Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
File: osUThqzwWzqrYYEEdHjW7qG_AGI.mft (raw, json)
Hash identifier: X0iWlhpqYi0jUF1wdQirEG5cPplqB0fveNwx56A7no8=
Subject key identifier: 3B:FC:80:4D:DA:1C:D1:56:EC:92:02:15:E4:18:E2:68:CC:6D:0B:8F
Authority key identifier: A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
Certificate issuer: /CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Certificate serial: 01976DAB89D3180CD6FC6F1B2793D54581DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
Manifest number: 017A
Signing time: Sat 14 Jun 2025 09:00:47 +0000
Manifest this update: Sat 14 Jun 2025 09:00:47 +0000
Manifest next update: Sun 15 Jun 2025 09:00:47 +0000
Files and hashes: 1: 0cFm87h5GkHalEGqmJaLcd0Qqo8.roa (hash: jMxPSL+zdsv3eh4JmgehYYH5Kp/WnR56mTqAfCb0p0E=)
2: osUThqzwWzqrYYEEdHjW7qG_AGI.crl (hash: j79vqHDp9XoL9FYkwKiyQp6oYFvouRJ9d0R8BuLtDvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:89:d3:18:0c:d6:fc:6f:1b:27:93:d5:45:81:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Validity
Not Before: Jun 14 09:00:47 2025 GMT
Not After : Jun 15 09:00:47 2025 GMT
Subject: CN=3bfc804dda1cd156ec920215e418e268cc6d0b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:35:f3:5b:78:24:e3:89:6d:65:01:e7:ed:
00:23:df:8f:13:f6:db:76:48:ce:15:41:9c:55:73:
d9:37:96:8e:50:95:9a:ab:1e:2f:d1:0a:b5:ba:ea:
bc:bd:bd:63:a5:b4:d8:88:62:86:bf:d5:46:0b:32:
d3:1f:34:0f:54:7c:f9:fa:55:23:d3:dd:e8:75:83:
88:97:2a:6d:04:75:c2:d9:62:60:7d:d7:b2:49:ee:
55:cb:b9:d2:45:e7:9b:05:83:59:6b:09:b0:eb:0d:
80:37:9b:50:1b:e8:b3:3a:c5:2c:f7:f6:8f:43:0c:
3a:51:fe:42:5b:29:7c:08:0f:37:bd:79:f2:99:c2:
78:df:04:f1:bc:d2:fa:f7:c1:f0:75:b4:96:b1:47:
5f:01:25:99:63:fe:f8:4b:95:29:c7:8c:0f:6f:5b:
80:1f:bd:c8:57:b9:17:28:a4:8b:f0:47:94:89:a3:
89:04:80:c3:a3:5a:eb:a3:8f:95:0d:8b:67:87:71:
12:2b:a4:c3:6b:1b:03:9b:3d:f7:75:2d:98:8c:e7:
c1:5d:a6:7d:09:ed:ad:02:a0:c2:bc:65:be:5a:95:
fd:cf:cd:f7:0b:0e:56:c9:43:d4:31:61:48:f0:13:
3c:00:b6:4e:ce:69:5e:00:b2:13:e2:31:ff:8a:4b:
79:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FC:80:4D:DA:1C:D1:56:EC:92:02:15:E4:18:E2:68:CC:6D:0B:8F
X509v3 Authority Key Identifier:
keyid:A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1c:43:ca:26:4d:6f:9e:6b:31:9a:44:06:4a:f1:bb:72:1b:
13:38:02:78:2a:1b:e2:a0:40:15:3c:41:08:ae:4b:77:e4:78:
35:63:af:81:d3:0c:cc:1f:9f:96:21:70:92:15:c1:10:c3:13:
2e:31:c7:49:7d:c9:26:bf:74:0d:ec:df:dc:26:78:aa:03:75:
80:07:63:9b:96:2b:bc:bc:f8:66:e6:9c:61:9e:d8:74:f4:fb:
c2:a5:7b:03:e4:a1:fe:85:f4:60:d9:c8:bc:f4:62:76:d8:e7:
36:0a:9a:95:e7:a1:14:fb:ef:8a:de:f7:e8:59:a2:06:4d:ff:
57:19:19:19:c1:6c:42:87:9a:a9:6f:08:5c:22:0c:61:8e:f8:
02:e1:5a:d1:a5:71:12:0c:30:19:a9:d1:c1:36:38:b1:dc:e2:
7d:14:79:15:42:67:c1:b4:63:39:25:c5:13:54:71:9b:c9:4f:
7f:1d:7f:25:35:84:1a:4c:bc:96:76:04:32:26:04:40:55:55:
9a:dd:1e:34:bd:df:e6:ec:4f:b4:be:64:a4:4f:47:cf:37:c3:
81:79:f7:49:d8:d5:82:85:ea:4d:c5:65:9d:72:fe:32:d8:65:
21:bd:74:0f:aa:89:6a:58:6f:87:e9:51:3d:85:c9:b5:ce:12:
1e:a8:43:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq4nTGAzW/G8bJ5PVRYHbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYzUxMzg2YWNmMDViM2FhYjYxODEwNDc0NzhkNmVlYTFi
ZjAwNjIwHhcNMjUwNjE0MDkwMDQ3WhcNMjUwNjE1MDkwMDQ3WjAzMTEwLwYDVQQD
EygzYmZjODA0ZGRhMWNkMTU2ZWM5MjAyMTVlNDE4ZTI2OGNjNmQwYjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UM181t4JOOJbWUB5+0AI9+PE/bb
dkjOFUGcVXPZN5aOUJWaqx4v0Qq1uuq8vb1jpbTYiGKGv9VGCzLTHzQPVHz5+lUj
093odYOIlyptBHXC2WJgfdeySe5Vy7nSReebBYNZawmw6w2AN5tQG+izOsUs9/aP
Qww6Uf5CWyl8CA83vXnymcJ43wTxvNL698HwdbSWsUdfASWZY/74S5Upx4wPb1uA
H73IV7kXKKSL8EeUiaOJBIDDo1rro4+VDYtnh3ESK6TDaxsDmz33dS2YjOfBXaZ9
Ce2tAqDCvGW+WpX9z833Cw5WyUPUMWFI8BM8ALZOzmleALIT4jH/ikt5kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDv8gE3aHNFW7JICFeQY4mjMbQuPMB8GA1UdIwQY
MBaAFKLFE4as8Fs6q2GBBHR41u6hvwBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3NVVGhxendXenFyWVlFRWRIalc3cUdfQUdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xNjRkMzQtMTI1Zi00YzYwLTg2MzUt
N2Q2ZjUzODg5ZDU3LzEvb3NVVGhxendXenFyWVlFRWRIalc3cUdfQUdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8xNjRkMzQtMTI1Zi00YzYwLTg2MzUtN2Q2ZjUzODg5ZDU3
LzEvb3NVVGhxendXenFyWVlFRWRIalc3cUdfQUdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxxDyiZN
b55rMZpEBkrxu3IbEzgCeCob4qBAFTxBCK5Ld+R4NWOvgdMMzB+fliFwkhXBEMMT
LjHHSX3JJr90Dezf3CZ4qgN1gAdjm5YrvLz4ZuacYZ7YdPT7wqV7A+Sh/oX0YNnI
vPRidtjnNgqaleehFPvvit736FmiBk3/VxkZGcFsQoeaqW8IXCIMYY74AuFa0aVx
EgwwGanRwTY4sdzifRR5FUJnwbRjOSXFE1Rxm8lPfx1/JTWEGky8lnYEMiYEQFVV
mt0eNL3f5uxPtL5kpE9HzzfDgXn3SdjVgoXqTcVlnXL+MthlIb10D6qJalhvh+lR
PYXJtc4SHqhDCg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 15:29:21 2025 by rpki-client