Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
File: C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json)
Hash identifier: 10ZWeyul0O/I7RiVC8yEpYOwJhA5YibdPLR0dIIbwAE=
Subject key identifier: 30:EE:22:8F:8F:18:AE:0E:99:8F:36:8F:AA:1F:10:D8:64:D2:14:35
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Certificate issuer: /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial: 0197B70F01DDC4EC7BE4948005BD1CE95D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
Manifest number: 0A75
Signing time: Sat 28 Jun 2025 15:01:43 +0000
Manifest this update: Sat 28 Jun 2025 15:01:43 +0000
Manifest next update: Sun 29 Jun 2025 15:01:43 +0000
Files and hashes: 1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: AiymdKJZsvRBLurZMS2JdzUSV6FVt8BFNUq+SDUyOlA=)
2: ThulFZ8R9xpzNZdDBqkxoRYsRek.roa (hash: j39ExXLrnr3e7L1fGlK9W3BRFHLWAFmsEEaBZfVOBbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:01:dd:c4:ec:7b:e4:94:80:05:bd:1c:e9:5d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Validity
Not Before: Jun 28 15:01:43 2025 GMT
Not After : Jun 29 15:01:43 2025 GMT
Subject: CN=30ee228f8f18ae0e998f368faa1f10d864d21435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:f6:a8:56:ec:79:4e:be:fb:c3:e4:4d:19:
3e:dd:23:29:40:9b:7f:73:0a:b3:f7:c0:ac:20:6e:
4c:89:a6:7e:cf:ce:ca:75:3f:e5:87:cb:27:d3:55:
53:38:d2:f8:97:dc:bb:1f:64:d8:67:3a:13:45:a8:
69:fd:16:b6:2a:86:ae:12:5d:cb:97:fc:7d:38:89:
5c:b9:e4:d7:d7:54:91:54:e3:06:87:fc:1c:8d:02:
26:59:58:23:3f:dc:29:69:cf:04:89:3e:e9:d5:c9:
e1:1e:f6:25:c3:35:f1:08:0c:ad:c5:73:99:e1:48:
a1:a7:0b:0a:fd:cf:e5:75:ad:11:83:e0:c0:a3:1f:
df:c3:b3:6d:24:5b:ce:19:e7:24:b8:64:de:d1:93:
08:68:ea:ee:a4:b0:5c:36:6d:3e:2d:85:29:29:be:
e9:67:b9:92:48:cc:27:83:f6:a4:46:5e:b2:4f:37:
47:29:55:ce:38:fc:0f:95:e1:bc:d0:25:c2:0d:8d:
fb:b0:60:da:fb:f8:e8:f2:80:c2:62:c6:04:83:54:
86:19:72:8f:c2:5b:a4:98:b5:06:45:d5:2b:89:0f:
0a:d7:c9:c1:4a:26:a1:b6:f4:ae:e1:b4:2c:eb:8a:
3a:c5:2a:e5:9b:34:d0:fc:de:13:db:ce:cc:16:23:
ff:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EE:22:8F:8F:18:AE:0E:99:8F:36:8F:AA:1F:10:D8:64:D2:14:35
X509v3 Authority Key Identifier:
keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f5:68:14:97:e5:d3:e3:e6:40:36:2e:ba:39:22:ce:03:9d:
c3:aa:61:e9:a3:8d:0d:21:bb:8e:a1:3a:96:2d:38:f2:74:d2:
70:d0:1c:6c:c6:e9:ad:2e:94:fb:be:f7:12:4a:00:0c:55:34:
0a:6b:bc:e8:db:08:ae:88:1b:2d:7a:d3:83:ee:8f:65:ac:51:
f4:50:03:13:a7:9a:80:cd:79:f9:44:81:66:68:c9:37:2b:bd:
97:20:07:31:03:a6:e2:67:f3:73:07:10:d5:3a:e5:aa:50:08:
ce:dd:d9:48:71:c5:03:65:67:20:ed:75:72:67:16:ae:0e:27:
95:7a:00:d6:0a:3f:64:54:67:f7:4b:3a:a4:a5:c3:ed:55:39:
da:f8:29:75:89:dc:4b:d7:3e:e6:3e:7d:25:3b:7a:04:b8:cb:
81:72:36:4e:dd:6b:8f:8c:da:a9:d2:28:9f:c8:5e:46:1d:f3:
fc:df:93:3b:89:25:11:20:eb:39:ec:1a:04:78:99:c1:87:e0:
d3:ef:19:cf:31:bf:2f:93:3a:66:20:78:50:93:ae:71:cc:63:
62:53:2b:c8:28:5f:2b:c0:4e:7b:bc:f5:43:07:a6:bc:7c:ed:
44:48:7b:fa:3b:91:f7:3a:7a:a7:7d:af:eb:c4:39:35:fb:d1:
f8:6b:de:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DwHdxOx75JSABb0c6V1TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZWEwZWNkZDYzNGEzYzA3NWUzNWRiOWRjYTU3NjhlNGY3
NmNkODUwHhcNMjUwNjI4MTUwMTQzWhcNMjUwNjI5MTUwMTQzWjAzMTEwLwYDVQQD
EygzMGVlMjI4ZjhmMThhZTBlOTk4ZjM2OGZhYTFmMTBkODY0ZDIxNDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2T2qFbseU6++8PkTRk+3SMpQJt/
cwqz98CsIG5MiaZ+z87KdT/lh8sn01VTONL4l9y7H2TYZzoTRahp/Ra2KoauEl3L
l/x9OIlcueTX11SRVOMGh/wcjQImWVgjP9wpac8EiT7p1cnhHvYlwzXxCAytxXOZ
4UihpwsK/c/lda0Rg+DAox/fw7NtJFvOGeckuGTe0ZMIaOrupLBcNm0+LYUpKb7p
Z7mSSMwng/akRl6yTzdHKVXOOPwPleG80CXCDY37sGDa+/jo8oDCYsYEg1SGGXKP
wlukmLUGRdUriQ8K18nBSiahtvSu4bQs64o6xSrlmzTQ/N4T287MFiP/6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDuIo+PGK4OmY82j6ofENhk0hQ1MB8GA1UdIwQY
MBaAFAvqDs3WNKPAdeNdudyldo5Pds2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTIt
MjNmY2M1MjRlYTg4LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTItMjNmY2M1MjRlYTg4
LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfVoFJfl
0+PmQDYuujkizgOdw6ph6aONDSG7jqE6li048nTScNAcbMbprS6U+773EkoADFU0
Cmu86NsIrogbLXrTg+6PZaxR9FADE6eagM15+USBZmjJNyu9lyAHMQOm4mfzcwcQ
1TrlqlAIzt3ZSHHFA2VnIO11cmcWrg4nlXoA1go/ZFRn90s6pKXD7VU52vgpdYnc
S9c+5j59JTt6BLjLgXI2Tt1rj4zaqdIon8heRh3z/N+TO4klESDrOewaBHiZwYfg
0+8ZzzG/L5M6ZiB4UJOuccxjYlMryChfK8BOe7z1QwemvHztREh7+juR9zp6p32v
68Q5NfvR+GveSw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:05 2025 by rpki-client