Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
File: o0kR6dK76mamwkAxnd4wez3vSME.mft (raw, json)
Hash identifier: 8MxRi9OegfvU+xCMDwSM+9bmPelxSEqMrSoKs5zV2lM=
Subject key identifier: 0A:4C:86:90:CA:47:21:04:10:82:65:CB:35:EC:14:70:67:A9:31:9F
Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Certificate serial: 0197711B25D1623A7C2E4E58DA7BBA08479D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 01:01:33 +0000
Manifest this update: Sun 15 Jun 2025 01:01:33 +0000
Manifest next update: Mon 16 Jun 2025 01:01:33 +0000
Files and hashes: 1: o0kR6dK76mamwkAxnd4wez3vSME.crl (hash: omDl5nAwK1etGXUUOEh+pjTxcVAe2mO9lJz9a4rdjPc=)
2: xtKHi03X1rn73LOhmyBcH9uojR8.roa (hash: zBGWZf4vklDM0mAZkH6NtmjYXdkW+BEyoU8BQG385Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:25:d1:62:3a:7c:2e:4e:58:da:7b:ba:08:47:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Validity
Not Before: Jun 15 01:01:33 2025 GMT
Not After : Jun 16 01:01:33 2025 GMT
Subject: CN=0a4c8690ca472104108265cb35ec147067a9319f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:62:92:8f:a5:15:88:9c:0b:ec:e2:e2:89:
c9:b9:3e:d6:1a:9f:90:19:2f:5c:fa:68:36:0f:35:
fd:db:9a:9b:14:5a:bf:28:4e:5e:e3:10:39:ec:2b:
3a:e1:00:b3:0f:3c:92:e8:cc:36:65:79:98:4c:1c:
0f:0e:e0:1b:f9:0f:49:63:4f:cc:72:6b:30:4d:c5:
d6:58:eb:2c:7c:0a:ad:8f:ee:97:f9:9e:a2:64:6b:
e0:b5:b3:d1:98:03:fb:80:37:35:09:6e:f0:a1:40:
84:d7:9b:21:3c:2f:06:d8:d2:9b:86:73:ee:22:07:
94:b8:46:06:db:f1:46:ed:a4:84:10:7a:9e:e0:36:
86:8a:c3:ed:33:d4:6a:67:76:ea:9d:a1:54:2a:9e:
cf:0b:66:91:78:26:ca:ee:f5:7c:98:ea:38:c4:3e:
d5:4e:05:26:a1:81:3d:bc:40:05:8d:71:32:c3:b6:
0b:e2:d0:97:23:9c:67:39:cb:16:96:1e:a7:00:67:
84:e0:0a:94:10:f4:15:5d:8b:57:4e:da:e6:a2:e9:
a0:11:5c:09:2d:d6:c6:b1:4f:e6:56:6c:ca:2f:94:
3c:d8:31:c7:2e:15:8b:b4:a9:20:3b:b0:47:85:de:
92:a4:f3:58:84:e1:1d:c2:ac:d0:a7:dc:e9:bb:44:
ff:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4C:86:90:CA:47:21:04:10:82:65:CB:35:EC:14:70:67:A9:31:9F
X509v3 Authority Key Identifier:
keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:cd:d7:2a:e4:e4:a9:cf:63:40:82:a0:c6:b5:bf:fb:a0:9d:
8f:b1:bc:dd:8f:c2:f1:57:36:28:33:6b:2f:fe:d7:f4:c1:9a:
1b:c4:4e:10:71:6d:6a:a1:37:09:92:7c:86:02:25:77:bf:fe:
6f:f2:51:83:82:0d:5b:86:75:46:55:9b:16:e7:32:6e:61:00:
