Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier: JPU1FX/sc46Zia6X/4yx589CrnM+xbtOb7wP40/+iDc=
Subject key identifier: 83:58:2B:92:34:0A:35:A4:A6:78:38:97:13:09:2F:5F:49:13:A4:74
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 01974E8E5B772E675F8A969F1C356132C48A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number: 0AA2
Signing time: Sun 08 Jun 2025 08:00:41 +0000
Manifest this update: Sun 08 Jun 2025 08:00:41 +0000
Manifest next update: Mon 09 Jun 2025 08:00:41 +0000
Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: qgX1vb7XH+ky8DMyP/idM0eZ3cleTKEbKnNODwNZXd8=)
2: cAytH-HDjgmoQUIxFhiNXUzaQk0.roa (hash: WrCK/gy3OkunpeHSieq4WLNSBfAWRn5dFSNNGUA3mvQ=)
3: zlltM2nOjh81UxcytVZozmvMUKM.roa (hash: xAPvFxFilxhJOjDq/sl/DoT41X3vws8/d3NLTmKyCmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:5b:77:2e:67:5f:8a:96:9f:1c:35:61:32:c4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Jun 8 08:00:41 2025 GMT
Not After : Jun 9 08:00:41 2025 GMT
Subject: CN=83582b92340a35a4a678389713092f5f4913a474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:97:0c:6a:8e:56:6e:74:e3:b8:16:97:39:
1a:dd:d9:df:44:a0:a6:d5:49:a2:1f:90:74:e2:85:
e7:28:67:1b:4f:fa:8e:9c:80:9a:8e:94:df:ae:1b:
2b:03:12:2e:0c:55:e0:f8:cb:cd:20:fa:ac:38:d5:
c6:95:87:4d:57:c8:e0:37:9b:42:af:c0:0b:25:96:
dc:09:54:a4:96:67:c8:93:46:51:98:1b:21:2a:97:
b9:0e:c7:73:c0:37:32:1b:2a:70:de:15:b4:f2:ab:
85:9e:8f:02:f4:57:18:6d:75:65:99:d1:5f:c7:49:
35:83:19:e3:2d:a6:48:1e:1c:17:75:bb:6a:ca:9e:
3b:e3:f5:d9:7a:a9:24:2f:e0:d7:00:85:eb:e8:99:
23:d3:74:e1:2c:60:30:6a:8f:e5:ec:e5:75:85:ca:
09:68:8b:30:bc:6a:2d:b5:cb:cf:c2:2f:54:15:71:
c3:cf:d4:0a:3f:cc:12:80:0f:d8:c2:d5:47:fd:b9:
a8:07:a5:7e:b9:9a:79:2a:bc:b3:1f:fa:13:2c:af:
0f:be:d8:5d:66:ed:b9:39:7c:30:cc:db:99:e3:d9:
ee:29:45:46:b9:d8:f1:86:1b:18:74:47:46:87:a0:
1c:f2:76:5d:4b:b6:e5:00:b4:45:e4:24:41:09:de:
a1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:58:2B:92:34:0A:35:A4:A6:78:38:97:13:09:2F:5F:49:13:A4:74
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:19:5d:ee:aa:2f:21:c2:cb:e9:6f:a8:5e:79:0e:90:24:f0:
28:91:db:fa:15:43:8f:9c:fc:86:6c:5e:c4:d0:cc:0c:90:bf:
19:86:8e:28:08:9c:e6:c5:9e:ff:98:0f:3a:1f:ad:e1:d0:d4:
a7:2d:db:fc:49:e9:9c:54:2a:be:b0:2c:aa:07:28:5f:41:ca:
6e:f3:39:f8:44:43:50:44:85:22:14:9d:2c:1b:76:82:e4:b4:
03:9e:85:e4:21:db:f1:9c:d0:f6:a3:64:96:2b:cd:54:3b:41:
f8:d9:63:dd:6d:1a:7d:2c:83:b6:64:f6:dd:00:2b:fd:10:0f:
5f:bf:fc:4b:0d:dc:c1:d9:0d:33:95:c6:7d:07:a2:2e:91:e3:
15:a6:44:bb:25:fe:c3:d4:e8:27:09:a0:fc:5f:3d:66:00:63:
de:e1:5a:67:b8:e2:d2:85:eb:1d:83:59:f9:ff:b1:93:95:81:
50:51:8a:7f:ee:33:01:fc:1c:bc:af:a3:6c:f0:15:76:85:c9:
8f:69:b5:cd:1d:1b:50:62:02:9f:44:21:e6:8b:08:db:d4:55:
f0:36:62:09:4e:ce:36:b2:48:23:f2:fc:d7:a4:ad:38:97:38:
24:a1:6b:3c:3c:e4:27:f6:f8:65:91:f8:e9:62:dc:9d:ad:19:
23:3d:fa:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOjlt3LmdfipafHDVhMsSKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YTNjZWJiODExMDQ2YTA5NjZlOTU1NGQwN2U1ZDE2YjM2
ZGJmMDQwHhcNMjUwNjA4MDgwMDQxWhcNMjUwNjA5MDgwMDQxWjAzMTEwLwYDVQQD
Eyg4MzU4MmI5MjM0MGEzNWE0YTY3ODM4OTcxMzA5MmY1ZjQ5MTNhNDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriyXDGqOVm5047gWlzka3dnfRKCm
1UmiH5B04oXnKGcbT/qOnICajpTfrhsrAxIuDFXg+MvNIPqsONXGlYdNV8jgN5tC
r8ALJZbcCVSklmfIk0ZRmBshKpe5DsdzwDcyGypw3hW08quFno8C9FcYbXVlmdFf
x0k1gxnjLaZIHhwXdbtqyp474/XZeqkkL+DXAIXr6Jkj03ThLGAwao/l7OV1hcoJ
aIswvGottcvPwi9UFXHDz9QKP8wSgA/YwtVH/bmoB6V+uZp5KryzH/oTLK8Pvthd
Zu25OXwwzNuZ49nuKUVGudjxhhsYdEdGh6Ac8nZdS7blALRF5CRBCd6hcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINYK5I0CjWkpng4lxMJL19JE6R0MB8GA1UdIwQY
MBaAFDmjzruBEEaglm6VVNB+XRazbb8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUt
NmYyMWY0Yzc1MWYzLzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUtNmYyMWY0Yzc1MWYz
LzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxld7qov
IcLL6W+oXnkOkCTwKJHb+hVDj5z8hmxexNDMDJC/GYaOKAic5sWe/5gPOh+t4dDU
py3b/EnpnFQqvrAsqgcoX0HKbvM5+ERDUESFIhSdLBt2guS0A56F5CHb8ZzQ9qNk
livNVDtB+Nlj3W0afSyDtmT23QAr/RAPX7/8Sw3cwdkNM5XGfQeiLpHjFaZEuyX+
w9ToJwmg/F89ZgBj3uFaZ7ji0oXrHYNZ+f+xk5WBUFGKf+4zAfwcvK+jbPAVdoXJ
j2m1zR0bUGICn0Qh5osI29RV8DZiCU7ONrJII/L816StOJc4JKFrPDzkJ/b4ZZH4
6WLcna0ZIz36IA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:39:58 2025 by rpki-client