Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier: TQQkjcT2jrv8w/xX40AlhwBn7REnRo3FFOle/nT+p04=
Subject key identifier: F8:D1:92:8F:D7:8D:71:2A:34:31:9E:1E:7B:FA:EF:70:9A:44:9C:11
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial: 01977FB171C2BCBE79004D35CD2E0B98B870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number: 0C8C
Signing time: Tue 17 Jun 2025 21:00:24 +0000
Manifest this update: Tue 17 Jun 2025 21:00:24 +0000
Manifest next update: Wed 18 Jun 2025 21:00:24 +0000
Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: sBzB4yOSs0WRW+uMpXgmsfU+F5jNav3cLg1YMayj5LM=)
2: dxC4OOVdD7y8lzmmwGYNpdpf-D0.roa (hash: 1F32hSGI4pbAFMDzlkPoS+O8tvJxdYgPLvmfvhN+IXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:b1:71:c2:bc:be:79:00:4d:35:cd:2e:0b:98:b8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Validity
Not Before: Jun 17 21:00:24 2025 GMT
Not After : Jun 18 21:00:24 2025 GMT
Subject: CN=f8d1928fd78d712a34319e1e7bfaef709a449c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bd:9b:9f:90:c3:ba:ff:9e:0d:b0:b1:06:80:
40:09:05:b6:e6:b5:0b:15:09:b6:43:98:1a:63:2f:
f8:06:f4:0d:d9:81:13:f2:6a:8a:ea:d0:57:91:d1:
c5:18:38:a9:ff:c8:3e:3e:2b:38:7b:7a:59:93:68:
02:74:b7:36:38:f8:4b:da:f0:cd:db:c4:15:d1:e4:
b7:7e:42:a7:10:ad:56:bf:ea:ab:9a:1f:50:e7:af:
f6:db:45:f7:b1:68:3d:c0:0d:f5:9e:b4:69:80:dc:
3f:2f:98:14:89:ca:ab:89:1f:11:b7:dd:94:cf:a6:
67:a3:40:f0:46:50:7c:96:f9:31:37:e7:43:b1:40:
a7:6e:f3:ac:90:1e:9f:d4:48:d9:ee:1e:c8:91:82:
d3:b0:8f:f1:31:f3:07:71:c8:fc:18:0e:a3:fd:20:
f0:2a:20:28:04:8d:55:22:4d:c3:cf:21:45:0a:fc:
a3:69:1e:5c:a4:35:eb:2d:27:4f:1e:f5:59:bd:e5:
e8:84:2c:45:f6:2a:b1:d1:55:d8:72:79:67:92:f8:
07:a2:b8:d6:43:3b:50:10:5e:4e:09:fe:39:5b:1a:
86:87:73:9c:1c:f8:68:bb:61:b1:af:f1:8f:e0:88:
57:fe:9e:62:2e:98:3b:10:a2:1d:29:3c:07:b2:1d:
88:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D1:92:8F:D7:8D:71:2A:34:31:9E:1E:7B:FA:EF:70:9A:44:9C:11
X509v3 Authority Key Identifier:
keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:87:73:10:57:c3:b6:d5:ff:59:ac:5e:cd:79:9c:7f:e8:ca:
f8:6e:20:2e:ca:ca:26:dd:16:0e:59:1e:38:5e:0d:5c:2f:66:
97:64:c8:23:fe:f8:9b:65:51:56:45:60:a6:a2:f0:fe:56:1c:
6e:28:a6:b9:eb:1a:49:6c:0c:38:3c:26:68:a1:a2:98:22:f4:
fa:d9:d1:57:4b:a7:60:5e:90:d8:08:0b:18:89:7b:ac:0e:81:
58:51:c0:38:02:84:81:f9:db:3b:ff:9d:a4:60:6c:40:19:fd:
82:20:8f:be:e4:02:99:43:3f:7e:f7:ca:65:83:6b:71:30:f0:
60:f5:0d:8b:f4:49:e7:aa:23:f0:a0:6e:c3:c2:6a:05:b0:58:
8c:c5:7e:23:4f:ba:66:18:ab:d0:5c:20:54:b9:ff:73:c9:39:
d4:4e:97:2e:ce:b7:70:78:6f:9f:57:39:2f:a6:cd:aa:c4:6d:
a0:ff:15:21:f8:5b:48:e8:87:bb:8a:17:a3:4e:76:ac:89:f1:
60:48:6b:58:8a:b8:71:b7:1a:6b:54:ab:37:14:d5:f2:a0:83:
b0:6c:9e:83:64:ed:4c:ec:e7:be:c7:20:9b:d8:8a:59:91:b7:
c5:45:48:4e:55:11:35:25:c5:38:bb:76:1f:4e:60:82:06:b3:
a0:f1:94:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd/sXHCvL55AE01zS4LmLhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MjlkMTMxYmU1MjgxMGU0N2M5Y2JiZjgzYTNmZmJkNGY3
Y2JkYmYwHhcNMjUwNjE3MjEwMDI0WhcNMjUwNjE4MjEwMDI0WjAzMTEwLwYDVQQD
EyhmOGQxOTI4ZmQ3OGQ3MTJhMzQzMTllMWU3YmZhZWY3MDlhNDQ5YzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr2bn5DDuv+eDbCxBoBACQW25rUL
FQm2Q5gaYy/4BvQN2YET8mqK6tBXkdHFGDip/8g+Pis4e3pZk2gCdLc2OPhL2vDN
28QV0eS3fkKnEK1Wv+qrmh9Q56/220X3sWg9wA31nrRpgNw/L5gUicqriR8Rt92U
z6Zno0DwRlB8lvkxN+dDsUCnbvOskB6f1EjZ7h7IkYLTsI/xMfMHccj8GA6j/SDw
KiAoBI1VIk3DzyFFCvyjaR5cpDXrLSdPHvVZveXohCxF9iqx0VXYcnlnkvgHorjW
QztQEF5OCf45WxqGh3OcHPhou2Gxr/GP4IhX/p5iLpg7EKIdKTwHsh2IuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjRko/XjXEqNDGeHnv673CaRJwRMB8GA1UdIwQY
MBaAFDgp0TG+UoEOR8nLv4Oj/71PfL2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYt
YjAzOGRiODk4YjdlLzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYtYjAzOGRiODk4Yjdl
LzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYdzEFfD
ttX/WaxezXmcf+jK+G4gLsrKJt0WDlkeOF4NXC9ml2TII/74m2VRVkVgpqLw/lYc
biimuesaSWwMODwmaKGimCL0+tnRV0unYF6Q2AgLGIl7rA6BWFHAOAKEgfnbO/+d
pGBsQBn9giCPvuQCmUM/fvfKZYNrcTDwYPUNi/RJ56oj8KBuw8JqBbBYjMV+I0+6
Zhir0FwgVLn/c8k51E6XLs63cHhvn1c5L6bNqsRtoP8VIfhbSOiHu4oXo052rInx
YEhrWIq4cbcaa1SrNxTV8qCDsGyeg2TtTOznvscgm9iKWZG3xUVITlURNSXFOLt2
H05gggazoPGU2w==
-----END CERTIFICATE-----
Generated at Wed Jun 18 02:01:41 2025 by rpki-client