Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
File: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft (raw, json)
Hash identifier: 6eJE/xpEwyssmj9zeYDIJ0z51LAPu0j7jkLtu4eUiD0=
Subject key identifier: 2F:4A:5E:9C:1D:88:0E:C0:ED:D2:CE:50:DC:53:59:05:7F:77:E5:3B
Authority key identifier: 38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
Certificate issuer: /CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Certificate serial: 0197B8907CD9F7F0F7A2B67C9E99C087BA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 22:02:46 +0000
Manifest this update: Sat 28 Jun 2025 22:02:46 +0000
Manifest next update: Sun 29 Jun 2025 22:02:46 +0000
Files and hashes: 1: 37GvZ07Bs9ALM-UjthgHQEKF0y8.roa (hash: pSoIBelVOfgMsL7bvPvm9KNh08Z3vU+jb3PDyOFmyw4=)
2: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl (hash: Fbqc11ZcP1ZAcZm4q6Jak+sAtsPl5uv/RIdB1mSk36M=)
3: eMQhZAA1BBjlcx0eTkggms08VQo.roa (hash: xi+ujT09IBX2cdfgWniCY7aqnXMFDpXhE7QErRO6YQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:7c:d9:f7:f0:f7:a2:b6:7c:9e:99:c0:87:ba:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Validity
Not Before: Jun 28 22:02:46 2025 GMT
Not After : Jun 29 22:02:46 2025 GMT
Subject: CN=2f4a5e9c1d880ec0edd2ce50dc5359057f77e53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8e:e6:81:b2:83:d2:c3:eb:10:f4:f8:a3:08:
96:f0:6c:c4:79:cf:d0:54:3d:51:9b:5f:a5:e5:be:
34:1f:f1:bd:88:c6:9a:4e:08:b0:99:6c:05:e7:c1:
3e:e1:df:09:5e:2e:9d:82:a7:4c:17:f3:74:e8:52:
14:31:de:de:ff:bf:13:c9:16:e8:e8:11:a2:21:78:
70:ca:97:b6:6a:cd:2e:e6:25:20:74:ab:f2:90:e6:
e8:60:02:7f:eb:e8:88:fb:e9:62:2f:ab:00:1f:88:
5f:f7:db:6c:fa:b4:f0:a4:cd:dc:2b:c0:97:1f:49:
d0:f4:27:c4:28:a9:9e:70:c3:e5:31:18:6e:80:15:
69:98:90:fe:f8:d1:46:90:e3:dd:99:30:c2:6a:b5:
56:66:84:c0:85:ca:e4:91:5c:26:6c:df:d0:d1:2d:
67:d0:a1:4e:d5:85:a2:96:fe:7b:fa:6c:42:37:62:
28:9b:0b:83:c0:9c:fc:7f:64:b2:a6:3f:9e:85:7f:
d9:0e:cb:0a:84:8d:ee:8e:32:af:fd:f6:b8:9f:b3:
31:87:d0:b9:c4:28:48:27:55:f5:a1:42:79:df:b6:
d0:45:2f:e8:a9:2b:8e:c7:ff:7e:10:06:f9:a7:c3:
e6:12:5a:aa:40:4d:e6:d4:d2:ae:fa:51:9c:21:de:
7f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4A:5E:9C:1D:88:0E:C0:ED:D2:CE:50:DC:53:59:05:7F:77:E5:3B
X509v3 Authority Key Identifier:
keyid:38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:be:b7:09:04:f0:d8:83:1e:f4:ff:a3:66:01:c6:d7:aa:36:
