Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
File: OJDnpFSaVx9otoja1PXO2OUpBos.mft (raw, json)
Hash identifier: j8KotxMah9uwbpmV6BB3Ou1bQHVIw+C+1aFqwZN476Q=
Subject key identifier: AE:BC:76:DC:30:12:9A:90:7D:91:15:A6:B4:86:23:7F:EF:A0:9B:B8
Authority key identifier: 38:90:E7:A4:54:9A:57:1F:68:B6:88:DA:D4:F5:CE:D8:E5:29:06:8B
Certificate issuer: /CN=3890e7a4549a571f68b688dad4f5ced8e529068b
Certificate serial: 01976D3D9777AF75F56CC72A278DF3739E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 07:00:42 +0000
Manifest this update: Sat 14 Jun 2025 07:00:42 +0000
Manifest next update: Sun 15 Jun 2025 07:00:42 +0000
Files and hashes: 1: OJDnpFSaVx9otoja1PXO2OUpBos.crl (hash: pfsLOVrghs2v4JvMY30IoQHXgap4DutmiWgtgvVbFoY=)
2: XaY9bUiZ_CFGYXPkNboje_P8adc.roa (hash: b9+EkuxILTVWiZrAAhWN9xohV/5GiE1XVfEOgozpLGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:97:77:af:75:f5:6c:c7:2a:27:8d:f3:73:9e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3890e7a4549a571f68b688dad4f5ced8e529068b
Validity
Not Before: Jun 14 07:00:42 2025 GMT
Not After : Jun 15 07:00:42 2025 GMT
Subject: CN=aebc76dc30129a907d9115a6b486237fefa09bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:be:ce:56:01:ce:3d:96:91:86:4c:40:2b:
31:fe:f1:f0:6b:82:3a:fd:42:27:28:c6:bb:8d:19:
82:a6:25:9b:26:ef:11:15:9d:36:7b:59:d7:5f:fd:
76:8a:f1:ba:4c:1e:3e:d3:09:8e:6a:7d:95:9b:40:
3d:cc:bd:92:18:59:00:4a:bf:12:9d:88:2e:8d:4d:
f6:29:d5:00:fd:87:d8:dd:98:bd:c7:4c:3d:6f:02:
68:da:b2:49:6a:5e:49:41:11:a4:14:80:81:6f:38:
0d:28:f9:51:28:19:c8:48:22:cc:51:50:5a:a2:00:
87:a6:db:77:9b:67:80:4c:cb:8c:3b:7f:7e:05:a5:
ef:08:bb:f8:bc:49:c9:36:3f:19:2d:bd:73:f6:66:
e1:db:31:ad:7b:96:23:9e:d5:9c:52:3c:00:e0:f2:
89:1e:1c:ea:58:7d:fe:2c:45:e8:a5:aa:55:be:cc:
a3:33:cc:bb:a5:4a:3c:e7:d5:33:0d:d5:f8:2f:07:
18:60:05:c5:e1:67:1b:f6:b2:30:12:6a:47:ae:8b:
da:ea:42:12:12:06:f6:37:32:b4:84:16:1f:39:d9:
6f:2e:da:0f:f7:fc:e3:58:1d:7e:1a:18:7d:cb:35:
92:46:bf:1e:d6:db:22:9b:6c:27:e2:06:50:0d:61:
1b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BC:76:DC:30:12:9A:90:7D:91:15:A6:B4:86:23:7F:EF:A0:9B:B8
X509v3 Authority Key Identifier:
keyid:38:90:E7:A4:54:9A:57:1F:68:B6:88:DA:D4:F5:CE:D8:E5:29:06:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b0:7a:5d:5f:ec:bb:af:91:36:ae:8d:a8:1c:b5:3c:7f:8d:
4a:37:31:a2:89:d3:90:1e:a6:ec:6b:87:84:a6:ea:e9:35:d2:
