Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: v17ZUBBn8NiTbxuB4Db5s7YVCwPm0mxR93D8xVRMm9w=
Subject key identifier: 9A:94:2B:95:18:E8:7D:78:21:93:38:79:87:EB:1B:F3:E1:B2:76:95
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 019741AEA1350BFE5120AE94DE0C10EB076A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 11AC
Signing time: Thu 05 Jun 2025 20:00:52 +0000
Manifest this update: Thu 05 Jun 2025 20:00:52 +0000
Manifest next update: Fri 06 Jun 2025 20:00:52 +0000
Files and hashes: 1: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: eYvQHGuSJK2ganfAE7N1WLiZWD27AtLU13wjHHUp6b0=)
2: SkpuG1SShh_Tu0tEsS_zldokzRY.roa (hash: dFYDpE1wahaZPqcUFRinjMxK5eBFUvf/eJm1l8owCY8=)
3: wx1b7wSo3IENdo5aRxstuEb6e_8.roa (hash: Pjk1ZSdAEd1vWaEOWohydmZmcsdRJu6/0hd4TtAw+OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:ae:a1:35:0b:fe:51:20:ae:94:de:0c:10:eb:07:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Jun 5 20:00:52 2025 GMT
Not After : Jun 6 20:00:52 2025 GMT
Subject: CN=9a942b9518e87d782193387987eb1bf3e1b27695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f6:81:56:19:fe:27:f6:bf:b0:69:45:4e:16:
c1:38:86:0e:c1:56:4d:9f:2d:90:71:b4:75:fc:77:
88:96:01:8a:5e:23:66:2d:ed:11:ff:c1:44:74:c5:
27:c0:ab:bf:7a:e5:d9:1d:8c:aa:92:58:2d:8e:a7:
c5:e6:5d:b4:93:34:b5:19:7c:e8:e4:2f:4c:b5:25:
d8:09:32:4f:20:5f:0d:19:03:93:e0:3f:42:cc:99:
86:94:a4:e1:65:fa:36:cb:6a:4d:c8:c0:18:58:ac:
51:62:23:d4:c3:4c:a2:8a:d2:26:9d:ed:89:f2:f1:
5e:b1:5a:f9:60:e4:0d:f0:69:8e:d7:dc:7a:19:df:
a6:e9:74:47:9c:2a:76:65:85:cd:9f:e7:29:fd:d6:
85:92:67:00:97:2d:56:8d:9d:b5:5d:c9:bb:d0:cd:
9c:ea:82:1a:7a:83:e3:c9:e2:cd:7a:b0:6c:11:fd:
d5:09:a8:49:dc:95:8c:4d:2c:3f:20:48:79:d4:28:
77:c1:7b:73:e9:f3:b3:00:33:5e:e7:4c:64:a5:7a:
d4:f4:ba:29:93:27:44:06:74:53:49:e2:30:48:ce:
cd:12:98:30:07:0c:56:d3:77:3b:e4:51:b4:59:53:
5c:97:19:c0:9f:99:9f:83:0e:cf:71:8c:92:65:f8:
90:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:94:2B:95:18:E8:7D:78:21:93:38:79:87:EB:1B:F3:E1:B2:76:95
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b4:d6:1c:34:3d:31:3e:3a:96:ef:9a:c2:a7:ff:3c:df:5d:
5c:77:2a:d5:1e:8d:b9:cc:1b:11:bd:86:ea:53:d9:02:2c:ac:
f3:40:fb:83:62:5f:3e:a6:1d:e6:56:5d:ac:37:e4:3a:e8:8b:
e1:b7:ae:ea:17:dd:93:26:69:31:90:1b:46:18:2b:70:2a:0a:
9d:f9:2f:83:1d:fd:98:ee:85:f6:88:5b:02:2c:4d:b4:eb:09:
ea:40:7a:5b:b7:ae:7b:01:d6:fa:a9:24:c8:2e:c6:c5:52:22:
f9:16:f6:b9:61:89:b8:e9:e8:44:55:96:76:10:ab:c5:13:5b:
ce:79:fb:f8:d7:a8:00:2e:14:a1:21:fe:c3:06:8f:2a:25:5a:
19:b3:4e:cc:89:aa:9c:e4:52:0d:27:4e:06:a5:fb:0a:77:0b:
ae:7e:34:4f:c3:25:6c:f6:64:76:ec:25:28:9f:52:c6:e9:37:
cc:fc:32:51:bc:3a:16:3f:21:31:4e:3e:ef:ea:8d:39:29:24:
7f:b4:40:9e:53:99:76:de:aa:14:e9:1d:58:1c:c3:55:f4:e5:
4b:f5:98:16:f4:52:b7:11:98:90:71:15:6d:f1:ca:34:80:47:
77:03:c1:bf:24:7b:21:d0:69:75:56:75:1f:6b:37:4a:dc:33:
d5:69:c7:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdBrqE1C/5RIK6U3gwQ6wdqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OGU5NjI4NDBjZDMxNjhkZDJlYTM5NmZlNjgxMjc2Mjhh
ZWFjMjcwHhcNMjUwNjA1MjAwMDUyWhcNMjUwNjA2MjAwMDUyWjAzMTEwLwYDVQQD
Eyg5YTk0MmI5NTE4ZTg3ZDc4MjE5MzM4Nzk4N2ViMWJmM2UxYjI3Njk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPaBVhn+J/a/sGlFThbBOIYOwVZN
ny2QcbR1/HeIlgGKXiNmLe0R/8FEdMUnwKu/euXZHYyqklgtjqfF5l20kzS1GXzo
5C9MtSXYCTJPIF8NGQOT4D9CzJmGlKThZfo2y2pNyMAYWKxRYiPUw0yiitImne2J
8vFesVr5YOQN8GmO19x6Gd+m6XRHnCp2ZYXNn+cp/daFkmcAly1WjZ21Xcm70M2c
6oIaeoPjyeLNerBsEf3VCahJ3JWMTSw/IEh51Ch3wXtz6fOzADNe50xkpXrU9Lop
kydEBnRTSeIwSM7NEpgwBwxW03c75FG0WVNclxnAn5mfgw7PcYySZfiQ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqUK5UY6H14IZM4eYfrG/PhsnaVMB8GA1UdIwQY
MBaAFDiOlihAzTFo3S6jlv5oEnYorqwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEt
YzMyMTg0MGMxZmFhLzEvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEtYzMyMTg0MGMxZmFh
LzEvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLTWHDQ9
MT46lu+awqf/PN9dXHcq1R6NucwbEb2G6lPZAiys80D7g2JfPqYd5lZdrDfkOuiL
4beu6hfdkyZpMZAbRhgrcCoKnfkvgx39mO6F9ohbAixNtOsJ6kB6W7euewHW+qkk
yC7GxVIi+Rb2uWGJuOnoRFWWdhCrxRNbznn7+NeoAC4UoSH+wwaPKiVaGbNOzImq
nORSDSdOBqX7CncLrn40T8MlbPZkduwlKJ9Sxuk3zPwyUbw6Fj8hMU4+7+qNOSkk
f7RAnlOZdt6qFOkdWBzDVfTlS/WYFvRStxGYkHEVbfHKNIBHdwPBvyR7IdBpdVZ1
H2s3Stwz1WnHzQ==
-----END CERTIFICATE-----
Generated at Fri Jun 6 03:02:40 2025 by rpki-client