Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
File: oaLRWp2N_ezej-awwYBNCp7i5ig.mft (raw, json)
Hash identifier: FGWe04syD3EdNd2/mjimn28s2syEDc3phjkp4MUP5DE=
Subject key identifier: EB:DA:73:24:11:4E:4F:CF:7D:B8:DC:93:41:90:96:D4:4C:23:1A:75
Authority key identifier: A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
Certificate issuer: /CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Certificate serial: 01975D5CEAD174FDAF396874E114B17E9035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
Manifest number: 1021
Signing time: Wed 11 Jun 2025 05:00:59 +0000
Manifest this update: Wed 11 Jun 2025 05:00:59 +0000
Manifest next update: Thu 12 Jun 2025 05:00:59 +0000
Files and hashes: 1: g8PGSyPYHcwtTKtN52pgkwL2VLw.roa (hash: d/0R1T8TL/elS7S9V2dPYN7wq40xN73ObdYQKEckxT4=)
2: oaLRWp2N_ezej-awwYBNCp7i5ig.crl (hash: DeN7fWyOkGysFM6LKJhO1JgZf0eTOReNueuchoaz2qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:5c:ea:d1:74:fd:af:39:68:74:e1:14:b1:7e:90:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Validity
Not Before: Jun 11 05:00:59 2025 GMT
Not After : Jun 12 05:00:59 2025 GMT
Subject: CN=ebda7324114e4fcf7db8dc93419096d44c231a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0c:ee:fe:00:f0:4a:9c:b8:99:a8:38:55:3f:
fc:e1:07:0b:84:3d:d6:3b:51:da:f5:f0:58:fe:39:
d0:67:f6:59:6c:25:f5:18:75:0b:73:f5:7f:2d:16:
bf:a1:36:21:bd:49:d3:b1:d3:b1:5e:d0:75:78:c0:
e9:13:69:1d:6c:fa:0b:3d:68:9f:49:db:33:92:26:
f2:07:e0:18:fd:7e:4e:a3:7c:a0:b9:a2:d5:2c:f8:
22:1f:75:fa:97:42:56:13:ae:81:27:14:35:2d:24:
61:67:65:58:df:2a:07:38:6e:ba:d1:02:45:42:d3:
e0:92:99:10:fa:a9:ba:9c:dd:bf:b5:aa:1d:f2:18:
41:db:f4:51:be:dd:93:7c:cc:d9:41:63:61:04:47:
98:56:92:f4:cf:63:f4:95:06:4f:ff:a9:64:b1:df:
9f:97:f9:a8:f7:e4:d1:48:43:0e:c4:2b:f4:24:e3:
3e:84:e6:f2:4c:75:cd:ff:d6:72:9d:62:22:18:58:
0f:f6:09:c4:17:f0:28:52:73:81:0a:0a:b5:09:37:
f1:b3:2b:c9:09:c0:f0:4e:7c:03:d0:4b:6e:c7:8f:
8a:e7:52:49:49:bb:8f:00:00:f0:27:e9:a1:e0:14:
9f:b1:79:06:c4:71:7b:84:54:66:cd:59:47:9c:6f:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DA:73:24:11:4E:4F:CF:7D:B8:DC:93:41:90:96:D4:4C:23:1A:75
X509v3 Authority Key Identifier:
keyid:A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9d:d2:89:6e:fd:f3:ae:fa:31:27:b3:0c:82:7e:98:e0:c1:
46:6f:11:6b:4b:f7:90:b0:0e:a0:ab:b6:03:de:82:78:d5:fb:
b9:38:66:57:b2:5d:fd:9f:cf:6a:97:3b:23:7b:98:fe:aa:07:
14:24:42:6d:01:d5:bb:8f:93:b0:99:d7:76:5c:74:a0:c3:ce:
ad:00:3e:59:5f:03:f8:b3:1d:62:35:52:71:a8:6b:11:cc:7e:
ff:71:d4:7c:a0:98:7a:4d:4c:f6:ed:10:4e:a1:b5:69:4a:b7:
d8:23:2b:e9:fc:c7:fe:e6:74:d7:36:23:bd:86:e6:02:82:5f:
25:bb:4f:05:03:7c:21:91:77:3c:0d:5b:3a:4f:ad:da:53:04:
23:98:96:c9:c5:f3:d2:1b:c7:b1:d3:31:a5:4f:94:25:b4:72:
23:5f:92:6d:eb:6c:e8:bc:c0:4d:7b:01:f9:bd:d9:5c:17:b0:
bb:13:46:58:29:3e:8a:9a:44:fe:3a:7c:0c:5b:f9:ec:0d:4b:
a0:6f:0d:c1:cf:5d:31:e0:3f:1d:ee:c6:6b:e5:6f:d2:bb:a6:
2d:b7:33:15:d4:7b:3d:6f:9e:c3:a2:cf:89:ba:9f:69:40:d9:
56:79:3f:73:4e:09:0c:af:a2:1e:b7:45:5e:32:be:b5:4d:06:
4b:31:e1:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddXOrRdP2vOWh04RSxfpA1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYTJkMTVhOWQ4ZGZkZWNkZThmZTZiMGMxODA0ZDBhOWVl
MmU2MjgwHhcNMjUwNjExMDUwMDU5WhcNMjUwNjEyMDUwMDU5WjAzMTEwLwYDVQQD
EyhlYmRhNzMyNDExNGU0ZmNmN2RiOGRjOTM0MTkwOTZkNDRjMjMxYTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQzu/gDwSpy4mag4VT/84QcLhD3W
O1Ha9fBY/jnQZ/ZZbCX1GHULc/V/LRa/oTYhvUnTsdOxXtB1eMDpE2kdbPoLPWif
SdszkibyB+AY/X5Oo3yguaLVLPgiH3X6l0JWE66BJxQ1LSRhZ2VY3yoHOG660QJF
QtPgkpkQ+qm6nN2/taod8hhB2/RRvt2TfMzZQWNhBEeYVpL0z2P0lQZP/6lksd+f
l/mo9+TRSEMOxCv0JOM+hObyTHXN/9ZynWIiGFgP9gnEF/AoUnOBCgq1CTfxsyvJ
CcDwTnwD0Etux4+K51JJSbuPAADwJ+mh4BSfsXkGxHF7hFRmzVlHnG/nPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvacyQRTk/Pfbjck0GQltRMIxp1MB8GA1UdIwQY
MBaAFKGi0Vqdjf3s3o/msMGATQqe4uYoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2FMUldwMk5fZXplai1hd3dZQk5DcDdpNWlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9iNjQwYTYtN2VjZC00MjBiLTg2ZWQt
ODZkMTk0YWU4YTcxLzEvb2FMUldwMk5fZXplai1hd3dZQk5DcDdpNWlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9iNjQwYTYtN2VjZC00MjBiLTg2ZWQtODZkMTk0YWU4YTcx
LzEvb2FMUldwMk5fZXplai1hd3dZQk5DcDdpNWlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm53SiW79
8676MSezDIJ+mODBRm8Ra0v3kLAOoKu2A96CeNX7uThmV7Jd/Z/Papc7I3uY/qoH
FCRCbQHVu4+TsJnXdlx0oMPOrQA+WV8D+LMdYjVScahrEcx+/3HUfKCYek1M9u0Q
TqG1aUq32CMr6fzH/uZ01zYjvYbmAoJfJbtPBQN8IZF3PA1bOk+t2lMEI5iWycXz
0hvHsdMxpU+UJbRyI1+Sbets6LzATXsB+b3ZXBewuxNGWCk+ippE/jp8DFv57A1L
oG8Nwc9dMeA/He7Ga+Vv0rumLbczFdR7PW+ew6LPibqfaUDZVnk/c04JDK+iHrdF
XjK+tU0GSzHhgw==
-----END CERTIFICATE-----
Generated at Wed Jun 11 10:37:29 2025 by rpki-client