f3:cc:c9:09:b2:55:b0:53:7c:af:72:3a:7a:1d:70:2b:6f:bb:
e8:bf:67:55:69:36:ce:b2:ae:8f:0f:c2:b0:e1:2a:b4:d9:11:
89:97:ca:21:ee:df:42:ea:ba:62:15:b4:c2:d5:a7:3e:42:65:
b7:92:02:81:99:13:76:e4:d0:29:e3:4e:82:49:27:38:13:9d:
2b:87:c3:16:a0:c5:c4:0f:b9:53:e1:91:6e:5d:46:1f:b6:c7:
d1:d1:18:a2:41:15:b6:1e:e9:b0:32:ae:0d:28:81:6b:92:79:
1b:20:cf:ee:49:0f:9c:04:6f:20:63:38:1c:78:b8:d9:bc:f5:
1b:c9:5e:ba:02:b7:7a:b0:13:de:30:e2:35:3c:15:b7:f7:a5:
2b:49:f0:8a:8a:d3:2f:d5:9a:8d:cc:79:ea:b3:5f:fe:4d:1f:
c8:9d:b4:b1:f0:69:bd:6a:18:60:e6:84:43:c7:3c:c5:3d:28:
e6:7e:2c:eb:90:37:d2:fc:bd:b7:85:f1:94:47:a3:7d:29:ba:
e2:ed:57:60:f4:e4:da:fb:40:4c:22:f6:f4:c8:56:bb:ca:10:
84:48:23:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPZd3r3X1bMcqJ43zc55MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OTBlN2E0NTQ5YTU3MWY2OGI2ODhkYWQ0ZjVjZWQ4ZTUy
OTA2OGIwHhcNMjUwNjE0MDcwMDQyWhcNMjUwNjE1MDcwMDQyWjAzMTEwLwYDVQQD
EyhhZWJjNzZkYzMwMTI5YTkwN2Q5MTE1YTZiNDg2MjM3ZmVmYTA5YmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsai+zlYBzj2WkYZMQCsx/vHwa4I6
/UInKMa7jRmCpiWbJu8RFZ02e1nXX/12ivG6TB4+0wmOan2Vm0A9zL2SGFkASr8S
nYgujU32KdUA/YfY3Zi9x0w9bwJo2rJJal5JQRGkFICBbzgNKPlRKBnISCLMUVBa
ogCHptt3m2eATMuMO39+BaXvCLv4vEnJNj8ZLb1z9mbh2zGte5YjntWcUjwA4PKJ
HhzqWH3+LEXopapVvsyjM8y7pUo859UzDdX4LwcYYAXF4Wcb9rIwEmpHrova6kIS
Egb2NzK0hBYfOdlvLtoP9/zjWB1+Ghh9yzWSRr8e1tsim2wn4gZQDWEbZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK68dtwwEpqQfZEVprSGI3/voJu4MB8GA1UdIwQY
MBaAFDiQ56RUmlcfaLaI2tT1ztjlKQaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0pEbnBGU2FWeDlvdG9qYTFQWE8yT1VwQm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yNWRmNGUtYWZjNS00YzUwLThkZTIt
OTQ4MTJjN2Y0NDllLzEvT0pEbnBGU2FWeDlvdG9qYTFQWE8yT1VwQm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8yNWRmNGUtYWZjNS00YzUwLThkZTItOTQ4MTJjN2Y0NDll
LzEvT0pEbnBGU2FWeDlvdG9qYTFQWE8yT1VwQm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarB6XV/s
u6+RNq6NqBy1PH+NSjcxoonTkB6m7GuHhKbq6TXS88zJCbJVsFN8r3I6eh1wK2+7
6L9nVWk2zrKujw/CsOEqtNkRiZfKIe7fQuq6YhW0wtWnPkJlt5ICgZkTduTQKeNO
gkknOBOdK4fDFqDFxA+5U+GRbl1GH7bH0dEYokEVth7psDKuDSiBa5J5GyDP7kkP
nARvIGM4HHi42bz1G8leugK3erAT3jDiNTwVt/elK0nwiorTL9Wajcx56rNf/k0f
yJ20sfBpvWoYYOaEQ8c8xT0o5n4s65A30vy9t4XxlEejfSm64u1XYPTk2vtATCL2
9MhWu8oQhEgjNg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:10:04 2025 by rpki-client