Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
File: oYanahiZ2_kCnhrv2QUXe7CdNo0.mft (raw, json)
Hash identifier: Wt8Ogm7jyj+vJmsdV9hi60+TYYEUMaccOjCPqt7W8JM=
Subject key identifier: 7B:A1:34:79:BD:8F:E5:BD:F0:D4:D7:A7:3B:E0:F5:E4:5F:8E:15:99
Authority key identifier: A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
Certificate issuer: /CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Certificate serial: 01975DCAE5A2CCF163DD1B8D774F3B41D706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
Manifest number: 0A18
Signing time: Wed 11 Jun 2025 07:01:07 +0000
Manifest this update: Wed 11 Jun 2025 07:01:07 +0000
Manifest next update: Thu 12 Jun 2025 07:01:07 +0000
Files and hashes: 1: bcgHeTecNhcHR9QWO6gmvpmmI5c.roa (hash: EV6/wlUYGCbS7xEazmx8eI5Bar/BgAFt51P9o3UlOuQ=)
2: oYanahiZ2_kCnhrv2QUXe7CdNo0.crl (hash: FvTo6uwOS0NTG189CT1/O5/J0l67A7GB3/IpslH+x7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:ca:e5:a2:cc:f1:63:dd:1b:8d:77:4f:3b:41:d7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Validity
Not Before: Jun 11 07:01:07 2025 GMT
Not After : Jun 12 07:01:07 2025 GMT
Subject: CN=7ba13479bd8fe5bdf0d4d7a73be0f5e45f8e1599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ac:a3:bf:13:9c:7b:c9:b0:3a:ca:b6:4f:46:
74:aa:76:3d:0a:74:c3:a6:ee:9e:8c:d4:6d:ed:bf:
b7:94:2e:58:52:e6:f6:37:a4:a3:7a:ad:a3:40:9f:
42:b5:c1:6a:3e:8c:f8:6e:eb:fc:80:09:4f:23:0b:
de:da:71:11:76:a1:6b:fd:e5:b7:17:73:2c:06:86:
3e:6e:48:4a:32:56:aa:59:8f:03:80:aa:e1:f2:04:
aa:21:d3:d0:dc:57:68:96:ba:5b:7a:79:50:35:a9:
63:0a:a8:fe:b4:e8:ec:a2:cf:71:ec:f4:b7:6a:4b:
ab:70:7e:6e:e2:ac:46:43:54:20:c8:11:cf:e0:29:
79:aa:35:97:89:3d:67:19:f1:9d:6a:98:bc:df:f8:
ab:ed:97:d6:2b:75:7c:77:c1:8a:52:fb:69:02:2f:
2a:cf:d2:8b:cd:2f:df:fe:ca:9a:35:14:f1:b9:76:
04:7e:a1:be:be:8a:ec:d8:54:39:6e:9d:ef:82:b5:
7a:5f:6c:e0:94:b6:26:21:df:aa:12:eb:b2:46:1b:
03:c0:96:bf:7a:bc:eb:36:c8:7c:8a:9c:db:15:ff:
81:eb:65:af:16:26:86:d0:c4:50:5b:49:03:3b:7d:
9a:a1:b8:23:3d:a5:56:ce:58:c0:9b:c0:99:e3:82:
50:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A1:34:79:BD:8F:E5:BD:F0:D4:D7:A7:3B:E0:F5:E4:5F:8E:15:99
X509v3 Authority Key Identifier:
keyid:A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f8:98:fe:34:b9:40:16:ee:1e:ff:18:c6:40:ae:c6:69:fb:
74:7d:4f:1d:ed:75:c7:e6:ac:0f:4f:38:70:ce:19:01:b7:fa:
9b:6a:33:3a:54:08:3c:bf:f6:39:d4:b5:0d:89:c5:f6:d7:63:
d8:18:93:a0:5e:b1:66:bf:02:83:ad:a8:61:ef:fa:43:15:26:
33:4a:36:66:4b:93:56:f9:3d:e7:64:9a:af:c8:63:c6:6e:40:
2d:da:eb:a9:7c:ce:5e:83:cf:a4:bb:0b:f8:a4:30:b6:3c:d5:
18:c4:b2:26:54:47:e3:77:4f:f7:33:89:19:13:6f:ae:95:4f:
fa:89:98:75:09:b6:d7:26:65:88:81:94:12:9a:a4:66:52:e7:
ad:1d:0f:d6:f6:0c:89:a8:17:a6:57:03:05:0b:45:1d:f5:d2:
d2:19:d9:6e:5e:d1:21:2a:cd:5d:64:02:e7:54:0a:68:8d:3c:
b2:24:5b:9f:4f:8e:01:a1:12:4d:5d:4d:92:e9:a7:c4:80:ec:
29:a0:6b:c9:9a:0a:db:9b:d8:49:c2:9e:de:c0:f7:98:66:b3:
90:6a:5a:18:97:28:3f:99:f9:39:52:52:7e:0c:71:cb:7b:3b:
c5:8c:4f:7b:ad:88:cc:1f:f2:0f:c0:34:f9:5f:23:39:0b:bf:
35:8a:da:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddyuWizPFj3RuNd087QdcGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExODZhNzZhMTg5OWRiZjkwMjllMWFlZmQ5MDUxNzdiYjA5
ZDM2OGQwHhcNMjUwNjExMDcwMTA3WhcNMjUwNjEyMDcwMTA3WjAzMTEwLwYDVQQD
Eyg3YmExMzQ3OWJkOGZlNWJkZjBkNGQ3YTczYmUwZjVlNDVmOGUxNTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66yjvxOce8mwOsq2T0Z0qnY9CnTD
pu6ejNRt7b+3lC5YUub2N6Sjeq2jQJ9CtcFqPoz4buv8gAlPIwve2nERdqFr/eW3
F3MsBoY+bkhKMlaqWY8DgKrh8gSqIdPQ3FdolrpbenlQNaljCqj+tOjsos9x7PS3
akurcH5u4qxGQ1QgyBHP4Cl5qjWXiT1nGfGdapi83/ir7ZfWK3V8d8GKUvtpAi8q
z9KLzS/f/sqaNRTxuXYEfqG+vors2FQ5bp3vgrV6X2zglLYmId+qEuuyRhsDwJa/
erzrNsh8ipzbFf+B62WvFiaG0MRQW0kDO32aobgjPaVWzljAm8CZ44JQowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuhNHm9j+W98NTXpzvg9eRfjhWZMB8GA1UdIwQY
MBaAFKGGp2oYmdv5Ap4a79kFF3uwnTaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1lhbmFoaVoyX2tDbmhydjJRVVhlN0NkTm8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84NTk1YzgtNDgzNC00ZDU0LWEzOTEt
MzEyZTViNDkxMTQ2LzEvb1lhbmFoaVoyX2tDbmhydjJRVVhlN0NkTm8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84NTk1YzgtNDgzNC00ZDU0LWEzOTEtMzEyZTViNDkxMTQ2
LzEvb1lhbmFoaVoyX2tDbmhydjJRVVhlN0NkTm8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALviY/jS5
QBbuHv8YxkCuxmn7dH1PHe11x+asD084cM4ZAbf6m2ozOlQIPL/2OdS1DYnF9tdj
2BiToF6xZr8Cg62oYe/6QxUmM0o2ZkuTVvk952Sar8hjxm5ALdrrqXzOXoPPpLsL
+KQwtjzVGMSyJlRH43dP9zOJGRNvrpVP+omYdQm21yZliIGUEpqkZlLnrR0P1vYM
iagXplcDBQtFHfXS0hnZbl7RISrNXWQC51QKaI08siRbn0+OAaESTV1NkumnxIDs
KaBryZoK25vYScKe3sD3mGazkGpaGJcoP5n5OVJSfgxxy3s7xYxPe62IzB/yD8A0
+V8jOQu/NYraiA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 13:30:23 2025 by rpki-client