Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
File: OJsvo2UTg6f8aoatulbHxiB9dWg.mft (raw, json)
Hash identifier: PBWVsj9ZsitcWfE5iKkMUtoHZv8KbDXm0F7zXyDvo3Q=
Subject key identifier: 0F:71:99:D9:E1:C6:38:2A:9C:1C:01:49:13:74:BF:8B:F7:F4:14:32
Authority key identifier: 38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
Certificate issuer: /CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Certificate serial: 0197B6D7B345F756C35B87792A135A1DED2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
Manifest number: 0D9E
Signing time: Sat 28 Jun 2025 14:01:18 +0000
Manifest this update: Sat 28 Jun 2025 14:01:18 +0000
Manifest next update: Sun 29 Jun 2025 14:01:18 +0000
Files and hashes: 1: LVniV-fBUsD2XHyiKXh59lNaKck.roa (hash: e7ROoJyN3pM39RDR+x9hRmjX8OTAnl8OOTQ8mCyFwtU=)
2: OJsvo2UTg6f8aoatulbHxiB9dWg.crl (hash: SUaOmBF1qAmX+BKwT7QD7TjCFWCYE+VqDePzmIwwJqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b3:45:f7:56:c3:5b:87:79:2a:13:5a:1d:ed:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Validity
Not Before: Jun 28 14:01:18 2025 GMT
Not After : Jun 29 14:01:18 2025 GMT
Subject: CN=0f7199d9e1c6382a9c1c01491374bf8bf7f41432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:60:cc:86:6d:c1:53:dd:a9:7f:b1:24:45:ed:
3f:ac:41:8f:f0:1a:21:b5:85:1e:33:7d:5a:5c:0b:
fe:66:e0:02:c1:90:2d:ea:95:34:e1:6f:9b:39:a9:
f4:fe:cd:99:3f:e8:dc:82:5b:c9:7c:fb:54:03:b1:
c6:84:ff:c1:c1:75:d1:f9:88:86:ab:82:c9:05:e4:
fd:db:80:50:f1:45:80:3c:f7:33:06:a1:0b:ad:42:
60:5c:1b:15:37:ec:44:99:ba:57:53:31:a6:99:6f:
93:30:9c:d1:3c:ae:27:c6:e9:e0:07:d6:43:2d:ef:
d9:f5:e9:9a:20:06:ca:34:e0:5f:9a:e1:8d:06:f9:
e1:a8:59:05:6e:7b:6d:08:e1:bf:33:42:49:bf:6f:
87:f0:d2:28:ba:8e:59:7a:9c:37:e6:8c:3b:8f:25:
b8:ba:94:8c:e0:0b:b4:fc:24:cc:7a:76:ed:a6:53:
83:fd:71:eb:3c:58:cf:2b:9c:a2:d2:20:49:50:90:
f6:3c:54:14:91:ac:bd:46:de:f0:42:5e:7c:28:88:
c8:f8:4b:62:8d:fc:21:9d:f3:f1:f9:f6:39:07:40:
71:a8:89:25:03:68:63:6c:1c:00:73:28:3f:b3:29:
20:1f:e1:b3:4e:5e:26:88:19:5e:53:8f:03:87:04:
73:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:71:99:D9:E1:C6:38:2A:9C:1C:01:49:13:74:BF:8B:F7:F4:14:32
X509v3 Authority Key Identifier:
keyid:38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:51:f8:1d:52:cb:94:17:43:d3:b9:ef:29:72:d6:80:3e:b1:
63:44:a4:c6:56:85:0e:f7:dc:ab:60:40:84:3b:73:1c:d8:9d:
00:e2:53:1d:a5:09:f7:85:08:1a:e3:dc:1c:8b:98:f9:3c:4b:
29:db:b1:d4:cc:3c:27:8b:e4:ad:48:79:4e:b1:4f:66:d5:f9:
03:5f:fd:7c:44:a8:44:db:17:e3:2c:e4:d2:4d:a4:93:85:66:
64:2c:ca:16:7a:da:ca:2c:b0:eb:06:b2:b6:29:ad:9f:98:aa:
36:73:90:9a:95:9c:e5:8f:0b:a8:33:b5:6d:bc:9d:89:b9:99:
29:6d:62:e1:1b:d0:f5:c6:c5:1e:46:10:dd:73:54:d3:7a:e9:
1a:8c:2a:bf:92:77:e6:4e:5d:a2:01:0e:bd:8e:06:c7:9d:64:
d5:dd:f8:15:91:c7:24:20:09:8d:8d:e7:1e:1b:85:05:52:b1:
24:7a:bd:8f:de:be:57:fc:ea:8e:9a:b9:2f:ce:ac:7d:e6:99:
45:bc:a8:f8:e5:59:26:52:08:08:d4:83:12:e6:01:aa:35:21:
00:d5:5c:6f:6e:65:3d:39:39:bd:96:47:4c:86:d5:b4:05:3d:
a1:dc:a4:0b:78:55:4a:89:3c:95:4e:1a:51:82:27:60:35:fc:
4e:54:59:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe217NF91bDW4d5KhNaHe0qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OWIyZmEzNjUxMzgzYTdmYzZhODZhZGJhNTZjN2M2MjA3
ZDc1NjgwHhcNMjUwNjI4MTQwMTE4WhcNMjUwNjI5MTQwMTE4WjAzMTEwLwYDVQQD
EygwZjcxOTlkOWUxYzYzODJhOWMxYzAxNDkxMzc0YmY4YmY3ZjQxNDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGDMhm3BU92pf7EkRe0/rEGP8Boh
tYUeM31aXAv+ZuACwZAt6pU04W+bOan0/s2ZP+jcglvJfPtUA7HGhP/BwXXR+YiG
q4LJBeT924BQ8UWAPPczBqELrUJgXBsVN+xEmbpXUzGmmW+TMJzRPK4nxungB9ZD
Le/Z9emaIAbKNOBfmuGNBvnhqFkFbnttCOG/M0JJv2+H8NIouo5Zepw35ow7jyW4
upSM4Au0/CTMenbtplOD/XHrPFjPK5yi0iBJUJD2PFQUkay9Rt7wQl58KIjI+Eti
jfwhnfPx+fY5B0BxqIklA2hjbBwAcyg/sykgH+GzTl4miBleU48DhwRz3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9xmdnhxjgqnBwBSRN0v4v39BQyMB8GA1UdIwQY
MBaAFDibL6NlE4On/GqGrbpWx8YgfXVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0pzdm8yVVRnNmY4YW9hdHVsYkh4aUI5ZFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYWQyNmYtYTMzZS00MDY5LWE4MDIt
MzczYjUyMmE4MjFkLzEvT0pzdm8yVVRnNmY4YW9hdHVsYkh4aUI5ZFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xYWQyNmYtYTMzZS00MDY5LWE4MDItMzczYjUyMmE4MjFk
LzEvT0pzdm8yVVRnNmY4YW9hdHVsYkh4aUI5ZFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXlH4HVLL
lBdD07nvKXLWgD6xY0SkxlaFDvfcq2BAhDtzHNidAOJTHaUJ94UIGuPcHIuY+TxL
Kdux1Mw8J4vkrUh5TrFPZtX5A1/9fESoRNsX4yzk0k2kk4VmZCzKFnrayiyw6way
timtn5iqNnOQmpWc5Y8LqDO1bbydibmZKW1i4RvQ9cbFHkYQ3XNU03rpGowqv5J3
5k5dogEOvY4Gx51k1d34FZHHJCAJjY3nHhuFBVKxJHq9j96+V/zqjpq5L86sfeaZ
Rbyo+OVZJlIICNSDEuYBqjUhANVcb25lPTk5vZZHTIbVtAU9odykC3hVSok8lU4a
UYInYDX8TlRZRw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:25 2025 by rpki-client