Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
File: O63rHzjiUanY1hTzLTbyat9P1YA.mft (raw, json)
Hash identifier: /KKcMXN2oZKYcscjUfcrEBbzmBMqU7MqqnO0Qfj8BqM=
Subject key identifier: D4:B5:C8:22:EB:F4:06:D5:07:AF:33:F0:A9:1C:54:BB:D6:BB:55:D6
Authority key identifier: 3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80
Certificate issuer: /CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580
Certificate serial: 01976DABD8B01E2E53AB6801EB0BE98A04EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
Manifest number: 0D3A
Signing time: Sat 14 Jun 2025 09:01:07 +0000
Manifest this update: Sat 14 Jun 2025 09:01:07 +0000
Manifest next update: Sun 15 Jun 2025 09:01:07 +0000
Files and hashes: 1: O63rHzjiUanY1hTzLTbyat9P1YA.crl (hash: t2MPwiEv7QIUpfKHk1gHcR4uxtvqJMEq6T/LKUiXRXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:d8:b0:1e:2e:53:ab:68:01:eb:0b:e9:8a:04:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580
Validity
Not Before: Jun 14 09:01:07 2025 GMT
Not After : Jun 15 09:01:07 2025 GMT
Subject: CN=d4b5c822ebf406d507af33f0a91c54bbd6bb55d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f9:aa:ed:1f:ca:e8:f3:27:2d:10:41:e6:79:
59:a1:1a:cd:89:bb:39:ae:b3:a2:4d:05:fe:35:58:
f9:fa:97:69:5c:c1:89:7f:9a:21:ba:d2:3d:6c:e4:
16:19:e5:7b:82:18:70:55:15:e4:8c:08:b3:41:2f:
f9:29:0a:3f:80:47:08:9c:88:ec:0c:83:43:0d:77:
1e:d7:10:df:17:1a:2c:2b:30:39:3d:8a:83:06:53:
32:c0:f4:79:dd:02:f6:a7:f3:4a:c8:10:91:cb:1e:
66:8e:d3:35:2b:38:76:c0:5f:66:b5:09:17:a9:72:
bb:0e:25:4d:48:23:7b:2b:24:b0:1d:8b:1c:43:58:
3b:48:35:c6:3d:84:48:f1:aa:1a:eb:75:c1:e0:8f:
e8:a4:9c:63:aa:24:88:49:b4:f5:bd:44:b7:2f:d5:
03:50:e4:f1:18:14:91:8e:4a:9b:eb:cd:9a:86:8b:
ea:d2:0c:7d:66:4c:6b:e9:de:6c:aa:fd:8b:e1:a9:
19:a4:1b:70:36:2c:a5:4b:31:dd:77:22:85:b1:83:
5e:b9:5a:2a:63:54:45:5d:a2:72:1c:4e:40:1f:40:
48:8d:56:0d:af:10:9d:bb:5d:78:f5:91:9d:9b:fd:
d3:c1:05:8b:58:52:7a:96:64:59:18:56:54:1d:fc:
f9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B5:C8:22:EB:F4:06:D5:07:AF:33:F0:A9:1C:54:BB:D6:BB:55:D6
X509v3 Authority Key Identifier:
keyid:3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b2:db:cb:c6:2f:16:64:9f:88:f0:fb:2e:b5:14:45:41:37:
d5:d3:87:49:e6:3d:84:e1:92:bc:41:d4:86:a6:f7:65:93:da:
67:13:42:97:8b:b5:36:f4:61:0a:dc:12:e2:d2:3d:38:c5:ca:
eb:56:3e:cd:c7:8d:a5:b6:0a:8a:7a:b1:22:91:ac:f5:38:2c:
76:b0:6e:53:49:12:55:f5:60:5b:cf:9c:de:8f:76:8d:ba:ff:
e5:08:98:9b:89:24:69:a2:3a:bd:ae:56:2f:37:00:7b:da:71:
e5:84:e4:18:0d:a4:3b:a9:78:99:b6:46:01:29:b9:6f:55:97:
36:33:77:7f:bf:f2:2e:d2:12:c8:f4:44:c3:14:9b:39:4b:73:
cd:6c:1b:8b:bb:60:f1:ea:ae:51:4c:62:60:11:70:ac:d6:9f:
ec:82:c1:d5:14:21:fe:f7:7f:57:41:93:3c:90:9b:33:82:dc:
00:94:ff:c9:3c:61:a8:65:0e:14:55:63:dc:18:e4:c5:9d:f2:
d5:30:f1:84:6d:99:b1:a7:49:47:7b:6f:fc:db:86:4b:61:65:
89:55:a1:81:4b:f2:04:e3:b5:be:c4:7f:5f:18:d4:d3:61:48:
6b:5c:e2:9d:08:26:3f:02:6c:d7:4e:69:7d:cb:36:e7:e5:6c:
88:3f:41:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq9iwHi5Tq2gB6wvpigTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYWRlYjFmMzhlMjUxYTlkOGQ2MTRmMzJkMzZmMjZhZGY0
ZmQ1ODAwHhcNMjUwNjE0MDkwMTA3WhcNMjUwNjE1MDkwMTA3WjAzMTEwLwYDVQQD
EyhkNGI1YzgyMmViZjQwNmQ1MDdhZjMzZjBhOTFjNTRiYmQ2YmI1NWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPmq7R/K6PMnLRBB5nlZoRrNibs5
rrOiTQX+NVj5+pdpXMGJf5ohutI9bOQWGeV7ghhwVRXkjAizQS/5KQo/gEcInIjs
DINDDXce1xDfFxosKzA5PYqDBlMywPR53QL2p/NKyBCRyx5mjtM1Kzh2wF9mtQkX
qXK7DiVNSCN7KySwHYscQ1g7SDXGPYRI8aoa63XB4I/opJxjqiSISbT1vUS3L9UD
UOTxGBSRjkqb682ahovq0gx9Zkxr6d5sqv2L4akZpBtwNiylSzHddyKFsYNeuVoq
Y1RFXaJyHE5AH0BIjVYNrxCdu1149ZGdm/3TwQWLWFJ6lmRZGFZUHfz5NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNS1yCLr9AbVB68z8KkcVLvWu1XWMB8GA1UdIwQY
MBaAFDut6x844lGp2NYU8y028mrfT9WAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzYzckh6amlVYW5ZMWhUekxUYnlhdDlQMVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmJhMGYtZDU2ZC00ZDdmLWE4YjUt
NGM4N2ZlNWZkYWRjLzEvTzYzckh6amlVYW5ZMWhUekxUYnlhdDlQMVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8xYmJhMGYtZDU2ZC00ZDdmLWE4YjUtNGM4N2ZlNWZkYWRj
LzEvTzYzckh6amlVYW5ZMWhUekxUYnlhdDlQMVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabLby8Yv
FmSfiPD7LrUURUE31dOHSeY9hOGSvEHUhqb3ZZPaZxNCl4u1NvRhCtwS4tI9OMXK
61Y+zceNpbYKinqxIpGs9TgsdrBuU0kSVfVgW8+c3o92jbr/5QiYm4kkaaI6va5W
LzcAe9px5YTkGA2kO6l4mbZGASm5b1WXNjN3f7/yLtISyPREwxSbOUtzzWwbi7tg
8equUUxiYBFwrNaf7ILB1RQh/vd/V0GTPJCbM4LcAJT/yTxhqGUOFFVj3BjkxZ3y
1TDxhG2ZsadJR3tv/NuGS2FliVWhgUvyBOO1vsR/XxjU02FIa1zinQgmPwJs105p
fcs25+VsiD9Bhw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:23:47 2025 by rpki-client