Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
File: oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft (raw, json)
Hash identifier: ZqSnwhGWhc9ks2RUbSmRC7/KLSMylYzm3IItHTfMV4s=
Subject key identifier: 15:DC:B8:B5:EC:38:21:71:63:55:B8:A5:6C:CD:85:41:2B:DF:A0:54
Authority key identifier: A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
Certificate issuer: /CN=a1a4582562c3135bb52bdb96145e1ad03786b148
Certificate serial: 01976D3DF4EFEF932B6F9116F412829FE919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
Manifest number: 1334
Signing time: Sat 14 Jun 2025 07:01:06 +0000
Manifest this update: Sat 14 Jun 2025 07:01:06 +0000
Manifest next update: Sun 15 Jun 2025 07:01:06 +0000
Files and hashes: 1: oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl (hash: cYRtIs+rFlV8YiBUI0WZ3IFPvK2Wg3gHptAG0fIxcxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:f4:ef:ef:93:2b:6f:91:16:f4:12:82:9f:e9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a4582562c3135bb52bdb96145e1ad03786b148
Validity
Not Before: Jun 14 07:01:06 2025 GMT
Not After : Jun 15 07:01:06 2025 GMT
Subject: CN=15dcb8b5ec3821716355b8a56ccd85412bdfa054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:df:0f:fd:29:ef:66:85:f9:3e:4f:b5:09:
3c:5b:4b:00:bf:1f:00:d0:8c:fb:6b:17:e0:95:14:
b2:8c:d9:0f:29:d9:5b:d3:62:00:b2:6a:0a:0c:5e:
80:3c:d3:ba:13:91:fe:14:ac:28:6d:ef:25:1d:6e:
77:df:62:3f:35:60:b5:e1:ee:5b:33:4a:74:bc:9e:
4f:28:54:1f:48:8b:fe:e3:e3:5b:e2:51:6a:27:d7:
3e:a8:7b:b5:7a:49:9b:0a:8e:87:ca:fa:e4:b8:3a:
8a:06:db:e5:74:05:06:3b:59:46:da:ff:a7:40:c6:
4d:44:0a:28:53:04:1c:11:b0:e1:ce:14:69:1c:a0:
cc:3b:7b:4c:7d:f9:28:d3:e8:f9:42:39:72:35:56:
d2:03:d8:32:b9:0d:94:bf:b9:23:46:5f:d7:58:ff:
e1:38:30:02:91:b2:fa:a2:d0:a1:b6:79:e5:b3:6b:
f7:3f:3b:71:09:a2:6f:16:35:a2:a6:1a:5b:a8:a8:
e4:53:3b:8a:92:70:ed:91:0b:bd:d7:0f:4e:f9:c4:
32:ef:49:38:0d:34:a3:d1:05:7d:89:7c:fc:5e:31:
0d:99:3b:1a:c8:f6:a8:0a:fb:2b:de:7d:8b:1a:5c:
f0:27:49:dc:85:71:df:88:19:3b:a7:d1:ac:69:58:
35:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DC:B8:B5:EC:38:21:71:63:55:B8:A5:6C:CD:85:41:2B:DF:A0:54
X509v3 Authority Key Identifier:
keyid:A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0e:a2:01:fa:d2:cd:81:13:aa:8e:e7:dd:c6:3c:40:78:80:
b7:b0:d4:e4:36:90:cf:f6:e8:e4:03:81:ef:0c:3d:37:46:18:
