Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
File: o3sePvrqidz80cjpfA6beAxhRl0.mft (raw, json)
Hash identifier: ET8TBvqHFnyFm7Nvq9awkbtxb9w7VdqvFYlBXmqVhzY=
Subject key identifier: F6:20:8C:FA:4C:36:32:E7:C4:0B:30:41:DA:C4:9B:85:BC:C1:D2:51
Authority key identifier: A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D
Certificate issuer: /CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d
Certificate serial: 01974A7AD48DACA82015779B78FBA730808C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
Manifest number: 0C04
Signing time: Sat 07 Jun 2025 13:00:53 +0000
Manifest this update: Sat 07 Jun 2025 13:00:53 +0000
Manifest next update: Sun 08 Jun 2025 13:00:53 +0000
Files and hashes: 1: o3sePvrqidz80cjpfA6beAxhRl0.crl (hash: FuzbxQKc9JWnmKiRsAQiuEaHPoga8s9KjdGFx2va6L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:d4:8d:ac:a8:20:15:77:9b:78:fb:a7:30:80:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d
Validity
Not Before: Jun 7 13:00:53 2025 GMT
Not After : Jun 8 13:00:53 2025 GMT
Subject: CN=f6208cfa4c3632e7c40b3041dac49b85bcc1d251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:d5:aa:ae:ad:6f:16:5a:4d:83:45:76:95:
3d:e8:21:f0:80:ad:b7:ec:15:5b:fa:63:08:ba:06:
6c:fd:af:63:e9:94:0a:1b:9f:6f:13:30:16:97:de:
5c:87:6e:10:49:fe:30:b5:8d:51:21:69:40:21:00:
e2:07:70:26:54:81:53:fc:6b:33:cc:40:f6:31:fe:
12:60:b0:dd:28:0d:1c:f1:e1:96:e9:9b:b3:95:45:
60:58:8c:99:72:05:be:6a:06:36:f4:aa:82:5f:1c:
29:33:b7:13:36:8a:1e:ee:bd:5c:1e:b1:ef:f4:2c:
cb:2d:2f:7a:5f:24:0b:e0:44:95:a2:fc:8a:cf:46:
2f:8d:df:2c:d0:e2:9f:cf:a5:48:1d:47:f0:38:58:
a5:57:c8:af:f5:41:64:f6:5e:e6:b6:63:19:87:e7:
f7:f4:3f:3d:23:f4:0b:6a:60:c8:39:1c:94:1f:a6:
39:b3:89:fe:b7:e7:2a:55:b7:b9:10:8c:ec:79:67:
9f:d9:ce:5c:11:86:ed:c1:0e:91:9b:0e:c1:95:91:
46:04:3d:cf:ec:13:23:af:48:bd:f5:22:cf:58:26:
16:75:52:ef:61:cd:05:eb:12:28:d1:8f:c3:27:be:
05:e4:b0:8d:ce:76:9b:a4:ed:40:6f:b9:82:c5:dc:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:20:8C:FA:4C:36:32:E7:C4:0B:30:41:DA:C4:9B:85:BC:C1:D2:51
X509v3 Authority Key Identifier:
keyid:A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e3:02:a1:85:72:45:96:2c:22:ae:6c:69:a5:1b:38:18:f3:
21:45:aa:ca:4c:18:ca:aa:02:1d:65:3c:d4:5f:35:38:38:5c:
37:ae:5d:97:b7:b6:17:c7:a3:d6:f4:5b:f1:2b:ba:dc:c4:92:
2d:34:de:0e:4e:bd:83:f9:af:6c:fc:64:be:84:a8:88:f6:38:
03:37:f0:74:2f:7f:c0:2a:f3:da:a5:42:7a:9b:40:37:31:8f:
53:e9:c6:fd:b5:66:0c:cf:4b:5f:07:41:8b:3c:6b:ac:7e:ea:
13:b8:f5:81:0e:2e:58:91:45:fd:89:0f:9c:c3:b6:89:a9:74:
4f:94:b1:41:6d:4a:68:79:03:50:70:57:84:a3:6d:de:4e:ef:
1d:0a:40:04:71:34:2b:39:b6:a5:f8:8b:65:81:19:58:a6:b8:
ac:c4:f7:69:81:62:7e:f0:ea:59:cd:ea:8e:99:68:06:0c:4a:
64:5f:f9:4d:66:49:53:5a:b1:1a:a5:72:bb:9c:a4:32:ed:21:
f3:71:7f:72:5c:91:f5:85:34:96:f6:4d:dc:58:a4:96:87:60:
86:32:3c:52:4f:db:d1:e8:36:59:26:a3:cd:0c:c0:e8:c4:b4:
aa:03:35:d0:4f:32:0a:93:b0:24:08:9e:a2:11:d9:b4:eb:16:
35:9c:32:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKetSNrKggFXebePunMICMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzN2IxZTNlZmFlYTg5ZGNmY2QxYzhlOTdjMGU5Yjc4MGM2
MTQ2NWQwHhcNMjUwNjA3MTMwMDUzWhcNMjUwNjA4MTMwMDUzWjAzMTEwLwYDVQQD
EyhmNjIwOGNmYTRjMzYzMmU3YzQwYjMwNDFkYWM0OWI4NWJjYzFkMjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPHVqq6tbxZaTYNFdpU96CHwgK23
7BVb+mMIugZs/a9j6ZQKG59vEzAWl95ch24QSf4wtY1RIWlAIQDiB3AmVIFT/Gsz
zED2Mf4SYLDdKA0c8eGW6ZuzlUVgWIyZcgW+agY29KqCXxwpM7cTNooe7r1cHrHv
9CzLLS96XyQL4ESVovyKz0Yvjd8s0OKfz6VIHUfwOFilV8iv9UFk9l7mtmMZh+f3
9D89I/QLamDIORyUH6Y5s4n+t+cqVbe5EIzseWef2c5cEYbtwQ6Rmw7BlZFGBD3P
7BMjr0i99SLPWCYWdVLvYc0F6xIo0Y/DJ74F5LCNznabpO1Ab7mCxdyj5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYgjPpMNjLnxAswQdrEm4W8wdJRMB8GA1UdIwQY
MBaAFKN7Hj766onc/NHI6XwOm3gMYUZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNzZVB2cnFpZHo4MGNqcGZBNmJlQXhoUmwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zNWJiMjEtMjIzOS00Zjc3LWE3ZmEt
NTVkZTY1YTJlYTNiLzEvbzNzZVB2cnFpZHo4MGNqcGZBNmJlQXhoUmwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8zNWJiMjEtMjIzOS00Zjc3LWE3ZmEtNTVkZTY1YTJlYTNi
LzEvbzNzZVB2cnFpZHo4MGNqcGZBNmJlQXhoUmwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOMCoYVy
RZYsIq5saaUbOBjzIUWqykwYyqoCHWU81F81ODhcN65dl7e2F8ej1vRb8Su63MSS
LTTeDk69g/mvbPxkvoSoiPY4AzfwdC9/wCrz2qVCeptANzGPU+nG/bVmDM9LXwdB
izxrrH7qE7j1gQ4uWJFF/YkPnMO2ial0T5SxQW1KaHkDUHBXhKNt3k7vHQpABHE0
Kzm2pfiLZYEZWKa4rMT3aYFifvDqWc3qjploBgxKZF/5TWZJU1qxGqVyu5ykMu0h
83F/clyR9YU0lvZN3FiklodghjI8Uk/b0eg2WSajzQzA6MS0qgM10E8yCpOwJAie
ohHZtOsWNZwyhA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:45:39 2025 by rpki-client