Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
File: C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json)
Hash identifier: NzDUoH2S0L1gcTTDr2Cn27A9w3EuPwKdHu+DBKkR3fY=
Subject key identifier: BC:6B:19:4F:26:53:7E:6A:29:B1:A4:E2:AF:CF:68:B5:86:3B:AF:4B
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial: 0197748912D637C8B37D5C03B694DA35E866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
Manifest number: 1595
Signing time: Sun 15 Jun 2025 17:00:29 +0000
Manifest this update: Sun 15 Jun 2025 17:00:29 +0000
Manifest next update: Mon 16 Jun 2025 17:00:29 +0000
Files and hashes: 1: 0w0EpLZYR7z2XsoCgghcY3pUnoU.roa (hash: lVpl8mTP6YZbuLjsob401TFZW5nVn9qmK2OvSpdRlfk=)
2: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: gwQ6DuU4FIJpa+RJv4oflAxbkxxY/BBbSBPFEV+Tmtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:89:12:d6:37:c8:b3:7d:5c:03:b6:94:da:35:e8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Validity
Not Before: Jun 15 17:00:29 2025 GMT
Not After : Jun 16 17:00:29 2025 GMT
Subject: CN=bc6b194f26537e6a29b1a4e2afcf68b5863baf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ab:50:1f:d4:98:67:e2:6e:69:81:2b:3c:b3:
d1:29:9f:3d:02:6c:00:40:7f:92:80:a2:f3:46:15:
f1:d7:d7:a0:cc:d0:87:2d:ce:26:53:85:f6:dd:af:
a0:6d:75:7e:96:05:c5:85:02:a6:6d:6f:3a:0f:4f:
36:86:78:30:7d:9d:38:3d:dc:50:33:a5:ab:62:82:
86:66:5c:50:9d:11:6a:fb:3e:48:57:fd:af:fe:5c:
34:e2:26:4f:e7:c9:51:cd:33:cf:3e:7e:f6:69:30:
0f:24:b6:8b:8c:a1:09:04:f2:ff:55:9c:2d:c9:ae:
71:4c:2f:71:39:5d:55:25:b4:82:96:87:b4:ce:75:
18:5c:3c:55:3a:a1:dd:e8:cb:6a:a8:bd:d3:9a:8c:
cc:22:ed:96:5f:73:07:b9:ca:59:85:9a:6f:b3:12:
48:f4:29:e7:d6:28:9b:36:07:e0:b4:78:7b:02:5d:
b1:91:21:7e:d8:76:a4:c2:33:e8:1c:25:3d:6d:a2:
b4:cd:11:c1:38:ab:ac:54:b2:b2:2c:63:53:aa:3f:
2c:e7:33:c7:dd:14:1b:60:9e:d5:cc:4a:71:49:2d:
ed:ec:3f:07:bb:a4:a2:7c:c3:b2:af:9f:12:15:06:
71:e3:ac:69:30:61:a3:4c:64:2e:d6:36:c8:37:91:
89:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6B:19:4F:26:53:7E:6A:29:B1:A4:E2:AF:CF:68:B5:86:3B:AF:4B
X509v3 Authority Key Identifier:
keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:71:5e:99:7f:f5:31:cd:0b:f4:21:8d:d2:60:29:13:c1:22:
27:01:bd:bc:3c:b6:25:5f:74:fa:2e:f4:ea:85:3f:4d:dc:f0:
6f:18:81:6f:a6:65:e6:48:de:9c:68:a5:59:6d:c4:8b:dc:96:
58:a9:e0:b3:cc:8e:91:5e:32:73:8a:09:10:c4:e7:ca:c5:81:
18:58:a1:0a:6a:1b:0b:6c:2f:f4:bf:e9:81:84:a6:84:bc:f5:
0f:9e:39:5d:6d:9d:98:4e:f4:d6:af:15:8f:33:29:b6:a6:7d:
37:24:4a:8c:63:57:87:14:18:74:fd:2e:b3:78:76:6e:ab:90:
c6:d8:08:e3:1b:0d:29:2c:e6:ff:7b:cf:45:91:01:07:cc:8b:
d5:e8:59:c0:3b:18:4f:86:ce:3a:6d:90:9d:af:8a:fb:21:8c:
9f:c9:df:d0:1f:86:18:ea:38:10:25:10:2b:d2:f7:3c:4d:c8:
a0:dc:5a:88:51:23:5b:34:01:36:d4:1a:f2:f7:16:34:5e:8d:
c7:a3:53:c6:96:de:a9:f7:53:ea:64:77:3e:4f:6b:3a:5c:84:
7c:c6:99:c9:5e:a7:d4:ec:2f:ba:e8:3f:4b:b1:6d:d1:e2:ad:
65:a7:7f:f2:1e:05:a4:d9:01:c9:ac:06:e4:0b:a5:9d:82:3e:
d3:16:40:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0iRLWN8izfVwDtpTaNehmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNmVmZGEzZWRjYjJmNzQ1Y2NjYWJiNDVlMjBiNzllNzlh
OWZjOTgwHhcNMjUwNjE1MTcwMDI5WhcNMjUwNjE2MTcwMDI5WjAzMTEwLwYDVQQD
EyhiYzZiMTk0ZjI2NTM3ZTZhMjliMWE0ZTJhZmNmNjhiNTg2M2JhZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqtQH9SYZ+JuaYErPLPRKZ89AmwA
QH+SgKLzRhXx19egzNCHLc4mU4X23a+gbXV+lgXFhQKmbW86D082hngwfZ04PdxQ
M6WrYoKGZlxQnRFq+z5IV/2v/lw04iZP58lRzTPPPn72aTAPJLaLjKEJBPL/VZwt
ya5xTC9xOV1VJbSCloe0znUYXDxVOqHd6MtqqL3TmozMIu2WX3MHucpZhZpvsxJI
9Cnn1iibNgfgtHh7Al2xkSF+2HakwjPoHCU9baK0zRHBOKusVLKyLGNTqj8s5zPH
3RQbYJ7VzEpxSS3t7D8Hu6SifMOyr58SFQZx46xpMGGjTGQu1jbIN5GJSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxrGU8mU35qKbGk4q/PaLWGO69LMB8GA1UdIwQY
MBaAFAtu/aPtyy90XMyrtF4gt555qfyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzI3OW8tM0xMM1Jjekt1MFhpQzNubm1wX0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81ODM1YmUtNjllMC00NjliLWJjYmEt
MDBkMTRhMjAzZWIxLzEvQzI3OW8tM0xMM1Jjekt1MFhpQzNubm1wX0pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81ODM1YmUtNjllMC00NjliLWJjYmEtMDBkMTRhMjAzZWIx
LzEvQzI3OW8tM0xMM1Jjekt1MFhpQzNubm1wX0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHFemX/1
Mc0L9CGN0mApE8EiJwG9vDy2JV90+i706oU/TdzwbxiBb6Zl5kjenGilWW3Ei9yW
WKngs8yOkV4yc4oJEMTnysWBGFihCmobC2wv9L/pgYSmhLz1D545XW2dmE701q8V
jzMptqZ9NyRKjGNXhxQYdP0us3h2bquQxtgI4xsNKSzm/3vPRZEBB8yL1ehZwDsY
T4bOOm2Qna+K+yGMn8nf0B+GGOo4ECUQK9L3PE3IoNxaiFEjWzQBNtQa8vcWNF6N
x6NTxpbeqfdT6mR3Pk9rOlyEfMaZyV6n1Owvuug/S7Ft0eKtZad/8h4FpNkByawG
5AulnYI+0xZA8A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:46:18 2025 by rpki-client