Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
File: O_-2BdzjBg37ZtzMqI632grHSvE.mft (raw, json)
Hash identifier: AA+53dI6k+FOpnlePAwneHdYzt9bfJGXjxHZhBTCDAc=
Subject key identifier: 89:82:D5:15:F1:10:BD:06:ED:4F:74:2F:D3:27:E0:29:E4:D1:C3:05
Authority key identifier: 3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
Certificate issuer: /CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Certificate serial: 0197BFDA81267C699F3FCF2CFD4F25364A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
Manifest number: 09B9
Signing time: Mon 30 Jun 2025 08:00:57 +0000
Manifest this update: Mon 30 Jun 2025 08:00:57 +0000
Manifest next update: Tue 01 Jul 2025 08:00:57 +0000
Files and hashes: 1: O_-2BdzjBg37ZtzMqI632grHSvE.crl (hash: XQzMRDS8cN4/t/SyYBCJZ5Hmuf4sEkdPWRZLmov9ou0=)
2: bEP6BpgWEwuDr5XbU9fjHciv2p8.roa (hash: HB6oz88QvFlDq+Znta3S+P5pPZ539cdh6eC3HVLovgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:da:81:26:7c:69:9f:3f:cf:2c:fd:4f:25:36:4a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Validity
Not Before: Jun 30 08:00:57 2025 GMT
Not After : Jul 1 08:00:57 2025 GMT
Subject: CN=8982d515f110bd06ed4f742fd327e029e4d1c305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:23:24:1b:ac:df:44:42:e4:4f:15:ec:18:6a:
9f:49:de:c4:c3:04:dd:04:fd:94:1e:74:88:a2:35:
9b:b2:67:de:df:e9:85:68:96:c5:94:2f:23:ea:01:
64:a2:d4:d6:37:a2:3f:e3:07:31:2f:7c:54:d2:67:
16:ff:f7:10:ef:85:4e:af:b3:17:96:2f:63:9e:c1:
7a:5f:19:07:19:77:89:de:15:ec:ca:ec:80:51:32:
80:6f:54:74:a0:ff:f3:1d:34:f6:4b:0d:2f:e7:83:
6d:f9:14:95:13:3e:eb:37:81:e8:5f:38:22:7d:96:
02:1e:f7:ad:ce:4e:30:2d:a9:b8:38:eb:a0:a6:a5:
4b:33:07:70:40:9a:bc:0b:e3:a9:e1:fa:ca:3d:77:
c1:5e:18:54:a9:83:9e:3e:6f:b6:ca:50:8b:bb:b8:
cc:5c:7e:ec:9a:a6:c6:a5:9c:82:b8:74:9b:79:09:
f4:82:78:10:b5:89:0c:87:32:17:90:72:d1:4f:eb:
ae:e0:f8:53:45:23:dc:0d:6a:23:71:35:81:31:5b:
27:08:bb:69:02:98:58:38:9b:03:7c:56:4c:1d:18:
a4:46:66:5b:20:21:f2:89:74:fd:bd:18:60:3e:d9:
d4:b7:ff:ab:ed:f4:50:85:38:34:b7:19:8a:f7:e6:
dd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:82:D5:15:F1:10:BD:06:ED:4F:74:2F:D3:27:E0:29:E4:D1:C3:05
X509v3 Authority Key Identifier:
keyid:3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:22:fe:af:3f:f0:6f:6e:d2:04:e9:3f:94:cd:75:d5:87:44:
81:c4:ba:52:e2:67:66:c2:e1:4f:5f:93:41:8e:dd:4e:f2:39:
