Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
File: OEgrEyC5gPRtbkBP59WL2xHVD9M.mft (raw, json)
Hash identifier: xYjkbw4w6Tor/lSdbN4nPlGfR8PIozjKOV88J9INwyI=
Subject key identifier: 5E:94:60:0D:AF:A1:2A:AE:29:BE:2A:BD:E2:14:72:B4:B6:3C:8D:68
Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
Certificate issuer: /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Certificate serial: 0197507CE8E6C733EA0869839BE6672D1023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 17:00:52 +0000
Manifest this update: Sun 08 Jun 2025 17:00:52 +0000
Manifest next update: Mon 09 Jun 2025 17:00:52 +0000
Files and hashes: 1: 8cUHkHeMSC76fH99pPRKCG6K4As.roa (hash: 55nCWREAZoiaySk5Kp1IWRogrctw38RXeb5qRSfBuwo=)
2: OEgrEyC5gPRtbkBP59WL2xHVD9M.crl (hash: r8dQkhjzeJiFSIDkUw6fU0cte9ewcj9IR0Qdptxzllk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:e8:e6:c7:33:ea:08:69:83:9b:e6:67:2d:10:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Validity
Not Before: Jun 8 17:00:52 2025 GMT
Not After : Jun 9 17:00:52 2025 GMT
Subject: CN=5e94600dafa12aae29be2abde21472b4b63c8d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4d:8a:ce:3a:cf:2a:86:3e:17:16:28:d8:8d:
2d:9c:91:66:82:94:3b:9b:25:43:ab:6f:36:4f:26:
09:20:32:63:e0:96:a3:47:66:f5:2e:54:a8:0a:28:
be:9e:88:4f:a6:1c:e2:ac:96:09:59:f2:69:57:24:
72:f8:70:2f:a5:6a:09:3e:33:2c:0b:2b:c9:11:87:
62:70:da:cf:51:8c:32:61:9e:90:a0:de:cb:33:63:
be:f7:ca:72:45:a6:b5:fc:db:5f:e2:2d:c0:00:03:
c3:15:fe:d2:a3:ec:d1:a0:72:6c:f3:0e:44:b2:10:
eb:32:56:b4:da:cb:54:2d:d5:e4:9a:49:63:21:f0:
bb:27:2c:6e:22:54:3e:dc:b9:cc:10:9b:b7:b2:d4:
02:3e:f9:af:8e:ad:aa:c6:99:c5:c6:ec:0d:5f:74:
4d:a8:3f:9a:a6:d6:9f:5d:93:aa:00:db:3f:b5:82:
7b:c8:6a:23:88:21:fb:99:6a:06:9a:bf:73:83:87:
bc:0e:e7:df:50:18:84:d1:e0:fb:b5:69:25:4d:63:
14:1f:94:23:f4:0a:13:55:a1:5b:e2:9d:99:77:e9:
b3:55:7a:3b:21:46:76:ad:ee:ba:b4:e2:31:f2:45:
6d:58:46:3e:2d:87:f6:e0:fa:c0:02:5f:60:b6:12:
e2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:94:60:0D:AF:A1:2A:AE:29:BE:2A:BD:E2:14:72:B4:B6:3C:8D:68
X509v3 Authority Key Identifier:
keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:bf:63:5d:fc:1c:68:ab:5f:ca:c5:6d:1c:4a:a5:25:e6:1c:
2c:7a:d8:10:7a:d7:7c:85:b4:5c:12:1f:e5:2c:79:c1:c9:b4:
d8:01:63:fd:ad:73:79:33:9f:21:25:6a:fd:90:a9:16:2a:36:
50:7b:91:aa:6a:a6:2a:7c:90:15:30:8f:48:02:fc:2f:8d:d9:
54:f9:2b:27:0f:56:b4:f6:81:26:3f:7f:ea:74:23:26:82:fd:
b9:49:10:28:f8:53:a9:03:51:ca:4b:f8:1c:23:7f:2b:ce:69:
f9:e1:8b:ab:52:e3:1e:d1:32:06:35:8e:b8:ba:75:aa:9f:e2:
57:6d:c3:54:23:16:c6:7c:08:ec:b0:e0:49:0c:18:64:dd:c1:
76:f1:d5:6f:bf:bf:3a:48:e9:e3:15:a3:fc:67:60:7b:a9:a3:
e5:06:42:b4:da:fe:b0:dd:f9:c5:77:5a:0a:e3:d3:ae:d3:2e:
e3:83:24:4e:5e:66:7d:78:aa:f1:ee:42:c9:9c:99:f6:a6:fa:
43:0e:94:2c:50:c9:c6:f5:df:55:62:1a:1c:b6:f9:5c:3a:18:
bf:a9:45:51:8f:69:fc:7b:9e:47:f1:af:d0:25:97:94:fd:f0:
c9:7a:71:40:80:77:a0:91:21:8d:59:8a:b4:17:19:37:b1:08:
d5:99:1c:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQfOjmxzPqCGmDm+ZnLRAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDgyYjEzMjBiOTgwZjQ2ZDZlNDA0ZmU3ZDU4YmRiMTFk
NTBmZDMwHhcNMjUwNjA4MTcwMDUyWhcNMjUwNjA5MTcwMDUyWjAzMTEwLwYDVQQD
Eyg1ZTk0NjAwZGFmYTEyYWFlMjliZTJhYmRlMjE0NzJiNGI2M2M4ZDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU2KzjrPKoY+FxYo2I0tnJFmgpQ7
myVDq282TyYJIDJj4JajR2b1LlSoCii+nohPphzirJYJWfJpVyRy+HAvpWoJPjMs
CyvJEYdicNrPUYwyYZ6QoN7LM2O+98pyRaa1/Ntf4i3AAAPDFf7So+zRoHJs8w5E
shDrMla02stULdXkmkljIfC7JyxuIlQ+3LnMEJu3stQCPvmvjq2qxpnFxuwNX3RN
qD+aptafXZOqANs/tYJ7yGojiCH7mWoGmr9zg4e8DuffUBiE0eD7tWklTWMUH5Qj
9AoTVaFb4p2Zd+mzVXo7IUZ2re66tOIx8kVtWEY+LYf24PrAAl9gthLiyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6UYA2voSquKb4qveIUcrS2PI1oMB8GA1UdIwQY
MBaAFDhIKxMguYD0bW5AT+fVi9sR1Q/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMzI0NTQtM2VmOS00NDEyLTg1NzAt
NWNmNDNkMzU5MDhlLzEvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMzI0NTQtM2VmOS00NDEyLTg1NzAtNWNmNDNkMzU5MDhl
LzEvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdL9jXfwc
aKtfysVtHEqlJeYcLHrYEHrXfIW0XBIf5Sx5wcm02AFj/a1zeTOfISVq/ZCpFio2
UHuRqmqmKnyQFTCPSAL8L43ZVPkrJw9WtPaBJj9/6nQjJoL9uUkQKPhTqQNRykv4
HCN/K85p+eGLq1LjHtEyBjWOuLp1qp/iV23DVCMWxnwI7LDgSQwYZN3BdvHVb7+/
Okjp4xWj/Gdge6mj5QZCtNr+sN35xXdaCuPTrtMu44MkTl5mfXiq8e5CyZyZ9qb6
Qw6ULFDJxvXfVWIaHLb5XDoYv6lFUY9p/HueR/Gv0CWXlP3wyXpxQIB3oJEhjVmK
tBcZN7EI1ZkcQQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:31:15 2025 by rpki-client