Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier: yKPrLaLdELNvraoxtsy4mnZx2NapXUAgUqNdfRXyshQ=
Subject key identifier: BE:C5:D5:89:86:29:26:8A:E1:FC:C9:D1:B7:BD:8C:52:9D:71:0B:84
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial: 0197B6D78A38E0834E6B59FAEED232A9C4D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:01:08 +0000
Manifest this update: Sat 28 Jun 2025 14:01:08 +0000
Manifest next update: Sun 29 Jun 2025 14:01:08 +0000
Files and hashes: 1: ETzMLJ9E8ekQKvTuSVRndgg_ftE.roa (hash: zxZL9sGsfFQCpFwlHr+nLeuc9weJmZjmaUU+udBc04c=)
2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: iRY8c01gNvT4aeipZT7qeXQsGjiy0pXqrh+1wJ5Osgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:8a:38:e0:83:4e:6b:59:fa:ee:d2:32:a9:c4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Validity
Not Before: Jun 28 14:01:08 2025 GMT
Not After : Jun 29 14:01:08 2025 GMT
Subject: CN=bec5d5898629268ae1fcc9d1b7bd8c529d710b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:8f:d4:cb:55:26:00:e7:a0:18:6c:1d:ad:
c7:0e:d9:00:64:57:ed:83:90:72:70:5f:1e:79:49:
44:3c:29:88:f8:41:00:44:50:9a:1f:87:bf:23:18:
d7:e8:24:58:42:50:96:d9:ce:e1:63:3d:61:ad:6b:
ae:7e:36:37:8d:2d:1c:6f:5e:c2:7c:da:49:26:95:
7b:9b:66:1f:84:3a:63:1a:37:ea:02:ee:e4:4b:4c:
cb:e6:07:a7:d7:6f:4f:e3:1a:ef:74:69:d5:96:3e:
97:22:d8:e3:96:cd:cd:81:be:63:c2:57:f8:6d:d0:
a6:09:aa:1b:d0:03:55:8e:e7:37:98:01:54:e3:52:
17:bc:ef:55:10:b2:08:24:6b:d6:da:fd:2a:61:ab:
6d:b3:f2:92:fb:85:c8:d5:fa:e3:66:3e:d9:e2:d8:
67:cb:f0:6b:90:1e:c4:9e:22:ce:8b:08:8d:9e:3c:
66:c2:c2:55:1c:cb:db:b2:1b:50:49:37:77:81:95:
21:9c:39:27:d9:3d:7f:81:5d:bb:6b:9a:fd:04:10:
05:70:a8:0a:8d:71:41:7b:63:5e:8c:18:60:23:e0:
ed:e1:c4:55:de:5f:5d:d3:42:b3:8e:07:66:25:7f:
7d:91:0a:ac:76:bd:ea:8d:2b:3e:97:19:ae:c5:21:
f1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C5:D5:89:86:29:26:8A:E1:FC:C9:D1:B7:BD:8C:52:9D:71:0B:84
X509v3 Authority Key Identifier:
keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:dd:24:74:f4:7c:ca:53:cd:86:a3:0c:ff:91:e3:9e:a0:7f:
29:1b:2e:a1:1f:a9:28:6b:9b:02:79:63:87:9c:83:d1:5d:88:
d0:b3:54:ba:e0:15:9a:36:25:ab:dd:37:11:74:1d:c5:c8:11:
79:da:f7:21:f5:48:12:32:0e:f1:0c:1c:de:b6:b5:43:1e:5e:
21:ce:17:24:d2:db:7e:31:39:1b:c8:17:36:51:09:22:79:19:
a7:03:e9:b1:d5:9d:51:7e:82:71:92:c6:66:86:7f:3d:02:9c:
3d:80:a5:cb:c5:6d:7c:63:3e:50:0b:8d:bd:4a:9a:f7:52:d9:
6e:18:9b:02:ab:d5:ba:1f:9a:09:23:ef:a0:66:d1:a6:65:58:
65:55:70:6d:ca:b5:7d:bf:e5:8c:70:68:ea:db:01:59:04:07:
ca:40:1f:7e:64:a8:51:af:c9:02:fd:34:99:5d:64:5e:8f:45:
4c:e5:32:97:35:1c:4a:8c:77:5c:d2:93:4e:74:5e:8e:ae:cf:
cd:8d:e8:8a:ef:95:1f:26:d6:00:2d:f5:cf:4d:99:c4:93:99:
d9:4a:3d:06:cd:5f:71:72:4c:cd:f5:15:7c:32:a0:7b:e7:61:
3c:c4:7f:64:bf:51:be:86:8a:a2:bd:76:e8:62:33:ba:16:99:
ff:1a:4c:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe214o44INOa1n67tIyqcTRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOTRhMWQ4ODFkZDRiZWIyZmQzMWI3NmZhMGQ1ZDU4NWE5
YjIzOGYwHhcNMjUwNjI4MTQwMTA4WhcNMjUwNjI5MTQwMTA4WjAzMTEwLwYDVQQD
EyhiZWM1ZDU4OTg2MjkyNjhhZTFmY2M5ZDFiN2JkOGM1MjlkNzEwYjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNCP1MtVJgDnoBhsHa3HDtkAZFft
g5BycF8eeUlEPCmI+EEARFCaH4e/IxjX6CRYQlCW2c7hYz1hrWuufjY3jS0cb17C
fNpJJpV7m2YfhDpjGjfqAu7kS0zL5gen129P4xrvdGnVlj6XItjjls3Ngb5jwlf4
bdCmCaob0ANVjuc3mAFU41IXvO9VELIIJGvW2v0qYatts/KS+4XI1frjZj7Z4thn
y/BrkB7EniLOiwiNnjxmwsJVHMvbshtQSTd3gZUhnDkn2T1/gV27a5r9BBAFcKgK
jXFBe2NejBhgI+Dt4cRV3l9d00KzjgdmJX99kQqsdr3qjSs+lxmuxSHx6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7F1YmGKSaK4fzJ0be9jFKdcQuEMB8GA1UdIwQY
MBaAFDuUodiB3UvrL9MbdvoNXVhamyOPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTkt
MTYxODc3NmJkYWFlLzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTktMTYxODc3NmJkYWFl
LzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa90kdPR8
ylPNhqMM/5HjnqB/KRsuoR+pKGubAnljh5yD0V2I0LNUuuAVmjYlq903EXQdxcgR
edr3IfVIEjIO8Qwc3ra1Qx5eIc4XJNLbfjE5G8gXNlEJInkZpwPpsdWdUX6CcZLG
ZoZ/PQKcPYCly8VtfGM+UAuNvUqa91LZbhibAqvVuh+aCSPvoGbRpmVYZVVwbcq1
fb/ljHBo6tsBWQQHykAffmSoUa/JAv00mV1kXo9FTOUylzUcSox3XNKTTnRejq7P
zY3oiu+VHybWAC31z02ZxJOZ2Uo9Bs1fcXJMzfUVfDKge+dhPMR/ZL9RvoaKor12
6GIzuhaZ/xpMiw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:36 2025 by rpki-client