Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft
File: OZETdfzEhZYSGQ6-zHrjcaAaam0.mft (raw, json)
Hash identifier: NiGLoRDmO/GN/+8RqWdW4Bu6SsFkG2SFlxPFC1hE+jo=
Subject key identifier: C2:9E:7D:4E:DC:4D:FE:7C:40:33:E8:D1:49:7B:C2:C3:B6:D1:33:40
Authority key identifier: 39:91:13:75:FC:C4:85:96:12:19:0E:BE:CC:7A:E3:71:A0:1A:6A:6D
Certificate issuer: /CN=39911375fcc4859612190ebecc7ae371a01a6a6d
Certificate serial: 0197B7459A66E452F1CC382FDD7EE7F14985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZETdfzEhZYSGQ6-zHrjcaAaam0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft
Manifest number: 0EDE
Signing time: Sat 28 Jun 2025 16:01:21 +0000
Manifest this update: Sat 28 Jun 2025 16:01:21 +0000
Manifest next update: Sun 29 Jun 2025 16:01:21 +0000
Files and hashes: 1: OZETdfzEhZYSGQ6-zHrjcaAaam0.crl (hash: wwCZi0PaN4q5CK9gd8z1SsyPDFpQbhgY6W+P0lk7CWk=)
2: mV-huyQ7uf2YxiJ1JUpDypBxzhA.roa (hash: XQgQ9aC7Ey76psDYNwOwzM5lgNTkkh3rEJlv1Rte2h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZETdfzEhZYSGQ6-zHrjcaAaam0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:9a:66:e4:52:f1:cc:38:2f:dd:7e:e7:f1:49:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39911375fcc4859612190ebecc7ae371a01a6a6d
Validity
Not Before: Jun 28 16:01:21 2025 GMT
Not After : Jun 29 16:01:21 2025 GMT
Subject: CN=c29e7d4edc4dfe7c4033e8d1497bc2c3b6d13340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:28:2d:e1:75:05:5e:2a:9d:d0:c8:44:ed:
ad:50:f7:6d:5b:90:b3:cb:49:6b:66:05:1b:b2:a7:
5a:74:c8:df:11:e9:1e:0e:2f:13:85:a1:1b:9d:19:
b4:74:0f:f0:4b:f8:b4:c9:fe:97:b2:47:2d:b8:33:
69:9c:44:e9:0d:66:2a:cc:f1:b6:99:c4:2d:95:c4:
61:22:d0:7a:01:cb:27:90:f2:97:59:70:63:8d:bd:
89:a0:cc:18:bf:a9:2c:9b:a0:d7:f6:5d:f3:6f:06:
15:a6:87:c2:b8:73:7d:26:17:a7:61:07:18:f9:d9:
e1:01:92:44:f5:be:ea:09:44:d5:12:e1:f7:62:7e:
81:08:ab:85:2d:83:b2:22:1c:c2:95:46:58:77:b1:
95:65:35:92:a5:68:2b:fa:25:ff:93:ec:09:f9:09:
f7:12:15:b9:07:99:f3:21:d9:ae:0f:79:6a:ee:59:
67:6c:31:f5:13:0e:ed:72:7b:ed:82:9d:f5:a5:9e:
13:8f:94:a3:74:89:10:b3:fd:c2:fe:16:9f:f5:06:
82:d2:c2:bb:47:26:04:b1:fe:38:9b:ef:45:a3:87:
25:e2:77:a7:41:cf:cc:e8:76:6c:3b:60:39:a7:70:
a0:62:4f:71:b9:af:dd:ec:12:54:fa:28:f4:77:8b:
e3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9E:7D:4E:DC:4D:FE:7C:40:33:E8:D1:49:7B:C2:C3:B6:D1:33:40
X509v3 Authority Key Identifier:
keyid:39:91:13:75:FC:C4:85:96:12:19:0E:BE:CC:7A:E3:71:A0:1A:6A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZETdfzEhZYSGQ6-zHrjcaAaam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9e:90:f2:9c:1e:ea:7a:a1:fd:55:5e:e7:e7:1a:45:28:4d:
e0:2a:4e:7c:5b:a6:3f:83:a9:e9:3c:27:1e:04:85:6f:31:61:
83:45:e9:31:dd:dc:5f:80:a9:79:b6:8c:b3:22:33:ce:6d:7d:
e8:cd:4b:1b:90:f7:cd:a2:d2:0a:fd:fb:70:a2:a8:2a:4c:6a:
29:bd:64:fd:90:3a:ff:80:ad:04:79:91:be:a0:36:6b:d9:45:
4c:3b:38:32:77:11:d4:17:9f:bf:4f:83:bc:4e:43:4d:23:dc:
4a:a9:73:74:9a:e6:77:c5:41:ac:6a:94:2a:ec:b8:b6:c9:d5:
80:6e:85:f3:c6:b6:a2:4c:53:c4:10:4d:c0:95:4b:99:e4:c5:
35:07:cb:73:96:6e:ee:9f:6b:6c:41:fc:d7:e3:3c:13:7e:69:
de:fd:2e:46:85:97:65:72:af:c3:86:6d:41:99:52:b6:2f:e4:
83:3d:1b:06:85:bd:a6:02:10:a8:d0:14:0b:5d:ee:f8:f1:97:
5a:bd:e0:44:8c:21:40:0f:ce:d9:05:99:40:6a:69:11:29:d3:
94:dd:93:e5:75:92:b3:16:d4:8e:4d:ee:e7:e5:1c:e3:90:05:
8c:60:26:ad:91:ab:91:62:11:59:ae:51:ca:62:83:2c:70:9d:
5b:5c:b4:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RZpm5FLxzDgv3X7n8UmFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5OTExMzc1ZmNjNDg1OTYxMjE5MGViZWNjN2FlMzcxYTAx
YTZhNmQwHhcNMjUwNjI4MTYwMTIxWhcNMjUwNjI5MTYwMTIxWjAzMTEwLwYDVQQD
EyhjMjllN2Q0ZWRjNGRmZTdjNDAzM2U4ZDE0OTdiYzJjM2I2ZDEzMzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptQoLeF1BV4qndDIRO2tUPdtW5Cz
y0lrZgUbsqdadMjfEekeDi8ThaEbnRm0dA/wS/i0yf6XskctuDNpnETpDWYqzPG2
mcQtlcRhItB6AcsnkPKXWXBjjb2JoMwYv6ksm6DX9l3zbwYVpofCuHN9JhenYQcY
+dnhAZJE9b7qCUTVEuH3Yn6BCKuFLYOyIhzClUZYd7GVZTWSpWgr+iX/k+wJ+Qn3
EhW5B5nzIdmuD3lq7llnbDH1Ew7tcnvtgp31pZ4Tj5SjdIkQs/3C/haf9QaC0sK7
RyYEsf44m+9Fo4cl4nenQc/M6HZsO2A5p3CgYk9xua/d7BJU+ij0d4vjVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKefU7cTf58QDPo0Ul7wsO20TNAMB8GA1UdIwQY
MBaAFDmRE3X8xIWWEhkOvsx643GgGmptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1pFVGRmekVoWllTR1E2LXpIcmpjYUFhYW0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82MWMwYzUtNTI1Ny00NTNjLThlNzQt
OTMzZDkyZDAwMDBjLzEvT1pFVGRmekVoWllTR1E2LXpIcmpjYUFhYW0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82MWMwYzUtNTI1Ny00NTNjLThlNzQtOTMzZDkyZDAwMDBj
LzEvT1pFVGRmekVoWllTR1E2LXpIcmpjYUFhYW0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZ6Q8pwe
6nqh/VVe5+caRShN4CpOfFumP4Op6TwnHgSFbzFhg0XpMd3cX4CpebaMsyIzzm19
6M1LG5D3zaLSCv37cKKoKkxqKb1k/ZA6/4CtBHmRvqA2a9lFTDs4MncR1Befv0+D
vE5DTSPcSqlzdJrmd8VBrGqUKuy4tsnVgG6F88a2okxTxBBNwJVLmeTFNQfLc5Zu
7p9rbEH81+M8E35p3v0uRoWXZXKvw4ZtQZlSti/kgz0bBoW9pgIQqNAUC13u+PGX
Wr3gRIwhQA/O2QWZQGppESnTlN2T5XWSsxbUjk3u5+Uc45AFjGAmrZGrkWIRWa5R
ymKDLHCdW1y0xw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:36:48 2025 by rpki-client