Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
File: oum7stw2HxSLUadQgNjgtPeKH4I.mft (raw, json)
Hash identifier: yWrH9PBpfIFFRwPLZ3qqPeWzWIRaXg46yTVjWacatl0=
Subject key identifier: E7:CA:14:E7:2F:2B:C6:20:B6:26:93:52:38:0E:28:75:9F:8F:24:15
Authority key identifier: A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
Certificate issuer: /CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Certificate serial: 0197B6A0AC43107D861E51407D6D4414CF77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:01:12 +0000
Manifest this update: Sat 28 Jun 2025 13:01:12 +0000
Manifest next update: Sun 29 Jun 2025 13:01:12 +0000
Files and hashes: 1: f_wGHHPcfp4gWwowZYMDfcJ1Mog.roa (hash: An25AbmP3oyWt72GnalaU42kIKjPDFrI7RZhZqfvEO8=)
2: oum7stw2HxSLUadQgNjgtPeKH4I.crl (hash: 0CmuQrTkJAlqZ3hYCjacLJIhMo9ODhGUwpYvdMCH4ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ac:43:10:7d:86:1e:51:40:7d:6d:44:14:cf:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Validity
Not Before: Jun 28 13:01:12 2025 GMT
Not After : Jun 29 13:01:12 2025 GMT
Subject: CN=e7ca14e72f2bc620b6269352380e28759f8f2415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:53:a0:d7:f2:78:a3:be:21:7e:df:4f:0f:
b2:55:79:61:cb:48:ac:85:ba:d8:e1:b4:d5:a3:d4:
9a:35:29:ef:ae:da:45:27:b2:1b:1b:8a:23:fe:95:
1f:d3:4a:6c:75:54:3d:72:d4:5a:98:03:66:bc:ea:
1d:8f:79:a8:bf:af:85:ae:a4:c6:2d:bb:8a:89:d5:
62:24:56:70:4c:5b:17:6f:2e:11:5a:a3:a9:91:dd:
55:85:ff:c8:ec:cf:6d:34:76:00:b3:18:ba:82:89:
3f:0c:be:67:9c:62:5c:c4:4e:00:75:be:c4:d8:62:
4c:02:a7:97:08:e3:c5:68:67:49:58:04:59:ce:20:
53:ee:36:5d:4d:d2:40:27:7a:16:1b:b9:cf:d9:96:
a0:dd:2d:53:b0:3d:b7:43:32:5c:25:a0:e4:89:40:
5f:11:8a:47:36:1d:fb:f4:c1:d6:01:40:fb:bd:88:
39:61:4a:35:c5:7d:b9:7b:45:55:01:ce:a7:f1:53:
31:61:ed:02:6c:4c:8d:2f:23:bc:38:90:e3:2b:e0:
2a:1b:06:75:70:f8:cc:e3:00:25:cd:ad:62:16:2c:
c1:9e:81:a8:8e:ed:98:76:ec:3b:01:72:9a:a0:68:
3e:54:34:fd:f0:61:fb:d7:56:c7:2b:4e:e5:6b:7f:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CA:14:E7:2F:2B:C6:20:B6:26:93:52:38:0E:28:75:9F:8F:24:15
X509v3 Authority Key Identifier:
keyid:A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:96:74:6d:7d:4c:59:27:3a:c7:e4:36:a6:97:aa:30:14:4b:
fe:2c:58:8a:f1:7a:68:e8:01:db:0a:42:24:58:21:ab:09:5a:
11:f0:9a:e0:e5:cb:a1:01:8a:c4:50:c0:6e:77:3f:0c:8b:4e:
12:fc:ab:77:9e:29:a7:05:66:4a:63:c1:a8:92:81:58:72:53:
e7:d4:a4:1c:61:11:f3:a3:ac:51:b6:e9:2c:9b:cf:b8:f2:f1:
1b:3a:e7:a7:ad:9c:40:cf:d4:a1:35:ab:9f:53:d4:ba:5c:4f:
36:fd:dd:10:c2:7b:4b:9b:ff:b5:df:07:17:57:59:5b:6d:28:
d3:b7:ba:36:96:ed:b0:fe:88:cc:da:a5:47:69:66:03:99:79:
01:8c:98:d2:8d:8d:5d:72:cb:fb:2b:44:fe:fc:5e:7f:66:92:
e1:6b:5e:46:30:89:41:29:a1:fd:c7:ba:a9:4e:a1:76:7b:91:
81:30:a3:7a:85:9c:25:ea:a8:2a:06:e6:95:a1:60:24:bb:cf:
67:9a:d4:1f:6d:65:ea:4d:f6:a1:80:1c:07:3d:c3:9c:19:90:
d1:0e:9d:53:5d:13:af:20:c2:1e:62:28:28:6a:02:a2:e6:3a:
cb:e8:4a:2c:89:ff:b2:f3:7a:93:b3:d3:42:86:47:e4:9d:59:
02:47:27:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oKxDEH2GHlFAfW1EFM93MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTliYmIyZGMzNjFmMTQ4YjUxYTc1MDgwZDhlMGI0Zjc4
YTFmODIwHhcNMjUwNjI4MTMwMTEyWhcNMjUwNjI5MTMwMTEyWjAzMTEwLwYDVQQD
EyhlN2NhMTRlNzJmMmJjNjIwYjYyNjkzNTIzODBlMjg3NTlmOGYyNDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PZToNfyeKO+IX7fTw+yVXlhy0is
hbrY4bTVo9SaNSnvrtpFJ7IbG4oj/pUf00psdVQ9ctRamANmvOodj3mov6+FrqTG
LbuKidViJFZwTFsXby4RWqOpkd1Vhf/I7M9tNHYAsxi6gok/DL5nnGJcxE4Adb7E
2GJMAqeXCOPFaGdJWARZziBT7jZdTdJAJ3oWG7nP2Zag3S1TsD23QzJcJaDkiUBf
EYpHNh379MHWAUD7vYg5YUo1xX25e0VVAc6n8VMxYe0CbEyNLyO8OJDjK+AqGwZ1
cPjM4wAlza1iFizBnoGoju2Yduw7AXKaoGg+VDT98GH711bHK07la39KNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfKFOcvK8YgtiaTUjgOKHWfjyQVMB8GA1UdIwQY
MBaAFKLpu7LcNh8Ui1GnUIDY4LT3ih+CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYTk5MjItZTkyYy00MTA1LTgzNjUt
MDQwMTI5YWViMGJmLzEvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hYTk5MjItZTkyYy00MTA1LTgzNjUtMDQwMTI5YWViMGJm
LzEvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJZ0bX1M
WSc6x+Q2ppeqMBRL/ixYivF6aOgB2wpCJFghqwlaEfCa4OXLoQGKxFDAbnc/DItO
Evyrd54ppwVmSmPBqJKBWHJT59SkHGER86OsUbbpLJvPuPLxGzrnp62cQM/UoTWr
n1PUulxPNv3dEMJ7S5v/td8HF1dZW20o07e6NpbtsP6IzNqlR2lmA5l5AYyY0o2N
XXLL+ytE/vxef2aS4WteRjCJQSmh/ce6qU6hdnuRgTCjeoWcJeqoKgbmlaFgJLvP
Z5rUH21l6k32oYAcBz3DnBmQ0Q6dU10TryDCHmIoKGoCouY6y+hKLIn/svN6k7PT
QoZH5J1ZAkcnSQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:42:55 2025 by rpki-client