
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
File: oI-OKeBCDnI90dxBjocTyOlgQ9g.mft (raw, json)
Hash identifier: xhOZNXwVCwwMIi9aex96f/xrejuavELi0tJAf40+0rg=
Subject key identifier: BF:00:2A:51:45:B7:F4:4F:B4:ED:FB:C8:7E:D1:8F:CF:F0:77:59:D1
Authority key identifier: A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
Certificate issuer: /CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Certificate serial: 01976D06B87EDB2449B9C6E97CAF6CA4B768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
Manifest number: 44
Signing time: Sat 14 Jun 2025 06:00:46 +0000
Manifest this update: Sat 14 Jun 2025 06:00:46 +0000
Manifest next update: Sun 15 Jun 2025 06:00:46 +0000
Files and hashes: 1: Dgcly8v4CR7-bWoogRwA8Cd0ZgQ.roa (hash: XQw1h6VNbTxzmM1H2Iqg9dXPjJiJyzhNIjXbV7g4seM=)
2: oI-OKeBCDnI90dxBjocTyOlgQ9g.crl (hash: X7vvaW9NyTutZpoYU5+q3nro5Prsr2iJTyzvF+aYuZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:b8:7e:db:24:49:b9:c6:e9:7c:af:6c:a4:b7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Validity
Not Before: Jun 14 06:00:46 2025 GMT
Not After : Jun 15 06:00:46 2025 GMT
Subject: CN=bf002a5145b7f44fb4edfbc87ed18fcff07759d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:1c:49:ee:7b:cc:23:a0:94:b2:02:0c:26:
3a:d7:a6:f0:dd:c5:65:21:43:52:e2:bd:93:e3:8b:
37:14:85:4b:3a:14:5a:dc:e7:27:dc:d4:ca:80:89:
95:a4:b2:52:3d:c1:77:59:18:bc:1f:e0:11:97:af:
ab:1a:19:1e:4f:be:bd:0c:7b:3e:fb:dc:d6:8c:96:
a4:27:1b:be:1a:86:2b:3f:59:52:63:46:63:ae:23:
c6:e5:38:b1:bc:b5:b3:37:60:e7:ee:f2:63:69:8d:
45:10:ff:40:9d:3b:0d:8f:e0:d6:42:41:3d:88:c0:
4b:94:aa:38:d8:90:a7:59:a3:7f:f5:77:34:c3:d0:
39:95:60:0a:60:9c:e0:ff:bc:b3:f8:42:e8:86:4d:
21:bf:90:42:e6:bf:f9:16:56:ca:db:f0:96:8a:27:
a3:19:8a:04:76:fd:8e:16:c6:93:4c:b0:79:e6:4a:
bf:ad:cd:41:c0:81:41:d5:0d:4e:cb:b2:09:7e:9b:
62:fc:e6:e2:a3:9b:cb:66:54:72:54:32:f4:36:10:
6d:0f:36:08:d2:4c:1d:10:4f:77:5b:ea:ad:7a:cf:
71:5a:18:93:8e:50:ae:8e:6f:f2:9e:b3:0d:45:3e:
6c:11:cf:d3:6b:fd:5e:c4:f9:88:36:50:21:51:1b:
13:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:00:2A:51:45:B7:F4:4F:B4:ED:FB:C8:7E:D1:8F:CF:F0:77:59:D1
X509v3 Authority Key Identifier:
keyid:A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bc:76:41:e1:c5:ab:e0:5a:84:21:e8:39:4f:de:ed:61:28:
0b:f6:71:39:4b:88:89:3b:2b:22:3d:15:b3:a8:c3:7d:a1:60:
