Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
File: oOOBtudsuVIOjY9Wd27KD-F2zEA.mft (raw, json)
Hash identifier: Ug5eE+ri4iOdaKaQzBQsga9+zqjhfRXljAlsZPPiaVI=
Subject key identifier: 9F:8A:F7:82:0F:A5:BF:8E:79:66:C1:A1:83:4F:64:48:D3:EC:50:C4
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Certificate issuer: /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial: 01974EFC5ABA82494D7B108C44E68DF5E666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
Manifest number: 158D
Signing time: Sun 08 Jun 2025 10:00:50 +0000
Manifest this update: Sun 08 Jun 2025 10:00:50 +0000
Manifest next update: Mon 09 Jun 2025 10:00:50 +0000
Files and hashes: 1: 95FzUOf19GAUgH-NNap3guhoYwc.roa (hash: xIP1fB6Qn9UTZZo8HocsS+GRzZb3S08GTszP5U7/+78=)
2: EFk1lNXwEBcRAFhoClA443_i5HA.roa (hash: xLW6nYf20kTwvvd9EPpkcVtHN4fslrZstANOcysv2Fs=)
3: MuDm6qOBJ8xkrh2L926I8rpU5do.roa (hash: LGlkBx/kOBt10H9SsN38yJ3HGznA6mZgmUvmJ/8iHgA=)
4: oOOBtudsuVIOjY9Wd27KD-F2zEA.crl (hash: xUyONA0W0TXQLQ50LuLq0rTKRm42G5zgpAjW+/THOgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:5a:ba:82:49:4d:7b:10:8c:44:e6:8d:f5:e6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Validity
Not Before: Jun 8 10:00:50 2025 GMT
Not After : Jun 9 10:00:50 2025 GMT
Subject: CN=9f8af7820fa5bf8e7966c1a1834f6448d3ec50c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:12:50:13:4d:88:02:b7:da:9d:03:86:5c:c8:
80:8c:24:10:1b:ce:88:75:a4:13:a8:83:3c:35:86:
26:d9:ee:5f:64:02:fa:ea:3b:55:0a:a0:0e:1c:0c:
d4:62:ca:df:ba:22:70:f2:7d:d9:53:28:0d:7e:cf:
60:2b:8d:a2:fd:62:b0:1e:22:35:3d:23:c1:32:23:
3d:f6:45:9d:54:1f:b6:74:32:14:39:f6:17:da:66:
aa:a2:8a:c4:d8:6d:4e:3d:4a:91:c4:1f:8a:d0:03:
eb:85:87:f3:cb:bf:b5:d0:dd:da:e9:4f:cd:98:59:
87:96:fa:2c:04:32:98:c8:7f:12:b4:37:11:e0:c6:
4d:6d:32:3c:3b:32:9a:35:92:0a:e8:27:50:65:65:
95:4e:05:63:dd:d9:ca:d2:c7:c7:bb:93:6a:77:31:
07:50:6d:ea:ff:ac:51:1e:31:f9:bb:47:42:a9:cb:
e0:f4:ef:40:0f:3e:9d:c7:1e:d7:e8:a9:44:65:f3:
f9:d0:bd:fa:5c:13:08:01:b6:71:3d:bb:9b:96:52:
ad:72:2a:ef:26:12:a2:70:0e:b4:b6:53:c2:d9:1e:
7f:29:a1:5e:a4:6e:be:3c:29:d7:4a:3e:d8:50:15:
e0:63:a5:a4:c3:b4:24:b5:97:98:4f:64:5e:77:63:
ec:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8A:F7:82:0F:A5:BF:8E:79:66:C1:A1:83:4F:64:48:D3:EC:50:C4
X509v3 Authority Key Identifier:
keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c6:18:56:5f:1e:2d:ea:16:07:78:86:f9:3b:87:d8:ac:03:
