Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
File: OXy939eSBtZcTugWjq9ucJAg-V0.mft (raw, json)
Hash identifier: czqGqqxcKM/J4hAftq977ADm6EH+2mLyg+YaqM6xRRU=
Subject key identifier: 1A:DE:23:61:03:D0:98:8D:8D:B7:B2:F5:7F:50:5C:9B:36:35:E9:B4
Authority key identifier: 39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
Certificate issuer: /CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Certificate serial: 0197B6A0E530F4A097113E856EE971790D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
Manifest number: 0974
Signing time: Sat 28 Jun 2025 13:01:27 +0000
Manifest this update: Sat 28 Jun 2025 13:01:27 +0000
Manifest next update: Sun 29 Jun 2025 13:01:27 +0000
Files and hashes: 1: OXy939eSBtZcTugWjq9ucJAg-V0.crl (hash: 5Cj3y8qQNbkr5D9pAznk4Y+nhQo1jqFcAKBXrdLI7wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e5:30:f4:a0:97:11:3e:85:6e:e9:71:79:0d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Validity
Not Before: Jun 28 13:01:27 2025 GMT
Not After : Jun 29 13:01:27 2025 GMT
Subject: CN=1ade236103d0988d8db7b2f57f505c9b3635e9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:e9:9b:8d:e4:e6:97:1d:b7:f8:ce:0e:21:
55:d0:c7:d3:68:da:15:56:5e:4b:f6:9b:b8:d7:8e:
b0:13:1e:2b:b5:da:28:80:8e:7a:be:cf:cf:b0:79:
3a:c0:82:cf:ea:3b:63:7f:08:90:dc:b9:dd:9c:7b:
54:d7:12:7a:20:54:ff:6d:ce:a9:29:f3:7e:28:19:
81:64:61:88:f1:65:97:f1:86:4e:4f:9d:6c:72:0c:
d4:bf:ee:ba:ce:c4:42:f3:d5:0a:05:f6:f4:4a:39:
e2:bc:4c:c6:e4:d7:7a:f5:bd:99:a1:7b:34:72:a5:
a0:46:9a:89:2a:68:2e:98:44:02:11:7c:7f:f9:d2:
d5:96:12:63:38:29:00:fe:ff:6d:75:cd:30:8d:57:
de:9d:ee:c5:d9:94:40:81:ec:09:ef:73:3d:e2:4c:
32:d4:d1:2b:5d:03:92:48:25:6c:03:70:22:e4:dc:
48:d4:0e:1e:42:13:72:03:ad:3c:44:3c:47:9b:6d:
f0:6b:8f:d0:d8:33:91:c3:f8:6f:cd:59:3f:c5:9e:
46:5e:7b:07:e0:53:b5:4c:5b:84:97:85:17:96:da:
7f:a6:f1:59:5b:85:ac:95:0d:de:bd:a6:bb:b2:36:
16:ab:c9:de:60:4a:89:bb:88:53:0e:2f:84:ed:13:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DE:23:61:03:D0:98:8D:8D:B7:B2:F5:7F:50:5C:9B:36:35:E9:B4
X509v3 Authority Key Identifier:
keyid:39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4d:0c:26:18:0d:d3:f6:7d:bb:16:22:dd:bf:78:f7:3d:d8:
cc:20:6a:f6:9b:71:8d:9c:5d:f1:78:b1:83:19:44:36:8e:d7:
06:f7:3e:bc:4a:22:17:c8:23:d7:6f:33:40:f4:d3:c6:6e:47:
f6:10:53:b9:56:92:32:84:d7:e5:ee:a7:a3:1a:fe:13:7d:13:
48:91:b2:ef:c7:7d:50:f6:dc:73:59:f8:88:ce:c7:a9:90:96:
29:2a:92:af:99:ee:73:14:92:24:ce:da:9d:b1:33:bf:96:8e:
f4:af:4d:35:87:2f:3c:73:a2:6c:3f:9d:b8:3a:74:d5:49:b3:
c0:27:d8:a5:bb:71:da:3a:90:9c:e5:b7:22:79:94:9c:d4:f8:
bc:66:05:14:bf:3c:73:91:a6:8a:72:58:67:e1:51:9d:80:15:
32:82:44:16:ef:fd:78:81:67:86:94:67:1d:17:72:37:19:6d:
e2:ab:dd:44:24:23:01:56:18:a1:e8:59:67:ac:e9:98:ac:3d:
38:c5:d7:a8:ef:24:94:d0:c5:7b:5b:73:60:a5:54:a3:58:71:
cd:01:90:24:f9:59:91:c3:05:c5:2a:53:71:85:9a:6a:2e:ec:
30:36:82:12:df:f9:e7:ed:6c:62:33:e0:d3:98:c3:df:9c:17:
af:b3:0b:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oOUw9KCXET6FbulxeQ0lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5N2NiZGRmZDc5MjA2ZDY1YzRlZTgxNjhlYWY2ZTcwOTAy
MGY5NWQwHhcNMjUwNjI4MTMwMTI3WhcNMjUwNjI5MTMwMTI3WjAzMTEwLwYDVQQD
EygxYWRlMjM2MTAzZDA5ODhkOGRiN2IyZjU3ZjUwNWM5YjM2MzVlOWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVbpm43k5pcdt/jODiFV0MfTaNoV
Vl5L9pu4146wEx4rtdoogI56vs/PsHk6wILP6jtjfwiQ3LndnHtU1xJ6IFT/bc6p
KfN+KBmBZGGI8WWX8YZOT51scgzUv+66zsRC89UKBfb0SjnivEzG5Nd69b2ZoXs0
cqWgRpqJKmgumEQCEXx/+dLVlhJjOCkA/v9tdc0wjVfene7F2ZRAgewJ73M94kwy
1NErXQOSSCVsA3Ai5NxI1A4eQhNyA608RDxHm23wa4/Q2DORw/hvzVk/xZ5GXnsH
4FO1TFuEl4UXltp/pvFZW4WslQ3evaa7sjYWq8neYEqJu4hTDi+E7RNwxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBreI2ED0JiNjbey9X9QXJs2Nem0MB8GA1UdIwQY
MBaAFDl8vd/XkgbWXE7oFo6vbnCQIPldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1h5OTM5ZVNCdFpjVHVnV2pxOXVjSkFnLVYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9kN2E0ZDUtNTE0NC00ZTE4LTg4N2Mt
YTZiMGZkZTIxOTA2LzEvT1h5OTM5ZVNCdFpjVHVnV2pxOXVjSkFnLVYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9kN2E0ZDUtNTE0NC00ZTE4LTg4N2MtYTZiMGZkZTIxOTA2
LzEvT1h5OTM5ZVNCdFpjVHVnV2pxOXVjSkFnLVYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYk0MJhgN
0/Z9uxYi3b949z3YzCBq9ptxjZxd8XixgxlENo7XBvc+vEoiF8gj128zQPTTxm5H
9hBTuVaSMoTX5e6noxr+E30TSJGy78d9UPbcc1n4iM7HqZCWKSqSr5nucxSSJM7a
nbEzv5aO9K9NNYcvPHOibD+duDp01UmzwCfYpbtx2jqQnOW3InmUnNT4vGYFFL88
c5GminJYZ+FRnYAVMoJEFu/9eIFnhpRnHRdyNxlt4qvdRCQjAVYYoehZZ6zpmKw9
OMXXqO8klNDFe1tzYKVUo1hxzQGQJPlZkcMFxSpTcYWaai7sMDaCEt/55+1sYjPg
05jD35wXr7MLXA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:31 2025 by rpki-client