Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
File: oheIwIqkN9EWXOy9aP2xlaFd-gg.mft (raw, json)
Hash identifier: JTL3W53LPcLxa9niVj4KEuicQQjaYuLtZJ4Z64q3F2M=
Subject key identifier: 2B:4E:88:8F:C3:5B:42:3A:EC:40:AE:ED:DC:4B:7E:D6:20:C0:50:6D
Authority key identifier: A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
Certificate issuer: /CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Certificate serial: 01976960F94E6438449EA92D40AE00C45B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 13:00:52 +0000
Manifest this update: Fri 13 Jun 2025 13:00:52 +0000
Manifest next update: Sat 14 Jun 2025 13:00:52 +0000
Files and hashes: 1: 3hcLMvc25IMPdhmKQEHCMZTqIjs.roa (hash: SEybTz+/cd8wiIccvdujur1jHcT09AAEthIXnDu/BtA=)
2: oheIwIqkN9EWXOy9aP2xlaFd-gg.crl (hash: CoI0KAonqWcVh1Eg4v01HumwpM304I/CPjtyt/KBTH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:f9:4e:64:38:44:9e:a9:2d:40:ae:00:c4:5b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Validity
Not Before: Jun 13 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=2b4e888fc35b423aec40aeeddc4b7ed620c0506d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:b1:0c:f7:c8:aa:77:d9:7d:50:6a:b4:ce:
25:96:3c:b5:89:c7:97:15:11:4b:3e:48:38:99:ce:
fa:7f:c6:bb:77:51:f2:22:e1:6f:54:42:f7:b0:cf:
b5:de:17:40:8d:2f:e5:c0:4b:4c:87:2e:45:50:f8:
02:24:d5:85:3f:a1:fd:ac:01:ce:d3:4a:27:ca:7e:
4f:29:04:6d:39:29:d4:ef:ad:1a:63:a0:c6:99:54:
b5:c9:7a:7e:a8:7b:ba:1f:26:4a:a3:4e:6f:52:9d:
f0:eb:c8:a5:a2:f0:d7:c2:12:cb:a0:c6:a0:50:c7:
4a:95:a0:5f:6f:b9:77:2f:00:ef:a6:ca:b3:64:9c:
6e:d9:a6:54:29:49:6e:1d:57:05:b9:71:10:23:48:
76:9a:3d:b1:d2:6a:33:f3:7f:cb:65:d2:fa:44:2b:
b2:c3:67:eb:ad:0a:a4:95:5d:45:57:9a:dc:37:11:
6e:f6:8b:40:3d:64:42:bf:84:c4:61:3b:a8:01:12:
30:4b:a3:c4:33:77:6e:6c:a6:d0:96:3d:02:cf:b3:
ea:88:e4:5a:f8:39:72:89:94:e4:d1:dd:dd:14:08:
b4:e0:7d:5f:c0:dd:8f:70:39:7a:1f:ce:b5:09:0b:
08:11:20:1b:54:b3:36:60:8d:91:11:b2:b4:14:f0:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4E:88:8F:C3:5B:42:3A:EC:40:AE:ED:DC:4B:7E:D6:20:C0:50:6D
X509v3 Authority Key Identifier:
keyid:A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bf:bd:00:c0:4f:9a:6b:b1:78:79:10:41:0d:99:b8:13:ad:
41:fc:21:16:e2:27:38:90:a5:dc:07:55:f4:cb:3e:8d:e8:33:
64:e3:a2:dd:46:99:15:77:12:9f:2d:e9:4c:03:6c:39:c5:3d:
ea:fa:46:c0:bc:4e:c3:89:11:63:ba:f8:de:5f:ba:86:29:4d:
b5:bc:fc:47:79:fd:ba:28:cd:77:e2:bf:2a:23:6f:a6:cc:99:
95:90:c6:4c:22:99:17:e8:56:de:93:02:ae:0e:9f:af:3c:82:
0d:48:ac:8f:e3:8d:1d:81:0e:14:ea:3f:44:23:8b:b1:d1:40:
c8:31:19:b8:4c:ec:0a:68:e8:54:ac:4c:83:97:d3:e2:13:e4:
41:05:c1:7b:c8:12:bb:65:a4:94:02:91:7d:d6:36:b5:a1:19:
03:56:e1:48:14:88:dc:63:4e:43:43:e0:79:8e:59:01:1c:ab:
77:ea:98:39:f5:2d:45:ad:81:b8:4c:a5:73:7d:33:72:f6:1b:
5f:a7:e5:fa:50:a8:97:75:9b:db:7d:c6:64:ed:50:a0:90:fa:
d5:3c:70:d0:83:a3:9d:3c:78:2f:5f:6c:4c:cd:9d:16:da:17:
56:bb:a8:1c:32:07:18:3a:b1:c9:f2:3a:08:24:c6:cd:ce:08:
3d:66:3b:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYPlOZDhEnqktQK4AxFs8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMTc4OGMwOGFhNDM3ZDExNjVjZWNiZDY4ZmRiMTk1YTE1
ZGZhMDgwHhcNMjUwNjEzMTMwMDUyWhcNMjUwNjE0MTMwMDUyWjAzMTEwLwYDVQQD
EygyYjRlODg4ZmMzNWI0MjNhZWM0MGFlZWRkYzRiN2VkNjIwYzA1MDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoCxDPfIqnfZfVBqtM4lljy1iceX
FRFLPkg4mc76f8a7d1HyIuFvVEL3sM+13hdAjS/lwEtMhy5FUPgCJNWFP6H9rAHO
00onyn5PKQRtOSnU760aY6DGmVS1yXp+qHu6HyZKo05vUp3w68ilovDXwhLLoMag
UMdKlaBfb7l3LwDvpsqzZJxu2aZUKUluHVcFuXEQI0h2mj2x0moz83/LZdL6RCuy
w2frrQqklV1FV5rcNxFu9otAPWRCv4TEYTuoARIwS6PEM3dubKbQlj0Cz7PqiORa
+DlyiZTk0d3dFAi04H1fwN2PcDl6H861CQsIESAbVLM2YI2REbK0FPBqKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtOiI/DW0I67ECu7dxLftYgwFBtMB8GA1UdIwQY
MBaAFKIXiMCKpDfRFlzsvWj9sZWhXfoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2hlSXdJcWtOOUVXWE95OWFQMnhsYUZkLWdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTBjN2MtZjJjYS00YWE5LTg3YzUt
NzdmNGZkNTM0MjVlLzEvb2hlSXdJcWtOOUVXWE95OWFQMnhsYUZkLWdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83YTBjN2MtZjJjYS00YWE5LTg3YzUtNzdmNGZkNTM0MjVl
LzEvb2hlSXdJcWtOOUVXWE95OWFQMnhsYUZkLWdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANr+9AMBP
mmuxeHkQQQ2ZuBOtQfwhFuInOJCl3AdV9Ms+jegzZOOi3UaZFXcSny3pTANsOcU9
6vpGwLxOw4kRY7r43l+6hilNtbz8R3n9uijNd+K/KiNvpsyZlZDGTCKZF+hW3pMC
rg6frzyCDUisj+ONHYEOFOo/RCOLsdFAyDEZuEzsCmjoVKxMg5fT4hPkQQXBe8gS
u2WklAKRfdY2taEZA1bhSBSI3GNOQ0PgeY5ZARyrd+qYOfUtRa2BuEylc30zcvYb
X6fl+lCol3Wb233GZO1QoJD61Txw0IOjnTx4L19sTM2dFtoXVruoHDIHGDqxyfI6
CCTGzc4IPWY7Cw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:23:20 2025 by rpki-client