Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
File: oVKeqYh_ni_mqUWpfUgha8FqS0E.mft (raw, json)
Hash identifier: yPyAFGwv0FkDSybkaa0Dc8jAeB3/TlyjvdfrkLIzgDc=
Subject key identifier: 2A:A7:2D:D9:13:09:3D:AB:0F:E2:98:E7:52:21:91:BD:BB:CC:CB:35
Authority key identifier: A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
Certificate issuer: /CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Certificate serial: 0197504683AE03D1B9167B63E72D643D3437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
Manifest number: 106D
Signing time: Sun 08 Jun 2025 16:01:27 +0000
Manifest this update: Sun 08 Jun 2025 16:01:27 +0000
Manifest next update: Mon 09 Jun 2025 16:01:27 +0000
Files and hashes: 1: oVKeqYh_ni_mqUWpfUgha8FqS0E.crl (hash: tfF/BIVy6hw9zEiv196Gypr7LxNIA+D/QtdWXuhB+cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:83:ae:03:d1:b9:16:7b:63:e7:2d:64:3d:34:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Validity
Not Before: Jun 8 16:01:27 2025 GMT
Not After : Jun 9 16:01:27 2025 GMT
Subject: CN=2aa72dd913093dab0fe298e7522191bdbbcccb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:96:e6:d2:4a:ed:48:e2:51:9e:91:97:a3:
ee:34:28:c6:6e:16:72:ea:11:43:c7:5f:9b:ba:31:
4c:d7:56:3a:29:ec:47:a7:c1:ce:c6:ff:e0:7e:15:
f7:02:c1:f4:38:54:04:98:4b:c9:d8:b2:98:9f:c0:
07:bd:41:42:c6:9c:9c:95:8a:77:3d:14:3b:8e:7d:
69:9f:6c:ef:99:5a:69:ea:16:d1:08:47:4b:23:82:
cf:ed:2a:52:1b:37:48:fa:b6:16:7a:71:7b:16:44:
d0:34:71:52:24:59:6d:a0:6e:77:ff:83:b3:de:a1:
6f:ab:c0:48:d3:52:c7:30:a8:d7:e9:9f:0e:39:de:
97:fb:fe:c9:45:b2:ce:f1:75:96:5a:c9:99:f3:a2:
af:67:46:0b:37:7e:2c:33:84:e0:cf:fc:1a:49:e3:
3e:2b:20:c5:27:ec:53:6d:92:7d:c3:f4:a9:7e:42:
fa:92:96:1b:11:2f:1b:97:0d:db:40:6f:23:1f:12:
52:40:5a:d4:02:ab:27:1e:73:bf:b5:7b:83:e9:fa:
f6:10:db:16:6b:48:f0:3a:5a:54:c0:0a:99:0a:6e:
eb:55:39:fa:bf:f7:34:8e:ce:09:b3:4c:62:f7:e6:
16:00:32:e9:3e:04:51:1d:9b:7a:73:1c:05:68:7b:
5a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A7:2D:D9:13:09:3D:AB:0F:E2:98:E7:52:21:91:BD:BB:CC:CB:35
X509v3 Authority Key Identifier:
keyid:A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:69:24:55:62:bc:ff:f4:83:2f:1b:44:82:e0:68:b0:9a:af:
7b:36:50:d4:80:96:ad:ba:82:74:8b:95:33:91:b7:fa:f1:1c:
ce:81:80:51:05:28:95:e4:ff:0e:5f:4e:6a:1a:69:43:65:63:
a1:0f:e2:1a:7c:41:ff:ee:9b:5c:69:ca:82:74:e9:88:12:55:
be:c6:bc:aa:a3:e3:72:0b:f5:a9:da:a2:76:5b:73:59:36:73:
77:2b:eb:3a:c5:08:40:66:b1:54:a5:99:a0:b4:ab:6c:8b:07:
ef:83:e0:11:d8:0d:e0:a2:84:28:89:26:41:d3:3a:36:16:9b:
05:5c:49:31:30:31:50:32:c1:e2:10:83:c3:21:18:3a:ba:f0:
cb:af:38:98:7a:91:d1:bb:0b:24:ab:9e:dd:70:10:c4:35:b0:
8b:d8:18:a4:55:db:82:9a:fe:b0:15:90:3c:5e:2e:e8:e4:ee:
89:ab:37:f5:01:c9:0f:ea:3f:4e:94:1d:92:3d:d3:84:3c:5b:
1f:9b:59:31:01:f9:63:ea:ba:39:92:d5:bd:3b:fc:e8:e1:4e:
db:23:2e:35:d2:95:2c:76:4d:6c:8c:06:3c:55:36:81:35:cc:
e9:06:bf:89:e7:d0:91:c3:00:60:5b:b2:b5:12:04:13:61:42:
52:3f:d5:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQRoOuA9G5Fntj5y1kPTQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNTI5ZWE5ODg3ZjllMmZlNmE5NDVhOTdkNDgyMTZiYzE2
YTRiNDEwHhcNMjUwNjA4MTYwMTI3WhcNMjUwNjA5MTYwMTI3WjAzMTEwLwYDVQQD
EygyYWE3MmRkOTEzMDkzZGFiMGZlMjk4ZTc1MjIxOTFiZGJiY2NjYjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4+W5tJK7UjiUZ6Rl6PuNCjGbhZy
6hFDx1+bujFM11Y6KexHp8HOxv/gfhX3AsH0OFQEmEvJ2LKYn8AHvUFCxpyclYp3
PRQ7jn1pn2zvmVpp6hbRCEdLI4LP7SpSGzdI+rYWenF7FkTQNHFSJFltoG53/4Oz
3qFvq8BI01LHMKjX6Z8OOd6X+/7JRbLO8XWWWsmZ86KvZ0YLN34sM4Tgz/waSeM+
KyDFJ+xTbZJ9w/SpfkL6kpYbES8blw3bQG8jHxJSQFrUAqsnHnO/tXuD6fr2ENsW
a0jwOlpUwAqZCm7rVTn6v/c0js4Js0xi9+YWADLpPgRRHZt6cxwFaHtacQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqnLdkTCT2rD+KY51Ihkb27zMs1MB8GA1UdIwQY
MBaAFKFSnqmIf54v5qlFqX1IIWvBaktBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ZLZXFZaF9uaV9tcVVXcGZVZ2hhOEZxUzBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS84MDA3MDktM2RkMi00YzNmLThlNjkt
NWIxZWFhYzY3MDMwLzEvb1ZLZXFZaF9uaV9tcVVXcGZVZ2hhOEZxUzBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS84MDA3MDktM2RkMi00YzNmLThlNjktNWIxZWFhYzY3MDMw
LzEvb1ZLZXFZaF9uaV9tcVVXcGZVZ2hhOEZxUzBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2kkVWK8
//SDLxtEguBosJqvezZQ1ICWrbqCdIuVM5G3+vEczoGAUQUoleT/Dl9OahppQ2Vj
oQ/iGnxB/+6bXGnKgnTpiBJVvsa8qqPjcgv1qdqidltzWTZzdyvrOsUIQGaxVKWZ
oLSrbIsH74PgEdgN4KKEKIkmQdM6NhabBVxJMTAxUDLB4hCDwyEYOrrwy684mHqR
0bsLJKue3XAQxDWwi9gYpFXbgpr+sBWQPF4u6OTuias39QHJD+o/TpQdkj3ThDxb
H5tZMQH5Y+q6OZLVvTv86OFO2yMuNdKVLHZNbIwGPFU2gTXM6Qa/iefQkcMAYFuy
tRIEE2FCUj/Vdg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 21:03:49 2025 by rpki-client