Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/2b2124-8794-4a8b-9930-3323fd060b9b/1/OXqyKGxnhx2rRXpygyl_yMaIpK8.mft
File: OXqyKGxnhx2rRXpygyl_yMaIpK8.mft (raw, json)
Hash identifier: 7SzXAH7Nt77/T+TlCueSsE6sod/lhmqqyDLyJm4wqcc=
Subject key identifier: 14:25:91:53:15:E6:EB:A7:22:1C:68:BA:68:E4:8D:63:2A:CB:2D:EF
Authority key identifier: 39:7A:B2:28:6C:67:87:1D:AB:45:7A:72:83:29:7F:C8:C6:88:A4:AF
Certificate issuer: /CN=397ab2286c67871dab457a7283297fc8c688a4af
Certificate serial: 01976DE2667CA996830119627E8BE3580306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXqyKGxnhx2rRXpygyl_yMaIpK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/2b2124-8794-4a8b-9930-3323fd060b9b/1/OXqyKGxnhx2rRXpygyl_yMaIpK8.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 10:00:43 +0000
Manifest this update: Sat 14 Jun 2025 10:00:43 +0000
Manifest next update: Sun 15 Jun 2025 10:00:43 +0000
Files and hashes: 1: OXqyKGxnhx2rRXpygyl_yMaIpK8.crl (hash: h94mgiMR6VJgtv57ahUcZ9o7e8nNoGLxq1qN2wslmFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/2b2124-8794-4a8b-9930-3323fd060b9b/1/OXqyKGxnhx2rRXpygyl_yMaIpK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/2b2124-8794-4a8b-9930-3323fd060b9b/1/OXqyKGxnhx2rRXpygyl_yMaIpK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXqyKGxnhx2rRXpygyl_yMaIpK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:66:7c:a9:96:83:01:19:62:7e:8b:e3:58:03:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397ab2286c67871dab457a7283297fc8c688a4af
Validity
Not Before: Jun 14 10:00:43 2025 GMT
Not After : Jun 15 10:00:43 2025 GMT
Subject: CN=1425915315e6eba7221c68ba68e48d632acb2def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:93:96:99:18:00:8d:d6:20:20:72:cc:b0:
00:3f:b6:6b:62:25:10:f9:c0:af:ec:91:58:a9:72:
79:c9:b2:c6:75:a8:e0:44:15:65:b1:09:39:29:64:
2c:77:c1:b2:07:53:95:7c:cd:ea:4d:39:d1:a5:33:
da:00:ca:d4:63:32:39:d9:6b:59:62:76:5c:5c:80:
dd:69:c5:6b:6c:e2:cd:1f:9d:5d:a5:2c:45:fa:2f:
ed:68:95:1a:53:16:6a:47:a5:19:05:09:9f:4d:1f:
ab:41:58:49:3d:66:4f:49:a1:10:88:af:2b:45:bb:
9e:99:71:d1:05:34:29:04:11:91:55:be:56:ac:c6:
3e:9c:41:d7:4d:a3:d7:b8:7e:50:e3:09:4c:a6:16:
1c:4d:36:66:18:f1:f6:07:95:20:32:5b:72:45:3f:
e6:90:10:0e:a2:53:81:a9:c9:60:10:b9:19:fc:0e:
a7:50:64:90:b3:b1:65:df:a7:27:ca:df:8c:65:05:
47:f4:91:83:14:b6:66:c0:df:db:a7:f9:89:3e:5b:
d8:f2:52:aa:73:d6:94:35:64:d4:e6:79:d4:8c:3a:
6a:be:16:52:54:df:bb:6e:ab:cd:8a:78:dd:cb:43:
51:5d:a2:73:3a:7a:53:82:14:a3:ae:c6:49:55:d9:
ee:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:25:91:53:15:E6:EB:A7:22:1C:68:BA:68:E4:8D:63:2A:CB:2D:EF
X509v3 Authority Key Identifier:
keyid:39:7A:B2:28:6C:67:87:1D:AB:45:7A:72:83:29:7F:C8:C6:88:A4:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXqyKGxnhx2rRXpygyl_yMaIpK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2b2124-8794-4a8b-9930-3323fd060b9b/1/OXqyKGxnhx2rRXpygyl_yMaIpK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2b2124-8794-4a8b-9930-3323fd060b9b/1/OXqyKGxnhx2rRXpygyl_yMaIpK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:28:6e:f2:6f:e1:24:56:08:79:60:a7:a3:d7:ba:0f:16:e1:
35:7d:59:56:76:1f:2a:95:cb:c3:f1:31:6a:f8:d3:3a:b0:96:
11:64:4f:99:08:23:54:b2:b4:9f:20:50:71:22:9e:e6:8b:92:
1b:d4:c3:dd:ed:70:92:0e:59:66:70:4a:f6:92:48:13:a1:52:
8e:a5:42:13:b9:61:bf:4b:dd:e6:95:6f:89:99:2b:54:52:c7:
18:75:bd:4d:22:f9:f3:d6:a0:8c:d6:e4:66:98:95:56:ed:62:
9a:91:85:fe:27:56:c5:26:69:b9:c0:b0:8f:10:8b:d5:6a:77:
f6:d4:bd:7e:7e:17:35:d3:12:46:4c:a5:aa:e1:02:1d:76:2f:
90:8b:4a:94:f3:17:ff:a6:10:54:af:45:65:03:cd:d4:08:7b:
32:d8:ea:0d:a7:a3:3a:16:94:f9:01:89:7f:56:ce:1d:a4:51:
7a:dc:d6:2e:65:ee:95:cb:45:4f:47:ab:7d:9d:53:61:14:4f:
5a:4f:df:8b:88:3d:35:fe:22:2a:47:4a:c9:b4:4a:75:55:8d:
47:c4:6e:92:69:04:12:33:4f:cc:59:e6:6c:ee:32:3d:2f:43:
77:e6:b0:ea:9e:20:fc:6b:51:64:46:e5:f9:a9:41:75:66:46:
39:ed:89:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdt4mZ8qZaDARlifovjWAMGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5N2FiMjI4NmM2Nzg3MWRhYjQ1N2E3MjgzMjk3ZmM4YzY4
OGE0YWYwHhcNMjUwNjE0MTAwMDQzWhcNMjUwNjE1MTAwMDQzWjAzMTEwLwYDVQQD
EygxNDI1OTE1MzE1ZTZlYmE3MjIxYzY4YmE2OGU0OGQ2MzJhY2IyZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsleTlpkYAI3WICByzLAAP7ZrYiUQ
+cCv7JFYqXJ5ybLGdajgRBVlsQk5KWQsd8GyB1OVfM3qTTnRpTPaAMrUYzI52WtZ
YnZcXIDdacVrbOLNH51dpSxF+i/taJUaUxZqR6UZBQmfTR+rQVhJPWZPSaEQiK8r
RbuemXHRBTQpBBGRVb5WrMY+nEHXTaPXuH5Q4wlMphYcTTZmGPH2B5UgMltyRT/m
kBAOolOBqclgELkZ/A6nUGSQs7Fl36cnyt+MZQVH9JGDFLZmwN/bp/mJPlvY8lKq
c9aUNWTU5nnUjDpqvhZSVN+7bqvNinjdy0NRXaJzOnpTghSjrsZJVdnuxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQlkVMV5uunIhxoumjkjWMqyy3vMB8GA1UdIwQY
MBaAFDl6sihsZ4cdq0V6coMpf8jGiKSvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hxeUtHeG5oeDJyUlhweWd5bF95TWFJcEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yYjIxMjQtODc5NC00YThiLTk5MzAt
MzMyM2ZkMDYwYjliLzEvT1hxeUtHeG5oeDJyUlhweWd5bF95TWFJcEs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8yYjIxMjQtODc5NC00YThiLTk5MzAtMzMyM2ZkMDYwYjli
LzEvT1hxeUtHeG5oeDJyUlhweWd5bF95TWFJcEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGChu8m/h
JFYIeWCno9e6DxbhNX1ZVnYfKpXLw/ExavjTOrCWEWRPmQgjVLK0nyBQcSKe5ouS
G9TD3e1wkg5ZZnBK9pJIE6FSjqVCE7lhv0vd5pVviZkrVFLHGHW9TSL589agjNbk
ZpiVVu1impGF/idWxSZpucCwjxCL1Wp39tS9fn4XNdMSRkylquECHXYvkItKlPMX
/6YQVK9FZQPN1Ah7MtjqDaejOhaU+QGJf1bOHaRRetzWLmXulctFT0erfZ1TYRRP
Wk/fi4g9Nf4iKkdKybRKdVWNR8RukmkEEjNPzFnmbO4yPS9Dd+aw6p4g/GtRZEbl
+alBdWZGOe2JaA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:37:40 2025 by rpki-client