Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
File: O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json)
Hash identifier: Icctmp3/3M5qvEcqyGoPYwzyWS9+dlZoHlWTVVQ7RqY=
Subject key identifier: 5C:5B:15:18:43:22:CE:7D:27:A1:1F:D6:04:32:8E:4F:A2:E9:86:1D
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Certificate issuer: /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial: 01976395A35F08728DA49E1FC840ED11DCDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
Manifest number: 0FC4
Signing time: Thu 12 Jun 2025 10:00:40 +0000
Manifest this update: Thu 12 Jun 2025 10:00:40 +0000
Manifest next update: Fri 13 Jun 2025 10:00:40 +0000
Files and hashes: 1: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: /l+igRi5ebxsX/XO94cHGvMuotYQno1AUpdosnMo/E4=)
2: x4WRkvTk4Qfvxow9VzZXx3rDXCk.roa (hash: RyOgBcFttRpc6DEmQeaGYO0tOWZlEQp1Uhl8vvwB5VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:95:a3:5f:08:72:8d:a4:9e:1f:c8:40:ed:11:dc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Validity
Not Before: Jun 12 10:00:40 2025 GMT
Not After : Jun 13 10:00:40 2025 GMT
Subject: CN=5c5b15184322ce7d27a11fd604328e4fa2e9861d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:3a:e6:ff:18:f3:8b:d7:fc:08:5d:e1:02:
2f:9d:09:b2:56:be:26:6c:fd:b8:e5:f9:58:47:57:
fb:53:99:56:5c:a2:3a:75:59:82:d0:f4:bd:dd:6b:
a6:93:1c:73:73:17:b4:1c:95:2a:5f:05:89:bf:8e:
ce:4c:34:3e:13:2a:89:74:70:1b:d2:42:f4:fd:f8:
2f:0c:d8:c7:8c:88:3a:d5:87:19:a4:a7:b4:ee:f6:
0e:bc:3e:4f:c0:77:54:de:6e:49:70:de:be:a1:02:
30:f3:60:30:c9:d8:04:3b:12:97:80:6d:2f:c5:f5:
50:5a:e2:66:0f:cf:a2:36:b0:42:a7:9d:48:46:a7:
17:7d:6a:0c:18:ed:84:a7:af:fb:de:93:8b:31:14:
ca:d8:b9:81:16:d6:b8:0a:29:9e:6b:3b:08:07:5d:
09:f9:99:4d:fc:58:66:d3:6b:1e:73:39:42:f3:cb:
14:2e:9d:f8:57:cc:16:11:61:06:83:b8:19:35:59:
75:45:20:a7:87:2d:f5:6c:7d:f4:3e:41:5f:ad:a8:
a8:46:66:89:39:bb:a3:6c:d9:22:ac:07:24:c5:04:
84:48:57:39:02:f5:6e:a9:5d:01:df:f2:c4:d3:c4:
d1:3c:c6:ea:b1:54:0f:5d:bd:59:67:5f:c7:23:df:
ba:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5B:15:18:43:22:CE:7D:27:A1:1F:D6:04:32:8E:4F:A2:E9:86:1D
X509v3 Authority Key Identifier:
keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:77:45:d8:73:92:dd:a2:44:b1:0a:76:a1:dd:dd:68:81:ef:
ec:80:84:03:6c:02:f2:ba:9f:99:07:66:f2:f7:8e:62:b6:c0:
0a:1e:82:4e:f2:6a:f0:a6:f8:d1:7b:b6:0f:39:a7:f4:98:c8:
c6:0d:cc:5d:d6:c7:3d:8b:9c:f7:76:e9:e7:05:e3:5e:e8:9d:
d2:9e:36:6c:a8:42:18:cf:fc:20:4e:cb:26:c8:e7:f7:c3:ad:
c9:5a:5f:60:71:ae:3d:92:38:ab:a3:9a:0a:28:00:ef:68:dd:
10:1c:57:56:04:3a:51:25:4b:25:b5:32:35:6c:26:f1:bc:06:
06:01:12:0a:3c:74:9d:74:97:32:c6:b1:f7:b3:6d:f4:05:e0:
7c:db:2c:e0:ed:a1:3b:02:69:c4:cf:44:20:a5:1b:16:15:0a:
e9:85:c5:53:d4:d3:b3:4c:66:9c:94:fc:f0:57:b3:ff:63:f6:
39:11:e4:22:c4:50:b1:27:c5:c7:6d:6d:8a:6e:37:42:d4:7f:
4b:5e:07:ae:f3:75:00:7f:90:74:bc:59:13:28:cc:d9:aa:94:
f0:f5:37:4a:ac:6a:6e:da:0f:72:d8:cc:ba:21:89:88:c9:67:
8d:3a:af:34:0f:bf:65:24:bf:50:6e:7c:55:b9:49:34:ab:53:
ff:a4:5a:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdjlaNfCHKNpJ4fyEDtEdzcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZDU0M2QwNDY1ZWEyZjZmZWI4MjhmMTg1MDRiMDNmNDAz
YWM2NjkwHhcNMjUwNjEyMTAwMDQwWhcNMjUwNjEzMTAwMDQwWjAzMTEwLwYDVQQD
Eyg1YzViMTUxODQzMjJjZTdkMjdhMTFmZDYwNDMyOGU0ZmEyZTk4NjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTU65v8Y84vX/Ahd4QIvnQmyVr4m
bP245flYR1f7U5lWXKI6dVmC0PS93Wumkxxzcxe0HJUqXwWJv47OTDQ+EyqJdHAb
0kL0/fgvDNjHjIg61YcZpKe07vYOvD5PwHdU3m5JcN6+oQIw82AwydgEOxKXgG0v
xfVQWuJmD8+iNrBCp51IRqcXfWoMGO2Ep6/73pOLMRTK2LmBFta4CimeazsIB10J
+ZlN/Fhm02seczlC88sULp34V8wWEWEGg7gZNVl1RSCnhy31bH30PkFfraioRmaJ
ObujbNkirAckxQSESFc5AvVuqV0B3/LE08TRPMbqsVQPXb1ZZ1/HI9+66wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxbFRhDIs59J6Ef1gQyjk+i6YYdMB8GA1UdIwQY
MBaAFDvVQ9BGXqL2/rgo8YUEsD9AOsZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83OGZlYTktZWZhYy00OTgzLWFjMmIt
ZGY0NTA1NGRkOTM0LzEvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83OGZlYTktZWZhYy00OTgzLWFjMmItZGY0NTA1NGRkOTM0
LzEvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXdF2HOS
3aJEsQp2od3daIHv7ICEA2wC8rqfmQdm8veOYrbACh6CTvJq8Kb40Xu2Dzmn9JjI
xg3MXdbHPYuc93bp5wXjXuid0p42bKhCGM/8IE7LJsjn98OtyVpfYHGuPZI4q6Oa
CigA72jdEBxXVgQ6USVLJbUyNWwm8bwGBgESCjx0nXSXMsax97Nt9AXgfNss4O2h
OwJpxM9EIKUbFhUK6YXFU9TTs0xmnJT88Fez/2P2ORHkIsRQsSfFx21tim43QtR/
S14HrvN1AH+QdLxZEyjM2aqU8PU3SqxqbtoPctjMuiGJiMlnjTqvNA+/ZSS/UG58
VblJNKtT/6RaVg==
-----END CERTIFICATE-----
Generated at Thu Jun 12 15:04:44 2025 by rpki-client