Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
File: OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json)
Hash identifier: 0GyGPGmVLqOiMk+JbgJ/l3LY2j5VKMFJu8TtpjYypWo=
Subject key identifier: 99:F4:9C:32:3D:34:68:96:FA:BB:41:99:5B:72:37:A1:CB:B4:0F:51
Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
Certificate issuer: /CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Certificate serial: 01975F14191CE19DD62B022501593F85D7CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
Manifest number: 0EED
Signing time: Wed 11 Jun 2025 13:00:42 +0000
Manifest this update: Wed 11 Jun 2025 13:00:42 +0000
Manifest next update: Thu 12 Jun 2025 13:00:42 +0000
Files and hashes: 1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: qWIbOeSZ+mzgAujlva0TJ29/G6t6yReIQAOLziE+yLE=)
2: mVMhaZyReFl--kv_RJ_-OuFBGYU.roa (hash: IwLGaJq3OYCljCCB7S0knCQn4hKuFoxDOc6G4aTbSQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:14:19:1c:e1:9d:d6:2b:02:25:01:59:3f:85:d7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Validity
Not Before: Jun 11 13:00:42 2025 GMT
Not After : Jun 12 13:00:42 2025 GMT
Subject: CN=99f49c323d346896fabb41995b7237a1cbb40f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:47:6e:34:4d:cb:f2:73:27:0e:99:33:87:
2e:c5:81:84:5d:ad:c7:aa:05:6d:13:93:32:d3:f8:
28:8c:6e:52:65:a6:6d:02:cb:5d:32:6b:68:59:a5:
f3:f2:9c:64:96:06:15:7c:09:2c:3a:25:4f:a2:05:
3a:cb:f9:d9:d3:c9:b8:d3:9f:ed:f4:62:dc:7b:b9:
ee:46:4e:2e:b7:f7:48:b1:32:8f:63:dc:a5:fc:b7:
50:22:a4:2f:88:c2:3b:bb:c0:58:59:9f:fd:cc:9f:
a6:9e:ed:1b:d2:ec:97:f2:de:5f:e9:c7:61:60:5a:
0b:0d:b5:67:3b:a7:b5:f5:e5:3a:4e:8f:b4:57:8f:
bf:c4:77:00:8d:4f:1a:e6:8b:ce:74:9a:3c:48:86:
ff:69:10:e2:d3:d1:12:c3:e0:06:c1:b3:8e:7e:9b:
81:4f:da:cb:f4:f2:50:d6:3c:4e:30:d5:cb:1c:4d:
ef:f9:1a:99:e3:99:63:50:ae:4a:be:03:67:82:51:
e4:d3:20:30:4e:50:e3:51:04:e4:1a:f8:f9:44:0b:
61:cb:89:de:8d:16:af:f9:bf:e5:fb:ff:5a:57:c8:
e1:6f:63:7b:1b:f7:d4:d7:bc:6e:e8:3d:44:3a:9f:
10:54:4c:e5:b0:f8:57:39:0f:98:de:f4:7c:04:eb:
64:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F4:9C:32:3D:34:68:96:FA:BB:41:99:5B:72:37:A1:CB:B4:0F:51
X509v3 Authority Key Identifier:
keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ed:3f:1e:c5:b0:16:9f:a4:29:43:70:b9:70:75:fb:77:e0:
e3:36:ab:be:91:78:49:d5:88:dc:78:c2:66:51:08:ef:5a:33:
57:04:3e:3d:bb:db:c4:a7:46:6b:76:94:0c:5a:62:71:74:4f:
86:89:78:43:88:c7:89:e7:a8:44:4b:8f:ca:f7:96:14:ac:f0:
9a:ea:13:57:b2:27:9d:bd:06:69:48:b1:16:22:65:0c:78:0a:
3a:93:a5:7f:db:f1:fd:80:8b:f0:d7:68:96:4b:12:c9:84:e2:
d0:36:6c:91:e1:78:a5:f1:6c:b1:0e:58:6f:34:30:c1:b4:1d:
94:49:fa:6d:ee:69:76:4f:7f:4d:3a:cf:13:5b:7d:8c:f6:17:
14:a5:fd:2f:4f:9d:c4:ed:7d:1f:45:cf:f8:c6:31:6f:7c:45:
99:92:18:d5:a5:35:fa:38:a1:58:53:52:83:bf:68:a8:e9:a3:
bd:b5:0a:c6:35:06:66:de:ed:13:50:b7:8c:33:55:2a:d7:bd:
12:28:cc:70:03:5c:b2:6d:57:00:24:0f:89:8b:ba:d1:dc:bd:
3a:d8:de:d3:22:b2:10:23:eb:a6:fc:6e:e8:3c:e0:73:47:7f:
44:5f:0f:0c:da:18:f8:1d:b4:0b:3c:3b:c8:18:37:70:0e:51:
f3:18:2c:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdfFBkc4Z3WKwIlAVk/hdfMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDg4ODVjOTcwMmVhYzFmM2QwMTI2M2U2ZDNlNTQ0NDll
ZTIxNTQwHhcNMjUwNjExMTMwMDQyWhcNMjUwNjEyMTMwMDQyWjAzMTEwLwYDVQQD
Eyg5OWY0OWMzMjNkMzQ2ODk2ZmFiYjQxOTk1YjcyMzdhMWNiYjQwZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKhHbjRNy/JzJw6ZM4cuxYGEXa3H
qgVtE5My0/gojG5SZaZtAstdMmtoWaXz8pxklgYVfAksOiVPogU6y/nZ08m405/t
9GLce7nuRk4ut/dIsTKPY9yl/LdQIqQviMI7u8BYWZ/9zJ+mnu0b0uyX8t5f6cdh
YFoLDbVnO6e19eU6To+0V4+/xHcAjU8a5ovOdJo8SIb/aRDi09ESw+AGwbOOfpuB
T9rL9PJQ1jxOMNXLHE3v+RqZ45ljUK5KvgNnglHk0yAwTlDjUQTkGvj5RAthy4ne
jRav+b/l+/9aV8jhb2N7G/fU17xu6D1EOp8QVEzlsPhXOQ+Y3vR8BOtkfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJn0nDI9NGiW+rtBmVtyN6HLtA9RMB8GA1UdIwQY
MBaAFDhIiFyXAurB89ASY+bT5URJ7iFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VpSVhKY0M2c0h6MEJKajV0UGxSRW51SVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zN2JkYjctOWI5My00NmFiLTlhMTUt
NDJhNDhkYmMyNTIxLzEvT0VpSVhKY0M2c0h6MEJKajV0UGxSRW51SVZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zN2JkYjctOWI5My00NmFiLTlhMTUtNDJhNDhkYmMyNTIx
LzEvT0VpSVhKY0M2c0h6MEJKajV0UGxSRW51SVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeu0/HsWw
Fp+kKUNwuXB1+3fg4zarvpF4SdWI3HjCZlEI71ozVwQ+PbvbxKdGa3aUDFpicXRP
hol4Q4jHieeoREuPyveWFKzwmuoTV7Innb0GaUixFiJlDHgKOpOlf9vx/YCL8Ndo
lksSyYTi0DZskeF4pfFssQ5YbzQwwbQdlEn6be5pdk9/TTrPE1t9jPYXFKX9L0+d
xO19H0XP+MYxb3xFmZIY1aU1+jihWFNSg79oqOmjvbUKxjUGZt7tE1C3jDNVKte9
EijMcANcsm1XACQPiYu60dy9Otje0yKyECPrpvxu6Dzgc0d/RF8PDNoY+B20Czw7
yBg3cA5R8xgsEg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 20:36:11 2025 by rpki-client