Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
File: ojIkxQF9NOzcKNDPNkQtZb754KA.mft (raw, json)
Hash identifier: 9F44jvRvZ2oSSUBBmVpObilDqDZonfZMBU7JAeEwD8E=
Subject key identifier: 13:12:E1:BB:56:DF:31:59:AA:85:D1:A6:2F:D8:6E:19:42:7B:54:6A
Authority key identifier: A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
Certificate issuer: /CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Certificate serial: 01976CCFB9D7B797FC01C750F89420FC6346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
Manifest number: 1598
Signing time: Sat 14 Jun 2025 05:00:42 +0000
Manifest this update: Sat 14 Jun 2025 05:00:42 +0000
Manifest next update: Sun 15 Jun 2025 05:00:42 +0000
Files and hashes: 1: bEhBHj_5ND7DPkcxJc-eHtfnjVE.roa (hash: q7DP36VzuoeI79R3/z9nukbV52RDnraBhFmpjcuFOJ0=)
2: fUWog8dQyKlZmDz3Jt4aoMe12ZM.roa (hash: m7C2vWzzKK+0unJuovK786RQ7kI+1mqtBwzlHAjE+E0=)
3: ojIkxQF9NOzcKNDPNkQtZb754KA.crl (hash: Qb9shJP4+h+yWM/aedMVI58syUnEKdXcaar7ajYJ4m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:b9:d7:b7:97:fc:01:c7:50:f8:94:20:fc:63:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Validity
Not Before: Jun 14 05:00:42 2025 GMT
Not After : Jun 15 05:00:42 2025 GMT
Subject: CN=1312e1bb56df3159aa85d1a62fd86e19427b546a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:a6:b8:b4:ba:2a:d8:1f:e5:10:82:1d:3e:
2d:ad:f1:09:98:9a:e1:ca:e8:1c:c2:fd:20:bf:0b:
63:5c:43:bc:9e:0d:c2:7c:7d:23:4e:d9:70:06:16:
33:c1:7c:7e:4e:4e:fe:8d:12:bc:dd:1d:96:d6:36:
0e:f5:84:28:1b:8f:33:e7:88:41:bc:03:cb:23:8e:
e1:2a:66:9a:6e:58:3f:10:16:5e:25:cf:cf:5e:52:
05:4b:e6:5d:ef:21:e3:ed:26:27:f3:42:c6:0f:5c:
0c:60:b7:27:19:9e:6c:f7:c6:e9:2b:af:97:1e:12:
08:e2:26:86:f2:dd:2a:d0:ba:f9:87:96:85:c9:e5:
c9:eb:82:20:9c:fb:b6:32:0e:af:eb:d3:fd:91:a3:
0f:2e:88:b6:d4:14:ac:30:1e:0b:3e:39:57:16:fc:
1d:c5:1c:4a:59:ee:f0:ff:93:04:d3:9b:94:aa:a5:
2d:96:02:6a:1b:15:95:60:cd:25:7a:0e:14:79:20:
70:1e:eb:07:c0:02:b0:11:a0:c5:61:1b:2e:85:50:
a4:1b:29:83:ed:17:4c:7e:55:43:e4:cb:6d:00:3a:
c1:08:44:81:2e:4a:7a:a6:ae:74:c5:d3:f7:6f:4b:
f3:9d:d1:58:e3:8d:05:67:5d:a2:65:de:d1:e1:63:
0d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:12:E1:BB:56:DF:31:59:AA:85:D1:A6:2F:D8:6E:19:42:7B:54:6A
X509v3 Authority Key Identifier:
keyid:A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ad:0e:39:65:de:47:df:26:d4:30:c6:07:7f:7c:48:44:40:
cc:07:c2:55:f0:84:b0:81:7c:b5:3f:93:42:5a:65:d7:2f:61:
97:57:f2:44:20:eb:94:c4:95:02:98:f1:7c:90:77:6a:8a:58:
63:f8:9b:d7:ab:24:c5:c0:61:d3:2e:f8:49:a7:76:8e:59:6f:
48:bc:86:1e:77:29:d7:b6:e4:7f:cb:a7:71:5b:96:f2:e0:79:
fc:78:77:4c:1a:6c:34:b8:5b:96:b4:2c:5c:a1:15:e7:17:70:
1e:da:8b:37:91:ba:e7:e0:dd:ca:00:08:be:78:a2:ff:ee:c3:
89:24:cc:21:c9:d1:15:2c:cf:5e:8d:95:70:f7:45:40:b2:37:
89:ce:c5:db:de:49:f8:c2:bf:17:bf:9a:ab:ca:5c:8f:ed:21:
28:b5:42:ee:37:c2:ee:fe:cd:e4:be:34:fb:fb:00:77:82:76:
2e:7e:fd:e3:bd:49:e4:5b:ab:45:6d:d7:7c:d7:c8:e3:af:71:
75:bc:60:fe:6c:5e:20:5f:75:64:c5:ac:a5:83:fc:74:a0:2e:
74:96:c4:2a:cf:cf:0e:d7:b5:91:12:20:4d:cf:cc:7b:4c:35:
39:0c:08:a8:4a:b7:1b:ff:57:e2:cc:ec:62:5c:c5:41:18:50:
d4:d8:e6:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz7nXt5f8AcdQ+JQg/GNGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMzIyNGM1MDE3ZDM0ZWNkYzI4ZDBjZjM2NDQyZDY1YmVm
OWUwYTAwHhcNMjUwNjE0MDUwMDQyWhcNMjUwNjE1MDUwMDQyWjAzMTEwLwYDVQQD
EygxMzEyZTFiYjU2ZGYzMTU5YWE4NWQxYTYyZmQ4NmUxOTQyN2I1NDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy+muLS6Ktgf5RCCHT4trfEJmJrh
yugcwv0gvwtjXEO8ng3CfH0jTtlwBhYzwXx+Tk7+jRK83R2W1jYO9YQoG48z54hB
vAPLI47hKmaablg/EBZeJc/PXlIFS+Zd7yHj7SYn80LGD1wMYLcnGZ5s98bpK6+X
HhII4iaG8t0q0Lr5h5aFyeXJ64IgnPu2Mg6v69P9kaMPLoi21BSsMB4LPjlXFvwd
xRxKWe7w/5ME05uUqqUtlgJqGxWVYM0leg4UeSBwHusHwAKwEaDFYRsuhVCkGymD
7RdMflVD5MttADrBCESBLkp6pq50xdP3b0vzndFY440FZ12iZd7R4WMNDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMS4btW3zFZqoXRpi/YbhlCe1RqMB8GA1UdIwQY
MBaAFKIyJMUBfTTs3CjQzzZELWW++eCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yMjdkMTQtZDc1MS00NTczLTk5MTkt
ZmVjOGE4MGVkMjMzLzEvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yMjdkMTQtZDc1MS00NTczLTk5MTktZmVjOGE4MGVkMjMz
LzEvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFa0OOWXe
R98m1DDGB398SERAzAfCVfCEsIF8tT+TQlpl1y9hl1fyRCDrlMSVApjxfJB3aopY
Y/ib16skxcBh0y74Sad2jllvSLyGHncp17bkf8uncVuW8uB5/Hh3TBpsNLhblrQs
XKEV5xdwHtqLN5G65+DdygAIvnii/+7DiSTMIcnRFSzPXo2VcPdFQLI3ic7F295J
+MK/F7+aq8pcj+0hKLVC7jfC7v7N5L40+/sAd4J2Ln79471J5FurRW3XfNfI469x
dbxg/mxeIF91ZMWspYP8dKAudJbEKs/PDte1kRIgTc/Me0w1OQwIqEq3G/9X4szs
YlzFQRhQ1Njm2w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:03 2025 by rpki-client