Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
File: oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json)
Hash identifier: pvbclAhoa6s3kq0sCEegDX4PBlc5aApMA+xV/pBtf0Y=
Subject key identifier: 57:F3:BC:98:AD:A5:8B:0D:BC:B5:27:B5:FA:C1:5C:2E:3B:E9:03:30
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Certificate issuer: /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial: 019769CF23FE69FBAA4F272FF54823BC7802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
Manifest number: 0AD3
Signing time: Fri 13 Jun 2025 15:01:12 +0000
Manifest this update: Fri 13 Jun 2025 15:01:12 +0000
Manifest next update: Sat 14 Jun 2025 15:01:12 +0000
Files and hashes: 1: 6uRuEC7JoCUPPlfzfq6SUK7xUvo.roa (hash: zYNo9c9drvS3wANkMRjjuuNlAVle3l3m/ueKMaH/pb4=)
2: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: I+S4Kh6Lo0XIHvZcQ0r7FQoz/p2DtrKC2Vzric6WwzI=)
3: xwYkLak0tseV-cTQ1ic58KIpdCM.roa (hash: wf8j4jNXQvlA5zsVKqv6eAbllDMh+Scu3BghD9yeir8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:23:fe:69:fb:aa:4f:27:2f:f5:48:23:bc:78:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Validity
Not Before: Jun 13 15:01:12 2025 GMT
Not After : Jun 14 15:01:12 2025 GMT
Subject: CN=57f3bc98ada58b0dbcb527b5fac15c2e3be90330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:77:8e:8a:c6:52:91:12:a3:67:b4:75:a9:a6:
38:d9:c9:44:68:58:fe:be:ff:d0:e1:4f:96:8d:18:
c6:53:23:56:ec:3c:e9:09:a3:1c:5b:93:88:37:dd:
34:ce:6e:e0:43:45:1f:b1:e7:54:5f:f7:2a:8c:86:
03:92:d4:3c:02:5a:ac:78:1c:ce:40:e1:93:81:38:
0e:1e:be:f1:b9:e3:aa:82:ab:5a:ec:a0:37:f8:e4:
e8:1a:34:d9:d2:b8:35:cc:30:14:3a:82:a4:bf:1d:
80:0d:98:5e:4c:96:d3:63:37:3c:d0:9c:2b:ba:c3:
d5:f3:3a:ae:9a:2d:64:09:02:8d:9a:33:8b:37:ac:
fe:41:c7:92:21:3a:8c:ab:e5:de:8b:a9:b8:5d:72:
c1:74:b1:47:2c:68:59:00:d7:c6:cb:78:65:bd:e8:
79:35:ca:fc:42:42:6a:ce:ab:aa:d6:23:68:26:9d:
f5:e5:de:ce:d7:fc:2f:a8:8e:ab:69:5f:6c:8a:2a:
e7:47:7f:c5:70:76:f7:dd:a7:e8:07:5e:60:c2:d0:
5b:5f:d9:a0:31:dc:b3:65:0b:fe:0e:e7:b6:57:d4:
67:8e:03:9f:35:9e:c5:c0:e6:7f:63:5c:a6:cc:73:
31:77:02:1d:34:60:d3:bc:9e:de:e5:0b:9c:9e:70:
74:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F3:BC:98:AD:A5:8B:0D:BC:B5:27:B5:FA:C1:5C:2E:3B:E9:03:30
X509v3 Authority Key Identifier:
keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a2:04:6f:01:91:c2:fa:94:d2:d4:82:ae:6c:9c:13:15:dc:
ec:c1:80:3f:e9:41:3a:c6:4a:3f:1a:f3:a8:ac:d0:39:74:9b:
14:de:7d:30:34:70:d6:87:80:59:2e:8c:1e:34:69:46:33:c8:
88:e6:84:0c:5d:5e:64:ab:c1:eb:86:68:ba:5b:42:90:39:36:
b3:18:2e:cd:40:a5:f8:cd:4c:e1:4d:3c:a2:9d:f2:53:59:46:
29:d3:90:87:41:8a:58:56:72:f9:08:7c:03:0e:76:70:2c:38:
05:fd:e7:91:2a:c0:89:c9:68:2f:a4:7f:8d:5f:a3:7e:bd:ee:
84:17:76:0b:0a:07:f9:bb:28:31:38:8f:ac:9b:6a:cc:3a:62:
2e:a6:c9:17:f8:eb:e6:bc:d7:d0:4b:f7:40:5b:49:94:ef:8b:
8d:25:13:02:27:9f:3e:a3:b1:a0:6a:f4:83:8b:da:13:80:a8:
ca:fd:73:2f:02:4a:6f:13:86:de:d4:03:28:98:33:c3:66:66:
1f:08:0d:8c:0a:3f:0d:08:a4:1c:a7:33:ca:a1:01:d8:64:6f:
fd:bb:c0:55:1e:99:6d:00:4e:fb:1a:02:e5:43:b6:f1:58:39:
87:7c:fb:ed:a0:16:92:1e:42:fb:f1:84:b0:84:aa:3d:b2:22:
ef:1d:1b:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzyP+afuqTycv9UgjvHgCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNDExZjU2ODc1YjRjYjdhNThjZWU2Y2I2MDdlZTI1MWNi
ZGY5ODAwHhcNMjUwNjEzMTUwMTEyWhcNMjUwNjE0MTUwMTEyWjAzMTEwLwYDVQQD
Eyg1N2YzYmM5OGFkYTU4YjBkYmNiNTI3YjVmYWMxNWMyZTNiZTkwMzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33eOisZSkRKjZ7R1qaY42clEaFj+
vv/Q4U+WjRjGUyNW7DzpCaMcW5OIN900zm7gQ0UfsedUX/cqjIYDktQ8AlqseBzO
QOGTgTgOHr7xueOqgqta7KA3+OToGjTZ0rg1zDAUOoKkvx2ADZheTJbTYzc80Jwr
usPV8zqumi1kCQKNmjOLN6z+QceSITqMq+Xei6m4XXLBdLFHLGhZANfGy3hlveh5
Ncr8QkJqzquq1iNoJp315d7O1/wvqI6raV9siirnR3/FcHb33afoB15gwtBbX9mg
MdyzZQv+Due2V9RnjgOfNZ7FwOZ/Y1ymzHMxdwIdNGDTvJ7e5QucnnB0OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfzvJitpYsNvLUntfrBXC476QMwMB8GA1UdIwQY
MBaAFKFBH1aHW0y3pYzubLYH7iUcvfmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jOThiODctMTg1Ny00NGJkLThiMGMt
NzhkODMzZTQxNDZhLzEvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jOThiODctMTg1Ny00NGJkLThiMGMtNzhkODMzZTQxNDZh
LzEvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACaIEbwGR
wvqU0tSCrmycExXc7MGAP+lBOsZKPxrzqKzQOXSbFN59MDRw1oeAWS6MHjRpRjPI
iOaEDF1eZKvB64ZoultCkDk2sxguzUCl+M1M4U08op3yU1lGKdOQh0GKWFZy+Qh8
Aw52cCw4Bf3nkSrAicloL6R/jV+jfr3uhBd2CwoH+bsoMTiPrJtqzDpiLqbJF/jr
5rzX0Ev3QFtJlO+LjSUTAiefPqOxoGr0g4vaE4Coyv1zLwJKbxOG3tQDKJgzw2Zm
HwgNjAo/DQikHKczyqEB2GRv/bvAVR6ZbQBO+xoC5UO28Vg5h3z77aAWkh5C+/GE
sISqPbIi7x0buA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:47 2025 by rpki-client