Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.mft
File: O2MTmh9PiMMM7iIckUajbbVU_3A.mft (raw, json)
Hash identifier: np3JoRrqNXwdLTKCrMJ2YglL8J3tl3lj+lERCv2FiPA=
Subject key identifier: EF:19:55:42:2E:5B:1E:81:74:03:48:25:3F:7C:8D:A3:CB:B8:5F:58
Authority key identifier: 3B:63:13:9A:1F:4F:88:C3:0C:EE:22:1C:91:46:A3:6D:B5:54:FF:70
Certificate issuer: /CN=3b63139a1f4f88c30cee221c9146a36db554ff70
Certificate serial: 0197696093D1E71226F41338FADCC263396E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2MTmh9PiMMM7iIckUajbbVU_3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.mft
Manifest number: 0827
Signing time: Fri 13 Jun 2025 13:00:26 +0000
Manifest this update: Fri 13 Jun 2025 13:00:26 +0000
Manifest next update: Sat 14 Jun 2025 13:00:26 +0000
Files and hashes: 1: JoFwTwAv-_c9ZLWMyBNEWDPvfas.roa (hash: ErYlkkNh49mz7B2O46c+uSN3yYpaocdKkRzHsCd2I3A=)
2: O2MTmh9PiMMM7iIckUajbbVU_3A.crl (hash: fL5yzIfIin/392KnuI5dad9Z5fqHoFZpX4QTHiSS8ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2MTmh9PiMMM7iIckUajbbVU_3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:93:d1:e7:12:26:f4:13:38:fa:dc:c2:63:39:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b63139a1f4f88c30cee221c9146a36db554ff70
Validity
Not Before: Jun 13 13:00:26 2025 GMT
Not After : Jun 14 13:00:26 2025 GMT
Subject: CN=ef1955422e5b1e81740348253f7c8da3cbb85f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:7f:5f:ae:cc:51:ff:0c:cd:87:ab:ee:4b:
da:23:c6:17:59:7b:57:ef:f3:cb:6e:9c:a2:ca:23:
14:d4:9a:44:04:3a:82:63:da:72:c3:13:e2:df:43:
4e:9b:8f:73:4d:47:d6:47:21:90:c2:eb:6b:5d:c8:
1e:0f:d6:48:15:3f:ae:b3:73:4d:86:91:3a:ed:14:
63:e1:3a:3b:58:b9:25:84:99:5f:9b:37:4a:90:6d:
8a:a0:43:b1:f9:ee:03:22:c9:a2:92:7e:4c:e2:30:
f1:53:56:73:e7:bb:22:06:dc:aa:3e:c7:ed:df:d1:
a2:35:d6:86:d1:97:5d:28:ba:46:85:6d:c7:e3:74:
fb:d9:36:23:94:29:fd:65:07:e1:db:b3:a2:ff:eb:
7b:48:49:8b:94:fe:91:06:b7:5b:27:88:36:d0:60:
ba:9a:6e:b0:4b:9c:aa:4a:6e:15:48:c3:3c:ea:d5:
df:f4:e4:ed:fa:05:9f:3f:1f:dc:67:5b:7f:40:e0:
14:93:27:3a:94:4b:3e:96:5b:69:ae:f7:41:aa:a2:
a4:3d:4b:5b:67:ae:74:bf:cb:e8:9a:92:7a:b4:1d:
76:e7:1b:ef:7c:df:77:60:b9:2a:f0:6d:85:41:3a:
ac:0f:b2:8e:45:00:f9:b7:33:63:b8:6f:01:a4:ad:
cd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:19:55:42:2E:5B:1E:81:74:03:48:25:3F:7C:8D:A3:CB:B8:5F:58
X509v3 Authority Key Identifier:
keyid:3B:63:13:9A:1F:4F:88:C3:0C:EE:22:1C:91:46:A3:6D:B5:54:FF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2MTmh9PiMMM7iIckUajbbVU_3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:86:b5:7e:93:ef:fd:39:f4:b5:f2:0c:ce:91:73:05:3a:87:
