Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
File: OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft (raw, json)
Hash identifier: Q7Z8foRd3OWOVyfVaS7+lQUwILFp9+/Hze4qwXs7SXo=
Subject key identifier: 2B:19:0A:EE:A0:8D:71:0B:B7:EE:AC:C1:1E:5F:A9:64:5D:9C:91:30
Authority key identifier: 3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
Certificate issuer: /CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Certificate serial: 019768F2A864030542A3874BB15346AF3514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 11:00:22 +0000
Manifest this update: Fri 13 Jun 2025 11:00:22 +0000
Manifest next update: Sat 14 Jun 2025 11:00:22 +0000
Files and hashes: 1: 8b8hGUt6rzi1dlifxra-q3rgP6w.roa (hash: KASE+0wVItpUVcgXdu/CScsiZaEIchQxerFmFT5uHpo=)
2: OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl (hash: 6x27hiDdWPUJZ8g2Xm66y5nI0DJrxNdogNSIGsQwqi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:a8:64:03:05:42:a3:87:4b:b1:53:46:af:35:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Validity
Not Before: Jun 13 11:00:22 2025 GMT
Not After : Jun 14 11:00:22 2025 GMT
Subject: CN=2b190aeea08d710bb7eeacc11e5fa9645d9c9130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:1a:df:c5:4d:4e:4f:39:e2:5b:f4:c4:c7:
d1:7d:96:2e:0b:59:c3:bf:64:e6:44:40:f2:72:eb:
db:00:29:a7:8f:2b:2e:cb:07:54:bd:f5:a8:4e:d1:
39:bd:6d:69:7c:79:34:fa:a3:dd:91:da:16:69:04:
f0:77:73:76:31:70:a1:bb:94:7f:13:d2:70:9d:53:
3b:d8:1a:69:cd:21:36:1a:62:9f:13:6c:07:7d:93:
bc:74:c0:80:dd:ed:13:db:df:df:c2:f7:c2:27:2e:
7a:b8:05:80:7f:e4:29:88:60:1e:f5:87:1f:6d:e5:
9c:cb:05:5e:04:55:f4:23:4d:d5:9b:3f:87:fc:84:
44:09:18:b6:83:65:24:16:32:cd:4e:5c:c1:f3:ba:
9e:f5:1c:f9:0f:7f:86:18:81:ba:26:3b:ca:c8:18:
03:7d:73:17:26:c9:97:39:32:7d:25:f7:6c:fb:33:
0d:16:ad:e1:1d:a3:ab:65:92:db:20:64:59:94:ec:
6a:4a:51:26:38:35:f0:1b:b3:bb:b1:14:1c:e0:93:
3c:61:4b:05:0f:2a:84:17:f9:53:22:fc:16:ea:c5:
25:59:cb:52:41:c3:72:d2:17:39:4e:fe:f1:c0:8c:
89:31:86:5e:cb:86:8d:60:8e:08:33:03:aa:e6:21:
b1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:19:0A:EE:A0:8D:71:0B:B7:EE:AC:C1:1E:5F:A9:64:5D:9C:91:30
X509v3 Authority Key Identifier:
keyid:3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:15:f4:4c:15:05:55:fe:ee:ce:b7:66:97:60:ad:1d:b9:e2:
c1:da:f8:a4:a9:a9:06:02:a7:b8:c1:ec:e0:c3:9f:4e:42:3a:
e5:e2:b7:ea:21:21:58:d8:b8:f0:8a:bb:9d:f9:c8:f6:5d:36:
c6:15:0e:39:07:ab:b5:36:e8:62:8d:e4:5b:6b:12:4c:80:2e:
75:a8:25:6b:46:0b:3e:6f:92:fe:86:75:08:36:43:2e:77:20:
c8:b5:da:0e:ce:10:1a:90:ba:71:c0:37:da:e1:e4:91:44:26:
11:a3:d3:f8:14:4b:a3:6c:08:fe:de:66:88:74:66:38:c3:fe:
86:fe:d3:5c:c9:e0:f2:d2:07:64:ce:61:7f:d8:72:fa:e5:57:
2f:4f:eb:45:2c:76:0f:d6:2a:96:6b:24:9c:40:37:46:20:95:
d0:54:ad:10:a9:4a:20:d7:6b:f4:26:9f:ee:69:b5:f2:02:17:
d0:db:d7:aa:9e:79:be:40:11:09:43:fd:a2:1f:16:3e:fb:ce:
20:8e:f9:2b:60:a3:6e:27:0d:f2:d3:93:fc:f5:d7:e0:7c:02:
c0:68:4e:d1:4e:17:6d:77:d3:76:99:66:ec:00:eb:22:bb:ad:
70:8c:04:9e:28:fe:f7:60:50:7a:e4:24:82:2f:46:f0:0f:82:
3c:6f:7f:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdo8qhkAwVCo4dLsVNGrzUUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZTAwOTYyNDdhOGM1NGU1ZGU4YzFiMGRhZjEwNTRhZWM4
Y2M0NTAwHhcNMjUwNjEzMTEwMDIyWhcNMjUwNjE0MTEwMDIyWjAzMTEwLwYDVQQD
EygyYjE5MGFlZWEwOGQ3MTBiYjdlZWFjYzExZTVmYTk2NDVkOWM5MTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD4a38VNTk854lv0xMfRfZYuC1nD
v2TmREDycuvbACmnjysuywdUvfWoTtE5vW1pfHk0+qPdkdoWaQTwd3N2MXChu5R/
E9JwnVM72BppzSE2GmKfE2wHfZO8dMCA3e0T29/fwvfCJy56uAWAf+QpiGAe9Ycf
beWcywVeBFX0I03Vmz+H/IRECRi2g2UkFjLNTlzB87qe9Rz5D3+GGIG6JjvKyBgD
fXMXJsmXOTJ9Jfds+zMNFq3hHaOrZZLbIGRZlOxqSlEmODXwG7O7sRQc4JM8YUsF
DyqEF/lTIvwW6sUlWctSQcNy0hc5Tv7xwIyJMYZey4aNYI4IMwOq5iGxbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsZCu6gjXELt+6swR5fqWRdnJEwMB8GA1UdIwQY
MBaAFDrgCWJHqMVOXejBsNrxBUrsjMRQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3VBSllrZW94VTVkNk1HdzJ2RUZTdXlNeEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYWE0OTQtOTMwOC00N2VlLWE4MDgt
Yjk3MjIxNDQ1MTNmLzEvT3VBSllrZW94VTVkNk1HdzJ2RUZTdXlNeEZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wYWE0OTQtOTMwOC00N2VlLWE4MDgtYjk3MjIxNDQ1MTNm
LzEvT3VBSllrZW94VTVkNk1HdzJ2RUZTdXlNeEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYBX0TBUF
Vf7uzrdml2CtHbniwdr4pKmpBgKnuMHs4MOfTkI65eK36iEhWNi48Iq7nfnI9l02
xhUOOQertTboYo3kW2sSTIAudagla0YLPm+S/oZ1CDZDLncgyLXaDs4QGpC6ccA3
2uHkkUQmEaPT+BRLo2wI/t5miHRmOMP+hv7TXMng8tIHZM5hf9hy+uVXL0/rRSx2
D9YqlmsknEA3RiCV0FStEKlKINdr9Caf7mm18gIX0NvXqp55vkARCUP9oh8WPvvO
II75K2CjbicN8tOT/PXX4HwCwGhO0U4XbXfTdplm7ADrIrutcIwEnij+92BQeuQk
gi9G8A+CPG9/0A==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:38 2025 by rpki-client