Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json)
Hash identifier: jasnMtvdpWqbIgsJa512WrGTJaP0R1JwUZiyPcJPW5g=
Subject key identifier: B7:85:A0:2B:2B:1C:B8:B3:61:5B:BA:F9:54:38:99:AB:FB:38:41:8F
Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Certificate serial: 0197B77C198CFAC6148FE938019B2F940137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
Manifest number: 03E2
Signing time: Sat 28 Jun 2025 17:00:52 +0000
Manifest this update: Sat 28 Jun 2025 17:00:52 +0000
Manifest next update: Sun 29 Jun 2025 17:00:52 +0000
Files and hashes: 1: L2QPsEXXxjypDuteGOkuNir3lUA.roa (hash: mcJaTh3VxTTNDuoHtoju+OCGdo4jk9ztR2/hlQRPaNY=)
2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: 31l7j4B6XnQPA0hXib0oKzs11VIshEG/3/dp/hM/W4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:19:8c:fa:c6:14:8f:e9:38:01:9b:2f:94:01:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Validity
Not Before: Jun 28 17:00:52 2025 GMT
Not After : Jun 29 17:00:52 2025 GMT
Subject: CN=b785a02b2b1cb8b3615bbaf9543899abfb38418f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:13:fb:4d:9e:ec:8a:55:49:13:cb:cf:77:
78:b9:9e:d3:23:f9:8a:e0:3c:23:c1:a4:19:bb:ee:
2d:7a:39:93:71:d9:53:55:46:f5:87:3f:2a:09:e7:
a4:7b:96:3b:93:9e:68:d7:72:a5:7e:bb:89:d9:f4:
2b:e3:78:77:32:b4:fd:f7:8c:fe:1d:b1:34:72:8a:
1c:ee:54:6e:17:dc:ae:f0:1d:18:20:68:d7:76:34:
27:3f:f9:d7:0a:54:21:e3:ea:1b:48:da:a1:4d:ca:
6c:b4:24:27:c6:ee:89:45:f4:9e:95:4a:88:49:fd:
a0:a8:71:c3:e6:8c:eb:22:32:69:44:a7:bf:dd:d1:
c4:4d:41:ce:9a:74:b2:e8:84:5b:7b:9f:f1:cf:15:
04:29:2d:8e:38:39:4c:5e:20:b3:d0:dc:54:04:dd:
51:dc:e9:6d:43:07:c0:61:3e:b6:cf:d3:6c:e5:02:
07:2b:e0:3b:70:9e:07:7d:c5:6b:32:33:3d:99:1c:
1a:aa:8e:9a:81:d4:9c:b4:79:f2:c5:4b:af:c7:cd:
7c:ab:3a:80:74:f0:85:b7:56:42:cf:c8:4f:81:aa:
53:36:ff:51:a6:44:61:05:d5:96:a8:eb:b2:5c:d3:
7a:32:7d:f2:c9:76:5a:f8:97:61:32:12:3a:c8:f7:
76:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:85:A0:2B:2B:1C:B8:B3:61:5B:BA:F9:54:38:99:AB:FB:38:41:8F
X509v3 Authority Key Identifier:
keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5e:13:eb:f2:36:b4:01:19:84:07:70:19:75:99:0b:70:d1:
d6:9f:7a:b9:f7:04:1b:07:7c:b5:32:8c:fe:bc:99:89:ad:83:
c1:9a:2b:0f:73:44:42:3f:f7:95:54:7e:7b:42:3e:04:42:27:
e0:7e:90:ee:14:3c:9a:97:9b:c3:69:96:bd:b2:dc:5c:0a:37:
3d:6b:f8:5c:47:5b:8a:44:db:8f:ee:d7:e2:e1:8f:da:cd:c6:
52:b7:44:1e:02:2c:82:ba:1f:79:6b:1f:bf:89:38:93:2e:e4:
79:40:02:37:8f:dc:5d:f7:b1:1b:98:92:54:a7:eb:0d:97:b9:
43:15:b1:61:a3:d5:d4:bf:cc:8b:17:81:05:b3:42:dd:f4:e9:
58:42:c3:45:2b:77:1f:a5:82:ed:d9:26:34:75:a6:fe:4e:7b:
c5:28:2c:71:bd:1b:91:c8:8d:39:ff:53:7b:f7:2b:b8:62:4c:
b6:c7:b3:44:70:19:33:7a:bc:03:8f:99:c0:4a:11:ee:45:af:
dd:e6:a2:b9:a1:e4:a8:b5:0b:f3:26:b6:70:fe:3a:96:f9:d5:
ad:4f:1d:45:73:4d:6c:ff:fc:60:62:fa:9a:8a:e5:38:2f:71:
e2:11:1e:b7:b0:45:b4:96:eb:ce:39:04:c8:54:bd:ef:59:e4:
f0:54:d8:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fBmM+sYUj+k4AZsvlAE3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZGM2Y2QzMzM0ZTAyNjkwMzIyMzczYzNiNTA2ZTQxODRm
YWVjN2YwHhcNMjUwNjI4MTcwMDUyWhcNMjUwNjI5MTcwMDUyWjAzMTEwLwYDVQQD
EyhiNzg1YTAyYjJiMWNiOGIzNjE1YmJhZjk1NDM4OTlhYmZiMzg0MThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjET+02e7IpVSRPLz3d4uZ7TI/mK
4DwjwaQZu+4tejmTcdlTVUb1hz8qCeeke5Y7k55o13KlfruJ2fQr43h3MrT994z+
HbE0cooc7lRuF9yu8B0YIGjXdjQnP/nXClQh4+obSNqhTcpstCQnxu6JRfSelUqI
Sf2gqHHD5ozrIjJpRKe/3dHETUHOmnSy6IRbe5/xzxUEKS2OODlMXiCz0NxUBN1R
3OltQwfAYT62z9Ns5QIHK+A7cJ4HfcVrMjM9mRwaqo6agdSctHnyxUuvx818qzqA
dPCFt1ZCz8hPgapTNv9RpkRhBdWWqOuyXNN6Mn3yyXZa+JdhMhI6yPd2AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeFoCsrHLizYVu6+VQ4mav7OEGPMB8GA1UdIwQY
MBaAFKDcbNMzTgJpAyI3PDtQbkGE+ux/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jMDFmOTAtZDBmYS00OTc2LWIxYzAt
ZDFmZjc1YTdhMzVjLzEvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9jMDFmOTAtZDBmYS00OTc2LWIxYzAtZDFmZjc1YTdhMzVj
LzEvb054czB6Tk9BbWtESWpjOE8xQnVRWVQ2N0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoV4T6/I2
tAEZhAdwGXWZC3DR1p96ufcEGwd8tTKM/ryZia2DwZorD3NEQj/3lVR+e0I+BEIn
4H6Q7hQ8mpebw2mWvbLcXAo3PWv4XEdbikTbj+7X4uGP2s3GUrdEHgIsgrofeWsf
v4k4ky7keUACN4/cXfexG5iSVKfrDZe5QxWxYaPV1L/MixeBBbNC3fTpWELDRSt3
H6WC7dkmNHWm/k57xSgscb0bkciNOf9Te/cruGJMtsezRHAZM3q8A4+ZwEoR7kWv
3eaiuaHkqLUL8ya2cP46lvnVrU8dRXNNbP/8YGL6morlOC9x4hEet7BFtJbrzjkE
yFS971nk8FTYXw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:30:53 2025 by rpki-client