Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft
File: kOphmXVeYwDwQCwqCO1DegpzAB4.mft (raw, json)
Hash identifier: gYCynptRgE7KtelDNQqYiODeyBZReUxp3NeXlLAzEQI=
Subject key identifier: D5:03:BE:57:69:D1:7D:EB:F0:54:45:BD:05:5D:9A:DD:1E:49:0B:3F
Authority key identifier: 90:EA:61:99:75:5E:63:00:F0:40:2C:2A:08:ED:43:7A:0A:73:00:1E
Certificate issuer: /CN=90ea6199755e6300f0402c2a08ed437a0a73001e
Certificate serial: 019775D2D9F95F9A539D63A0BBE2482CBD6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 23:00:41 +0000
Manifest this update: Sun 15 Jun 2025 23:00:41 +0000
Manifest next update: Mon 16 Jun 2025 23:00:41 +0000
Files and hashes: 1: KatNB724uDRt0-ZiwLjIS5tNdSI.roa (hash: 44IwgAiGyeQdbyG6MSKbubj3iGudNdrcCJvguuMAbNQ=)
2: kOphmXVeYwDwQCwqCO1DegpzAB4.crl (hash: 4hIA9SyePMJJ3jI2VM9d3BOeVdEF2OqWCjfnDtqAljU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:d2:d9:f9:5f:9a:53:9d:63:a0:bb:e2:48:2c:bd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ea6199755e6300f0402c2a08ed437a0a73001e
Validity
Not Before: Jun 15 23:00:41 2025 GMT
Not After : Jun 16 23:00:41 2025 GMT
Subject: CN=d503be5769d17debf05445bd055d9add1e490b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:7a:9b:16:d7:49:7b:3b:3b:ff:88:b3:86:
ed:e5:87:21:2f:df:81:1d:e0:7c:54:f3:79:fd:c0:
84:b4:83:65:47:ca:36:3e:08:7d:ba:07:c2:55:be:
b4:5d:1f:89:45:c8:59:35:4e:98:bc:17:7d:fe:72:
40:31:b9:86:8a:2d:97:a6:b7:a5:e2:72:0e:27:29:
87:43:d5:c5:c8:0f:bf:82:5b:c8:21:3c:b7:90:bc:
b0:23:72:2a:68:2d:8a:a2:6a:1f:d7:d4:08:c2:55:
1e:45:7b:04:59:dd:2c:d4:48:8d:b5:e4:b9:d9:28:
96:cf:39:72:78:56:f6:e1:25:d5:a6:19:57:14:32:
88:83:9c:02:51:05:ab:5f:28:b9:cd:2d:df:68:aa:
aa:fe:f9:87:cc:df:87:57:69:aa:9f:0d:46:05:e2:
ba:bb:6d:52:3e:ea:ec:35:8f:fa:4b:92:9b:08:8a:
e4:12:6d:9a:47:3c:69:af:93:19:11:91:b9:87:ed:
1f:26:79:e6:67:4e:d4:18:06:d7:f5:98:2d:80:bd:
10:60:07:b3:b2:76:88:ea:97:5b:f1:da:c8:74:35:
85:81:66:a0:b2:f2:8b:a8:f9:0c:37:d4:3d:f1:b5:
b3:8b:c6:24:2a:83:3d:0f:45:b4:38:18:d5:52:4b:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:03:BE:57:69:D1:7D:EB:F0:54:45:BD:05:5D:9A:DD:1E:49:0B:3F
X509v3 Authority Key Identifier:
keyid:90:EA:61:99:75:5E:63:00:F0:40:2C:2A:08:ED:43:7A:0A:73:00:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f3:7f:47:29:37:55:a6:c5:58:04:d0:58:2b:a4:7e:b4:82:
74:c3:15:89:8d:70:0e:f2:f0:eb:05:42:b6:49:f3:6b:5b:fd:
8e:8b:77:2e:b1:36:ba:b7:2f:f0:03:47:b7:17:eb:3a:2e:03:
27:b6:54:a0:11:a4:74:a1:19:4c:b0:43:e7:03:22:4e:7e:c1:
6a:89:1f:59:91:71:90:28:ad:95:d4:71:65:73:da:f8:0a:24:
1b:45:9f:45:65:8e:99:2a:b0:33:23:05:59:f1:b2:6a:bc:fc:
37:08:3b:9c:e3:7c:7e:83:68:79:30:92:97:44:32:40:f2:7d:
e7:cb:ff:7c:92:fa:e2:cd:e5:6b:0d:43:ad:c2:a5:fc:8d:e1:
2d:ac:4d:d0:a2:67:8c:f9:be:4d:64:54:18:80:2d:c8:d1:1a:
f4:99:e4:7c:e3:07:65:ca:2d:8d:8a:94:d1:96:89:cd:61:d0:
e9:f3:53:80:cf:6a:c5:3d:8d:0f:e8:47:08:c3:d4:1c:cb:80:
12:09:8d:a0:e2:3a:1d:c5:e1:54:5a:1a:6d:65:4c:24:12:4f:
15:b8:e0:57:8b:ca:af:fa:68:a5:d0:c0:1b:dd:ed:27:16:c4:
11:e5:4c:99:9c:82:83:6c:46:89:f6:ab:fa:94:c3:be:44:f4:
ff:36:4d:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd10tn5X5pTnWOgu+JILL1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZWE2MTk5NzU1ZTYzMDBmMDQwMmMyYTA4ZWQ0MzdhMGE3
MzAwMWUwHhcNMjUwNjE1MjMwMDQxWhcNMjUwNjE2MjMwMDQxWjAzMTEwLwYDVQQD
EyhkNTAzYmU1NzY5ZDE3ZGViZjA1NDQ1YmQwNTVkOWFkZDFlNDkwYjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq116mxbXSXs7O/+Is4bt5YchL9+B
HeB8VPN5/cCEtINlR8o2Pgh9ugfCVb60XR+JRchZNU6YvBd9/nJAMbmGii2Xprel
4nIOJymHQ9XFyA+/glvIITy3kLywI3IqaC2Komof19QIwlUeRXsEWd0s1EiNteS5
2SiWzzlyeFb24SXVphlXFDKIg5wCUQWrXyi5zS3faKqq/vmHzN+HV2mqnw1GBeK6
u21SPursNY/6S5KbCIrkEm2aRzxpr5MZEZG5h+0fJnnmZ07UGAbX9ZgtgL0QYAez
snaI6pdb8drIdDWFgWagsvKLqPkMN9Q98bWzi8YkKoM9D0W0OBjVUkunewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUDvldp0X3r8FRFvQVdmt0eSQs/MB8GA1UdIwQY
MBaAFJDqYZl1XmMA8EAsKgjtQ3oKcwAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva09waG1YVmVZd0R3UUN3cUNPMURlZ3B6QUI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82ZDJhOGYtY2Y5MC00NmZiLTgyNTkt
YzM5ODA4ZDAzYTE4LzEva09waG1YVmVZd0R3UUN3cUNPMURlZ3B6QUI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi82ZDJhOGYtY2Y5MC00NmZiLTgyNTktYzM5ODA4ZDAzYTE4
LzEva09waG1YVmVZd0R3UUN3cUNPMURlZ3B6QUI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfN/Ryk3
VabFWATQWCukfrSCdMMViY1wDvLw6wVCtknza1v9jot3LrE2urcv8ANHtxfrOi4D
J7ZUoBGkdKEZTLBD5wMiTn7BaokfWZFxkCitldRxZXPa+AokG0WfRWWOmSqwMyMF
WfGyarz8Nwg7nON8foNoeTCSl0QyQPJ958v/fJL64s3law1DrcKl/I3hLaxN0KJn
jPm+TWRUGIAtyNEa9JnkfOMHZcotjYqU0ZaJzWHQ6fNTgM9qxT2ND+hHCMPUHMuA
EgmNoOI6HcXhVFoabWVMJBJPFbjgV4vKr/popdDAG93tJxbEEeVMmZyCg2xGifar
+pTDvkT0/zZN6A==
-----END CERTIFICATE-----
Generated at Mon Jun 16 01:20:18 2025 by rpki-client