Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: Vlbu5A5+OvZWt3e0/1eR9nimIbXxhhqApDNF0e98IMw=
Subject key identifier: 55:7D:47:8B:C5:60:C9:E8:64:98:93:29:01:C6:B9:7B:FD:7B:00:15
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 01976960E18CB6CA81F4D7B6E328D4390E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 13:00:46 +0000
Manifest this update: Fri 13 Jun 2025 13:00:46 +0000
Manifest next update: Sat 14 Jun 2025 13:00:46 +0000
Files and hashes: 1: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: oNHKJZlMyBjybsYsdIT2ObSR/qcPW18EM/aqy0TX9/Q=)
2: FtnpIr2pujhwajP_siKFZdhKHhk.roa (hash: q2tZyUsnrVDVgYlVos7MxOQuJnOA8CAJo2C/in3BKag=)
3: jWG_xCoNumHJR1ckcWpK44WoOk8.roa (hash: 2ze73vnjpD52EBLckwp24AjpMJKf++ZecNj4kYZSGM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:e1:8c:b6:ca:81:f4:d7:b6:e3:28:d4:39:0e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Jun 13 13:00:46 2025 GMT
Not After : Jun 14 13:00:46 2025 GMT
Subject: CN=557d478bc560c9e86498932901c6b97bfd7b0015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:f0:4f:de:5c:bc:b8:08:0e:06:4d:56:53:
1a:98:d4:16:8d:2d:2b:0b:be:86:89:a5:51:a5:45:
55:1b:9f:29:08:71:d2:78:19:d7:a9:73:08:de:3e:
c6:d6:af:b0:b4:a1:d4:6b:10:33:98:99:bf:24:f8:
06:69:51:6b:a2:b6:99:9d:1c:98:66:e8:d5:f0:16:
8e:58:a0:3c:0e:61:28:c2:0a:2a:b4:47:d5:18:90:
f4:20:f6:58:0c:3f:73:ce:7d:17:78:6a:69:2d:a1:
98:60:c6:f5:78:dd:07:11:ef:6a:bf:d5:3b:85:00:
63:51:d5:4a:4b:36:ed:78:c7:eb:24:2d:d7:2a:18:
71:03:c2:11:11:21:fb:3d:62:27:49:88:c6:59:11:
b2:16:d5:0d:52:d0:db:7a:3a:a3:39:2e:45:8b:fb:
3c:a4:75:45:de:15:db:69:82:c1:ff:10:6a:65:42:
5c:7e:d4:f8:cf:2b:4d:dc:39:27:cd:e2:aa:69:f1:
e5:a5:72:f5:95:d9:ba:ca:7d:e8:37:66:24:fa:d4:
1f:f2:23:7e:4b:4c:61:3f:2a:b6:d3:44:a5:b8:59:
d4:0e:50:b1:28:d6:7d:47:18:22:f0:72:16:be:fb:
19:d0:71:bd:c5:8e:61:21:7e:6f:6e:8e:5b:95:2a:
82:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7D:47:8B:C5:60:C9:E8:64:98:93:29:01:C6:B9:7B:FD:7B:00:15
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:61:44:3b:43:50:aa:87:f1:fe:58:6f:ac:d2:35:f2:db:6f:
1c:67:c8:68:12:da:1b:9f:83:c9:e2:b1:1b:63:71:db:e1:60:
53:97:52:26:6a:bf:7c:f5:21:74:b9:2a:b8:eb:d0:89:65:73:
43:1b:de:2d:b8:4e:06:d7:86:5d:cf:cf:34:f2:0b:6e:b3:03:
02:40:0c:3f:e3:1d:cc:73:d1:67:04:3b:37:58:5b:51:97:2a:
05:71:ef:9f:5f:39:2f:95:3c:14:7c:1e:1b:83:df:46:1e:9b:
e3:a9:0f:c2:40:70:96:90:c1:d1:9c:98:81:15:be:dc:5d:93:
ac:21:74:01:2d:67:51:e5:34:6d:5d:06:b7:5a:72:bc:38:e4:
29:36:73:2e:61:95:0b:70:52:c0:90:3b:a1:a4:ef:21:40:ad:
8f:01:14:dc:ed:91:fa:f6:5f:a0:d8:f8:28:8c:b5:40:e1:bb:
c8:87:f0:df:5b:8d:52:4f:94:4c:ed:c8:d3:f1:0a:b5:df:25:
ae:2d:e8:34:8b:e7:bb:e3:a1:fd:2f:32:6f:70:27:8d:83:46:
0b:03:f7:72:42:24:80:69:bd:a9:11:8b:02:f5:63:68:df:d8:
ef:59:24:f9:ba:b0:9a:6c:b3:c4:d3:04:b8:24:fe:3d:2d:0b:
ac:39:9e:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYOGMtsqB9Ne24yjUOQ5ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDNhNTE1NjgzZTlkZGI4NWQzOGU3YWIzOWMzM2FlZGFj
YWY3ZWYwHhcNMjUwNjEzMTMwMDQ2WhcNMjUwNjE0MTMwMDQ2WjAzMTEwLwYDVQQD
Eyg1NTdkNDc4YmM1NjBjOWU4NjQ5ODkzMjkwMWM2Yjk3YmZkN2IwMDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNXwT95cvLgIDgZNVlMamNQWjS0r
C76GiaVRpUVVG58pCHHSeBnXqXMI3j7G1q+wtKHUaxAzmJm/JPgGaVFroraZnRyY
ZujV8BaOWKA8DmEowgoqtEfVGJD0IPZYDD9zzn0XeGppLaGYYMb1eN0HEe9qv9U7
hQBjUdVKSzbteMfrJC3XKhhxA8IRESH7PWInSYjGWRGyFtUNUtDbejqjOS5Fi/s8
pHVF3hXbaYLB/xBqZUJcftT4zytN3DknzeKqafHlpXL1ldm6yn3oN2Yk+tQf8iN+
S0xhPyq200SluFnUDlCxKNZ9Rxgi8HIWvvsZ0HG9xY5hIX5vbo5blSqC/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFV9R4vFYMnoZJiTKQHGuXv9ewAVMB8GA1UdIwQY
MBaAFAjTpRVoPp3bhdOOerOcM67ayvfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAt
MGI1YzVkOTQ0MjZhLzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAtMGI1YzVkOTQ0MjZh
LzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmFEO0NQ
qofx/lhvrNI18ttvHGfIaBLaG5+DyeKxG2Nx2+FgU5dSJmq/fPUhdLkquOvQiWVz
QxveLbhOBteGXc/PNPILbrMDAkAMP+MdzHPRZwQ7N1hbUZcqBXHvn185L5U8FHwe
G4PfRh6b46kPwkBwlpDB0ZyYgRW+3F2TrCF0AS1nUeU0bV0Gt1pyvDjkKTZzLmGV
C3BSwJA7oaTvIUCtjwEU3O2R+vZfoNj4KIy1QOG7yIfw31uNUk+UTO3I0/EKtd8l
ri3oNIvnu+Oh/S8yb3AnjYNGCwP3ckIkgGm9qRGLAvVjaN/Y71kk+bqwmmyzxNME
uCT+PS0LrDmehQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:55 2025 by rpki-client