Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
File: O33D0CKCjk9bNr3vehiwuwz7rgk.mft (raw, json)
Hash identifier: j1pz4pfu1ya4sWFLQ4YK0eymlN+lOoEGB8txs8m71Fc=
Subject key identifier: BD:BA:4B:02:35:DF:CE:AA:C7:30:2B:5F:30:E6:66:FD:15:F1:4D:5E
Authority key identifier: 3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09
Certificate issuer: /CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09
Certificate serial: 0197B6D77F25108F91C4422643871206CA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
Manifest number: 0DC9
Signing time: Sat 28 Jun 2025 14:01:05 +0000
Manifest this update: Sat 28 Jun 2025 14:01:05 +0000
Manifest next update: Sun 29 Jun 2025 14:01:05 +0000
Files and hashes: 1: O33D0CKCjk9bNr3vehiwuwz7rgk.crl (hash: oI/Ju+9hQRZadwExgLGF+v5zjW2WQHM1DI6560tCMd0=)
2: qE1MDKZGRZtaXQk1vt-cL_6WtUI.roa (hash: 3oUc3w7eQj0W70nllC5MQS//X4mPSXNpxrBOqqqOaLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:7f:25:10:8f:91:c4:42:26:43:87:12:06:ca:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09
Validity
Not Before: Jun 28 14:01:05 2025 GMT
Not After : Jun 29 14:01:05 2025 GMT
Subject: CN=bdba4b0235dfceaac7302b5f30e666fd15f14d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:80:55:df:cf:e4:94:bf:a6:a4:cf:74:93:75:
0f:e3:07:31:39:69:21:0d:ba:3c:24:59:d3:41:92:
18:3a:d7:e6:f1:fe:d6:be:c8:27:0d:c3:07:f3:48:
ad:67:cf:09:f6:19:66:2d:3b:61:ee:82:b1:96:86:
19:5d:63:1d:71:28:d4:ab:ad:24:ec:25:aa:46:6e:
f6:7a:24:99:f1:37:09:63:b8:7d:8d:c4:b9:35:b1:
32:4d:8a:f9:0a:5c:67:0d:e2:b8:86:59:87:8f:ea:
14:b4:17:35:d1:3d:37:14:e4:6c:bf:15:0e:23:84:
60:da:0d:30:f4:d7:6f:2a:d5:22:1b:5c:f7:65:e2:
4e:e3:10:cc:50:cd:c7:41:28:db:39:b1:7c:27:8a:
64:5a:1e:76:f8:e5:60:e2:b3:73:20:5f:4f:b3:0c:
6e:d3:0f:10:6e:7f:e1:43:1c:91:d4:e3:77:af:a4:
78:71:8b:09:a7:a4:bf:02:10:04:c8:fa:c2:6e:28:
11:15:83:9f:24:05:0a:3a:c4:9a:39:45:fd:95:39:
d4:b4:f1:69:8e:bd:be:f4:21:5d:0b:ed:40:97:cf:
04:37:71:83:96:51:b6:d2:0b:e2:34:ea:94:9d:c0:
58:c9:dd:9f:11:bb:d5:8c:6a:ad:92:87:58:39:7a:
df:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BA:4B:02:35:DF:CE:AA:C7:30:2B:5F:30:E6:66:FD:15:F1:4D:5E
X509v3 Authority Key Identifier:
keyid:3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:51:ee:a9:ee:89:2b:ea:23:f3:74:9e:a1:64:e4:27:49:23:
a4:79:8e:ae:ce:30:2d:27:97:c4:8e:0a:c3:54:fb:ab:4c:c9:
02:ea:7e:b8:98:de:7d:d1:55:9d:9f:79:70:54:4b:d3:b3:38:
1d:08:09:f7:cf:8f:9d:fc:a7:f2:03:c7:93:3e:6d:c0:31:84:
17:7f:ea:13:32:5f:d8:8b:32:60:40:24:f1:2e:fd:2d:26:8c:
93:36:3e:24:64:32:08:fb:c4:a8:25:ce:c1:8a:97:76:b8:ba:
4d:59:6d:b1:a6:1e:ff:de:4c:e3:3b:7d:05:6a:47:61:e4:5e:
6b:c9:8f:95:28:1a:72:a6:7d:74:51:8f:0f:e5:7a:0b:cf:7c:
af:54:6d:f2:91:23:5e:4c:1f:6b:31:cc:b1:b9:8f:15:ee:73:
73:ab:16:f3:14:d5:1a:0d:f3:bf:ca:81:16:60:e1:1a:b5:88:
55:de:4f:74:99:e3:2d:25:76:71:a9:2e:4f:57:f0:80:4d:23:
74:d9:ac:f8:9d:37:a8:c4:94:ca:6b:8b:95:4a:b2:19:71:1e:
5d:61:ef:45:6f:b9:a9:48:2c:63:26:1e:ff:26:e2:55:8a:18:
dd:20:cc:81:53:64:76:a9:55:9f:c8:15:37:96:e7:7c:24:2a:
d1:20:a3:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2138lEI+RxEImQ4cSBspmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiN2RjM2QwMjI4MjhlNGY1YjM2YmRlZjdhMThiMGJiMGNm
YmFlMDkwHhcNMjUwNjI4MTQwMTA1WhcNMjUwNjI5MTQwMTA1WjAzMTEwLwYDVQQD
EyhiZGJhNGIwMjM1ZGZjZWFhYzczMDJiNWYzMGU2NjZmZDE1ZjE0ZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoBV38/klL+mpM90k3UP4wcxOWkh
Dbo8JFnTQZIYOtfm8f7WvsgnDcMH80itZ88J9hlmLTth7oKxloYZXWMdcSjUq60k
7CWqRm72eiSZ8TcJY7h9jcS5NbEyTYr5ClxnDeK4hlmHj+oUtBc10T03FORsvxUO
I4Rg2g0w9NdvKtUiG1z3ZeJO4xDMUM3HQSjbObF8J4pkWh52+OVg4rNzIF9Pswxu
0w8Qbn/hQxyR1ON3r6R4cYsJp6S/AhAEyPrCbigRFYOfJAUKOsSaOUX9lTnUtPFp
jr2+9CFdC+1Al88EN3GDllG20gviNOqUncBYyd2fEbvVjGqtkodYOXrflQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL26SwI1386qxzArXzDmZv0V8U1eMB8GA1UdIwQY
MBaAFDt9w9Aigo5PWza973oYsLsM+64JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzMzRDBDS0NqazliTnIzdmVoaXd1d3o3cmdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80ZWYwMmMtOGY4ZC00NmUzLThkMGIt
NzE5NDhlM2M5YWQ0LzEvTzMzRDBDS0NqazliTnIzdmVoaXd1d3o3cmdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC80ZWYwMmMtOGY4ZC00NmUzLThkMGItNzE5NDhlM2M5YWQ0
LzEvTzMzRDBDS0NqazliTnIzdmVoaXd1d3o3cmdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1Huqe6J
K+oj83SeoWTkJ0kjpHmOrs4wLSeXxI4Kw1T7q0zJAup+uJjefdFVnZ95cFRL07M4
HQgJ98+Pnfyn8gPHkz5twDGEF3/qEzJf2IsyYEAk8S79LSaMkzY+JGQyCPvEqCXO
wYqXdri6TVltsaYe/95M4zt9BWpHYeRea8mPlSgacqZ9dFGPD+V6C898r1Rt8pEj
XkwfazHMsbmPFe5zc6sW8xTVGg3zv8qBFmDhGrWIVd5PdJnjLSV2cakuT1fwgE0j
dNms+J03qMSUymuLlUqyGXEeXWHvRW+5qUgsYyYe/ybiVYoY3SDMgVNkdqlVn8gV
N5bnfCQq0SCjjQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:29 2025 by rpki-client