c1:8f:f2:27:d1:1c:3d:13:af:b5:29:66:2b:b3:c9:f9:12:61:
66:3e:82:be:82:63:ef:91:2e:25:3f:0d:06:f9:66:c2:d3:be:
ca:70:28:e0:9c:5e:7b:87:05:c2:72:2d:b9:2a:3f:fb:e5:c6:
52:b0:cc:d4:d5:1c:05:49:af:3a:79:99:2b:24:b7:42:5a:f0:
ed:6b:bd:1a:8c:f0:f9:82:00:3d:1c:ec:9c:6a:81:b4:1e:09:
63:a2:b3:32:bd:2e:cd:d9:91:3c:aa:63:1d:98:03:86:b4:51:
1f:be:26:3e:4c:1f:0a:c7:38:62:58:3a:7a:70:d8:5d:df:dd:
2d:21:c3:68:12:8b:8c:b1:77:93:e1:aa:bd:9e:3e:ca:4a:fb:
6f:20:fd:86:6e:fc:d8:c3:0b:30:2c:8e:58:e8:4a:be:76:7b:
db:c1:c4:0c:3f:cf:8c:86:ea:ef:74:dc:dd:25:3d:44:e7:17:
ab:31:94:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxGyXRYjp8Lk5Y2nu6CEedMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNDkxMWU5ZDJiYmVhNjZhNmMyNDAzMTlkZGUzMDdiM2Rl
ZjQ4YzEwHhcNMjUwNjE1MDEwMTMzWhcNMjUwNjE2MDEwMTMzWjAzMTEwLwYDVQQD
EygwYTRjODY5MGNhNDcyMTA0MTA4MjY1Y2IzNWVjMTQ3MDY3YTkzMTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6Riko+lFYicC+zi4onJuT7WGp+Q
GS9c+mg2DzX925qbFFq/KE5e4xA57Cs64QCzDzyS6Mw2ZXmYTBwPDuAb+Q9JY0/M
cmswTcXWWOssfAqtj+6X+Z6iZGvgtbPRmAP7gDc1CW7woUCE15shPC8G2NKbhnPu
IgeUuEYG2/FG7aSEEHqe4DaGisPtM9RqZ3bqnaFUKp7PC2aReCbK7vV8mOo4xD7V
TgUmoYE9vEAFjXEyw7YL4tCXI5xnOcsWlh6nAGeE4AqUEPQVXYtXTtrmoumgEVwJ
LdbGsU/mVmzKL5Q82DHHLhWLtKkgO7BHhd6SpPNYhOEdwqzQp9zpu0T/BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApMhpDKRyEEEIJlyzXsFHBnqTGfMB8GA1UdIwQY
MBaAFKNJEenSu+pmpsJAMZ3eMHs970jBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzBrUjZkSzc2bWFtd2tBeG5kNHdlejN2U01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xNDQ4NmEtYTdlNi00MTEzLTkzYjEt
MTVjZGM5YThjMzhmLzEvbzBrUjZkSzc2bWFtd2tBeG5kNHdlejN2U01FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xNDQ4NmEtYTdlNi00MTEzLTkzYjEtMTVjZGM5YThjMzhm
LzEvbzBrUjZkSzc2bWFtd2tBeG5kNHdlejN2U01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACc3XKuTk
qc9jQIKgxrW/+6Cdj7G83Y/C8Vc2KDNrL/7X9MGaG8ROEHFtaqE3CZJ8hgIld7/+
b/JRg4INW4Z1RlWbFucybmEAwY/yJ9EcPROvtSlmK7PJ+RJhZj6CvoJj75EuJT8N
BvlmwtO+ynAo4Jxee4cFwnItuSo/++XGUrDM1NUcBUmvOnmZKyS3Qlrw7Wu9Gozw
+YIAPRzsnGqBtB4JY6KzMr0uzdmRPKpjHZgDhrRRH74mPkwfCsc4Ylg6enDYXd/d
LSHDaBKLjLF3k+GqvZ4+ykr7byD9hm782MMLMCyOWOhKvnZ728HEDD/PjIbq73Tc
3SU9ROcXqzGUIA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:42:10 2025 by rpki-client