Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier: icZ2d5k59iclrmm4zcE5R1UvsNjx8cKrZKaSOQpelz0=
Subject key identifier: 19:5D:8D:89:37:13:23:EF:E2:2D:EF:E9:73:D2:EB:4E:C3:0F:95:2D
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 01976D743A3A68984F002F1461EAAAEE67F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number: 0C31
Signing time: Sat 14 Jun 2025 08:00:22 +0000
Manifest this update: Sat 14 Jun 2025 08:00:22 +0000
Manifest next update: Sun 15 Jun 2025 08:00:22 +0000
Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: M6e6uoZuY+lehEPidPRbYazCfk86fnyHKmV1qUlhMro=)
2: QFnY02YmfQGJ4URcdKc-UJCZjYo.roa (hash: cz0+d02fJHBBngQvBEuS7ucPucnAX57nkrsYbr2NfQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:3a:3a:68:98:4f:00:2f:14:61:ea:aa:ee:67:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: Jun 14 08:00:22 2025 GMT
Not After : Jun 15 08:00:22 2025 GMT
Subject: CN=195d8d89371323efe22defe973d2eb4ec30f952d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:2d:aa:d1:d5:fa:0a:57:d1:ff:08:65:bb:
a8:aa:10:96:6d:77:96:1e:c4:0d:f9:8e:d9:fc:f0:
87:1e:48:da:9a:3d:ae:59:62:c4:29:21:95:eb:aa:
f5:a5:69:2a:76:35:75:01:10:5e:34:ac:e7:94:fa:
25:e0:42:68:66:b7:7d:7d:99:6d:05:3d:bd:dc:69:
44:6c:43:04:5f:3d:e5:17:a7:1b:56:35:54:37:44:
05:2e:d4:07:84:d0:7e:80:af:b3:cb:ea:4f:10:01:
c2:f8:79:30:75:72:e4:c0:66:ba:55:e6:ef:72:f2:
e8:0d:9b:6e:88:99:e9:d0:21:f1:01:37:c5:49:1e:
70:01:70:cd:1c:61:f4:60:db:3d:76:e4:9d:27:a8:
0f:26:4c:0b:85:aa:53:a2:93:54:d8:c7:49:f0:79:
c9:3d:d4:49:76:08:a7:e3:77:2e:a1:62:98:a4:82:
27:7e:08:93:60:79:0c:53:c2:eb:44:53:93:26:32:
b2:c6:88:fe:ac:1a:8b:6f:e5:41:ef:85:51:b2:4c:
5c:75:05:48:66:06:1f:87:e0:a0:61:89:0e:ba:e7:
10:3f:18:e9:54:01:f5:38:63:08:52:88:cc:fe:5a:
9b:a9:d3:5e:53:79:84:a1:79:92:24:63:e5:d3:6f:
39:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5D:8D:89:37:13:23:EF:E2:2D:EF:E9:73:D2:EB:4E:C3:0F:95:2D
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:dc:25:bd:33:ef:21:46:02:14:a1:61:55:81:e1:2f:70:fe:
85:ee:0c:50:4d:f8:d6:23:ba:8b:fb:4c:07:b1:33:1d:82:8e:
7f:a6:35:59:85:21:ae:c0:01:c9:8e:4c:72:6c:a0:a5:9d:1c:
aa:d4:24:3d:65:2d:e1:86:7b:45:25:0b:ff:60:0f:42:cc:5c:
49:7c:60:3c:48:25:d2:ba:51:de:db:b0:cd:86:00:18:2f:c3:
9b:84:68:ee:25:ed:e8:c8:a1:c9:5c:c9:09:be:53:44:7f:e2:
ba:6d:0e:5a:b2:d4:ec:4b:4e:55:09:78:79:94:43:76:98:71:
5e:3d:c8:14:21:8e:dc:12:7d:db:5b:31:21:a0:9a:31:c9:87:
a4:ee:62:c8:80:4c:1c:92:11:29:96:f1:ad:f8:5f:3e:d9:26:
62:b5:eb:de:20:2b:14:3d:80:38:93:ae:ad:f4:b1:f6:e1:a7:
67:a6:68:da:8d:d1:16:6b:32:8a:bc:00:2c:b3:5d:14:58:18:
a5:5b:9f:c8:ea:a8:6b:7d:f8:83:fe:1a:79:83:be:c3:5c:c9:
19:a3:6d:c9:a6:6b:4e:5c:54:51:02:60:4a:13:d1:4b:f9:3e:
d9:55:51:3b:ad:89:c1:2f:ad:da:84:e7:3e:ca:bc:b4:a9:f8:
62:a9:67:73
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdtdDo6aJhPAC8UYeqq7mfyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhODFkYzQ2Y2NlMzljMTZjMjQzOTZmNTVlNjI2M2E2Njlj
N2U3NjkwHhcNMjUwNjE0MDgwMDIyWhcNMjUwNjE1MDgwMDIyWjAzMTEwLwYDVQQD
EygxOTVkOGQ4OTM3MTMyM2VmZTIyZGVmZTk3M2QyZWI0ZWMzMGY5NTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrgtqtHV+gpX0f8IZbuoqhCWbXeW
HsQN+Y7Z/PCHHkjamj2uWWLEKSGV66r1pWkqdjV1ARBeNKznlPol4EJoZrd9fZlt
BT293GlEbEMEXz3lF6cbVjVUN0QFLtQHhNB+gK+zy+pPEAHC+HkwdXLkwGa6Vebv
cvLoDZtuiJnp0CHxATfFSR5wAXDNHGH0YNs9duSdJ6gPJkwLhapTopNU2MdJ8HnJ
PdRJdgin43cuoWKYpIInfgiTYHkMU8LrRFOTJjKyxoj+rBqLb+VB74VRskxcdQVI
ZgYfh+CgYYkOuucQPxjpVAH1OGMIUojM/lqbqdNeU3mEoXmSJGPl0285tQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBldjYk3EyPv4i3v6XPS607DD5UtMB8GA1UdIwQY
MBaAFPqB3EbM45wWwkOW9V5iY6Zpx+dpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1vSGNSc3pqbkJiQ1E1YjFYbUpqcG1uSDUyay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvOGYwMTgwLTJiNWItNDQxOS1hZDM2
LWY0YjhjYTM3YTFmYi8xLzEtb0hjUnN6am5CYkNRNWIxWG1KanBtbkg1MmsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNjLzhmMDE4MC0yYjViLTQ0MTktYWQzNi1mNGI4Y2EzN2Ex
ZmIvMS8xLW9IY1JzempuQmJDUTViMVhtSmpwbW5INTJrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA09wl
vTPvIUYCFKFhVYHhL3D+he4MUE341iO6i/tMB7EzHYKOf6Y1WYUhrsAByY5Mcmyg
pZ0cqtQkPWUt4YZ7RSUL/2APQsxcSXxgPEgl0rpR3tuwzYYAGC/Dm4Ro7iXt6Mih
yVzJCb5TRH/ium0OWrLU7EtOVQl4eZRDdphxXj3IFCGO3BJ921sxIaCaMcmHpO5i
yIBMHJIRKZbxrfhfPtkmYrXr3iArFD2AOJOurfSx9uGnZ6Zo2o3RFmsyirwALLNd
FFgYpVufyOqoa334g/4aeYO+w1zJGaNtyaZrTlxUUQJgShPRS/k+2VVRO62JwS+t
2oTnPsq8tKn4Yqlncw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:05 2025 by rpki-client