01:ff:8a:0f:31:f7:d7:14:46:37:73:61:38:41:20:07:ca:bd:
83:38:04:39:88:22:5f:6b:cb:d3:b1:1b:c5:c3:d5:be:f5:56:
b6:c2:f9:7e:ea:ee:28:3d:1d:81:ab:96:1c:0e:dc:e8:b7:f2:
6d:e7:a2:ab:b1:6b:64:e7:78:9f:62:80:b0:d0:39:18:3b:7d:
1f:33:7d:f2:d6:0e:3e:13:a1:61:ab:2b:48:b0:53:27:b3:65:
3e:b8:6b:33:be:b7:28:5a:b9:f7:8a:f7:59:6d:82:87:ed:35:
9e:9a:4d:69:1d:e9:94:34:56:c9:eb:57:ca:dc:64:92:e1:0a:
69:97:f3:7f:24:d2:2f:9b:f5:0e:56:1f:3e:5f:8b:aa:a1:2e:
51:ac:fe:c1:a8:78:a5:8a:32:19:12:1a:aa:f4:0c:6e:48:b4:
d8:36:cd:e5:28:0b:02:4b:3b:d2:91:84:d5:9a:9d:ad:8c:60:
f0:30:c8:b3:12:30:fe:08:de:9e:03:76:13:14:73:f1:d2:2b:
0f:3d:5f:05:10:a8:af:00:2b:fc:e6:f1:69:64:a3:b1:66:8a:
15:66:19:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBrh+2yRJucbpfK9spLdoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOGY4ZTI5ZTA0MjBlNzIzZGQxZGM0MThlODcxM2M4ZTk2
MDQzZDgwHhcNMjUwNjE0MDYwMDQ2WhcNMjUwNjE1MDYwMDQ2WjAzMTEwLwYDVQQD
EyhiZjAwMmE1MTQ1YjdmNDRmYjRlZGZiYzg3ZWQxOGZjZmYwNzc1OWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzscSe57zCOglLICDCY616bw3cVl
IUNS4r2T44s3FIVLOhRa3Ocn3NTKgImVpLJSPcF3WRi8H+ARl6+rGhkeT769DHs+
+9zWjJakJxu+GoYrP1lSY0ZjriPG5TixvLWzN2Dn7vJjaY1FEP9AnTsNj+DWQkE9
iMBLlKo42JCnWaN/9Xc0w9A5lWAKYJzg/7yz+ELohk0hv5BC5r/5FlbK2/CWiiej
GYoEdv2OFsaTTLB55kq/rc1BwIFB1Q1Oy7IJfpti/Obio5vLZlRyVDL0NhBtDzYI
0kwdEE93W+qtes9xWhiTjlCujm/ynrMNRT5sEc/Ta/1exPmINlAhURsTfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8AKlFFt/RPtO37yH7Rj8/wd1nRMB8GA1UdIwQY
MBaAFKCPjingQg5yPdHcQY6HE8jpYEPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0ktT0tlQkNEbkk5MGR4QmpvY1R5T2xnUTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85ZjE1MDMtZjc3ZC00Zjc4LThjOWYt
YThhYjVkNTczN2RmLzEvb0ktT0tlQkNEbkk5MGR4QmpvY1R5T2xnUTlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85ZjE1MDMtZjc3ZC00Zjc4LThjOWYtYThhYjVkNTczN2Rm
LzEvb0ktT0tlQkNEbkk5MGR4QmpvY1R5T2xnUTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrx2QeHF
q+BahCHoOU/e7WEoC/ZxOUuIiTsrIj0Vs6jDfaFgAf+KDzH31xRGN3NhOEEgB8q9
gzgEOYgiX2vL07EbxcPVvvVWtsL5furuKD0dgauWHA7c6Lfybeeiq7FrZOd4n2KA
sNA5GDt9HzN98tYOPhOhYasrSLBTJ7NlPrhrM763KFq594r3WW2Ch+01nppNaR3p
lDRWyetXytxkkuEKaZfzfyTSL5v1DlYfPl+LqqEuUaz+wah4pYoyGRIaqvQMbki0
2DbN5SgLAks70pGE1ZqdrYxg8DDIsxIw/gjengN2ExRz8dIrDz1fBRCorwAr/Obx
aWSjsWaKFWYZ1w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:23:28 2025 by rpki-client