Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
File: oLwgSfIYtv2rytdZTCUjso2kd8E.mft (raw, json)
Hash identifier: 5BavL7jldxYu6+Tupq+mbFdYiGrcJKyerDAAd83bngI=
Subject key identifier: 93:62:3B:EC:8A:AB:89:82:AC:0B:CA:13:DD:B0:A8:D3:D0:BF:DD:11
Authority key identifier: A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1
Certificate issuer: /CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
Certificate serial: 01974FD7FAAB42310C4CE049CF9249800A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
Manifest number: 1514
Signing time: Sun 08 Jun 2025 14:00:43 +0000
Manifest this update: Sun 08 Jun 2025 14:00:43 +0000
Manifest next update: Mon 09 Jun 2025 14:00:43 +0000
Files and hashes: 1: APsUsrAn96ow-lwQ45SmC1gQegc.roa (hash: t3tVyfgAERiYm7/hAZrrvXacDVWFUchPqKdL2GXQLe4=)
2: oLwgSfIYtv2rytdZTCUjso2kd8E.crl (hash: x8aVHvtAOcqE8zWt28CQRBb/yZLH+pR66cboUVzwgPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:fa:ab:42:31:0c:4c:e0:49:cf:92:49:80:0a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
Validity
Not Before: Jun 8 14:00:43 2025 GMT
Not After : Jun 9 14:00:43 2025 GMT
Subject: CN=93623bec8aab8982ac0bca13ddb0a8d3d0bfdd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:4c:1b:c3:ac:2d:51:0b:bb:d6:01:05:26:
7d:8a:9b:4b:68:d1:0e:09:3e:ed:48:50:59:ff:66:
39:db:4e:42:d8:9d:c3:f7:47:9a:f7:4c:17:e8:7e:
cf:ba:55:e3:db:72:bb:b7:ca:a5:63:d7:6c:fc:11:
ec:a5:35:d4:fd:1f:58:b9:9d:61:64:9a:be:ee:c6:
08:16:3b:37:2b:2f:45:2a:88:46:a2:d8:87:26:86:
0f:51:23:6e:70:4d:74:6d:08:c2:5b:ae:3c:7f:bc:
e3:2a:58:4e:47:30:be:8c:f3:cf:10:44:42:8b:a9:
a4:5f:d2:fd:e7:81:9f:ff:23:24:01:40:c8:45:ca:
08:94:9a:28:57:00:df:bb:8d:d9:d5:a2:bd:fe:6c:
b4:d5:08:96:fb:30:17:80:cd:01:5e:3d:e2:d4:71:
1f:ed:04:dd:6d:14:22:91:90:f2:c5:04:b9:ec:76:
f3:20:c6:99:7d:7d:8c:c7:9c:08:ab:e8:84:a5:24:
ed:c6:85:a3:ae:7a:d5:a5:96:12:1b:04:97:21:0e:
96:1f:76:6d:27:96:e9:93:68:a3:b9:95:7e:fb:d8:
d4:63:38:99:0b:d3:90:09:14:7f:75:fc:92:83:1d:
4a:d7:2d:56:3a:8a:da:1b:fe:91:a2:96:69:00:37:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:62:3B:EC:8A:AB:89:82:AC:0B:CA:13:DD:B0:A8:D3:D0:BF:DD:11
X509v3 Authority Key Identifier:
keyid:A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b5:da:22:17:9e:b2:96:1a:d7:90:84:23:50:13:f6:c9:b8:
e1:68:7d:83:11:3d:10:38:54:a1:ae:4c:59:f0:d1:b0:d1:d9:
24:25:0e:38:60:27:33:0a:97:60:da:c1:4c:60:f7:d0:31:9b:
6a:ba:53:7f:95:33:96:cd:b2:b4:a6:c9:18:59:29:05:b3:fe:
98:cd:f8:a5:62:f8:80:34:20:0a:06:68:dc:da:74:73:08:7b:
a4:0c:cb:57:18:64:65:05:2d:2f:a8:59:38:49:94:b5:79:a5:
f6:a8:65:d1:b6:6a:0e:dd:70:7c:a9:aa:e5:7c:35:16:21:ba:
d0:47:7b:a9:fb:40:10:e8:07:c4:b9:58:9e:ad:39:69:99:92:
b1:a1:41:62:2a:58:fd:db:26:74:e3:34:90:23:a1:be:2a:39:
d4:91:80:14:b7:e2:58:ff:a0:b2:98:59:78:4a:89:24:92:11:
2c:d6:05:be:d5:03:e8:31:c8:80:f9:0c:c6:40:16:b1:c4:2c:
bc:31:64:7d:3c:48:01:57:b5:2e:e8:9f:d1:0e:4e:df:d3:18:
6d:ca:ce:7a:47:1c:c0:66:1a:00:e9:b3:2b:35:bb:1f:0a:c6:
db:c1:13:85:a1:de:ea:08:b4:27:9c:7f:df:10:32:4e:40:e0:
17:fd:65:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdP1/qrQjEMTOBJz5JJgAopMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYmMyMDQ5ZjIxOGI2ZmRhYmNhZDc1OTRjMjUyM2IyOGRh
NDc3YzEwHhcNMjUwNjA4MTQwMDQzWhcNMjUwNjA5MTQwMDQzWjAzMTEwLwYDVQQD
Eyg5MzYyM2JlYzhhYWI4OTgyYWMwYmNhMTNkZGIwYThkM2QwYmZkZDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplxMG8OsLVELu9YBBSZ9iptLaNEO
CT7tSFBZ/2Y5205C2J3D90ea90wX6H7PulXj23K7t8qlY9ds/BHspTXU/R9YuZ1h
ZJq+7sYIFjs3Ky9FKohGotiHJoYPUSNucE10bQjCW648f7zjKlhORzC+jPPPEERC
i6mkX9L954Gf/yMkAUDIRcoIlJooVwDfu43Z1aK9/my01QiW+zAXgM0BXj3i1HEf
7QTdbRQikZDyxQS57HbzIMaZfX2Mx5wIq+iEpSTtxoWjrnrVpZYSGwSXIQ6WH3Zt
J5bpk2ijuZV++9jUYziZC9OQCRR/dfySgx1K1y1WOoraG/6RopZpADeLXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNiO+yKq4mCrAvKE92wqNPQv90RMB8GA1UdIwQY
MBaAFKC8IEnyGLb9q8rXWUwlI7KNpHfBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0x3Z1NmSVl0djJyeXRkWlRDVWpzbzJrZDhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xNWI0MDMtMjIxOS00Nzg2LWFiMDIt
MTk5MTJhMGU0OTE4LzEvb0x3Z1NmSVl0djJyeXRkWlRDVWpzbzJrZDhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xNWI0MDMtMjIxOS00Nzg2LWFiMDItMTk5MTJhMGU0OTE4
LzEvb0x3Z1NmSVl0djJyeXRkWlRDVWpzbzJrZDhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrXaIhee
spYa15CEI1AT9sm44Wh9gxE9EDhUoa5MWfDRsNHZJCUOOGAnMwqXYNrBTGD30DGb
arpTf5Uzls2ytKbJGFkpBbP+mM34pWL4gDQgCgZo3Np0cwh7pAzLVxhkZQUtL6hZ
OEmUtXml9qhl0bZqDt1wfKmq5Xw1FiG60Ed7qftAEOgHxLlYnq05aZmSsaFBYipY
/dsmdOM0kCOhvio51JGAFLfiWP+gsphZeEqJJJIRLNYFvtUD6DHIgPkMxkAWscQs
vDFkfTxIAVe1Luif0Q5O39MYbcrOekccwGYaAOmzKzW7HwrG28EThaHe6gi0J5x/
3xAyTkDgF/1leA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 20:50:33 2025 by rpki-client