b1:6b:aa:98:85:a2:15:db:f4:e3:03:e8:19:88:9f:f4:26:d7:
0b:1c:f7:c4:b9:0a:54:b8:f8:7c:e7:07:d8:d3:97:7c:de:fd:
35:b2:0c:d2:e6:8c:c7:44:8b:c5:3c:f7:02:79:bf:f6:b6:ed:
fa:bb:b4:f0:58:01:3c:a6:1e:c9:b5:a5:9d:34:a1:40:3f:73:
21:35:7d:6c:4e:e2:cd:63:fb:d4:30:1c:12:3b:95:e5:79:76:
12:95:99:7b:0c:12:a7:30:b0:27:2b:95:ec:12:73:71:94:32:
01:84:75:e2:38:47:cc:8a:d0:9b:98:a4:40:65:c0:52:2e:4c:
86:56:83:e4:2d:a0:31:9d:ee:05:8b:f8:e1:04:a7:31:ba:22:
f3:67:51:60:df:77:e6:9e:09:84:69:80:6a:b3:db:22:68:c7:
93:75:3b:7d:80:55:2b:05:03:7d:a0:f4:59:1e:cf:7c:94:da:
8d:c5:1a:d9:1d:81:20:68:94:5c:dc:50:75:75:c2:80:c5:0a:
fb:24:fd:7e:ab:74:b7:57:8d:7f:02:87:cc:73:c9:72:74:bc:
99:d5:ed:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPfTv75Mrb5EW9BKCn+kZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYTQ1ODI1NjJjMzEzNWJiNTJiZGI5NjE0NWUxYWQwMzc4
NmIxNDgwHhcNMjUwNjE0MDcwMTA2WhcNMjUwNjE1MDcwMTA2WjAzMTEwLwYDVQQD
EygxNWRjYjhiNWVjMzgyMTcxNjM1NWI4YTU2Y2NkODU0MTJiZGZhMDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPXfD/0p72aF+T5PtQk8W0sAvx8A
0Iz7axfglRSyjNkPKdlb02IAsmoKDF6APNO6E5H+FKwobe8lHW5332I/NWC14e5b
M0p0vJ5PKFQfSIv+4+Nb4lFqJ9c+qHu1ekmbCo6HyvrkuDqKBtvldAUGO1lG2v+n
QMZNRAooUwQcEbDhzhRpHKDMO3tMffko0+j5QjlyNVbSA9gyuQ2Uv7kjRl/XWP/h
ODACkbL6otChtnnls2v3PztxCaJvFjWiphpbqKjkUzuKknDtkQu91w9O+cQy70k4
DTSj0QV9iXz8XjENmTsayPaoCvsr3n2LGlzwJ0nchXHfiBk7p9GsaVg1rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXcuLXsOCFxY1W4pWzNhUEr36BUMB8GA1UdIwQY
MBaAFKGkWCViwxNbtSvblhReGtA3hrFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2FSWUpXTERFMXUxSzl1V0ZGNGEwRGVHc1VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS80ZDEwYzAtNjdiZi00MTM1LTk3YWIt
YmJmMmNlMDdlY2FkLzEvb2FSWUpXTERFMXUxSzl1V0ZGNGEwRGVHc1VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS80ZDEwYzAtNjdiZi00MTM1LTk3YWItYmJmMmNlMDdlY2Fk
LzEvb2FSWUpXTERFMXUxSzl1V0ZGNGEwRGVHc1VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARA6iAfrS
zYETqo7n3cY8QHiAt7DU5DaQz/bo5AOB7ww9N0YYsWuqmIWiFdv04wPoGYif9CbX
Cxz3xLkKVLj4fOcH2NOXfN79NbIM0uaMx0SLxTz3Anm/9rbt+ru08FgBPKYeybWl
nTShQD9zITV9bE7izWP71DAcEjuV5Xl2EpWZewwSpzCwJyuV7BJzcZQyAYR14jhH
zIrQm5ikQGXAUi5MhlaD5C2gMZ3uBYv44QSnMboi82dRYN935p4JhGmAarPbImjH
k3U7fYBVKwUDfaD0WR7PfJTajcUa2R2BIGiUXNxQdXXCgMUK+yT9fqt0t1eNfwKH
zHPJcnS8mdXtuQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:18:43 2025 by rpki-client