Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
File: o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft (raw, json)
Hash identifier: nWWXPS84D9F9zr69MKCup/pDjsXFZtghKC0t7e+Huys=
Subject key identifier: 68:01:F2:4E:2B:6A:5C:96:A8:DB:C7:B4:F8:CE:09:5C:D1:F2:E5:53
Authority key identifier: A3:D3:90:7F:81:1C:B8:3F:16:B8:16:78:5E:38:0B:C2:4C:8A:C1:93
Certificate issuer: /CN=a3d3907f811cb83f16b816785e380bc24c8ac193
Certificate serial: 0197722CFB1549D5B92AA50461325E4FD901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
Manifest number: 129F
Signing time: Sun 15 Jun 2025 06:00:39 +0000
Manifest this update: Sun 15 Jun 2025 06:00:39 +0000
Manifest next update: Mon 16 Jun 2025 06:00:39 +0000
Files and hashes: 1: KHmBEFAHu1D8g7BNr6DM90HcrdE.roa (hash: cHCWZbVIixRYPkJFTsJoo7AK/4mwhNH2E0rmOh1q4HI=)
2: o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl (hash: 86zsYxDSob9MOmjo6V1cnSxHGpUeboxUEkBCq66m7xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:fb:15:49:d5:b9:2a:a5:04:61:32:5e:4f:d9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d3907f811cb83f16b816785e380bc24c8ac193
Validity
Not Before: Jun 15 06:00:39 2025 GMT
Not After : Jun 16 06:00:39 2025 GMT
Subject: CN=6801f24e2b6a5c96a8dbc7b4f8ce095cd1f2e553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:24:dc:9f:08:74:9c:30:37:83:8e:04:25:
d5:c3:80:d2:bc:91:c9:c1:50:78:f0:a8:59:7e:d0:
00:92:62:4f:98:4d:21:39:a8:9c:3a:43:ee:6f:dc:
6a:4e:b4:a7:a7:4d:d5:5a:38:4e:66:a0:44:29:4d:
65:85:96:05:c1:91:54:0e:c4:6e:a2:f7:25:97:8d:
f5:d9:7b:c5:f4:59:57:6b:66:8f:3e:c9:57:99:d2:
fe:01:18:29:9f:94:ff:75:97:e6:d1:e4:0a:62:bf:
2b:f1:82:f0:b5:06:7f:b1:d4:be:03:6f:be:03:8d:
5d:b3:2f:55:8e:54:4e:9d:c8:3d:7f:66:d3:e8:01:
03:7c:c4:c6:67:70:83:a4:61:af:ff:cb:b0:b7:0a:
bc:a9:76:95:25:a1:b8:8d:25:37:39:85:cc:03:ed:
44:e9:6c:aa:36:6d:8b:1f:84:fa:28:62:b8:26:34:
66:a8:35:4e:f9:37:00:37:ae:a9:b9:96:c0:3a:e9:
96:db:da:cf:28:71:9f:dd:3c:63:33:cb:6c:71:f4:
2a:ef:23:1f:c1:ed:ef:fb:fa:9e:85:1e:d0:85:98:
a4:ae:6a:f1:ab:1a:dd:6e:47:6d:1e:4b:c1:72:72:
6c:0b:f3:fc:43:13:cd:44:e5:15:44:7f:87:c9:f4:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:01:F2:4E:2B:6A:5C:96:A8:DB:C7:B4:F8:CE:09:5C:D1:F2:E5:53
X509v3 Authority Key Identifier:
keyid:A3:D3:90:7F:81:1C:B8:3F:16:B8:16:78:5E:38:0B:C2:4C:8A:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1c:0e:cd:59:e7:2d:14:1d:30:d8:75:59:09:f6:a2:f4:08:
