Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: ZOQdbP3mHQhtawAig2X6DqQcN/mz0w/euIX2Cmr6Jgk=
Subject key identifier: 3F:71:A5:68:08:5D:BF:FE:2A:8D:B6:04:09:61:C5:23:E1:08:FB:18
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 01976997956B35476B61BF3F3552DBBB9BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 042F
Signing time: Fri 13 Jun 2025 14:00:31 +0000
Manifest this update: Fri 13 Jun 2025 14:00:31 +0000
Manifest next update: Sat 14 Jun 2025 14:00:31 +0000
Files and hashes: 1: 5Sdp75UI07U0XNu2tAWSzrc-qpk.roa (hash: SzIYjhnlLWEvz8Z1X0oLYzWFIohoOl7chIuBKt0PdE8=)
2: H1tYgXLLWfPNRsiraZOWsc2ElvQ.roa (hash: EmbP4jLbfudtKgGtKdZDrQ0gORWApQpD2bI92szlr5c=)
3: n41NhtFJXuy7O2MsnhnPAfCr2kE.roa (hash: ArC6Jxqpsmc09lGw1ULuf3dsi0Is5INs5UU1G0NJkHU=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: bzwLFi1nbTyKoYlU0d2i4bUFrPvdihu1vZDO0IlwsWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:95:6b:35:47:6b:61:bf:3f:35:52:db:bb:9b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Jun 13 14:00:31 2025 GMT
Not After : Jun 14 14:00:31 2025 GMT
Subject: CN=3f71a568085dbffe2a8db6040961c523e108fb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:78:3b:96:e6:0d:46:de:63:05:ea:7c:88:
fd:43:a9:45:f2:ff:d3:98:99:cc:a6:b1:20:2c:a0:
c1:96:e5:46:a6:18:d4:7f:39:5a:b9:9a:2d:16:a5:
27:2f:f2:a6:4d:71:28:ef:85:06:bb:42:d8:dd:40:
b3:41:a3:16:2c:a1:c4:e4:10:7f:3a:dc:09:da:92:
2b:c8:fc:08:05:7a:cf:fe:23:a4:6a:81:37:09:c8:
81:58:87:85:a0:66:d0:99:99:c2:1a:d4:3f:13:27:
b1:98:78:a1:ac:67:15:92:91:de:2e:79:9a:4c:b3:
ad:9e:55:74:9b:9e:6b:9b:5c:6c:15:3f:ab:ed:0c:
e0:9b:fa:f2:aa:79:f7:c6:bb:55:e6:bf:49:d6:18:
b3:e9:47:a1:e7:bc:0d:e0:61:48:c8:56:8e:0d:73:
43:b7:54:d0:d8:ee:e5:d5:24:8e:6a:c2:76:66:4f:
07:4f:a8:72:c8:6e:51:20:d7:fb:57:a3:53:e8:ce:
a3:3f:44:7d:45:e2:25:d5:66:65:1e:ee:19:6f:a5:
68:0e:b0:3b:a1:5d:9c:12:b3:fa:1d:57:61:d4:f7:
7e:d2:d0:89:e3:8d:8d:4f:5e:50:23:ba:27:a3:37:
8f:0a:24:71:01:08:23:e9:cf:62:05:61:12:d3:ee:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:71:A5:68:08:5D:BF:FE:2A:8D:B6:04:09:61:C5:23:E1:08:FB:18
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a1:f5:e6:be:49:ca:4d:27:96:bb:2a:0b:f9:1a:cb:c7:7e:
98:5d:a1:42:d6:13:7c:85:03:24:28:98:c1:be:69:1a:0d:7a:
3f:97:8a:8c:a6:75:a9:0b:83:62:38:c9:33:72:a8:3e:0c:f2:
c8:ff:38:b5:da:be:ac:67:98:4b:65:42:ff:02:32:02:25:93:
aa:3c:43:31:6c:b8:c3:83:46:31:8a:b0:7a:e7:32:3c:06:7e:
ba:a8:ba:b8:d5:90:d0:90:5e:80:19:24:90:9d:04:dd:92:7a:
5b:15:a0:eb:eb:da:d4:b2:12:b0:06:6b:ec:bc:17:44:77:72:
13:28:78:6d:03:82:dc:95:b7:39:bd:d6:f9:7a:32:88:ef:2c:
8b:1d:3b:b9:42:6d:af:74:97:e5:9e:52:c2:0f:2e:d3:0e:91:
84:64:ce:27:09:db:d3:75:13:20:10:c2:fe:36:31:67:24:77:
09:b5:c5:d0:70:51:e4:76:4d:f1:12:68:87:9d:79:cc:44:a2:
35:2d:05:77:c0:a3:59:e6:f1:b2:7a:da:42:71:4c:a0:a4:ac:
af:1d:89:bc:d9:24:7d:73:61:cb:37:05:57:70:e4:c4:38:0d:
78:1e:39:7f:30:41:57:25:ed:07:f1:ed:2f:79:eb:b3:cd:58:
d8:de:05:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpl5VrNUdrYb8/NVLbu5vOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExOWIyZDcwMjMzZTBlNWJkZWY2ZGJmYmRhOTE4ODZkMjdi
NmE1YWUwHhcNMjUwNjEzMTQwMDMxWhcNMjUwNjE0MTQwMDMxWjAzMTEwLwYDVQQD
EygzZjcxYTU2ODA4NWRiZmZlMmE4ZGI2MDQwOTYxYzUyM2UxMDhmYjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLJ4O5bmDUbeYwXqfIj9Q6lF8v/T
mJnMprEgLKDBluVGphjUfzlauZotFqUnL/KmTXEo74UGu0LY3UCzQaMWLKHE5BB/
OtwJ2pIryPwIBXrP/iOkaoE3CciBWIeFoGbQmZnCGtQ/EyexmHihrGcVkpHeLnma
TLOtnlV0m55rm1xsFT+r7Qzgm/ryqnn3xrtV5r9J1hiz6Ueh57wN4GFIyFaODXND
t1TQ2O7l1SSOasJ2Zk8HT6hyyG5RINf7V6NT6M6jP0R9ReIl1WZlHu4Zb6VoDrA7
oV2cErP6HVdh1Pd+0tCJ442NT15QI7onozePCiRxAQgj6c9iBWES0+49nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9xpWgIXb/+Ko22BAlhxSPhCPsYMB8GA1UdIwQY
MBaAFKGbLXAjPg5b3vbb+9qRiG0ntqWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUt
M2YxYTdjNGY1MWI1LzEvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUtM2YxYTdjNGY1MWI1
LzEvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKH15r5J
yk0nlrsqC/kay8d+mF2hQtYTfIUDJCiYwb5pGg16P5eKjKZ1qQuDYjjJM3KoPgzy
yP84tdq+rGeYS2VC/wIyAiWTqjxDMWy4w4NGMYqweucyPAZ+uqi6uNWQ0JBegBkk
kJ0E3ZJ6WxWg6+va1LISsAZr7LwXRHdyEyh4bQOC3JW3Ob3W+XoyiO8six07uUJt
r3SX5Z5Swg8u0w6RhGTOJwnb03UTIBDC/jYxZyR3CbXF0HBR5HZN8RJoh515zESi
NS0Fd8CjWebxsnraQnFMoKSsrx2JvNkkfXNhyzcFV3DkxDgNeB45fzBBVyXtB/Ht
L3nrs81Y2N4Fpw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:51 2025 by rpki-client