Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
File: oIRWvGXLSxVanmtLMW3VFOBDG2k.mft (raw, json)
Hash identifier: js/DYr4iwQTPV/qdV2SOhMQj4bHUjAOtNwPHQG2UZGg=
Subject key identifier: D0:9B:A7:28:E3:BF:F1:A9:66:5E:B7:F1:DB:8D:B0:DC:15:E5:37:5F
Authority key identifier: A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
Certificate issuer: /CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Certificate serial: 01976E874499B1B34E0F270364EE54C47A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
Manifest number: 0E4E
Signing time: Sat 14 Jun 2025 13:00:47 +0000
Manifest this update: Sat 14 Jun 2025 13:00:47 +0000
Manifest next update: Sun 15 Jun 2025 13:00:47 +0000
Files and hashes: 1: oIRWvGXLSxVanmtLMW3VFOBDG2k.crl (hash: qGcwZfrxQn6wHWMLm4NOPc0klGk1kf9Wm89FsFg7J8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:44:99:b1:b3:4e:0f:27:03:64:ee:54:c4:7a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Validity
Not Before: Jun 14 13:00:47 2025 GMT
Not After : Jun 15 13:00:47 2025 GMT
Subject: CN=d09ba728e3bff1a9665eb7f1db8db0dc15e5375f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f5:3c:31:15:b0:93:85:c3:eb:5a:2e:04:25:
54:84:b1:7c:a4:63:a3:bb:e9:3d:3a:4f:2f:68:40:
e8:66:ca:a6:8d:22:ff:75:4d:c5:73:e2:ca:2a:54:
54:bd:c3:a8:ba:52:17:51:62:16:db:00:b1:3e:5a:
e8:7f:e3:71:72:b5:38:67:5d:93:6e:34:6f:1b:54:
c2:90:c1:94:6f:a7:a2:99:49:b5:32:89:bb:fb:05:
25:75:80:36:2c:c7:9b:11:20:86:2f:12:a6:73:72:
54:1a:87:ac:a2:8a:b0:15:cd:ab:f1:ae:95:f4:0f:
9f:ff:2f:16:10:7f:03:6c:e7:cc:a0:ed:5b:b3:3f:
c4:6d:44:a8:d5:69:b0:5d:77:b3:5b:dc:8f:52:c2:
d9:cd:ae:5f:27:3f:74:63:4f:c0:de:7b:86:1a:0f:
44:f1:2d:92:8f:26:a4:cd:80:45:1b:8f:23:58:ea:
4f:e4:d9:07:70:f0:25:fc:0e:9d:78:ad:ce:66:e5:
84:b4:8b:26:ad:c2:de:2e:68:0f:74:59:e5:8d:9b:
7b:53:32:40:e0:df:7f:e2:cf:03:73:42:a0:31:a5:
30:7c:4a:3b:b8:72:4d:ad:86:05:4d:fc:3e:e1:4b:
d5:fd:09:54:6a:33:0d:ee:33:da:be:f9:1f:ba:45:
a2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9B:A7:28:E3:BF:F1:A9:66:5E:B7:F1:DB:8D:B0:DC:15:E5:37:5F
X509v3 Authority Key Identifier:
keyid:A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3c:ff:ba:3f:df:3b:d7:31:83:19:14:9c:b9:d7:21:09:8b:
a0:fc:20:a2:63:09:c4:24:94:34:82:48:89:ea:52:94:bf:18:
16:10:2f:24:4f:ec:58:9d:f8:4d:58:e3:a3:b4:48:92:62:d8:
3f:3a:cd:ca:71:99:40:04:fa:9c:88:13:af:1a:f5:e1:aa:9f:
eb:89:f8:fa:e2:c5:c0:ba:9c:e7:27:e3:db:63:7b:ef:76:89:
05:2a:ee:39:94:bf:8c:05:8b:9d:15:07:12:86:fc:ba:92:cd:
de:55:bf:9c:d7:f9:c2:89:11:99:d8:20:e9:98:a3:90:be:5e:
3a:1b:73:ed:99:dc:c4:16:f9:c4:27:b1:4e:71:63:e6:1b:1a:
56:3f:c3:2a:ce:3c:3e:09:06:36:04:12:0e:e9:10:c7:97:6c:
b5:aa:4e:05:30:2c:63:96:5c:9e:25:f1:a2:60:68:f3:60:e8:
0a:af:78:71:1d:32:9b:96:0d:63:a7:aa:d2:b6:fd:05:a0:26:
58:8a:8d:e2:49:b5:0d:4b:39:29:8e:a5:b0:80:11:ae:71:d2:
a0:8a:3c:e5:21:47:e1:e4:25:ca:32:af:e0:cc:cd:ee:44:b9:
25:e4:36:4d:5f:1a:ff:eb:f5:68:90:e3:ad:f0:6e:69:13:a6:
7c:d7:4a:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduh0SZsbNODycDZO5UxHomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwODQ1NmJjNjVjYjRiMTU1YTllNmI0YjMxNmRkNTE0ZTA0
MzFiNjkwHhcNMjUwNjE0MTMwMDQ3WhcNMjUwNjE1MTMwMDQ3WjAzMTEwLwYDVQQD
EyhkMDliYTcyOGUzYmZmMWE5NjY1ZWI3ZjFkYjhkYjBkYzE1ZTUzNzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/U8MRWwk4XD61ouBCVUhLF8pGOj
u+k9Ok8vaEDoZsqmjSL/dU3Fc+LKKlRUvcOoulIXUWIW2wCxPlrof+NxcrU4Z12T
bjRvG1TCkMGUb6eimUm1Mom7+wUldYA2LMebESCGLxKmc3JUGoesooqwFc2r8a6V
9A+f/y8WEH8DbOfMoO1bsz/EbUSo1WmwXXezW9yPUsLZza5fJz90Y0/A3nuGGg9E
8S2SjyakzYBFG48jWOpP5NkHcPAl/A6deK3OZuWEtIsmrcLeLmgPdFnljZt7UzJA
4N9/4s8Dc0KgMaUwfEo7uHJNrYYFTfw+4UvV/QlUajMN7jPavvkfukWiQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCbpyjjv/GpZl638duNsNwV5TdfMB8GA1UdIwQY
MBaAFKCEVrxly0sVWp5rSzFt1RTgQxtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNjNjOGQtZDdjNy00ZThjLWI4NzYt
ZmZlZGYwYWQwYmUzLzEvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNjNjOGQtZDdjNy00ZThjLWI4NzYtZmZlZGYwYWQwYmUz
LzEvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTz/uj/f
O9cxgxkUnLnXIQmLoPwgomMJxCSUNIJIiepSlL8YFhAvJE/sWJ34TVjjo7RIkmLY
PzrNynGZQAT6nIgTrxr14aqf64n4+uLFwLqc5yfj22N773aJBSruOZS/jAWLnRUH
Eob8upLN3lW/nNf5wokRmdgg6ZijkL5eOhtz7ZncxBb5xCexTnFj5hsaVj/DKs48
PgkGNgQSDukQx5dstapOBTAsY5ZcniXxomBo82DoCq94cR0ym5YNY6eq0rb9BaAm
WIqN4km1DUs5KY6lsIARrnHSoIo85SFH4eQlyjKv4MzN7kS5JeQ2TV8a/+v1aJDj
rfBuaROmfNdKHA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:24:45 2025 by rpki-client