79:46:35:3a:7c:64:c0:a4:61:5b:2f:0e:a6:2a:eb:38:d2:22:
eb:23:e7:db:61:79:22:1d:7e:3c:89:b8:e3:60:ef:8c:68:40:
09:d3:73:97:b8:0d:5d:16:cb:f9:42:e1:1f:d8:8b:2f:bb:40:
37:44:7f:be:65:69:05:20:f7:a2:e2:e4:ab:ac:78:dc:93:88:
95:2b:87:a2:18:d4:13:cd:46:a8:1d:6c:2d:9c:cf:1c:5a:9e:
ef:5e:e6:cc:c5:42:0d:c6:65:f7:94:47:27:62:cd:b3:72:bd:
58:ff:3f:46:61:11:da:3b:a0:b9:6c:fe:13:c5:d0:85:c0:aa:
46:a6:a3:f3:36:7b:a1:1d:59:ea:6b:dd:81:a3:86:29:12:2a:
04:eb:13:89:d3:27:47:88:d8:ba:4a:43:af:80:2c:73:fd:7b:
65:ab:86:37:71:13:a5:d5:18:09:79:aa:f6:0c:b1:9e:b3:5c:
db:61:93:ff:69:cc:18:9c:f1:84:ca:8c:17:e7:e1:79:8c:fa:
8d:53:d8:5e:da:1b:f7:97:73:20:b5:04:04:79:71:be:cd:80:
c6:a3:c7:7a:b4:aa:08:36:92:b1:cf:bc:85:1b:d3:7f:ef:29:
26:ff:59:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyLPsVSdW5KqUEYTJeT9kBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZDM5MDdmODExY2I4M2YxNmI4MTY3ODVlMzgwYmMyNGM4
YWMxOTMwHhcNMjUwNjE1MDYwMDM5WhcNMjUwNjE2MDYwMDM5WjAzMTEwLwYDVQQD
Eyg2ODAxZjI0ZTJiNmE1Yzk2YThkYmM3YjRmOGNlMDk1Y2QxZjJlNTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM0k3J8IdJwwN4OOBCXVw4DSvJHJ
wVB48KhZftAAkmJPmE0hOaicOkPub9xqTrSnp03VWjhOZqBEKU1lhZYFwZFUDsRu
ovcll4312XvF9FlXa2aPPslXmdL+ARgpn5T/dZfm0eQKYr8r8YLwtQZ/sdS+A2++
A41dsy9VjlROncg9f2bT6AEDfMTGZ3CDpGGv/8uwtwq8qXaVJaG4jSU3OYXMA+1E
6WyqNm2LH4T6KGK4JjRmqDVO+TcAN66puZbAOumW29rPKHGf3TxjM8tscfQq7yMf
we3v+/qehR7QhZikrmrxqxrdbkdtHkvBcnJsC/P8QxPNROUVRH+HyfQBjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgB8k4ralyWqNvHtPjOCVzR8uVTMB8GA1UdIwQY
MBaAFKPTkH+BHLg/FrgWeF44C8JMisGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzlPUWY0RWN1RDhXdUJaNFhqZ0x3a3lLd1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80M2ViMDUtYWZmZS00Mjc0LTkxM2It
MzMyMDI3MWZiM2FjLzEvbzlPUWY0RWN1RDhXdUJaNFhqZ0x3a3lLd1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80M2ViMDUtYWZmZS00Mjc0LTkxM2ItMzMyMDI3MWZiM2Fj
LzEvbzlPUWY0RWN1RDhXdUJaNFhqZ0x3a3lLd1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhwOzVnn
LRQdMNh1WQn2ovQIeUY1OnxkwKRhWy8OpirrONIi6yPn22F5Ih1+PIm442DvjGhA
CdNzl7gNXRbL+ULhH9iLL7tAN0R/vmVpBSD3ouLkq6x43JOIlSuHohjUE81GqB1s
LZzPHFqe717mzMVCDcZl95RHJ2LNs3K9WP8/RmER2juguWz+E8XQhcCqRqaj8zZ7
oR1Z6mvdgaOGKRIqBOsTidMnR4jYukpDr4Asc/17ZauGN3ETpdUYCXmq9gyxnrNc
22GT/2nMGJzxhMqMF+fheYz6jVPYXtob95dzILUEBHlxvs2AxqPHerSqCDaSsc+8
hRvTf+8pJv9Z/A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:56:18 2025 by rpki-client