmU2M2JkMjZkNWIxYzA3MmRjNzc1
MzE5ZTYwHhcNMjUwNjI4MTkwMTE3WhcNMjUwNjI5MTkwMTE3WjAzMTEwLwYDVQQD
EyhmZDQxMDIyNmFhYWYwZjdmYWQ3NGQ5YWYyMDQ1NTVjYzc0ZjBiMTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR1UqAvMHBxzWIAFZ+7ATLdxrl1n
nyC4uMGAqdpVnHljJJdiCjRNaGOxSuhhrDqyzvmJWtyp5Q/hGMFYUtdR9U4yiAs+
ekWopFQQUuRkKpfJIzV1uUpRuwmWjVr+MkoRgdOUPMp2Uukk5O/G+tdNtTQ/Ih4V
eEQbZjGFJqY/xFeDln9EbnYInva4qLAQrT+spunM2XXg6ZTyGTTODo5Fr7UCIV5t
vIuEqvnkyAx8UXSw4QOuXMcySE4pM/95Fgugeei11KUnuCjtj/tp1ri4WGkH2uq5
nQUgsnGw9NyO0uD/JPX4TMfQkiBGA9ibezk6VJ9qKKqGOFXP74+aNLUIhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1BAiaqrw9/rXTZryBFVcx08LGXMB8GA1UdIwQY
MBaAFGvjnDG+k/VuY70m1bHActx3UxnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS1PY01iNlQ5VzVqdlNiVnNjQnkzSGRUR2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wM2M5ZDMtMGUyNS00Y2M3LTk2YTMt
MTE3YmY0Mjk0MWNhLzEvYS1PY01iNlQ5VzVqdlNiVnNjQnkzSGRUR2VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8wM2M5ZDMtMGUyNS00Y2M3LTk2YTMtMTE3YmY0Mjk0MWNh
LzEvYS1PY01iNlQ5VzVqdlNiVnNjQnkzSGRUR2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvlE93lq
5uhRlj5F/hUotHwVvaq7aJ11nQNmkxavQFVoz6XSlBhegmXNt/0Uz2gUEFu+oUzM
74Eq2moia2uWAA/kUvW5sxmVNJjps46PLbq1hnJtB6tM9KXxyCr4Dtx73gPzYO3L
jAWCEUJwxHkRfC42PrxxTGjwrwy8+hkDQSH8zwzrCS/x1KiYZ74R7xshe3SnJDix
K8Upzqwu3EGsB5dFCfXB5ax7UG9WcVPjtLFSGOKF5i+zqzB8VoOQGuzFJ9gCBnUK
GT4zWaguUDeFcaIyZarz3ydflqHPccUTePyZX6L/Z951CuZrxnFa7zqj0EBW8ijK
hzN98mzq08qwcA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:09 2025 by rpki-client