4e:6e:73:46:fc:5d:ab:8a:88:bc:19:10:a4:4e:48:ff:a7:26:
a2:9b:3b:9a:9c:7d:b7:d3:68:fb:4e:a0:81:c2:92:e9:e6:19:
5c:7c:2f:22:71:5b:f4:bb:78:db:31:ef:20:60:52:e3:94:b8:
12:fd:9a:5b:2b:43:16:b9:b9:2e:0b:ae:49:87:cf:b2:ee:9f:
e6:4c:00:0f:b2:49:8c:84:bb:38:b4:a5:e5:ba:be:46:dc:48:
1f:5e:97:d6:18:1f:5d:f6:d6:7d:65:24:6b:6e:e5:89:31:a6:
7b:bc:01:2a:f7:25:53:36:e1:c5:54:9b:fe:21:a0:25:08:68:
ac:c7:00:f0:f0:fc:50:5d:51:7f:70:42:45:d6:99:97:1e:e3:
e1:a6:12:93:8c:6a:a2:d3:55:c8:60:4b:a9:7d:8f:a1:61:47:
d2:ce:18:30:fc:b7:1d:90:8b:54:a2:34:2f:67:24:6a:6f:9b:
59:4f:08:64:f9:69:bd:af:1c:eb:a1:cf:40:9c:28:53:f3:0f:
37:70:83:f0:f6:8a:4e:64:5b:98:ca:6a:51:ab:c0:22:26:1f:
6f:b2:08:af:52:0d:8d:27:0b:d7:a6:e7:53:ea:dc:8d:a7:cf:
24:c0:29:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kHzZ9/D3orZ8npnAh7pjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NTIwNmFjMDhkODQwYzI4YmY0YWM1Njg5OWYyYTI4Zjhm
ZGNjYzUwHhcNMjUwNjI4MjIwMjQ2WhcNMjUwNjI5MjIwMjQ2WjAzMTEwLwYDVQQD
EygyZjRhNWU5YzFkODgwZWMwZWRkMmNlNTBkYzUzNTkwNTdmNzdlNTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Y7mgbKD0sPrEPT4owiW8GzEec/Q
VD1Rm1+l5b40H/G9iMaaTgiwmWwF58E+4d8JXi6dgqdMF/N06FIUMd7e/78TyRbo
6BGiIXhwype2as0u5iUgdKvykOboYAJ/6+iI++liL6sAH4hf99ts+rTwpM3cK8CX
H0nQ9CfEKKmecMPlMRhugBVpmJD++NFGkOPdmTDCarVWZoTAhcrkkVwmbN/Q0S1n
0KFO1YWilv57+mxCN2IomwuDwJz8f2Sypj+ehX/ZDssKhI3ujjKv/fa4n7Mxh9C5
xChIJ1X1oUJ537bQRS/oqSuOx/9+EAb5p8PmElqqQE3m1NKu+lGcId5/pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9KXpwdiA7A7dLOUNxTWQV/d+U7MB8GA1UdIwQY
MBaAFDhSBqwI2EDCi/SsVomfKij4/czFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0ZJR3JBallRTUtMOUt4V2laOHFLUGo5ek1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mOTU5NjktNjdlZi00MDhlLWE3NDMt
ZTFlYjc5ODk5MjQyLzEvT0ZJR3JBallRTUtMOUt4V2laOHFLUGo5ek1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9mOTU5NjktNjdlZi00MDhlLWE3NDMtZTFlYjc5ODk5MjQy
LzEvT0ZJR3JBallRTUtMOUt4V2laOHFLUGo5ek1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVb63CQTw
2IMe9P+jZgHG16o2Tm5zRvxdq4qIvBkQpE5I/6cmops7mpx9t9No+06ggcKS6eYZ
XHwvInFb9Lt42zHvIGBS45S4Ev2aWytDFrm5LguuSYfPsu6f5kwAD7JJjIS7OLSl
5bq+RtxIH16X1hgfXfbWfWUka27liTGme7wBKvclUzbhxVSb/iGgJQhorMcA8PD8
UF1Rf3BCRdaZlx7j4aYSk4xqotNVyGBLqX2PoWFH0s4YMPy3HZCLVKI0L2ckam+b
WU8IZPlpva8c66HPQJwoU/MPN3CD8PaKTmRbmMpqUavAIiYfb7IIr1INjScL16bn
U+rcjafPJMAptQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:14:36 2025 by rpki-client