Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
File: o95MO22qWmmL8wfMORKCqymH1hc.mft (raw, json)
Hash identifier: O2+++wdN/gZJeCPclJzs9fuix7DkxEJefkWerwqCGqo=
Subject key identifier: 66:61:5C:24:97:C8:BC:A5:7B:F9:60:4F:53:DB:2D:C3:37:95:A1:CE
Authority key identifier: A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
Certificate issuer: /CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Certificate serial: 019772D201C0E5B7A9EA3C87D3DF8B277B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
Manifest number: 0ADC
Signing time: Sun 15 Jun 2025 09:00:54 +0000
Manifest this update: Sun 15 Jun 2025 09:00:54 +0000
Manifest next update: Mon 16 Jun 2025 09:00:54 +0000
Files and hashes: 1: aaz13NJRzQSWik1cFJTAx8gsPnU.roa (hash: CsCDTEtayCoWB3zZSGEuzJzCmVEA7r5a08XAY8x/Hbg=)
2: o95MO22qWmmL8wfMORKCqymH1hc.crl (hash: osDgE+IbCDQ/8ricbixylpM7YEbUvCqBy6mtGZVmLCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:d2:01:c0:e5:b7:a9:ea:3c:87:d3:df:8b:27:7b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Validity
Not Before: Jun 15 09:00:54 2025 GMT
Not After : Jun 16 09:00:54 2025 GMT
Subject: CN=66615c2497c8bca57bf9604f53db2dc33795a1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c4:ef:1f:c0:37:44:cd:19:8a:e6:96:58:f5:
1e:40:90:20:a1:61:62:c0:d4:70:a1:54:3e:fd:8d:
92:63:97:fb:42:15:7c:5f:90:f5:50:24:3e:59:f6:
a0:f7:47:e8:11:73:51:c0:5c:ae:45:fc:d3:3a:70:
40:75:d2:48:6d:7f:ff:b7:0c:5d:97:06:26:1a:f3:
03:0c:63:ed:ba:1a:7e:12:93:71:67:69:99:b5:68:
dd:1d:96:c6:a3:ad:cc:f2:31:19:f1:6c:80:72:cd:
7c:11:41:ba:83:15:8d:3c:68:c9:b9:5a:34:5b:3e:
d8:9f:bc:6d:bd:09:1f:12:8c:e9:e5:e4:a6:e4:9a:
d4:eb:63:e2:f4:c4:df:cd:59:6b:5f:58:90:65:dd:
cf:d4:b0:2d:1c:2d:14:65:ce:78:57:7d:0c:5d:5f:
0b:cb:22:a0:16:3a:b1:ee:94:80:cc:54:75:e0:ae:
0a:e2:65:30:1d:b9:bb:cd:1a:0a:d5:8b:b9:1e:42:
92:8c:e1:29:38:ec:9d:1f:66:19:b0:15:9a:cd:07:
26:6f:82:3a:85:0b:cf:6f:72:3a:e1:7b:2e:79:4b:
0d:ba:35:32:cd:3f:6f:21:28:f7:b6:24:a9:c6:f4:
5a:39:0d:fb:e0:38:3e:cf:12:4b:43:78:51:95:2b:
5e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:61:5C:24:97:C8:BC:A5:7B:F9:60:4F:53:DB:2D:C3:37:95:A1:CE
X509v3 Authority Key Identifier:
keyid:A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0a:d6:ad:ea:c1:db:29:de:aa:5f:3b:9e:5f:37:42:7a:bd:
38:ad:9f:a7:99:a6:f3:ed:bf:a9:e9:25:30:b2:ac:aa:bd:01:
