Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
File: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft (raw, json)
Hash identifier: a/WJDDqC9O0kcBh2QLPdkc5auR3wl1kvhYkw3Sx0pEc=
Subject key identifier: 14:BB:A6:9F:E1:00:2D:1C:75:E6:3A:70:46:FB:E4:AC:53:35:4B:8A
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial: 0197B70F5198A8DE7E34CBEBF19CBB058EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:02:03 +0000
Manifest this update: Sat 28 Jun 2025 15:02:03 +0000
Manifest next update: Sun 29 Jun 2025 15:02:03 +0000
Files and hashes: 1: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl (hash: fUX4AKAHW7gjhjPl5m8qnv25W3qlFUzwV7zONl6LAz0=)
2: t9qHq5xTtnN-jj4rqq-G8Agb4fE.roa (hash: t+hLra7ztXXuOYQYYQngzFN6esJ5Nassa730bMic3dU=)
3: vLREmzKS7ARNQ8r2dAo92bSwFOE.roa (hash: I+ZNUqrukd4BTvdK3vQp+SBz+2MVzX88vJMJ1QUiiVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:51:98:a8:de:7e:34:cb:eb:f1:9c:bb:05:8e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Validity
Not Before: Jun 28 15:02:03 2025 GMT
Not After : Jun 29 15:02:03 2025 GMT
Subject: CN=14bba69fe1002d1c75e63a7046fbe4ac53354b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:bf:0e:c4:3c:6a:d4:f6:18:2d:6b:80:50:
35:7e:83:ad:bf:1e:91:75:5a:ef:a2:d6:2c:6f:4e:
29:c4:84:da:8f:7b:ed:6c:ae:da:34:db:a5:d1:00:
87:66:eb:d5:81:73:4f:5b:76:ca:60:70:bf:08:3a:
2c:d6:d3:03:24:e8:2a:14:1a:2e:51:5e:aa:e9:36:
aa:bf:42:bf:11:99:4e:c5:11:66:fc:80:a0:53:d3:
7d:5c:00:64:06:b1:3a:6e:03:01:a4:5c:3b:6f:0b:
4a:26:3f:a5:dc:ae:ad:1d:d4:9d:9b:ab:a9:46:c8:
f8:97:92:fb:0c:33:72:93:7b:b2:5f:6b:fc:5f:6e:
d1:bf:95:a6:c3:c2:5b:a6:5c:81:59:bf:36:40:bf:
e5:a6:c0:4c:f3:02:76:cb:fb:d9:61:47:56:88:61:
e9:16:b6:45:2f:5a:e9:32:a7:56:ac:6a:f6:14:1d:
57:56:52:b1:22:21:00:70:40:0b:ea:fe:e1:53:89:
18:f5:f5:0a:78:ee:7c:db:99:0f:8c:8b:f7:ea:91:
c5:06:06:a0:76:f8:26:a1:95:b9:ed:f7:c6:9d:d0:
3d:71:78:1e:c9:8e:88:9f:66:bb:1b:0a:6a:fa:9a:
4f:c2:bb:67:90:97:1e:57:0b:6f:3c:7b:d6:bc:03:
88:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BB:A6:9F:E1:00:2D:1C:75:E6:3A:70:46:FB:E4:AC:53:35:4B:8A
X509v3 Authority Key Identifier:
keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:64:02:ec:f7:9c:dc:c5:77:e3:14:03:67:e0:4b:b4:15:8f:
10:5b:56:36:f3:40:13:a3:9a:40:c4:bb:ea:0c:8b:18:6a:bd:
db:17:44:3d:f2:40:71:1d:88:91:72:cf:0f:59:c7:be:3d:e0:
08:48:fb:a1:51:03:35:5f:67:89:20:94:8b:23:57:ec:be:76:
75:f6:35:c7:23:31:15:d8:67:0a:64:e5:4f:59:84:36:82:91:
c1:b7:b3:e1:7e:4a:e2:29:84:06:4c:b3:8a:3a:8e:0f:5c:6a:
9e:ee:77:f3:6e:2d:6d:ae:bc:1b:96:45:66:1d:91:f7:8e:87:
ed:ff:3c:d6:96:97:26:4b:c5:84:8c:d0:48:91:01:5b:83:64:
07:45:59:bb:ea:85:0b:e4:e9:4d:19:c7:86:01:4f:e3:1a:02:
81:82:a8:44:be:c0:d7:bd:e2:eb:9c:2b:c8:39:ac:03:f5:e1:
19:58:70:e2:de:5e:8d:d5:cf:8a:53:6d:ab:b1:fa:8c:10:2f:
0f:e7:73:85:21:80:4a:bf:d7:99:54:c5:01:0a:48:a7:81:df:
75:df:dd:25:1e:a1:8b:84:45:98:6c:0e:ef:73:4c:18:91:f3:
60:e9:78:aa:24:14:c7:b4:dc:7a:e6:ed:01:34:8a:9a:fe:c8:
57:97:6c:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3D1GYqN5+NMvr8Zy7BY60MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMzA0MmQxMzdmYmIwM2JlYmE2NDIxZjMzYTg1MjViNTJh
ODhmN2EwHhcNMjUwNjI4MTUwMjAzWhcNMjUwNjI5MTUwMjAzWjAzMTEwLwYDVQQD
EygxNGJiYTY5ZmUxMDAyZDFjNzVlNjNhNzA0NmZiZTRhYzUzMzU0YjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJG/DsQ8atT2GC1rgFA1foOtvx6R
dVrvotYsb04pxITaj3vtbK7aNNul0QCHZuvVgXNPW3bKYHC/CDos1tMDJOgqFBou
UV6q6Taqv0K/EZlOxRFm/ICgU9N9XABkBrE6bgMBpFw7bwtKJj+l3K6tHdSdm6up
Rsj4l5L7DDNyk3uyX2v8X27Rv5Wmw8JbplyBWb82QL/lpsBM8wJ2y/vZYUdWiGHp
FrZFL1rpMqdWrGr2FB1XVlKxIiEAcEAL6v7hU4kY9fUKeO5825kPjIv36pHFBgag
dvgmoZW57ffGndA9cXgeyY6In2a7Gwpq+ppPwrtnkJceVwtvPHvWvAOIuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBS7pp/hAC0cdeY6cEb75KxTNUuKMB8GA1UdIwQY
MBaAFKEwQtE3+7A766ZCHzOoUltSqI96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9hZjQ0MDctZjk4ZS00OTk0LTlmOWUt
ZjZiNmMwNDkxNmExLzEvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9hZjQ0MDctZjk4ZS00OTk0LTlmOWUtZjZiNmMwNDkxNmEx
LzEvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxmQC7Pec
3MV34xQDZ+BLtBWPEFtWNvNAE6OaQMS76gyLGGq92xdEPfJAcR2IkXLPD1nHvj3g
CEj7oVEDNV9niSCUiyNX7L52dfY1xyMxFdhnCmTlT1mENoKRwbez4X5K4imEBkyz
ijqOD1xqnu53824tba68G5ZFZh2R946H7f881paXJkvFhIzQSJEBW4NkB0VZu+qF
C+TpTRnHhgFP4xoCgYKoRL7A173i65wryDmsA/XhGVhw4t5ejdXPilNtq7H6jBAv
D+dzhSGASr/XmVTFAQpIp4Hfdd/dJR6hi4RFmGwO73NMGJHzYOl4qiQUx7Tceubt
ATSKmv7IV5dstA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:17 2025 by rpki-client