Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
File: 1olx6h0itezaGpdZ8FwmyMVqRow.mft (raw, json)
Hash identifier: E7anKG5WEFoXzonLms42EQeocfi9UgU0I08RgmhVROk=
Subject key identifier: E9:84:33:57:EC:F7:C9:69:32:D2:A1:7D:AA:F4:0E:A6:C2:F7:52:9F
Authority key identifier: D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
Certificate issuer: /CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Certificate serial: 01974E20BBF0B5741BDBD256CF1002975FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
Manifest number: 0D6E
Signing time: Sun 08 Jun 2025 06:00:57 +0000
Manifest this update: Sun 08 Jun 2025 06:00:57 +0000
Manifest next update: Mon 09 Jun 2025 06:00:57 +0000
Files and hashes: 1: 1olx6h0itezaGpdZ8FwmyMVqRow.crl (hash: W0Zbh5tvAOu1xkcOh2Jgs3IisigvGLBL1ld09pTn2cs=)
2: BN10iJQINkqqQbCXE2ZsJo5PDg0.roa (hash: dLiu8pKhhmUdKMIv3bdjJ619GvxkAvZ9+W0bGvQ4ymQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:bb:f0:b5:74:1b:db:d2:56:cf:10:02:97:5f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Validity
Not Before: Jun 8 06:00:57 2025 GMT
Not After : Jun 9 06:00:57 2025 GMT
Subject: CN=e9843357ecf7c96932d2a17daaf40ea6c2f7529f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ee:53:12:8e:9f:f2:17:13:a2:e6:2e:3c:62:
74:2e:66:cd:e9:a0:27:d7:88:75:7a:e3:55:73:47:
78:d5:6d:04:e7:17:5d:96:f0:36:d7:73:e5:74:f1:
88:6b:94:9b:d2:99:21:02:c1:1e:7e:51:7e:b7:7d:
c6:e2:27:0f:6e:73:b1:1b:fb:8d:7f:8a:c1:fd:d3:
29:c6:62:66:bf:76:8d:e0:35:22:6e:5c:80:6d:e5:
71:b1:13:0d:a3:21:e7:68:4a:74:ea:7e:de:c2:55:
6d:a3:db:f9:ba:61:ac:f0:bc:39:44:64:2d:64:6e:
22:bd:fe:e0:44:20:4d:44:aa:11:46:9c:e0:3b:b1:
48:8a:0a:ab:a2:1b:98:bb:a2:fa:dd:d4:5c:92:37:
a7:40:ad:b3:72:11:6f:5d:8d:69:1d:a2:e6:36:3a:
b1:70:2f:d9:7e:5e:ca:e1:1e:b1:09:03:dd:1f:2d:
7b:e3:ab:ed:06:78:7a:ec:35:24:8e:8e:0d:ee:f4:
e0:60:6d:dc:b7:42:b9:88:9c:11:17:d2:19:0e:03:
e8:2e:c5:12:28:b0:d4:bd:6c:e4:53:a6:63:df:5b:
37:06:cb:ea:fb:ba:a1:76:40:8c:ec:5e:a0:ce:8a:
36:f0:03:0a:3e:cc:1c:96:be:55:d4:9f:ed:81:f6:
8c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:84:33:57:EC:F7:C9:69:32:D2:A1:7D:AA:F4:0E:A6:C2:F7:52:9F
X509v3 Authority Key Identifier:
keyid:D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:bd:e3:9d:fa:a9:87:30:a0:1d:da:2f:75:23:1e:8a:a4:cd:
3f:0a:3d:91:eb:d4:f0:08:5c:68:a9:1f:2a:1f:46:26:e3:39:
a1:31:41:a1:63:8b:c6:dd:00:5f:69:a9:77:e1:51:cd:fc:71:
a2:0c:b8:51:16:c9:b9:43:59:2b:65:10:74:42:93:5b:82:5b:
e8:84:3d:5b:4d:40:ea:c3:4b:84:d0:6b:41:7f:a8:ab:65:12:
44:0f:8c:d8:e1:e1:1e:8d:d2:e6:e8:cd:0a:e4:49:d3:08:f0:
50:cf:ef:de:b0:48:4c:d1:76:b0:88:fe:ea:00:ab:06:9b:e1:
f7:12:a3:15:f8:7e:a4:f1:a2:49:c6:e2:73:3d:b3:86:44:7f:
da:4d:1a:93:6f:74:ff:85:c7:0a:b7:c2:56:fe:e9:7e:b8:c8:
f5:eb:26:b7:c6:36:b2:f0:1f:4a:18:fd:04:53:b5:d5:67:97:
b3:56:99:ab:be:0c:6b:2b:ea:4d:fa:26:d7:41:60:bb:3b:cc:
eb:21:9c:71:a0:23:8e:9f:ea:45:c1:3b:41:99:2f:cf:01:bd:
7a:0c:e8:51:25:25:5e:53:ec:19:c5:b1:60:c0:67:af:ee:d9:
c2:e5:d2:98:2c:ae:97:e9:e0:4d:59:42:fb:8e:0d:08:29:03:
dd:cc:94:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOILvwtXQb29JWzxACl1++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ODk3MWVhMWQyMmI1ZWNkYTFhOTc1OWYwNWMyNmM4YzU2
YTQ2OGMwHhcNMjUwNjA4MDYwMDU3WhcNMjUwNjA5MDYwMDU3WjAzMTEwLwYDVQQD
EyhlOTg0MzM1N2VjZjdjOTY5MzJkMmExN2RhYWY0MGVhNmMyZjc1MjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7O5TEo6f8hcTouYuPGJ0LmbN6aAn
14h1euNVc0d41W0E5xddlvA213PldPGIa5Sb0pkhAsEeflF+t33G4icPbnOxG/uN
f4rB/dMpxmJmv3aN4DUiblyAbeVxsRMNoyHnaEp06n7ewlVto9v5umGs8Lw5RGQt
ZG4ivf7gRCBNRKoRRpzgO7FIigqrohuYu6L63dRckjenQK2zchFvXY1pHaLmNjqx
cC/Zfl7K4R6xCQPdHy1746vtBnh67DUkjo4N7vTgYG3ct0K5iJwRF9IZDgPoLsUS
KLDUvWzkU6Zj31s3Bsvq+7qhdkCM7F6gzoo28AMKPswclr5V1J/tgfaMyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmEM1fs98lpMtKhfar0DqbC91KfMB8GA1UdIwQY
MBaAFNaJceodIrXs2hqXWfBcJsjFakaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW9seDZoMGl0ZXphR3BkWjhGd215TVZxUm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My80MmMzNTUtNTg1YS00OGJiLTllNGEt
YTQ3NTQwZmVkNGI5LzEvMW9seDZoMGl0ZXphR3BkWjhGd215TVZxUm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My80MmMzNTUtNTg1YS00OGJiLTllNGEtYTQ3NTQwZmVkNGI5
LzEvMW9seDZoMGl0ZXphR3BkWjhGd215TVZxUm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq73jnfqp
hzCgHdovdSMeiqTNPwo9kevU8AhcaKkfKh9GJuM5oTFBoWOLxt0AX2mpd+FRzfxx
ogy4URbJuUNZK2UQdEKTW4Jb6IQ9W01A6sNLhNBrQX+oq2USRA+M2OHhHo3S5ujN
CuRJ0wjwUM/v3rBITNF2sIj+6gCrBpvh9xKjFfh+pPGiScbicz2zhkR/2k0ak290
/4XHCrfCVv7pfrjI9esmt8Y2svAfShj9BFO11WeXs1aZq74MayvqTfom10FguzvM
6yGccaAjjp/qRcE7QZkvzwG9egzoUSUlXlPsGcWxYMBnr+7ZwuXSmCyul+ngTVlC
+44NCCkD3cyUXw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:42:06 2025 by rpki-client