Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier: s6AB1oEIptkWvjnuosyFfDCMr/45wxRGQaUon2HEIqM=
Subject key identifier: 7C:3A:39:B8:98:09:A2:37:94:7A:E3:0C:31:73:A0:F1:5B:FB:9D:A3
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 0197499F561EDCF12C41F6C96F8E95DD2E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 09:01:08 +0000
Manifest this update: Sat 07 Jun 2025 09:01:08 +0000
Manifest next update: Sun 08 Jun 2025 09:01:08 +0000
Files and hashes: 1: ZI8Cc8TbOXHSTT6aTy4qes85u18.roa (hash: Gcf7oNxz6hoE1nbwGxOkKAeIU8snb4fxphzbF+WsHH8=)
2: hQJK6zQLhYj5qTjnWHPVq5_Ggwc.roa (hash: qWKatLGe/VjD4eV5U12XcGzsbBr23W6H5teeHc7VO7g=)
3: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: gXloE0FBkVO7BGBhjTZdewiPYcBpFMhXr08h6kMiNvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:56:1e:dc:f1:2c:41:f6:c9:6f:8e:95:dd:2e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Jun 7 09:01:08 2025 GMT
Not After : Jun 8 09:01:08 2025 GMT
Subject: CN=7c3a39b89809a237947ae30c3173a0f15bfb9da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f3:dd:b6:2e:0a:49:18:07:fa:12:3d:19:5b:
34:67:82:45:48:8d:63:f2:aa:45:4d:ef:ea:a5:b1:
7f:d3:c0:7b:1d:2e:f8:09:82:9c:df:fb:47:84:f0:
61:bf:f8:a5:bb:38:84:a6:d1:b0:35:55:31:de:41:
f7:13:71:4b:bf:4e:b4:6c:c1:23:54:a6:4a:3b:32:
d7:83:1f:23:94:e2:7f:a9:e1:14:5a:f3:bb:96:07:
3e:35:82:68:30:ff:b8:f7:e3:2c:05:17:97:2a:35:
22:70:94:02:c9:9e:28:b0:98:59:3d:47:83:12:f4:
e5:ee:a7:a8:9f:59:74:c4:dd:24:0a:2b:c9:8f:2c:
ce:6d:74:b5:59:41:be:cc:3c:0b:a4:ab:25:a9:21:
d3:e2:ec:20:f8:4e:fa:e6:a6:25:6f:59:89:e8:5e:
63:45:23:8e:28:a6:6f:ee:02:06:c7:2e:01:6b:0f:
3a:59:4f:79:ef:68:8e:c1:4f:32:d4:ac:b2:49:09:
42:74:35:8b:d4:6d:1b:f2:86:cc:b5:1f:c9:cd:7d:
12:1c:35:49:cc:94:ad:76:5f:11:15:50:5f:8c:86:
2c:1d:a8:48:b5:9a:f3:43:55:d1:32:97:76:73:c2:
d9:65:25:d5:42:80:3f:97:00:c8:e4:94:98:53:83:
26:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3A:39:B8:98:09:A2:37:94:7A:E3:0C:31:73:A0:F1:5B:FB:9D:A3
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:96:eb:a9:3e:83:de:48:72:6c:bf:b9:e7:f0:9a:bc:f4:0c:
93:39:86:e1:5b:5f:62:82:53:cb:7a:42:62:c7:a2:95:a1:1e:
c0:b3:29:d8:1c:10:13:18:4b:64:f5:bd:28:a0:a1:e7:7d:3b:
b0:3c:fc:7a:d3:97:f2:48:51:23:ea:6d:35:66:b8:f4:13:1b:
24:b7:99:ae:68:1a:6c:02:f2:ac:9c:c9:b8:fa:70:ca:42:bf:
3d:90:07:87:2b:0d:18:cc:44:c9:f6:a6:05:e1:32:11:df:bd:
c0:ca:02:62:d9:a6:bf:82:92:5b:e0:e6:f2:e5:67:7e:18:33:
11:4d:5a:e9:4d:c0:51:2b:51:63:51:b7:2b:9a:99:41:ae:9b:
c4:f5:0f:42:93:ae:d6:3b:06:b4:46:d8:42:6f:5a:24:c6:d0:
e9:d1:d0:ee:78:63:a6:48:8c:1e:8d:2f:8b:9e:2b:b0:15:0d:
c4:b3:3b:66:91:27:8c:bb:45:d3:38:fe:36:ee:a1:45:62:87:
9c:0c:a6:3d:14:df:2d:98:4f:30:45:0a:0f:6d:64:83:fc:27:
fb:82:30:3d:2f:4f:65:73:cc:24:21:e7:74:e0:df:ea:eb:9d:
8e:6c:b4:cb:e3:ea:c5:0f:b2:82:2b:b5:13:fd:31:49:a6:ce:
a0:c9:78:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJn1Ye3PEsQfbJb46V3S46MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZjc4ODI4NjFjMjllZDU5OWJlNGE5Mzc0ODBjNGQxM2Uy
NWJmYzIwHhcNMjUwNjA3MDkwMTA4WhcNMjUwNjA4MDkwMTA4WjAzMTEwLwYDVQQD
Eyg3YzNhMzliODk4MDlhMjM3OTQ3YWUzMGMzMTczYTBmMTViZmI5ZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPPdti4KSRgH+hI9GVs0Z4JFSI1j
8qpFTe/qpbF/08B7HS74CYKc3/tHhPBhv/iluziEptGwNVUx3kH3E3FLv060bMEj
VKZKOzLXgx8jlOJ/qeEUWvO7lgc+NYJoMP+49+MsBReXKjUicJQCyZ4osJhZPUeD
EvTl7qeon1l0xN0kCivJjyzObXS1WUG+zDwLpKslqSHT4uwg+E765qYlb1mJ6F5j
RSOOKKZv7gIGxy4Baw86WU9572iOwU8y1KyySQlCdDWL1G0b8obMtR/JzX0SHDVJ
zJStdl8RFVBfjIYsHahItZrzQ1XRMpd2c8LZZSXVQoA/lwDI5JSYU4Mm2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHw6ObiYCaI3lHrjDDFzoPFb+52jMB8GA1UdIwQY
MBaAFKH3iChhwp7Vmb5Kk3SAxNE+Jb/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAt
YzM3YTU5ODJmNDY2LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAtYzM3YTU5ODJmNDY2
LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5brqT6D
3khybL+55/CavPQMkzmG4VtfYoJTy3pCYseilaEewLMp2BwQExhLZPW9KKCh5307
sDz8etOX8khRI+ptNWa49BMbJLeZrmgabALyrJzJuPpwykK/PZAHhysNGMxEyfam
BeEyEd+9wMoCYtmmv4KSW+Dm8uVnfhgzEU1a6U3AUStRY1G3K5qZQa6bxPUPQpOu
1jsGtEbYQm9aJMbQ6dHQ7nhjpkiMHo0vi54rsBUNxLM7ZpEnjLtF0zj+Nu6hRWKH
nAymPRTfLZhPMEUKD21kg/wn+4IwPS9PZXPMJCHndODf6uudjmy0y+PqxQ+ygiu1
E/0xSabOoMl4cg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:35:10 2025 by rpki-client