Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
File: o2osPu23l22c4wRYHyNTL-y0bn8.mft (raw, json)
Hash identifier: DFxTOzBkPhOdxUrLAcfyBfvLFjGSkVN5GFeq71aVyjE=
Subject key identifier: EA:3C:7E:F3:FC:BE:D2:B4:D9:80:7E:37:D4:D7:2C:AC:1B:BF:AB:7E
Authority key identifier: A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F
Certificate issuer: /CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f
Certificate serial: 01976BBDA8FA05FF25E790E31A87CD14233F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 00:01:21 +0000
Manifest this update: Sat 14 Jun 2025 00:01:21 +0000
Manifest next update: Sun 15 Jun 2025 00:01:21 +0000
Files and hashes: 1: o2osPu23l22c4wRYHyNTL-y0bn8.crl (hash: 35Hq2zTq2gVxznYI2g1X8PklOGvsW3Dv4LBza46N97g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:a8:fa:05:ff:25:e7:90:e3:1a:87:cd:14:23:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f
Validity
Not Before: Jun 14 00:01:21 2025 GMT
Not After : Jun 15 00:01:21 2025 GMT
Subject: CN=ea3c7ef3fcbed2b4d9807e37d4d72cac1bbfab7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:67:18:b4:1d:0a:c3:87:3a:d0:09:89:8a:e3:
d5:3c:8d:f6:83:ea:90:37:b6:4a:ed:61:77:42:8b:
59:91:ee:b5:88:b5:46:87:bd:c8:ec:27:c8:a7:28:
8d:88:d8:3f:1c:90:6c:de:3d:4b:79:d0:38:6a:2c:
21:f2:c7:26:21:19:e5:35:a4:60:66:7d:f6:43:20:
ef:26:fc:87:7a:58:2f:46:8f:4d:20:a4:ab:27:53:
43:eb:06:e1:38:50:fc:17:97:5e:77:5e:62:13:0c:
d0:fd:a3:c3:59:4b:19:a7:72:28:57:78:d0:6c:cd:
a2:09:32:35:4a:76:4a:15:99:30:cf:5a:ff:36:59:
19:b4:f2:2a:fd:73:a3:fc:22:b2:41:8a:ab:89:e6:
e0:f1:5a:df:0d:51:ba:9a:ff:3b:fe:03:5c:ac:ca:
f2:e8:a8:1f:7b:83:43:34:0b:d7:12:b7:96:ff:f8:
c9:8d:58:e6:6d:a8:23:9f:15:f4:b4:9b:93:9a:a3:
5d:73:e1:fa:7a:8b:c5:ef:11:b9:a5:c9:90:60:1f:
5a:d5:58:8d:7f:7e:6c:29:dd:50:b0:b4:f5:9a:96:
d2:89:07:33:26:78:4b:aa:40:85:f5:71:3b:a9:3a:
c4:6c:1d:cc:c7:ba:a9:8e:e2:94:ef:37:52:02:b3:
a7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3C:7E:F3:FC:BE:D2:B4:D9:80:7E:37:D4:D7:2C:AC:1B:BF:AB:7E
X509v3 Authority Key Identifier:
keyid:A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1f:c6:30:df:2a:7d:b4:1e:49:2c:98:8a:35:bd:e0:e7:97:
0f:4e:f2:0d:0f:c9:c3:65:ab:82:90:e1:ed:de:e6:58:c9:6a:
9d:d9:e5:6f:29:00:f6:e6:79:2e:9d:a9:b1:a6:b8:51:e9:1a:
