Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
File: o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft (raw, json)
Hash identifier: hHAylN7kX1VAKrD4v/Rjb/C+RWi3TmnXO3wzY14e6qY=
Subject key identifier: 9D:11:C9:25:90:A8:BB:28:8A:FC:12:6C:EE:F4:FA:0B:7A:0F:67:5D
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Certificate issuer: /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial: 019769CE94C8183F33DF7608612339BE52D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
Manifest number: 1228
Signing time: Fri 13 Jun 2025 15:00:35 +0000
Manifest this update: Fri 13 Jun 2025 15:00:35 +0000
Manifest next update: Sat 14 Jun 2025 15:00:35 +0000
Files and hashes: 1: 6bKOaNTOD26M5DPQmaAIN6UyW0c.roa (hash: n/Tx+likKaNH/PY72I+EbFWla5M5IP5SB9HyRpTSt7g=)
2: QufC61fw7pK87dB-kx4RiKifXlM.roa (hash: r+1QwPLgLXThXyY70R3A0vn9kct3kVdr0ohpYgp0VlA=)
3: o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl (hash: y6xxsKphU4vIsK1A3fieisIQU8owu9X9U4On5XnEa7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:94:c8:18:3f:33:df:76:08:61:23:39:be:52:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Validity
Not Before: Jun 13 15:00:35 2025 GMT
Not After : Jun 14 15:00:35 2025 GMT
Subject: CN=9d11c92590a8bb288afc126ceef4fa0b7a0f675d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:fe:86:14:ae:b9:f4:c6:17:7a:56:0c:91:
0f:be:9a:ae:13:a6:e4:76:17:a0:f1:ec:c4:70:8b:
16:4e:2b:b8:45:ae:b6:24:5f:a7:2f:f1:07:81:29:
f3:cf:d0:97:8c:69:49:75:b2:dc:b0:0c:c8:1e:b7:
96:a8:84:89:e8:59:01:44:41:03:ef:ba:b1:33:c7:
2a:07:7a:d5:fe:16:64:a3:73:a5:ed:b6:13:97:b2:
0a:1d:9c:d5:d7:89:63:89:a8:01:39:f2:f3:fa:c0:
e4:f6:58:93:4a:6d:d4:7c:e6:e3:e3:bb:1d:35:3f:
c3:75:12:09:48:0c:3a:d1:24:76:4f:8c:45:ad:03:
7d:81:46:2e:7f:77:21:7e:26:91:94:6f:c0:30:59:
90:81:30:fb:01:09:d5:a3:49:3c:6b:99:ab:87:8d:
fe:3d:6d:d0:9d:e6:d6:88:97:53:15:84:51:c6:23:
b6:9a:ec:6b:48:52:5b:cd:01:e0:73:57:4b:ea:38:
4e:64:85:0d:b6:7b:c6:1b:7e:47:86:d3:cf:fe:69:
22:ef:5b:eb:14:6c:8b:69:d9:1d:4b:39:28:78:43:
f3:ec:1a:4f:3c:8f:2b:89:ff:d6:dc:f6:ad:57:40:
cc:9d:61:05:10:91:fa:dc:19:27:e1:55:1d:8f:14:
5b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:11:C9:25:90:A8:BB:28:8A:FC:12:6C:EE:F4:FA:0B:7A:0F:67:5D
X509v3 Authority Key Identifier:
keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:da:c2:d5:94:7f:a2:6a:3f:a4:8b:0b:cf:1e:44:26:7b:d4:
3e:f1:fd:ca:8b:a6:a3:b1:7d:fc:13:f0:c1:03:9b:ee:fc:b5:
14:8a:a1:51:6a:0e:9f:92:e0:9f:51:54:47:72:2b:96:96:6b:
c9:5e:f8:44:7c:88:46:c9:f1:e9:dd:31:ef:a9:d6:64:77:ff:
77:d4:eb:09:33:9b:ad:47:09:32:d9:c6:e4:1f:ce:63:aa:c1:
f8:9a:c5:69:0f:e8:d3:9a:ff:92:9f:57:05:24:0c:cf:c3:93:
9e:c1:31:e4:17:db:78:b0:8b:98:90:7c:70:56:17:5c:d9:9a:
4c:55:a1:5a:c9:4a:2b:88:b1:b9:69:13:e0:90:5c:7b:c3:5b:
ae:89:4b:eb:16:99:79:6b:cb:5b:82:2d:55:a6:fd:4d:52:47:
a3:cf:65:71:f8:91:aa:0c:41:0f:45:99:25:ff:66:c7:f8:41:
5b:ef:d1:a7:0c:a1:e0:7c:78:4f:f7:36:81:25:80:4d:06:63:
09:1f:fd:57:78:0e:fe:a8:bc:79:a7:13:a3:40:a7:22:02:4c:
cb:de:e9:65:76:34:97:f4:c2:21:90:fc:00:77:91:b1:03:87:
c2:c4:65:c9:7f:89:c6:f5:15:f9:ac:d7:45:75:65:94:4a:55:
89:5b:1e:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzpTIGD8z33YIYSM5vlLVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYjg1ZmUyYjJjMjY5OTFiMWYzMWM2NmZjNjdhYzBjOGEx
MDk3NDYwHhcNMjUwNjEzMTUwMDM1WhcNMjUwNjE0MTUwMDM1WjAzMTEwLwYDVQQD
Eyg5ZDExYzkyNTkwYThiYjI4OGFmYzEyNmNlZWY0ZmEwYjdhMGY2NzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxT+hhSuufTGF3pWDJEPvpquE6bk
dheg8ezEcIsWTiu4Ra62JF+nL/EHgSnzz9CXjGlJdbLcsAzIHreWqISJ6FkBREED
77qxM8cqB3rV/hZko3Ol7bYTl7IKHZzV14ljiagBOfLz+sDk9liTSm3UfObj47sd
NT/DdRIJSAw60SR2T4xFrQN9gUYuf3chfiaRlG/AMFmQgTD7AQnVo0k8a5mrh43+
PW3QnebWiJdTFYRRxiO2muxrSFJbzQHgc1dL6jhOZIUNtnvGG35HhtPP/mki71vr
FGyLadkdSzkoeEPz7BpPPI8rif/W3PatV0DMnWEFEJH63Bkn4VUdjxRblwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0RySWQqLsoivwSbO70+gt6D2ddMB8GA1UdIwQY
MBaAFKO4X+KywmmRsfMcZvxnrAyKEJdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzdoZjRyTENhWkd4OHh4bV9HZXNESW9RbDBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lOTkwODItNjU5ZS00OWUyLWFkOTEt
NzZiYjcxZWIwYTVhLzEvbzdoZjRyTENhWkd4OHh4bV9HZXNESW9RbDBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lOTkwODItNjU5ZS00OWUyLWFkOTEtNzZiYjcxZWIwYTVh
LzEvbzdoZjRyTENhWkd4OHh4bV9HZXNESW9RbDBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9rC1ZR/
omo/pIsLzx5EJnvUPvH9youmo7F9/BPwwQOb7vy1FIqhUWoOn5Lgn1FUR3IrlpZr
yV74RHyIRsnx6d0x76nWZHf/d9TrCTObrUcJMtnG5B/OY6rB+JrFaQ/o05r/kp9X
BSQMz8OTnsEx5BfbeLCLmJB8cFYXXNmaTFWhWslKK4ixuWkT4JBce8NbrolL6xaZ
eWvLW4ItVab9TVJHo89lcfiRqgxBD0WZJf9mx/hBW+/Rpwyh4Hx4T/c2gSWATQZj
CR/9V3gO/qi8eacTo0CnIgJMy97pZXY0l/TCIZD8AHeRsQOHwsRlyX+JxvUV+azX
RXVllEpViVsetQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 23:29:59 2025 by rpki-client