Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: nkpsu3sK0p+kzTU9qXhJpWxhelw71j6LKII0u7hbI78=
Subject key identifier: 11:B4:07:AB:1C:61:56:27:B7:EA:7E:23:67:2D:80:E6:6F:5C:75:84
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 0197838E76875EB518A2E7ED17F00A7285C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 0CDF
Signing time: Wed 18 Jun 2025 15:00:41 +0000
Manifest this update: Wed 18 Jun 2025 15:00:41 +0000
Manifest next update: Thu 19 Jun 2025 15:00:41 +0000
Files and hashes: 1: O4gR5xOTs4Ka7RxFw5S-suo9Yt4.roa (hash: cOb09Q56rNsrHJDt4uCS16lJBMq8eR81lrUaHpUt4e0=)
2: kJ8USl-CuRMFXzbxSgE8sXBGngw.roa (hash: 2xL/58KHP5Hyj8g6eO0RiATHRjr5bChJ+dvKYUca1tI=)
3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: B9iZdJqQVJ1MBa0xuPbB8QeqRih71XTgf/NFoGfCqV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:8e:76:87:5e:b5:18:a2:e7:ed:17:f0:0a:72:85:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Jun 18 15:00:41 2025 GMT
Not After : Jun 19 15:00:41 2025 GMT
Subject: CN=11b407ab1c615627b7ea7e23672d80e66f5c7584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:03:d3:35:04:cc:9a:33:74:96:03:c8:27:e6:
02:28:02:46:6d:5e:a4:f1:57:0c:ff:96:43:11:e8:
fb:fb:99:9b:68:a6:6b:18:2b:79:fe:ee:12:9d:2b:
16:f7:0f:91:61:4b:68:5f:12:68:ed:24:b0:6b:9d:
6a:09:f7:df:d2:34:40:57:ed:f6:3d:63:98:a6:48:
63:fe:a8:f5:a7:b5:9d:fd:13:30:52:80:51:2f:2e:
48:c7:15:49:06:39:1f:92:46:4c:df:c4:64:9b:d2:
c3:f7:6d:a3:3f:d2:db:af:12:ea:8b:e8:52:f5:89:
77:b0:02:49:7d:14:31:be:44:cd:00:06:4b:cf:00:
c6:29:ef:b1:01:67:20:8e:9e:94:24:eb:6f:cc:2b:
91:1b:77:c3:2c:a7:00:6d:ab:ae:38:6a:2e:c1:34:
3d:62:67:1b:77:7f:19:f4:a8:6c:1d:1a:b3:c6:f4:
cb:fa:5b:f2:8c:7f:82:19:9a:94:0e:e9:87:30:59:
45:9f:7d:d3:4f:fa:a3:4f:b6:e7:40:05:e8:31:b7:
5a:6a:82:f7:6e:9b:d6:f0:fb:c5:c3:ef:4c:dc:18:
5d:f4:f9:b4:0c:ed:fb:08:25:f6:8b:30:98:21:9b:
53:58:e0:ef:5a:b3:7a:55:4c:ac:75:ed:ac:71:bd:
6f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B4:07:AB:1C:61:56:27:B7:EA:7E:23:67:2D:80:E6:6F:5C:75:84
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3e:0a:6a:69:77:83:d6:d8:7b:6c:7e:c3:87:6b:41:50:2b:
b4:d8:97:ec:d6:31:c1:f2:0a:75:f9:c7:f3:94:3e:c2:c4:fe:
e4:a2:c9:7b:39:56:b8:c0:e1:09:28:c8:fe:33:f8:71:59:22:
c5:ea:91:88:e0:a9:2a:fe:90:68:b7:b6:10:17:38:75:2b:f5:
ca:fd:8a:6c:f0:06:23:69:de:d6:1c:e9:02:b6:a6:23:6d:b5:
6b:3a:64:d7:6e:de:f9:45:1d:fe:ad:d8:c6:44:65:58:ae:a4:
13:42:cc:bb:df:6f:e0:36:88:9f:91:aa:69:3e:3a:46:d4:25:
35:20:8e:6e:b2:ea:8f:b4:04:ec:ce:3e:4c:32:a4:fb:3c:a1:
20:78:74:33:17:a2:73:d2:c2:79:81:5e:57:43:ae:db:a8:bd:
36:9b:2c:1d:1b:84:f5:93:cb:32:2c:59:92:81:ae:94:8d:52:
e9:b4:e6:3e:7e:7e:55:ad:b0:e0:63:86:72:75:42:2c:c0:f0:
51:c4:fe:4c:05:0b:bd:b2:0a:6f:07:3a:7a:2d:9c:f5:b8:d0:
09:29:fb:c3:ca:c9:d0:75:c9:bc:b2:d7:14:7d:cc:84:83:05:
2e:b0:d0:8e:85:83:98:00:15:1f:21:10:00:e5:77:88:83:f8:
be:16:06:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeDjnaHXrUYouftF/AKcoXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhODM4ZjFjYThiZGNkODFjMDRiNmI2NzhlNzliZTYxNGU1
MWIxMTEwHhcNMjUwNjE4MTUwMDQxWhcNMjUwNjE5MTUwMDQxWjAzMTEwLwYDVQQD
EygxMWI0MDdhYjFjNjE1NjI3YjdlYTdlMjM2NzJkODBlNjZmNWM3NTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgPTNQTMmjN0lgPIJ+YCKAJGbV6k
8VcM/5ZDEej7+5mbaKZrGCt5/u4SnSsW9w+RYUtoXxJo7SSwa51qCfff0jRAV+32
PWOYpkhj/qj1p7Wd/RMwUoBRLy5IxxVJBjkfkkZM38Rkm9LD922jP9LbrxLqi+hS
9Yl3sAJJfRQxvkTNAAZLzwDGKe+xAWcgjp6UJOtvzCuRG3fDLKcAbauuOGouwTQ9
Ymcbd38Z9KhsHRqzxvTL+lvyjH+CGZqUDumHMFlFn33TT/qjT7bnQAXoMbdaaoL3
bpvW8PvFw+9M3Bhd9Pm0DO37CCX2izCYIZtTWODvWrN6VUysde2scb1vhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBG0B6scYVYnt+p+I2ctgOZvXHWEMB8GA1UdIwQY
MBaAFLqDjxyovc2BwEtrZ455vmFOUbERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzct
MDkzZWI5YTlhYThiLzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzctMDkzZWI5YTlhYThi
LzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaz4Kaml3
g9bYe2x+w4drQVArtNiX7NYxwfIKdfnH85Q+wsT+5KLJezlWuMDhCSjI/jP4cVki
xeqRiOCpKv6QaLe2EBc4dSv1yv2KbPAGI2ne1hzpAramI221azpk127e+UUd/q3Y
xkRlWK6kE0LMu99v4DaIn5GqaT46RtQlNSCObrLqj7QE7M4+TDKk+zyhIHh0Mxei
c9LCeYFeV0Ou26i9NpssHRuE9ZPLMixZkoGulI1S6bTmPn5+Va2w4GOGcnVCLMDw
UcT+TAULvbIKbwc6ei2c9bjQCSn7w8rJ0HXJvLLXFH3MhIMFLrDQjoWDmAAVHyEQ
AOV3iIP4vhYGpw==
-----END CERTIFICATE-----
Generated at Wed Jun 18 21:13:42 2025 by rpki-client