Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
File: OjSIklHnyxM-kGxwiRuhoEle2GA.mft (raw, json)
Hash identifier: xXkN95CYuHw+xZovoZmA9k1hiTbGJwdjux7eiviBVu4=
Subject key identifier: 54:06:8F:1A:D4:D8:52:E9:98:04:76:64:CE:C0:87:B8:70:17:F0:69
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial: 01974CD72D16B611EA2B7B8F0AEE55A0D32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
Manifest number: 0D1A
Signing time: Sun 08 Jun 2025 00:00:59 +0000
Manifest this update: Sun 08 Jun 2025 00:00:59 +0000
Manifest next update: Mon 09 Jun 2025 00:00:59 +0000
Files and hashes: 1: E8pnZAwdco6rqZPYbTvktaE1H_E.roa (hash: mJU1Xr9YV7h0pCMVQKe6h9rLN6ylm3PlXlO/99QSzGM=)
2: OjSIklHnyxM-kGxwiRuhoEle2GA.crl (hash: JBW4mWB78t2HN74/YzjA9jGah+mNEN8z8XL2R1hDKAQ=)
3: PosgbjBEN3JIZPm6yklNyzwEmB8.roa (hash: LxPaPYdBVWlHlKrzs8JwxQbkpaWJXSY0yo3gaOhFHFk=)
4: iYqIMSLhd13kAtHmsyVRJLCRELQ.roa (hash: Sy2brI825JIDwfnRYmv5+hBpQhClnbRKdRnTs+cKh/c=)
5: trRwMwj1TozbbVDdJBYsUBjss8A.roa (hash: R2jnNGJ/7Zo+ytylzMHKu/XH3p37UtlobvuFEWQLQHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:2d:16:b6:11:ea:2b:7b:8f:0a:ee:55:a0:d3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
Validity
Not Before: Jun 8 00:00:59 2025 GMT
Not After : Jun 9 00:00:59 2025 GMT
Subject: CN=54068f1ad4d852e998047664cec087b87017f069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:af:5c:de:bc:1c:ba:d1:ee:fb:3e:fa:bd:
e2:1c:ba:f4:86:7d:ad:e6:a3:a5:c9:6d:dc:64:5e:
14:06:0c:94:13:b0:67:c0:d3:45:ff:bf:dd:b1:ba:
a1:46:77:43:2c:d3:42:51:92:da:33:90:ad:0d:6f:
34:ad:51:6c:b6:0d:52:5e:25:2b:db:05:1c:7a:b5:
49:84:5e:98:ef:19:bc:4d:b3:b6:56:16:a5:f7:52:
40:21:ee:53:ee:fb:9c:3b:22:ad:c1:9d:0d:df:1e:
b7:e1:da:73:7f:61:1d:f8:f3:30:55:37:37:6e:20:
ec:28:a9:9c:26:24:e5:4b:83:fc:fe:44:39:4f:99:
9a:72:0a:8e:98:fc:63:ed:06:3a:7c:54:ba:fa:20:
f9:f0:5c:72:9e:1b:cb:39:f7:db:ff:9c:31:cf:e0:
c7:f1:43:04:0b:ed:f4:87:7c:2b:92:1d:c5:22:41:
70:27:55:db:67:9b:70:ba:62:76:95:2e:4b:fd:eb:
df:d4:93:c7:6d:4e:d8:27:9a:5e:fd:81:9b:93:9a:
c4:49:f7:a7:bc:17:8d:24:ec:78:0a:34:2f:39:f4:
8a:a2:e8:f1:0d:9a:f8:c3:b1:03:dd:c8:58:26:ac:
73:ed:c6:e0:af:0b:35:c3:02:5d:74:6f:89:53:eb:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:06:8F:1A:D4:D8:52:E9:98:04:76:64:CE:C0:87:B8:70:17:F0:69
X509v3 Authority Key Identifier:
keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cf:c1:c9:1c:50:92:fd:1d:b7:f6:28:4f:2f:97:6f:14:5e:
7c:df:cd:eb:a7:86:f5:39:78:06:e5:4e:2e:cb:ec:18:29:78:
dd:aa:ec:cb:c2:52:44:44:89:a8:7d:5a:cc:2a:6e:9c:d6:3e:
42:d2:9a:8a:80:e7:8a:39:b0:9b:6d:c1:46:9c:f5:45:a3:c2:
7e:6c:30:91:d3:8a:c6:59:92:5e:0a:06:e3:49:42:65:a5:aa:
1d:ff:ad:14:eb:fb:e7:c0:ef:26:a7:2e:d1:30:78:ac:bc:2c:
38:8e:a0:a2:5f:97:43:41:61:b5:2d:0b:44:93:b8:b9:97:53:
67:79:4a:45:d5:55:d8:a6:31:1f:de:8e:83:45:30:aa:e9:2e:
ba:df:57:f4:e4:81:94:31:29:9c:25:2c:d3:23:ed:f1:5e:45:
49:4d:e6:54:02:98:20:78:45:f2:8c:56:3e:e4:10:33:a3:9c:
56:96:bd:1e:a8:3d:28:f1:31:3c:4c:00:74:8f:64:14:4a:3a:
e5:4a:92:a2:a3:4e:b5:c5:2f:03:22:77:ea:90:f6:f7:0a:5f:
ac:6a:8d:45:f6:b3:cd:21:3c:d2:0e:1d:19:36:8c:94:82:00:
43:1d:bb:c2:f3:f7:dc:a1:93:f1:64:d5:05:3a:6b:a2:aa:a7:
1f:30:08:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM1y0WthHqK3uPCu5VoNMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMzQ4ODkyNTFlN2NiMTMzZTkwNmM3MDg5MWJhMWEwNDk1
ZWQ4NjAwHhcNMjUwNjA4MDAwMDU5WhcNMjUwNjA5MDAwMDU5WjAzMTEwLwYDVQQD
Eyg1NDA2OGYxYWQ0ZDg1MmU5OTgwNDc2NjRjZWMwODdiODcwMTdmMDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloGvXN68HLrR7vs++r3iHLr0hn2t
5qOlyW3cZF4UBgyUE7BnwNNF/7/dsbqhRndDLNNCUZLaM5CtDW80rVFstg1SXiUr
2wUcerVJhF6Y7xm8TbO2Vhal91JAIe5T7vucOyKtwZ0N3x634dpzf2Ed+PMwVTc3
biDsKKmcJiTlS4P8/kQ5T5macgqOmPxj7QY6fFS6+iD58FxynhvLOffb/5wxz+DH
8UMEC+30h3wrkh3FIkFwJ1XbZ5twumJ2lS5L/evf1JPHbU7YJ5pe/YGbk5rESfen
vBeNJOx4CjQvOfSKoujxDZr4w7ED3chYJqxz7cbgrws1wwJddG+JU+sk/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQGjxrU2FLpmAR2ZM7Ah7hwF/BpMB8GA1UdIwQY
MBaAFDo0iJJR58sTPpBscIkboaBJXthgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMt
ODRmOWVkODdhYzMxLzEvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMtODRmOWVkODdhYzMx
LzEvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbM/ByRxQ
kv0dt/YoTy+XbxRefN/N66eG9Tl4BuVOLsvsGCl43arsy8JSRESJqH1azCpunNY+
QtKaioDnijmwm23BRpz1RaPCfmwwkdOKxlmSXgoG40lCZaWqHf+tFOv758DvJqcu
0TB4rLwsOI6gol+XQ0FhtS0LRJO4uZdTZ3lKRdVV2KYxH96Og0Uwqukuut9X9OSB
lDEpnCUs0yPt8V5FSU3mVAKYIHhF8oxWPuQQM6OcVpa9Hqg9KPExPEwAdI9kFEo6
5UqSoqNOtcUvAyJ36pD29wpfrGqNRfazzSE80g4dGTaMlIIAQx27wvP33KGT8WTV
BTproqqnHzAIkA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:17:19 2025 by rpki-client