e6:54:95:db:f2:70:a1:12:73:83:e9:ba:78:7f:4f:29:71:9e:
e2:d9:56:e4:01:d1:f4:b5:e4:7a:53:32:77:f1:ed:4f:33:68:
6b:de:f2:40:f5:da:f9:b7:66:b2:ac:61:07:5b:7f:b0:9b:ce:
95:12:90:8f:29:79:a4:ac:ef:14:c0:b2:30:4e:53:d6:d7:1b:
7d:eb:05:bc:db:1a:77:07:e0:09:4c:19:6e:d4:70:72:bf:5e:
87:41:48:dc:3b:96:02:c7:9f:25:61:61:3c:61:4b:75:43:cf:
dc:da:c8:e7:8b:94:e6:33:50:f8:5b:fb:d3:4d:ed:93:6b:bd:
38:01:b3:87:28:ad:f8:24:f7:58:f6:56:cf:79:9f:4d:0f:b9:
0e:33:db:1d:36:26:7c:cd:b9:db:b7:a4:17:62:f6:44:8c:b5:
f3:6e:89:71:a3:99:6a:4e:52:1c:ed:b1:f1:17:0c:55:d3:b7:
8b:b2:0f:11:b8:fa:4a:4a:e9:21:85:82:35:be:9d:15:bf:a0:
c0:cd:49:a5:0a:75:35:5f:b6:36:5f:ab:f8:47:e4:d7:12:4a:
05:7a:0b:4f:5f:46:9e:7b:1a:0a:61:68:f8:07:7a:02:13:cc:
19:90:fe:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYJPR5xIm9BM4+tzCYzluMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNjMxMzlhMWY0Zjg4YzMwY2VlMjIxYzkxNDZhMzZkYjU1
NGZmNzAwHhcNMjUwNjEzMTMwMDI2WhcNMjUwNjE0MTMwMDI2WjAzMTEwLwYDVQQD
EyhlZjE5NTU0MjJlNWIxZTgxNzQwMzQ4MjUzZjdjOGRhM2NiYjg1ZjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/h/X67MUf8MzYer7kvaI8YXWXtX
7/PLbpyiyiMU1JpEBDqCY9pywxPi30NOm49zTUfWRyGQwutrXcgeD9ZIFT+us3NN
hpE67RRj4To7WLklhJlfmzdKkG2KoEOx+e4DIsmikn5M4jDxU1Zz57siBtyqPsft
39GiNdaG0ZddKLpGhW3H43T72TYjlCn9ZQfh27Oi/+t7SEmLlP6RBrdbJ4g20GC6
mm6wS5yqSm4VSMM86tXf9OTt+gWfPx/cZ1t/QOAUkyc6lEs+lltprvdBqqKkPUtb
Z650v8vompJ6tB125xvvfN93YLkq8G2FQTqsD7KORQD5tzNjuG8BpK3NDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8ZVUIuWx6BdANIJT98jaPLuF9YMB8GA1UdIwQY
MBaAFDtjE5ofT4jDDO4iHJFGo221VP9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzJNVG1oOVBpTU1NN2lJY2tVYWpiYlZVXzNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMjY5YzUtMjY4Yy00NWU5LTgwNjct
MGY3YTQwYjVmNmYzLzEvTzJNVG1oOVBpTU1NN2lJY2tVYWpiYlZVXzNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wMjY5YzUtMjY4Yy00NWU5LTgwNjctMGY3YTQwYjVmNmYz
LzEvTzJNVG1oOVBpTU1NN2lJY2tVYWpiYlZVXzNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYa1fpPv
/Tn0tfIMzpFzBTqH5lSV2/JwoRJzg+m6eH9PKXGe4tlW5AHR9LXkelMyd/HtTzNo
a97yQPXa+bdmsqxhB1t/sJvOlRKQjyl5pKzvFMCyME5T1tcbfesFvNsadwfgCUwZ
btRwcr9eh0FI3DuWAsefJWFhPGFLdUPP3NrI54uU5jNQ+Fv7003tk2u9OAGzhyit
+CT3WPZWz3mfTQ+5DjPbHTYmfM2527ekF2L2RIy1826JcaOZak5SHO2x8RcMVdO3
i7IPEbj6SkrpIYWCNb6dFb+gwM1JpQp1NV+2Nl+r+Efk1xJKBXoLT19GnnsaCmFo
+Ad6AhPMGZD+sQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:57:02 2025 by rpki-client