Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
File: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft (raw, json)
Hash identifier: A/HKj15xPcNfYro5iROL50SDRFYNWE2NzUwSAAJB4Po=
Subject key identifier: 6A:F5:43:49:1D:47:4D:93:F4:5C:FB:54:81:8A:BD:B0:C7:5C:3D:97
Authority key identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
Certificate issuer: /CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Certificate serial: 0197526B7224018454F7713F24D228591AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 02:01:02 +0000
Manifest this update: Mon 09 Jun 2025 02:01:02 +0000
Manifest next update: Tue 10 Jun 2025 02:01:02 +0000
Files and hashes: 1: 7rbCLoXWYly-2n7W-2TuSkBBMV8.roa (hash: SrTY3jKnRzrFELEhX/LwQ/2tjPUOB7vnlEoMlBte4mA=)
2: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl (hash: 6xmr9j1N96T2V3OU9G6It4RyAarrwTMH9SHfw5Hp79s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:72:24:01:84:54:f7:71:3f:24:d2:28:59:1a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Validity
Not Before: Jun 9 02:01:02 2025 GMT
Not After : Jun 10 02:01:02 2025 GMT
Subject: CN=6af543491d474d93f45cfb54818abdb0c75c3d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:05:bf:de:62:57:dc:ac:67:f6:7e:f7:98:
04:20:d5:f1:44:e9:db:1e:36:c0:70:55:bf:61:25:
97:8b:1f:c4:e2:c2:28:20:2f:c7:33:f3:c6:a6:c1:
1a:a1:db:9b:8c:53:28:77:aa:96:e5:ed:bf:db:45:
b1:c7:b0:6d:c9:4c:7b:06:b5:2d:3f:ba:7f:6b:0b:
44:c5:fc:13:57:39:91:26:64:f7:b2:74:b0:5f:60:
7a:4b:35:af:cb:0c:fb:c2:2a:e6:50:c6:b9:83:a7:
4d:9d:12:9b:8e:02:fe:97:8f:4d:d1:48:b1:5b:2f:
f8:09:ff:ae:e7:39:fa:48:56:d3:a3:f1:3a:c7:67:
ef:e0:d0:b9:4b:a5:60:22:0d:78:cb:0b:b7:67:ac:
e3:6a:a7:24:26:60:28:ea:04:b1:de:83:29:af:7a:
08:8e:aa:7e:2b:cd:a6:3f:61:f4:e4:c3:6d:a5:a9:
9e:4d:a6:b9:4b:87:e1:c6:32:b7:df:c8:a8:fe:92:
36:cb:51:df:2b:4b:b5:9a:f2:d7:b4:7e:d2:4f:27:
7d:ea:db:08:fb:ca:27:58:ee:bb:eb:ba:15:75:29:
5d:43:c9:a8:ed:e9:07:ba:02:a7:a6:46:0c:25:89:
43:dd:2c:87:95:c1:04:c9:6e:56:80:c7:9d:85:10:
ef:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F5:43:49:1D:47:4D:93:F4:5C:FB:54:81:8A:BD:B0:C7:5C:3D:97
X509v3 Authority Key Identifier:
keyid:FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ce:62:e7:c2:97:65:95:e6:dd:f5:d6:0e:a9:94:fc:e6:74:
16:52:25:1b:ee:48:a3:39:36:26:29:50:aa:48:99:a8:de:94:
ae:33:51:d6:13:21:eb:8f:c8:74:85:cf:12:c3:49:25:fb:3d:
01:be:7b:e9:d9:b1:6e:c3:e1:18:4b:22:ec:ef:78:c7:23:f2:
13:55:91:d2:af:3a:18:ca:e2:46:93:71:96:4e:c2:38:13:4c:
78:50:e2:9d:80:5b:4c:c3:08:54:95:56:96:87:4c:32:16:36:
5d:89:88:0a:63:2f:73:ce:51:7c:a2:16:9a:c6:c6:84:de:ee:
33:a8:77:d9:1e:83:3f:96:26:8d:b8:7d:d2:fd:3b:4b:f5:f0:
06:5a:94:dd:0a:df:8e:55:0d:eb:d3:f8:3e:f0:dd:94:b2:23:
31:41:1a:16:19:3f:48:6d:6d:20:8e:ad:55:19:05:59:d1:9e:
0e:00:44:93:69:9b:c7:cf:47:48:2d:8d:b7:d6:5d:9c:08:3b:
7f:c6:59:73:98:d0:4e:77:bf:71:13:36:5c:a8:09:f4:03:7c:
19:6e:d4:65:9a:9d:e7:82:f1:58:a1:e3:67:33:25:eb:d2:38:
5c:1a:9c:8d:8b:76:6e:47:d7:07:42:15:60:5a:23:11:3a:67:
cc:4d:cd:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSa3IkAYRU93E/JNIoWRr8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZWUzMjI3OWMxNmRhY2RiNTM0OWYxYjg3YzU3ZDc0YzUw
ZWE1MzkwHhcNMjUwNjA5MDIwMTAyWhcNMjUwNjEwMDIwMTAyWjAzMTEwLwYDVQQD
Eyg2YWY1NDM0OTFkNDc0ZDkzZjQ1Y2ZiNTQ4MThhYmRiMGM3NWMzZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRoFv95iV9ysZ/Z+95gEINXxROnb
HjbAcFW/YSWXix/E4sIoIC/HM/PGpsEaodubjFMod6qW5e2/20Wxx7BtyUx7BrUt
P7p/awtExfwTVzmRJmT3snSwX2B6SzWvywz7wirmUMa5g6dNnRKbjgL+l49N0Uix
Wy/4Cf+u5zn6SFbTo/E6x2fv4NC5S6VgIg14ywu3Z6zjaqckJmAo6gSx3oMpr3oI
jqp+K82mP2H05MNtpameTaa5S4fhxjK338io/pI2y1HfK0u1mvLXtH7STyd96tsI
+8onWO6767oVdSldQ8mo7ekHugKnpkYMJYlD3SyHlcEEyW5WgMedhRDv6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGr1Q0kdR02T9Fz7VIGKvbDHXD2XMB8GA1UdIwQY
MBaAFPzuMiecFtrNtTSfG4fFfXTFDqU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX080eUo1d1cyczIxTko4Ymg4VjlkTVVPcFRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mNjA1MDItMjcwNC00ODM0LTlkNjgt
MzA0NjZkZWMzOTA1LzEvX080eUo1d1cyczIxTko4Ymg4VjlkTVVPcFRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9mNjA1MDItMjcwNC00ODM0LTlkNjgtMzA0NjZkZWMzOTA1
LzEvX080eUo1d1cyczIxTko4Ymg4VjlkTVVPcFRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARM5i58KX
ZZXm3fXWDqmU/OZ0FlIlG+5Iozk2JilQqkiZqN6UrjNR1hMh64/IdIXPEsNJJfs9
Ab576dmxbsPhGEsi7O94xyPyE1WR0q86GMriRpNxlk7COBNMeFDinYBbTMMIVJVW
lodMMhY2XYmICmMvc85RfKIWmsbGhN7uM6h32R6DP5Ymjbh90v07S/XwBlqU3Qrf
jlUN69P4PvDdlLIjMUEaFhk/SG1tII6tVRkFWdGeDgBEk2mbx89HSC2Nt9ZdnAg7
f8ZZc5jQTne/cRM2XKgJ9AN8GW7UZZqd54LxWKHjZzMl69I4XBqcjYt2bkfXB0IV
YFojETpnzE3NYg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:50:48 2025 by rpki-client