Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
File: oYRAnlwYO7zDFTX0x-7keCzWe-M.mft (raw, json)
Hash identifier: QsWb7JOc17FIvpUq2h+7ntYFDrrwHoZsrGQg3ta3zeU=
Subject key identifier: 92:A1:EE:9B:67:70:5D:F3:36:91:C5:B4:E4:C6:CB:DF:C7:D9:E2:6B
Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
Certificate issuer: /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Certificate serial: 01977E9F5379A37CD8982F2D3B22BBED22C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
Manifest number: 11C0
Signing time: Tue 17 Jun 2025 16:01:00 +0000
Manifest this update: Tue 17 Jun 2025 16:01:00 +0000
Manifest next update: Wed 18 Jun 2025 16:01:00 +0000
Files and hashes: 1: PHcuyK5Isl-tObyHXesNd9QiRP0.roa (hash: rHdHpG4qGbN9ifhvJU1UvmMnc7kX+7rc9pla/vN3kgc=)
2: oYRAnlwYO7zDFTX0x-7keCzWe-M.crl (hash: 81phrhqZIh2gcLkAbIfyGsplKYNFROODLYzN+5TsPbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:9f:53:79:a3:7c:d8:98:2f:2d:3b:22:bb:ed:22:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Validity
Not Before: Jun 17 16:01:00 2025 GMT
Not After : Jun 18 16:01:00 2025 GMT
Subject: CN=92a1ee9b67705df33691c5b4e4c6cbdfc7d9e26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:0c:08:c3:c8:d7:50:8b:0e:74:3a:9a:2d:
44:8c:0e:0a:7e:cc:fe:95:c0:23:87:4c:e9:35:f9:
9b:37:c5:cd:c8:f5:f8:47:3e:3f:56:dd:ba:48:0c:
27:d2:9d:ee:52:0b:11:da:5b:c8:66:f1:51:c5:02:
22:17:5a:8a:1b:6e:b8:f6:0d:ad:60:a3:d0:b4:5c:
61:91:ef:cf:42:49:0e:be:39:22:7c:06:ca:34:b8:
d3:5d:14:3c:39:e0:af:99:aa:2b:cd:d1:8a:ec:db:
4c:a9:04:4c:c9:ea:66:09:57:31:02:5b:58:9a:02:
ea:71:81:cd:8e:eb:d9:c0:21:30:a2:f2:32:a7:fd:
46:63:5b:55:c2:11:e3:fc:2d:fc:b6:69:ef:3a:ce:
11:6f:57:10:fd:31:87:f8:e7:2b:fa:0d:fa:06:a4:
6f:a7:4e:38:d0:6e:f2:72:89:31:23:36:ed:fe:03:
5d:99:a7:9b:df:49:67:da:2b:d6:c9:1a:43:95:32:
f9:6c:74:16:03:5e:20:40:83:2d:50:e7:a5:47:97:
82:be:ef:b8:cf:eb:bb:55:90:6c:d6:b3:27:17:cd:
a9:31:ce:e1:4f:8c:13:91:eb:76:5c:b8:9d:40:93:
d2:3e:c1:5f:c0:60:41:1f:b9:a5:da:ab:44:61:7d:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A1:EE:9B:67:70:5D:F3:36:91:C5:B4:E4:C6:CB:DF:C7:D9:E2:6B
X509v3 Authority Key Identifier:
keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f2:a1:2d:a7:70:fc:8e:a3:5c:56:08:6d:56:52:fd:5f:61:
5e:21:92:f1:02:0f:83:71:16:68:a0:38:c2:ed:d6:8d:0b:8b:
d9:6f:12:c4:80:8b:f1:9c:45:df:7b:9a:d0:82:30:31:0b:8a:
