Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json)
Hash identifier: Gl+NCvJypir6SDMPAlnI6RJ2Hd/k1O6X1EkJpJfkJMA=
Subject key identifier: A9:5B:30:F0:19:1D:FE:88:2C:F8:12:21:71:32:51:9C:9D:41:CF:FD
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial: 0197C538215F7C446DD6336000C7BBC84D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
Manifest number: 0CA2
Signing time: Tue 01 Jul 2025 09:01:19 +0000
Manifest this update: Tue 01 Jul 2025 09:01:19 +0000
Manifest next update: Wed 02 Jul 2025 09:01:19 +0000
Files and hashes: 1: 4DXia6r4DTEgUbfUdc0kmvwmm1Y.roa (hash: Z6UcUFwAm3cKPg0mR+/9vcq4H9MwUtI5vEk+Pz3XR3A=)
2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: 6EWwG34txjaQw9lCNprds+KrkRlWREUJS/3z/NZjD4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:38:21:5f:7c:44:6d:d6:33:60:00:c7:bb:c8:4d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
Validity
Not Before: Jul 1 09:01:19 2025 GMT
Not After : Jul 2 09:01:19 2025 GMT
Subject: CN=a95b30f0191dfe882cf812217132519c9d41cffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:78:51:bc:42:ba:d7:34:5c:fc:d0:45:43:e8:
89:9e:07:c7:64:52:18:35:cd:84:fe:da:7d:81:04:
3c:57:1a:96:e1:52:fe:fd:06:0c:39:33:af:55:78:
2e:aa:c3:7f:8f:4a:46:20:82:c4:14:da:6a:a5:c2:
fe:be:31:2d:fb:60:3d:7a:60:ef:0d:3b:fa:33:da:
40:f0:0d:6d:81:a5:dd:d9:df:b8:6f:9f:68:fd:63:
83:9c:9d:ed:39:24:4b:53:d2:e0:c5:9a:5e:e9:46:
0d:48:36:b5:13:69:8e:71:6d:b9:a9:02:8a:1e:7b:
78:16:5a:8c:90:fe:05:c5:35:76:75:ce:fa:fb:d9:
5d:94:ef:5f:8e:fc:d3:45:18:00:77:e8:9f:6f:f6:
7a:59:ca:5b:52:09:50:83:41:d0:e2:96:e0:6f:9a:
36:12:25:87:80:35:66:7f:1c:78:a6:f6:c8:c1:8b:
ac:0d:73:25:14:2b:33:25:7f:65:a4:95:73:8d:76:
d5:e6:6a:cb:9a:f7:7e:fe:8d:f8:db:81:e6:27:7a:
dd:1d:ed:19:ca:1a:ea:e4:ca:9a:da:25:a7:a2:51:
8c:91:1c:0f:ca:f6:d9:1c:41:30:f7:97:9b:74:ae:
1a:88:8f:4c:bf:43:74:47:da:b1:44:63:ec:39:56:
53:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5B:30:F0:19:1D:FE:88:2C:F8:12:21:71:32:51:9C:9D:41:CF:FD
X509v3 Authority Key Identifier:
keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:df:f9:e8:53:97:98:d0:da:2e:21:db:17:f5:92:85:d4:99:
6e:5b:80:05:30:a6:b0:00:4e:89:a9:54:1a:0f:78:04:59:d2:
af:16:f0:19:18:79:cd:5a:74:48:69:44:35:06:a5:ea:d1:ce:
78:8b:54:31:cd:5a:5e:a2:a5:09:bb:bb:ab:d4:99:5b:9f:b3:
ef:79:33:a6:c8:10:5f:b0:9c:8f:07:fe:6c:dd:7d:e8:3b:e7:
af:99:79:d4:0f:aa:5e:09:40:83:45:da:38:91:a4:2d:53:79:
a4:dc:c0:91:51:88:4b:28:6e:14:a0:4e:bb:0c:bc:d6:0e:23:
b1:d6:23:55:27:8f:77:07:4f:fc:8e:11:75:58:db:03:17:e9:
99:e0:e6:70:8b:ac:7c:db:0e:13:9b:62:95:72:a5:4c:e9:32:
72:d2:e6:97:f0:ad:17:4c:ce:0d:da:e7:eb:de:60:b7:39:4f:
69:42:50:39:3e:7f:d8:df:2f:f7:bd:ce:ef:19:0c:d3:63:34:
a8:b9:5b:99:5c:1a:f3:e3:dc:5b:e8:1c:18:f8:0a:03:45:4b:
ce:a3:62:51:14:47:53:e6:23:c2:24:8e:80:79:eb:d2:af:13:
f2:e5:d2:48:73:49:0d:7e:3a:e2:7e:47:1e:c5:a1:e9:00:2c:
71:35:de:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfFOCFffERt1jNgAMe7yE2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZThmZWU5N2RhMzY1YjY0ODA4MjFiMThiZWRmOWZjMjM1
NTM4MjYwHhcNMjUwNzAxMDkwMTE5WhcNMjUwNzAyMDkwMTE5WjAzMTEwLwYDVQQD
EyhhOTViMzBmMDE5MWRmZTg4MmNmODEyMjE3MTMyNTE5YzlkNDFjZmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3hRvEK61zRc/NBFQ+iJngfHZFIY
Nc2E/tp9gQQ8VxqW4VL+/QYMOTOvVXguqsN/j0pGIILEFNpqpcL+vjEt+2A9emDv
DTv6M9pA8A1tgaXd2d+4b59o/WODnJ3tOSRLU9LgxZpe6UYNSDa1E2mOcW25qQKK
Hnt4FlqMkP4FxTV2dc76+9ldlO9fjvzTRRgAd+ifb/Z6WcpbUglQg0HQ4pbgb5o2
EiWHgDVmfxx4pvbIwYusDXMlFCszJX9lpJVzjXbV5mrLmvd+/o3424HmJ3rdHe0Z
yhrq5Mqa2iWnolGMkRwPyvbZHEEw95ebdK4aiI9Mv0N0R9qxRGPsOVZTGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlbMPAZHf6ILPgSIXEyUZydQc/9MB8GA1UdIwQY
MBaAFKHo/ul9o2W2SAghsYvt+fwjVTgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUt
ZjgyMTM3ZTAwYmMzLzEvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUtZjgyMTM3ZTAwYmMz
LzEvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAit/56FOX
mNDaLiHbF/WShdSZbluABTCmsABOialUGg94BFnSrxbwGRh5zVp0SGlENQal6tHO
eItUMc1aXqKlCbu7q9SZW5+z73kzpsgQX7Ccjwf+bN196Dvnr5l51A+qXglAg0Xa
OJGkLVN5pNzAkVGISyhuFKBOuwy81g4jsdYjVSePdwdP/I4RdVjbAxfpmeDmcIus
fNsOE5tilXKlTOkyctLml/CtF0zODdrn695gtzlPaUJQOT5/2N8v973O7xkM02M0
qLlbmVwa8+PcW+gcGPgKA0VLzqNiURRHU+YjwiSOgHnr0q8T8uXSSHNJDX464n5H
HsWh6QAscTXeUg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:01:24 2025 by rpki-client