6d:ad:4f:3c:52:19:71:97:9c:d5:0e:9d:60:5d:ef:96:ae:29:
68:48:d7:19:4f:88:b5:ba:9a:81:46:69:20:9a:c0:df:9c:4f:
f4:3c:16:a8:eb:ac:4d:31:48:84:84:16:58:42:61:bd:43:22:
fc:2b:5c:5d:fe:1e:95:0f:a9:08:9e:db:e6:04:76:a0:60:27:
03:fc:89:18:d1:72:bd:9b:0b:a8:a6:44:87:ca:ce:d0:49:85:
bd:c8:3f:58:22:0e:d6:f7:66:29:2f:9d:cd:1d:52:a5:fb:9b:
e5:df:01:0d:33:4c:e2:f3:fc:8a:67:04:41:05:f8:16:d2:ad:
d9:f7:e5:00:cd:27:53:ec:fd:78:c8:cb:29:79:d5:e1:0e:64:
72:a0:b3:e4:b6:1a:ba:90:5d:be:0d:0a:f1:84:84:7f:50:2a:
c9:62:ca:48:c2:42:da:3f:0e:dc:6c:60:0c:ad:18:41:aa:c0:
e5:32:81:c6:dd:ef:40:6d:ef:d8:95:da:c0:27:11:03:90:9b:
8e:07:e0:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvaj6Bf8l55DjGofNFCM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNmEyYzNlZWRiNzk3NmQ5Y2UzMDQ1ODFmMjM1MzJmZWNi
NDZlN2YwHhcNMjUwNjE0MDAwMTIxWhcNMjUwNjE1MDAwMTIxWjAzMTEwLwYDVQQD
EyhlYTNjN2VmM2ZjYmVkMmI0ZDk4MDdlMzdkNGQ3MmNhYzFiYmZhYjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mcYtB0Kw4c60AmJiuPVPI32g+qQ
N7ZK7WF3QotZke61iLVGh73I7CfIpyiNiNg/HJBs3j1LedA4aiwh8scmIRnlNaRg
Zn32QyDvJvyHelgvRo9NIKSrJ1ND6wbhOFD8F5ded15iEwzQ/aPDWUsZp3IoV3jQ
bM2iCTI1SnZKFZkwz1r/NlkZtPIq/XOj/CKyQYqriebg8VrfDVG6mv87/gNcrMry
6Kgfe4NDNAvXEreW//jJjVjmbagjnxX0tJuTmqNdc+H6eovF7xG5pcmQYB9a1ViN
f35sKd1QsLT1mpbSiQczJnhLqkCF9XE7qTrEbB3Mx7qpjuKU7zdSArOnrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOo8fvP8vtK02YB+N9TXLKwbv6t+MB8GA1UdIwQY
MBaAFKNqLD7tt5dtnOMEWB8jUy/stG5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJvc1B1MjNsMjJjNHdSWUh5TlRMLXkwYm44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85MTg1ZTItYjkyOS00MjM2LWE5OGIt
ZGRlMTkyM2JhNzI0LzEvbzJvc1B1MjNsMjJjNHdSWUh5TlRMLXkwYm44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi85MTg1ZTItYjkyOS00MjM2LWE5OGItZGRlMTkyM2JhNzI0
LzEvbzJvc1B1MjNsMjJjNHdSWUh5TlRMLXkwYm44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhx/GMN8q
fbQeSSyYijW94OeXD07yDQ/Jw2WrgpDh7d7mWMlqndnlbykA9uZ5Lp2psaa4Ueka
ba1PPFIZcZec1Q6dYF3vlq4paEjXGU+ItbqagUZpIJrA35xP9DwWqOusTTFIhIQW
WEJhvUMi/CtcXf4elQ+pCJ7b5gR2oGAnA/yJGNFyvZsLqKZEh8rO0EmFvcg/WCIO
1vdmKS+dzR1Spfub5d8BDTNM4vP8imcEQQX4FtKt2fflAM0nU+z9eMjLKXnV4Q5k
cqCz5LYaupBdvg0K8YSEf1AqyWLKSMJC2j8O3GxgDK0YQarA5TKBxt3vQG3v2JXa
wCcRA5Cbjgfgng==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:26:31 2025 by rpki-client