48:1b:41:1f:7c:4a:46:39:79:eb:25:82:ee:a9:b8:67:14:45:
fd:48:68:14:92:6b:9f:b1:98:b3:60:1f:72:ae:a9:31:eb:ba:
0f:48:c5:cb:35:c6:6c:ea:b0:af:6b:d9:91:1f:e4:48:b1:ef:
39:bb:08:47:f3:b5:bb:3c:22:91:13:36:e1:85:b8:6b:b9:3d:
89:fd:ad:2b:cf:e6:57:5f:56:5f:6b:87:86:45:d7:46:5b:6c:
c0:44:e3:a9:b8:12:78:51:87:bc:cd:fa:72:7b:b8:7d:42:03:
63:3d:0f:55:ad:b9:f7:b3:fa:67:ea:2b:14:0f:3a:92:4b:83:
b0:66:f6:ab:9a:a1:98:1b:51:f8:c2:d3:f3:75:00:78:79:4d:
9e:2e:95:b2:ec:e4:ca:8a:22:58:88:5f:3c:14:33:b9:21:f0:
a1:da:12:44:1c:aa:69:16:79:58:2d:60:d9:e6:60:ac:3f:4d:
04:51:49:e7:f1:48:fc:30:ba:0f:43:40:80:ea:1a:86:ef:b7:
80:a2:c6:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd+n1N5o3zYmC8tOyK77SLDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExODQ0MDllNWMxODNiYmNjMzE1MzVmNGM3ZWVlNDc4MmNk
NjdiZTMwHhcNMjUwNjE3MTYwMTAwWhcNMjUwNjE4MTYwMTAwWjAzMTEwLwYDVQQD
Eyg5MmExZWU5YjY3NzA1ZGYzMzY5MWM1YjRlNGM2Y2JkZmM3ZDllMjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7YMCMPI11CLDnQ6mi1EjA4Kfsz+
lcAjh0zpNfmbN8XNyPX4Rz4/Vt26SAwn0p3uUgsR2lvIZvFRxQIiF1qKG2649g2t
YKPQtFxhke/PQkkOvjkifAbKNLjTXRQ8OeCvmaorzdGK7NtMqQRMyepmCVcxAltY
mgLqcYHNjuvZwCEwovIyp/1GY1tVwhHj/C38tmnvOs4Rb1cQ/TGH+Ocr+g36BqRv
p0440G7ycokxIzbt/gNdmaeb30ln2ivWyRpDlTL5bHQWA14gQIMtUOelR5eCvu+4
z+u7VZBs1rMnF82pMc7hT4wTket2XLidQJPSPsFfwGBBH7ml2qtEYX1hfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKh7ptncF3zNpHFtOTGy9/H2eJrMB8GA1UdIwQY
MBaAFKGEQJ5cGDu8wxU19Mfu5Hgs1nvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1lSQW5sd1lPN3pERlRYMHgtN2tlQ3pXZS1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xZTk2OTQtYzI4NS00Y2NmLTk0M2It
YzJiN2NmZjA2NjFjLzEvb1lSQW5sd1lPN3pERlRYMHgtN2tlQ3pXZS1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8xZTk2OTQtYzI4NS00Y2NmLTk0M2ItYzJiN2NmZjA2NjFj
LzEvb1lSQW5sd1lPN3pERlRYMHgtN2tlQ3pXZS1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvKhLadw
/I6jXFYIbVZS/V9hXiGS8QIPg3EWaKA4wu3WjQuL2W8SxICL8ZxF33ua0IIwMQuK
SBtBH3xKRjl56yWC7qm4ZxRF/UhoFJJrn7GYs2Afcq6pMeu6D0jFyzXGbOqwr2vZ
kR/kSLHvObsIR/O1uzwikRM24YW4a7k9if2tK8/mV19WX2uHhkXXRltswETjqbgS
eFGHvM36cnu4fUIDYz0PVa2597P6Z+orFA86kkuDsGb2q5qhmBtR+MLT83UAeHlN
ni6VsuzkyooiWIhfPBQzuSHwodoSRByqaRZ5WC1g2eZgrD9NBFFJ5/FI/DC6D0NA
gOoahu+3gKLGJQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 22:21:34 2025 by rpki-client