d8:81:56:e4:da:7c:02:a5:b4:da:65:7c:90:51:6d:d6:cf:6a:
ba:99:97:fe:ec:2c:f4:12:79:58:98:5f:65:3b:8b:a9:85:73:
2a:07:63:a6:0b:d9:a8:e9:95:c1:e2:a5:c5:51:cb:1f:fd:0b:
1a:e9:96:4c:28:ee:51:af:63:4b:89:c0:f5:4b:5d:28:ef:70:
34:fd:4a:b9:7e:42:65:57:03:5d:6e:73:9c:b9:62:6c:6f:d9:
ed:54:0f:26:02:af:e7:5a:f1:36:f1:d2:ca:f5:c7:dd:b1:88:
12:7f:d6:f3:8f:ff:d7:1b:92:b0:20:68:4d:21:90:8f:5c:d0:
40:8a:aa:df:1e:a8:d1:91:52:46:3d:91:c3:0f:13:7f:33:9b:
30:c1:ce:46:81:43:68:8f:20:af:30:1b:94:04:88:75:16:71:
aa:d3:56:63:b1:54:92:43:d1:8c:b1:1f:1f:cc:7c:a3:d1:1a:
73:b9:db:ea:e9:71:23:32:39:0d:a2:6b:ea:75:aa:d2:13:cd:
6e:b1:a9:5a:4b:48:b0:f4:97:25:e2:c2:94:b0:8f:b4:9a:87:
c8:f9:ea:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe/2oEmfGmfP88s/U8lNkojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZmZiNjA1ZGNlMzA2MGRmYjY2ZGNjY2E4OGViN2RhMGFj
NzRhZjEwHhcNMjUwNjMwMDgwMDU3WhcNMjUwNzAxMDgwMDU3WjAzMTEwLwYDVQQD
Eyg4OTgyZDUxNWYxMTBiZDA2ZWQ0Zjc0MmZkMzI3ZTAyOWU0ZDFjMzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCMkG6zfRELkTxXsGGqfSd7EwwTd
BP2UHnSIojWbsmfe3+mFaJbFlC8j6gFkotTWN6I/4wcxL3xU0mcW//cQ74VOr7MX
li9jnsF6XxkHGXeJ3hXsyuyAUTKAb1R0oP/zHTT2Sw0v54Nt+RSVEz7rN4HoXzgi
fZYCHvetzk4wLam4OOugpqVLMwdwQJq8C+Op4frKPXfBXhhUqYOePm+2ylCLu7jM
XH7smqbGpZyCuHSbeQn0gngQtYkMhzIXkHLRT+uu4PhTRSPcDWojcTWBMVsnCLtp
AphYOJsDfFZMHRikRmZbICHyiXT9vRhgPtnUt/+r7fRQhTg0txmK9+bdvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImC1RXxEL0G7U90L9Mn4Cnk0cMFMB8GA1UdIwQY
MBaAFDv/tgXc4wYN+2bczKiOt9oKx0rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT18tMkJkempCZzM3WnR6TXFJNjMyZ3JIU3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wY2FhZWItMjg3ZC00ZWQ1LWFkN2Ut
NmIxZDA3MTQ1NTRhLzEvT18tMkJkempCZzM3WnR6TXFJNjMyZ3JIU3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wY2FhZWItMjg3ZC00ZWQ1LWFkN2UtNmIxZDA3MTQ1NTRh
LzEvT18tMkJkempCZzM3WnR6TXFJNjMyZ3JIU3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCL+rz/w
b27SBOk/lM111YdEgcS6UuJnZsLhT1+TQY7dTvI52IFW5Np8AqW02mV8kFFt1s9q
upmX/uws9BJ5WJhfZTuLqYVzKgdjpgvZqOmVweKlxVHLH/0LGumWTCjuUa9jS4nA
9UtdKO9wNP1KuX5CZVcDXW5znLlibG/Z7VQPJgKv51rxNvHSyvXH3bGIEn/W84//
1xuSsCBoTSGQj1zQQIqq3x6o0ZFSRj2Rww8TfzObMMHORoFDaI8grzAblASIdRZx
qtNWY7FUkkPRjLEfH8x8o9Eac7nb6ulxIzI5DaJr6nWq0hPNbrGpWktIsPSXJeLC
lLCPtJqHyPnqEg==
-----END CERTIFICATE-----
Generated at Mon Jun 30 15:29:57 2025 by rpki-client