72:7f:05:96:7e:ad:cc:31:cd:73:2b:85:19:8c:b1:84:8c:95:
7a:d0:2d:cd:9e:98:1f:14:11:d5:cc:46:d5:f3:4c:70:23:8c:
45:d5:fc:02:3a:7c:da:35:f8:a7:c3:92:9b:80:fe:e0:d1:7d:
87:30:f7:1d:01:d9:4f:bd:94:95:63:7f:1f:dc:a3:13:d1:86:
d1:8a:d7:21:57:bc:fc:96:4f:85:64:45:16:49:91:52:d8:85:
44:ed:fb:ac:9e:5d:fb:85:12:13:a9:08:81:fa:fb:a0:20:19:
50:4b:dd:34:fb:a9:93:21:62:94:49:00:b3:24:99:27:b0:f8:
bd:20:fa:b7:d4:e7:2b:4f:3c:2d:b7:36:87:89:45:5a:c5:2b:
c8:0e:db:7e:d7:7c:92:45:ee:63:16:7a:50:47:77:f1:aa:80:
6b:5e:65:4c:bc:d3:c3:f5:dc:06:e7:22:5b:12:b1:3a:8e:ce:
1c:ce:70:22:91:45:38:30:52:4a:41:3b:90:29:72:fe:e4:17:
81:a6:28:2f:be:85:20:2e:df:47:02:23:a6:8b:2e:6d:a1:27:
77:b0:9e:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdy0gHA5bep6jyH09+LJ3uLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZGU0YzNiNmRhYTVhNjk4YmYzMDdjYzM5MTI4MmFiMjk4
N2Q2MTcwHhcNMjUwNjE1MDkwMDU0WhcNMjUwNjE2MDkwMDU0WjAzMTEwLwYDVQQD
Eyg2NjYxNWMyNDk3YzhiY2E1N2JmOTYwNGY1M2RiMmRjMzM3OTVhMWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cTvH8A3RM0ZiuaWWPUeQJAgoWFi
wNRwoVQ+/Y2SY5f7QhV8X5D1UCQ+Wfag90foEXNRwFyuRfzTOnBAddJIbX//twxd
lwYmGvMDDGPtuhp+EpNxZ2mZtWjdHZbGo63M8jEZ8WyAcs18EUG6gxWNPGjJuVo0
Wz7Yn7xtvQkfEozp5eSm5JrU62Pi9MTfzVlrX1iQZd3P1LAtHC0UZc54V30MXV8L
yyKgFjqx7pSAzFR14K4K4mUwHbm7zRoK1Yu5HkKSjOEpOOydH2YZsBWazQcmb4I6
hQvPb3I64XsueUsNujUyzT9vISj3tiSpxvRaOQ374Dg+zxJLQ3hRlSteBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZhXCSXyLyle/lgT1PbLcM3laHOMB8GA1UdIwQY
MBaAFKPeTDttqlppi/MHzDkSgqsph9YXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzk1TU8yMnFXbW1MOHdmTU9SS0NxeW1IMWhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80YzlmYmUtMTcyNS00MTE2LTllZjMt
MGFmMmM1YzRjYzBmLzEvbzk1TU8yMnFXbW1MOHdmTU9SS0NxeW1IMWhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80YzlmYmUtMTcyNS00MTE2LTllZjMtMGFmMmM1YzRjYzBm
LzEvbzk1TU8yMnFXbW1MOHdmTU9SS0NxeW1IMWhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQrWrerB
2yneql87nl83Qnq9OK2fp5mm8+2/qeklMLKsqr0Bcn8Fln6tzDHNcyuFGYyxhIyV
etAtzZ6YHxQR1cxG1fNMcCOMRdX8Ajp82jX4p8OSm4D+4NF9hzD3HQHZT72UlWN/
H9yjE9GG0YrXIVe8/JZPhWRFFkmRUtiFRO37rJ5d+4USE6kIgfr7oCAZUEvdNPup
kyFilEkAsySZJ7D4vSD6t9TnK088Lbc2h4lFWsUryA7bftd8kkXuYxZ6UEd38aqA
a15lTLzTw/XcBuciWxKxOo7OHM5wIpFFODBSSkE7kCly/uQXgaYoL76FIC7fRwIj
posubaEnd7Ce5w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:20:14 2025 by rpki-client