Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
File: OyMEQv6un8Jri9iH-qDtAnWCelg.mft (raw, json)
Hash identifier: 4NWrEJbs7Tp/UgtufG+dASxXqo124BN0GnN2Nhan4EM=
Subject key identifier: 27:27:6C:26:1C:45:12:E9:AE:88:8D:76:FF:92:F6:60:E7:81:50:8F
Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Certificate serial: 0197BA7E8869714A166EC553A574B780992B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
Manifest number: 15C7
Signing time: Sun 29 Jun 2025 07:02:24 +0000
Manifest this update: Sun 29 Jun 2025 07:02:24 +0000
Manifest next update: Mon 30 Jun 2025 07:02:24 +0000
Files and hashes: 1: OyMEQv6un8Jri9iH-qDtAnWCelg.crl (hash: pgvtuJmyXi4vWMtsBAQ865SFvGx2cn5Gwa2+7cp1LSg=)
2: bYZg5VNnDS3g8_L52xT8Z2YcZHI.roa (hash: 0G8Nfe3vvbb4R9E1kVJGXztygd9crnFLcrSCl4faEH8=)
3: uQkJp5gejSkWH0cMZgm49Hidyo8.roa (hash: DCLiMhSoFxaa6tq6Shu2BcZUIDAzjhGc3ukCezafEuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:88:69:71:4a:16:6e:c5:53:a5:74:b7:80:99:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Validity
Not Before: Jun 29 07:02:24 2025 GMT
Not After : Jun 30 07:02:24 2025 GMT
Subject: CN=27276c261c4512e9ae888d76ff92f660e781508f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:45:32:49:ed:72:3a:c7:54:4b:06:94:88:
b8:ff:3c:a7:62:e3:2e:44:0d:94:de:85:47:02:39:
8c:62:4d:ee:57:1b:05:20:e9:7e:f8:0b:ef:06:70:
8d:aa:6c:1b:ea:df:c2:96:cb:5c:34:ee:4a:f7:86:
88:ea:fe:f8:f4:4c:6e:08:47:47:aa:7d:9d:84:d2:
5f:1a:1d:69:ba:18:d9:cd:88:b4:8f:65:d4:6a:af:
cd:e1:71:f8:0f:25:31:ec:f0:e2:c4:fc:f9:76:7c:
59:26:1b:d9:b8:1c:40:c0:48:bd:6d:2a:7d:24:05:
65:51:38:a9:62:61:ac:49:f5:bb:65:72:58:f3:a5:
3b:71:45:d7:dd:5e:83:ca:c2:0e:86:ac:a5:5b:d3:
8a:25:41:76:4a:0d:e8:57:32:46:2f:ff:52:16:8d:
97:01:b0:2f:5a:ea:ae:de:0a:1a:1f:02:14:da:82:
40:ce:cc:a5:68:0e:a2:59:8d:bb:df:48:a5:32:83:
ad:ba:04:76:2e:80:6c:36:42:c4:2d:55:dd:ec:91:
7e:10:75:31:66:72:c1:89:9b:3f:4a:74:06:b1:7a:
22:cb:9e:4f:c9:fb:0a:ff:e1:04:d7:31:d8:b1:6c:
46:fe:64:85:d5:3b:19:8a:47:dc:4e:93:ab:f0:8c:
ad:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:27:6C:26:1C:45:12:E9:AE:88:8D:76:FF:92:F6:60:E7:81:50:8F
X509v3 Authority Key Identifier:
keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:19:cf:ff:56:da:d1:c2:f8:f9:18:c7:2d:3a:43:75:4c:3a:
79:1a:43:9a:94:86:f5:21:56:79:8c:60:31:70:46:52:72:0a:
72:79:fd:1f:b6:7b:9e:a9:9c:88:b2:b5:28:c5:f3:0b:51:7b:
17:90:86:d0:e3:68:d2:12:44:f8:f6:8d:83:72:ec:26:89:a5:
19:a0:93:c4:ab:03:0d:58:28:b5:6b:8b:92:7d:1d:e7:64:2b:
17:d9:c3:df:e0:b6:b8:3a:c0:e4:b8:59:95:ce:17:c5:a8:2c:
4f:9c:c6:3d:05:9e:4d:cf:64:d5:e7:7d:e8:13:f9:f6:07:bb:
a7:08:70:76:1c:ed:c4:fe:4a:6c:28:10:19:0c:97:25:5a:60:
73:ff:a1:a3:3c:e5:eb:61:cc:df:06:2c:74:10:ce:ec:93:08:
a1:e6:60:60:96:2e:e2:0d:cd:a6:92:e6:38:a2:cd:af:56:21:
3e:ea:cb:f2:40:42:1a:8c:27:a9:95:4a:e3:03:f5:15:50:03:
ce:b2:80:7a:c3:ae:c1:9f:50:7d:2d:02:81:f7:8b:d7:75:cb:
ac:10:59:00:70:ab:34:20:ce:c3:59:bd:87:91:bf:b5:3b:f8:
59:4a:75:4b:50:c9:c1:d4:bb:45:d6:2b:cb:1b:64:d9:91:b5:
ef:c0:51:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6fohpcUoWbsVTpXS3gJkrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMjMwNDQyZmVhZTlmYzI2YjhiZDg4N2ZhYTBlZDAyNzU4
MjdhNTgwHhcNMjUwNjI5MDcwMjI0WhcNMjUwNjMwMDcwMjI0WjAzMTEwLwYDVQQD
EygyNzI3NmMyNjFjNDUxMmU5YWU4ODhkNzZmZjkyZjY2MGU3ODE1MDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnBFMkntcjrHVEsGlIi4/zynYuMu
RA2U3oVHAjmMYk3uVxsFIOl++AvvBnCNqmwb6t/ClstcNO5K94aI6v749ExuCEdH
qn2dhNJfGh1puhjZzYi0j2XUaq/N4XH4DyUx7PDixPz5dnxZJhvZuBxAwEi9bSp9
JAVlUTipYmGsSfW7ZXJY86U7cUXX3V6DysIOhqylW9OKJUF2Sg3oVzJGL/9SFo2X
AbAvWuqu3goaHwIU2oJAzsylaA6iWY2730ilMoOtugR2LoBsNkLELVXd7JF+EHUx
ZnLBiZs/SnQGsXoiy55PyfsK/+EE1zHYsWxG/mSF1TsZikfcTpOr8IytzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcnbCYcRRLproiNdv+S9mDngVCPMB8GA1UdIwQY
MBaAFDsjBEL+rp/Ca4vYh/qg7QJ1gnpYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3lNRVF2NnVuOEpyaTlpSC1xRHRBbldDZWxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zYTEwOTQtOWI3MC00MjUxLWI2OGYt
NzI2NzA3Mzc2MWQ0LzEvT3lNRVF2NnVuOEpyaTlpSC1xRHRBbldDZWxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8zYTEwOTQtOWI3MC00MjUxLWI2OGYtNzI2NzA3Mzc2MWQ0
LzEvT3lNRVF2NnVuOEpyaTlpSC1xRHRBbldDZWxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRnP/1ba
0cL4+RjHLTpDdUw6eRpDmpSG9SFWeYxgMXBGUnIKcnn9H7Z7nqmciLK1KMXzC1F7
F5CG0ONo0hJE+PaNg3LsJomlGaCTxKsDDVgotWuLkn0d52QrF9nD3+C2uDrA5LhZ
lc4XxagsT5zGPQWeTc9k1ed96BP59ge7pwhwdhztxP5KbCgQGQyXJVpgc/+hozzl
62HM3wYsdBDO7JMIoeZgYJYu4g3NppLmOKLNr1YhPurL8kBCGownqZVK4wP1FVAD
zrKAesOuwZ9QfS0CgfeL13XLrBBZAHCrNCDOw1m9h5G/tTv4WUp1S1DJwdS7RdYr
yxtk2ZG178BRZA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:48:43 2025 by rpki-client