Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
File: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft (raw, json)
Hash identifier: qz8at7AN54FtvQg1v9vEYbVCfK+mAOaOCKwF09oSOnY=
Subject key identifier: 96:91:F4:5C:A1:E5:CB:D4:3F:A3:61:C1:BE:16:83:71:B3:14:54:C5
Authority key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
Certificate issuer: /CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Certificate serial: 0197711A988A5BFE653527C3BDB50A7060F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
Manifest number: 155A
Signing time: Sun 15 Jun 2025 01:00:57 +0000
Manifest this update: Sun 15 Jun 2025 01:00:57 +0000
Manifest next update: Mon 16 Jun 2025 01:00:57 +0000
Files and hashes: 1: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl (hash: RsjbAOpiQu5Ffwd6Dvpn63oA3elpG0nub5av/Unb15Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:98:8a:5b:fe:65:35:27:c3:bd:b5:0a:70:60:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Validity
Not Before: Jun 15 01:00:57 2025 GMT
Not After : Jun 16 01:00:57 2025 GMT
Subject: CN=9691f45ca1e5cbd43fa361c1be168371b31454c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:d3:83:4f:92:98:08:cf:ed:da:b5:d4:4a:
3c:21:e1:bb:0a:26:89:8c:be:da:e4:89:ca:ce:41:
60:65:ad:ab:15:29:6f:a4:d6:9d:e9:59:14:37:db:
4b:ce:33:ba:24:38:67:19:4e:c0:40:1b:d6:b0:c9:
bd:e3:02:4f:2f:bb:9d:70:ac:a0:a0:f5:c0:06:74:
e1:e2:af:dc:17:36:d0:b9:0d:58:d6:45:b0:ff:21:
72:af:ae:db:4f:c1:2f:9f:e3:ae:7f:ba:87:b1:e8:
ef:3e:84:38:9b:a0:8d:7d:01:15:37:17:8c:11:69:
d2:1c:68:c0:34:1d:81:d3:13:39:44:22:f1:7c:02:
ab:34:37:05:c0:3d:80:7c:8c:34:47:3d:e1:88:97:
51:87:23:a6:25:5a:cb:b7:2b:49:1a:03:e4:f4:47:
7d:7d:3b:82:67:8d:94:8e:b5:90:41:16:1b:ce:58:
11:aa:69:16:f0:db:c7:3e:f7:01:d6:01:2a:1c:c7:
d0:67:f0:b9:c8:19:0c:5e:1d:fb:3f:e6:cc:7a:53:
b9:38:ed:1e:cb:63:57:72:25:b2:5c:a0:6a:08:76:
6b:37:05:82:41:d8:d4:4a:8f:bc:ba:22:d4:86:91:
75:a5:5a:62:74:b3:31:c3:2e:b4:38:a3:42:60:c0:
a4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:91:F4:5C:A1:E5:CB:D4:3F:A3:61:C1:BE:16:83:71:B3:14:54:C5
X509v3 Authority Key Identifier:
keyid:39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d4:aa:c5:a0:6f:1f:ea:65:76:f8:4c:ab:e7:75:84:ca:21:
26:47:7c:6c:e4:b5:ea:c1:42:e1:22:e4:0b:a6:9c:94:c5:22:
00:ea:3c:89:40:55:5f:8d:ac:cb:44:19:63:c8:0e:93:65:f1:
1d:f7:d8:b1:1e:80:9b:e6:43:9b:41:74:bc:cd:47:c3:4f:e6:
00:00:db:69:08:b3:aa:79:61:c2:74:86:1b:c5:2f:b6:bc:cc:
70:1d:e8:91:f2:9c:cc:c9:1b:c6:a8:06:16:ed:bd:08:e5:06:
9c:d4:a0:38:53:aa:7f:9e:65:d4:86:bf:6e:f2:ad:84:23:87:
ad:32:44:a0:95:e7:7d:2a:1f:67:1e:ce:0d:77:f4:7c:c7:24:
4a:81:bc:95:df:ab:08:65:67:1f:7a:ed:80:53:18:87:ca:93:
50:34:ad:31:25:ea:a2:f1:e4:07:dd:65:71:56:43:15:e5:d2:
5d:3b:da:a8:31:fc:c4:d6:d4:eb:67:0d:f5:df:fb:7c:ed:f4:
23:9c:52:4d:a0:ad:cc:fd:fe:f7:c9:a5:59:67:79:f5:38:91:
64:db:16:74:fc:7b:19:eb:b6:b1:12:36:8e:90:a0:1a:32:37:
aa:b8:65:4d:87:a0:2b:81:56:a1:20:5d:31:68:29:69:0c:54:
b1:d1:f3:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxGpiKW/5lNSfDvbUKcGD1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NjhlZTBiMWY0MGNiYjEzYTg4ZmRlNGMwYjExNjgzMDRk
ZjJkNmIwHhcNMjUwNjE1MDEwMDU3WhcNMjUwNjE2MDEwMDU3WjAzMTEwLwYDVQQD
Eyg5NjkxZjQ1Y2ExZTVjYmQ0M2ZhMzYxYzFiZTE2ODM3MWIzMTQ1NGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtHTg0+SmAjP7dq11Eo8IeG7CiaJ
jL7a5InKzkFgZa2rFSlvpNad6VkUN9tLzjO6JDhnGU7AQBvWsMm94wJPL7udcKyg
oPXABnTh4q/cFzbQuQ1Y1kWw/yFyr67bT8Evn+Ouf7qHsejvPoQ4m6CNfQEVNxeM
EWnSHGjANB2B0xM5RCLxfAKrNDcFwD2AfIw0Rz3hiJdRhyOmJVrLtytJGgPk9Ed9
fTuCZ42UjrWQQRYbzlgRqmkW8NvHPvcB1gEqHMfQZ/C5yBkMXh37P+bMelO5OO0e
y2NXciWyXKBqCHZrNwWCQdjUSo+8uiLUhpF1pVpidLMxwy60OKNCYMCkpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaR9Fyh5cvUP6Nhwb4Wg3GzFFTFMB8GA1UdIwQY
MBaAFDlo7gsfQMuxOoj95MCxFoME3y1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1dqdUN4OUF5N0U2aVAza3dMRVdnd1RmTFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85ZjY5ZDQtNjVlZi00ZDVlLTljMmYt
Nzk5OGY0YmRmMjFjLzEvT1dqdUN4OUF5N0U2aVAza3dMRVdnd1RmTFdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS85ZjY5ZDQtNjVlZi00ZDVlLTljMmYtNzk5OGY0YmRmMjFj
LzEvT1dqdUN4OUF5N0U2aVAza3dMRVdnd1RmTFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9SqxaBv
H+pldvhMq+d1hMohJkd8bOS16sFC4SLkC6aclMUiAOo8iUBVX42sy0QZY8gOk2Xx
HffYsR6Am+ZDm0F0vM1Hw0/mAADbaQizqnlhwnSGG8UvtrzMcB3okfKczMkbxqgG
Fu29COUGnNSgOFOqf55l1Ia/bvKthCOHrTJEoJXnfSofZx7ODXf0fMckSoG8ld+r
CGVnH3rtgFMYh8qTUDStMSXqovHkB91lcVZDFeXSXTvaqDH8xNbU62cN9d/7fO30
I5xSTaCtzP3+98mlWWd59TiRZNsWdPx7Geu2sRI2jpCgGjI3qrhlTYegK4FWoSBd
MWgpaQxUsdHzeA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:31:23 2025 by rpki-client