36:c4:39:d2:4f:ec:37:39:d6:fa:1a:90:b4:d3:ba:c8:13:3d:
f4:96:51:1b:aa:a9:75:ed:41:58:0f:98:e6:8b:e8:1d:78:4c:
ff:a2:5f:ac:1e:25:de:cf:20:78:bc:a0:50:d7:60:d8:a8:23:
a9:59:39:65:bc:38:6d:0d:29:76:85:de:95:6a:94:6c:43:58:
e2:6d:07:bf:18:6d:82:69:e8:a4:e4:23:71:ac:3a:9a:cc:78:
98:6d:61:ac:c2:a7:59:55:5d:9d:73:94:c0:d6:f1:ea:9d:21:
57:33:34:b8:c6:f3:a7:5b:46:39:6d:01:2d:dd:5a:92:8b:df:
ad:b8:80:3e:29:c8:98:1f:f2:7b:25:27:08:cd:0e:fa:7f:12:
fb:ee:b9:64:7d:61:45:51:4b:70:07:d1:aa:92:70:9b:f5:c4:
d1:1a:99:47:a5:e1:25:73:96:9e:4f:74:76:37:ca:e7:21:e6:
3e:1e:88:60:f5:78:ee:d7:8b:fa:a0:ad:c2:66:c5:5d:08:e4:
40:77:14:20:d7:eb:f6:c8:94:f3:e8:5c:64:71:64:c6:37:45:
72:46:49:e9:56:b9:04:0a:e2:18:52:85:8e:14:d1:5b:57:a3:
09:33:89:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdO/Fq6gklNexCMROaN9eZmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZTM4MWI2ZTc2Y2I5NTIwZThkOGY1Njc3NmVjYTBmZTE3
NmNjNDAwHhcNMjUwNjA4MTAwMDUwWhcNMjUwNjA5MTAwMDUwWjAzMTEwLwYDVQQD
Eyg5ZjhhZjc4MjBmYTViZjhlNzk2NmMxYTE4MzRmNjQ0OGQzZWM1MGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBJQE02IArfanQOGXMiAjCQQG86I
daQTqIM8NYYm2e5fZAL66jtVCqAOHAzUYsrfuiJw8n3ZUygNfs9gK42i/WKwHiI1
PSPBMiM99kWdVB+2dDIUOfYX2maqoorE2G1OPUqRxB+K0APrhYfzy7+10N3a6U/N
mFmHlvosBDKYyH8StDcR4MZNbTI8OzKaNZIK6CdQZWWVTgVj3dnK0sfHu5NqdzEH
UG3q/6xRHjH5u0dCqcvg9O9ADz6dxx7X6KlEZfP50L36XBMIAbZxPbubllKtcirv
JhKicA60tlPC2R5/KaFepG6+PCnXSj7YUBXgY6Wkw7QktZeYT2Red2PsEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+K94IPpb+OeWbBoYNPZEjT7FDEMB8GA1UdIwQY
MBaAFKDjgbbnbLlSDo2PVnduyg/hdsxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb09PQnR1ZHN1VklPalk5V2QyN0tELUYyekVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS84ZTZmMDgtMzBmMC00NmRkLWE3YTEt
YTljMzg0MTI4ZDQyLzEvb09PQnR1ZHN1VklPalk5V2QyN0tELUYyekVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS84ZTZmMDgtMzBmMC00NmRkLWE3YTEtYTljMzg0MTI4ZDQy
LzEvb09PQnR1ZHN1VklPalk5V2QyN0tELUYyekVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsYYVl8e
LeoWB3iG+TuH2KwDNsQ50k/sNznW+hqQtNO6yBM99JZRG6qpde1BWA+Y5ovoHXhM
/6JfrB4l3s8geLygUNdg2KgjqVk5Zbw4bQ0pdoXelWqUbENY4m0HvxhtgmnopOQj
caw6msx4mG1hrMKnWVVdnXOUwNbx6p0hVzM0uMbzp1tGOW0BLd1akovfrbiAPinI
mB/yeyUnCM0O+n8S++65ZH1hRVFLcAfRqpJwm/XE0RqZR6XhJXOWnk90djfK5yHm
Ph6IYPV47teL+qCtwmbFXQjkQHcUINfr9siU8+hcZHFkxjdFckZJ6Va5BAriGFKF
jhTRW1ejCTOJwg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:59:51 2025 by rpki-client