Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
File: oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft (raw, json)
Hash identifier: MvGaYCQsEKORZSxOf1T4Tmj+VYRodkeJhyph8sYe6sI=
Subject key identifier: 6A:24:00:79:CF:D6:60:0D:53:87:49:97:28:BB:AB:DA:04:88:F8:CC
Authority key identifier: A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8
Certificate issuer: /CN=a0937525577cb2af1b285c96431dbd600f57cbe8
Certificate serial: 0198537B79FD77420E625C37D82C2BD42A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
Manifest number: 1252
Signing time: Tue 29 Jul 2025 00:00:57 +0000
Manifest this update: Tue 29 Jul 2025 00:00:57 +0000
Manifest next update: Wed 30 Jul 2025 00:00:57 +0000
Files and hashes: 1: cGnnbkiVLX_2V8eckMDBKTSh5es.roa (hash: 17Bbtx++8vEIOl6usyCHj+Kebb1Ac8VgiDnBmWVz9UM=)
2: oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl (hash: S+SoG2Q31+4W9CNG5TUQfj6T5XNTDUKEMgRZXHSjwb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:79:fd:77:42:0e:62:5c:37:d8:2c:2b:d4:2a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0937525577cb2af1b285c96431dbd600f57cbe8
Validity
Not Before: Jul 29 00:00:57 2025 GMT
Not After : Jul 30 00:00:57 2025 GMT
Subject: CN=6a240079cfd6600d5387499728bbabda0488f8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:9a:01:9a:7c:6e:8d:44:69:c2:e3:7d:d6:
be:1e:b2:61:89:0a:f5:41:ae:c2:d8:98:d2:5c:db:
86:8e:a5:df:e4:7e:d2:88:03:0f:df:6a:1a:d3:91:
8c:1d:c6:27:37:eb:55:74:96:bb:94:6a:f7:73:d7:
6c:e9:c9:19:35:4c:b1:aa:83:09:fa:d8:7c:7e:2a:
33:1b:fb:5c:9a:f9:0a:54:b6:04:12:e2:c1:db:ed:
14:f0:f4:d6:6e:44:20:97:76:fd:f1:d9:4a:8c:b0:
5f:07:43:37:6c:57:ec:36:b5:aa:55:14:d9:e0:fa:
96:c3:27:68:b1:fd:2d:bb:cd:5e:5e:1c:85:cb:e8:
34:6c:dc:1c:76:07:d1:4b:67:f3:33:44:a1:be:e7:
c4:f2:eb:66:c7:cc:8d:75:dc:e6:ef:e2:11:7d:01:
3d:c4:60:b3:a4:9e:8c:36:c2:d1:63:59:7c:22:50:
7b:bb:8b:11:21:5a:04:a3:8e:a5:ec:52:67:5c:04:
f4:8e:4c:51:92:a5:cd:c8:e2:72:e5:0c:87:26:f8:
8e:49:81:1c:26:0d:d1:4e:f3:17:57:34:b9:e7:12:
14:d1:cb:56:b0:64:66:de:fe:27:04:ad:97:57:eb:
20:64:24:66:0a:a7:c8:c4:80:70:6c:9e:7f:b9:7e:
31:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:24:00:79:CF:D6:60:0D:53:87:49:97:28:BB:AB:DA:04:88:F8:CC
X509v3 Authority Key Identifier:
keyid:A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5c:ab:2e:7a:62:f0:5f:ed:58:e8:33:51:d4:e1:08:8f:66:
f0:07:21:7a:2e:6f:df:ff:37:20:34:2e:97:cf:8b:15:96:4d:
70:f7:67:61:d3:fc:e0:37:b7:59:b6:76:12:9b:40:61:84:ea:
18:de:22:8f:45:d4:f9:6f:c3:8d:67:8d:ee:96:d8:ac:4b:58:
01:d8:47:2f:12:10:d4:67:84:c7:51:14:94:7d:4c:99:a8:76:
76:51:21:ef:5a:c2:ab:11:93:e2:7e:62:e5:b8:23:71:b9:e6:
5c:70:71:7e:5b:f5:34:78:ee:18:c2:94:d7:a6:47:66:d2:86:
d3:1e:20:38:99:52:6d:d1:6d:79:27:01:09:d1:c0:9b:31:55:
40:43:01:18:71:83:2e:e8:5f:c6:88:d4:83:43:6d:35:f9:4a:
6e:7c:af:76:f7:dc:e8:6c:5c:c9:62:a3:38:5b:67:01:47:24:
87:f3:94:3e:f5:55:92:01:c5:d0:2e:c2:aa:3a:27:69:a5:1b:
45:76:ff:50:f1:62:27:1e:eb:05:1b:52:27:18:0d:1d:77:3d:
03:6d:48:55:b1:e7:2a:6a:a2:cc:60:3d:f2:18:0f:0c:b4:c0:
24:31:74:f6:26:58:e7:48:1d:0f:fc:be:05:27:0e:d1:5b:f0:
8c:1e:d5:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTe3n9d0IOYlw32Cwr1CpnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOTM3NTI1NTc3Y2IyYWYxYjI4NWM5NjQzMWRiZDYwMGY1
N2NiZTgwHhcNMjUwNzI5MDAwMDU3WhcNMjUwNzMwMDAwMDU3WjAzMTEwLwYDVQQD
Eyg2YTI0MDA3OWNmZDY2MDBkNTM4NzQ5OTcyOGJiYWJkYTA0ODhmOGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMWaAZp8bo1EacLjfda+HrJhiQr1
Qa7C2JjSXNuGjqXf5H7SiAMP32oa05GMHcYnN+tVdJa7lGr3c9ds6ckZNUyxqoMJ
+th8fiozG/tcmvkKVLYEEuLB2+0U8PTWbkQgl3b98dlKjLBfB0M3bFfsNrWqVRTZ
4PqWwydosf0tu81eXhyFy+g0bNwcdgfRS2fzM0ShvufE8utmx8yNddzm7+IRfQE9
xGCzpJ6MNsLRY1l8IlB7u4sRIVoEo46l7FJnXAT0jkxRkqXNyOJy5QyHJviOSYEc
Jg3RTvMXVzS55xIU0ctWsGRm3v4nBK2XV+sgZCRmCqfIxIBwbJ5/uX4xAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGokAHnP1mANU4dJlyi7q9oEiPjMMB8GA1UdIwQY
MBaAFKCTdSVXfLKvGyhclkMdvWAPV8voMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0pOMUpWZDhzcThiS0Z5V1F4MjlZQTlYeS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kMjdkYTItMjc1NC00ZDdiLWFmOTAt
NmUwMmFmMGE0OTk0LzEvb0pOMUpWZDhzcThiS0Z5V1F4MjlZQTlYeS1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kMjdkYTItMjc1NC00ZDdiLWFmOTAtNmUwMmFmMGE0OTk0
LzEvb0pOMUpWZDhzcThiS0Z5V1F4MjlZQTlYeS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1yrLnpi
8F/tWOgzUdThCI9m8Achei5v3/83IDQul8+LFZZNcPdnYdP84De3WbZ2EptAYYTq
GN4ij0XU+W/DjWeN7pbYrEtYAdhHLxIQ1GeEx1EUlH1Mmah2dlEh71rCqxGT4n5i
5bgjcbnmXHBxflv1NHjuGMKU16ZHZtKG0x4gOJlSbdFteScBCdHAmzFVQEMBGHGD
LuhfxojUg0NtNflKbnyvdvfc6GxcyWKjOFtnAUckh/OUPvVVkgHF0C7CqjonaaUb
RXb/UPFiJx7rBRtSJxgNHXc9A21IVbHnKmqizGA98hgPDLTAJDF09iZY50gdD/y+
BScO0VvwjB7VdQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:27:51 2025 by rpki-client