Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File: OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier: zSMxAT5aLntJ81GWg3NyKfaJvd12JIFT0hd7hkQu9eY=
Subject key identifier: 10:00:2A:26:14:F4:F2:F2:9B:C1:AF:AF:3D:78:1C:21:3C:A9:05:EB
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial: 0197481E45CC5F78238B2102449293CEFE95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number: 02BB
Signing time: Sat 07 Jun 2025 02:00:32 +0000
Manifest this update: Sat 07 Jun 2025 02:00:32 +0000
Manifest next update: Sun 08 Jun 2025 02:00:32 +0000
Files and hashes: 1: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: R1+r2bMofkVmi+R7VjBAyBbfQPQ1v0PYuQxbX1sDbAY=)
2: byq9jEJ8I-x78db4YmLa9HioKo8.roa (hash: QYVcPpPrnjWxAxRBsq739GpWzHWctl66pKlaoafsOic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:45:cc:5f:78:23:8b:21:02:44:92:93:ce:fe:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Validity
Not Before: Jun 7 02:00:32 2025 GMT
Not After : Jun 8 02:00:32 2025 GMT
Subject: CN=10002a2614f4f2f29bc1afaf3d781c213ca905eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d0:4d:69:b2:17:06:63:1e:10:bf:32:04:53:
89:ad:de:fc:74:fb:3c:04:17:82:9a:70:29:17:b8:
53:9f:1f:c9:0c:33:c8:4a:1f:f2:f4:31:f6:32:9f:
b5:09:52:54:c8:01:26:8c:f2:f8:19:af:62:cb:0a:
55:bd:dc:65:6b:0d:82:c4:87:af:7b:df:a4:f2:99:
fc:a8:63:33:92:a3:69:c4:ba:91:9d:53:e2:8f:5d:
3d:4e:10:0a:ea:29:ff:0f:31:09:8e:b3:7a:48:a3:
46:3c:96:35:a4:43:e5:5b:35:15:d3:cb:c7:2a:60:
3d:1f:38:39:d7:7b:b2:ec:ce:9f:95:5e:47:b1:b8:
6a:dc:66:45:55:ab:2a:46:c9:f8:04:bd:db:06:a7:
a1:c8:af:21:e4:db:f9:82:ad:e2:26:00:d2:61:d6:
31:94:6a:36:7d:b9:3e:da:ee:65:a1:fe:37:bb:74:
a4:ae:cc:d1:e7:87:7c:16:45:00:ca:78:bd:2e:12:
6a:83:1b:16:1e:8b:35:fa:73:67:70:e5:6a:23:78:
ac:e4:c8:0c:05:6c:b9:ba:52:cb:a8:36:d9:96:b6:
22:07:b2:95:13:ca:8a:23:4b:e6:96:79:33:67:6a:
a7:e4:da:bc:a9:1b:0e:00:f8:25:9d:6f:04:2c:a6:
6f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:00:2A:26:14:F4:F2:F2:9B:C1:AF:AF:3D:78:1C:21:3C:A9:05:EB
X509v3 Authority Key Identifier:
keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5f:00:ac:a1:cc:94:11:80:27:c3:76:8c:45:f2:21:3b:f5:
3b:56:1d:0b:b5:3c:10:28:14:8b:a8:75:13:a7:c8:63:40:9b:
dd:3c:35:ec:25:df:c8:7b:76:61:49:66:07:42:a3:6b:3f:30:
4c:24:50:33:a6:9f:be:c2:17:cf:ef:a6:ee:21:d4:1b:ee:54:
ba:aa:94:eb:cf:c9:7a:6c:9b:cb:d6:c5:81:0f:45:c1:da:29:
b3:d6:cb:77:90:07:e5:a2:47:03:ce:47:98:37:a5:38:dd:63:
dd:10:52:78:52:31:0e:3a:a0:e1:22:76:ba:c9:25:98:b2:37:
37:04:b3:5f:19:9a:94:31:36:a0:51:bd:44:fe:37:77:79:cd:
5e:91:5b:39:42:f2:dc:f3:6f:70:a5:d1:6d:bf:1c:b1:cb:95:
8c:4c:28:7a:cd:21:9f:da:13:24:17:cd:95:4e:4b:19:c2:a2:
df:65:75:73:dc:73:b5:50:5d:ea:a7:98:1e:54:59:e7:e2:d7:
a3:00:37:2c:52:03:6e:fb:4f:f3:a0:07:a1:30:6f:02:99:0a:
33:2b:1b:7c:1a:63:ff:de:d6:93:ca:5f:bc:06:f1:d2:f6:99:
28:f5:12:a0:f3:51:54:10:0b:f2:ac:6e:a8:20:88:59:90:da:
7d:77:c7:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHkXMX3gjiyECRJKTzv6VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MmY2ZWU2ZWUzNDZjMzE5MTJiNzYzMGRhYjE0Y2U1M2M0
ZTBjOTkwHhcNMjUwNjA3MDIwMDMyWhcNMjUwNjA4MDIwMDMyWjAzMTEwLwYDVQQD
EygxMDAwMmEyNjE0ZjRmMmYyOWJjMWFmYWYzZDc4MWMyMTNjYTkwNWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitBNabIXBmMeEL8yBFOJrd78dPs8
BBeCmnApF7hTnx/JDDPISh/y9DH2Mp+1CVJUyAEmjPL4Ga9iywpVvdxlaw2CxIev
e9+k8pn8qGMzkqNpxLqRnVPij109ThAK6in/DzEJjrN6SKNGPJY1pEPlWzUV08vH
KmA9Hzg513uy7M6flV5Hsbhq3GZFVasqRsn4BL3bBqehyK8h5Nv5gq3iJgDSYdYx
lGo2fbk+2u5lof43u3SkrszR54d8FkUAyni9LhJqgxsWHos1+nNncOVqI3is5MgM
BWy5ulLLqDbZlrYiB7KVE8qKI0vmlnkzZ2qn5Nq8qRsOAPglnW8ELKZvtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAAKiYU9PLym8Gvrz14HCE8qQXrMB8GA1UdIwQY
MBaAFDkvbubuNGwxkSt2MNqxTOU8TgyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80NWQ5N2UtNDBmZS00N2UwLWIyZTYt
OGE3MmExYjZhZjg1LzEvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80NWQ5N2UtNDBmZS00N2UwLWIyZTYtOGE3MmExYjZhZjg1
LzEvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgF8ArKHM
lBGAJ8N2jEXyITv1O1YdC7U8ECgUi6h1E6fIY0Cb3Tw17CXfyHt2YUlmB0Kjaz8w
TCRQM6afvsIXz++m7iHUG+5UuqqU68/Jemyby9bFgQ9Fwdops9bLd5AH5aJHA85H
mDelON1j3RBSeFIxDjqg4SJ2usklmLI3NwSzXxmalDE2oFG9RP43d3nNXpFbOULy
3PNvcKXRbb8cscuVjEwoes0hn9oTJBfNlU5LGcKi32V1c9xztVBd6qeYHlRZ5+LX
owA3LFIDbvtP86AHoTBvApkKMysbfBpj/97Wk8pfvAbx0vaZKPUSoPNRVBAL8qxu
qCCIWZDafXfHxA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:58:10 2025 by rpki-client