
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
File: O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json)
Hash identifier: fE55u/PuU7Ktf+H/en6cO/1OCASZxMPRo5Y4/lDhFhY=
Subject key identifier: 65:54:F3:90:67:9E:02:5C:2F:5C:66:08:01:FC:B9:19:5C:8F:D2:17
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Certificate issuer: /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial: 01976403664E0EBE295E97E1FF86E741ADCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
Manifest number: 1592
Signing time: Thu 12 Jun 2025 12:00:33 +0000
Manifest this update: Thu 12 Jun 2025 12:00:33 +0000
Manifest next update: Fri 13 Jun 2025 12:00:33 +0000
Files and hashes: 1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: Hf5RR0N3ewLof74VxTJ+oqpRP2PkIpdQZQGtNrJaGvU=)
2: ZlDfI1uu-dfJ7bkWIwNbrouZ8LU.roa (hash: RwbfiOlsTOjHsdHQ269mkGq2Xn2wHvdgM/XYUPYNH8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:03:66:4e:0e:be:29:5e:97:e1:ff:86:e7:41:ad:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
Validity
Not Before: Jun 12 12:00:33 2025 GMT
Not After : Jun 13 12:00:33 2025 GMT
Subject: CN=6554f390679e025c2f5c660801fcb9195c8fd217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:76:e2:41:68:a5:02:00:a4:8a:6f:bc:d1:66:
d6:43:f1:2a:ea:ad:74:98:0e:10:e1:6b:8f:e9:4c:
d7:11:d8:b7:6a:ec:df:6b:95:be:7e:a1:f6:e3:9c:
47:f9:a2:f7:ad:00:f1:25:f7:5c:92:3f:e2:fc:61:
9c:71:85:6a:71:2f:1e:17:fd:2d:ea:0f:5c:e1:92:
9f:55:03:0e:8a:4e:5f:a0:db:ac:e3:20:d6:1f:a1:
19:9d:24:1b:98:1e:08:fd:80:be:73:c8:f3:ad:94:
14:01:d1:56:70:92:15:df:80:ed:f8:c4:71:ec:ad:
4e:44:ef:f3:91:47:47:d4:f8:d1:bf:4d:f0:89:8a:
f6:f0:25:cb:c7:0a:a7:80:0c:40:9a:35:84:01:77:
87:af:bf:75:f0:77:67:1f:86:dc:e3:17:36:20:10:
da:7a:0b:e1:b4:bf:d3:0a:80:32:54:64:66:e8:9e:
8f:ce:9a:93:1c:a3:63:17:ef:37:93:7a:32:6a:99:
2f:fd:66:4d:14:fe:f2:0d:c8:95:f9:e7:a6:65:c3:
7b:2a:38:7a:2e:9d:12:bf:91:3e:19:14:14:0e:91:
71:0c:d5:c2:36:46:8a:1b:23:67:07:8f:40:02:57:
1e:3e:70:0a:d1:93:84:86:a1:2b:eb:50:2d:27:5d:
e1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:54:F3:90:67:9E:02:5C:2F:5C:66:08:01:FC:B9:19:5C:8F:D2:17
X509v3 Authority Key Identifier:
keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8d:20:4f:b5:46:f5:2d:8b:46:57:ab:25:51:c4:5a:34:b4:
97:2c:54:ca:6a:06:79:3e:0f:79:42:e1:c0:8c:04:51:e2:35:
96:b7:d7:0d:90:09:6f:02:48:fc:56:af:d2:e9:5e:fd:0a:6f:
02:7f:40:ea:85:bc:87:08:f5:ca:e6:8d:4f:8f:ba:30:bc:f9:
d4:55:59:30:17:5d:d4:a4:4a:bc:78:af:6a:25:90:ad:63:89:
a3:9c:56:e0:e1:20:15:64:e6:cd:ff:e8:6d:6a:63:16:07:42:
25:dd:eb:b1:aa:6d:85:ae:cb:3a:ef:47:c2:bc:98:9a:1b:94:
99:0e:48:50:59:d8:30:2c:bf:71:f5:33:fa:e7:b5:55:1e:9c:
6d:65:4c:a4:d6:02:29:26:86:f8:1d:87:64:5c:9d:2f:43:f2:
88:39:e0:06:d9:56:51:6a:da:d8:45:17:dc:bc:08:67:51:1e:
bc:ac:12:cb:95:7b:1b:c8:75:13:13:e4:c5:96:3d:d6:37:d8:
fc:8e:05:ae:5f:8b:f7:47:6a:78:26:82:d4:2a:79:29:4a:a7:
7a:03:0e:68:a6:74:b8:ea:a4:a2:1c:33:fd:94:9e:9c:c9:ff:
14:10:50:68:6e:68:84:0b:bd:2b:8c:8a:4b:6b:43:16:07:c3:
21:a4:67:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdkA2ZODr4pXpfh/4bnQa3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZTJmMDE2NGI2NmE3Njc5NTg2MGI0ZWEzNTg2ZmFkNTYz
YmFjNDcwHhcNMjUwNjEyMTIwMDMzWhcNMjUwNjEzMTIwMDMzWjAzMTEwLwYDVQQD
Eyg2NTU0ZjM5MDY3OWUwMjVjMmY1YzY2MDgwMWZjYjkxOTVjOGZkMjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XbiQWilAgCkim+80WbWQ/Eq6q10
mA4Q4WuP6UzXEdi3auzfa5W+fqH245xH+aL3rQDxJfdckj/i/GGccYVqcS8eF/0t
6g9c4ZKfVQMOik5foNus4yDWH6EZnSQbmB4I/YC+c8jzrZQUAdFWcJIV34Dt+MRx
7K1ORO/zkUdH1PjRv03wiYr28CXLxwqngAxAmjWEAXeHr7918HdnH4bc4xc2IBDa
egvhtL/TCoAyVGRm6J6PzpqTHKNjF+83k3oyapkv/WZNFP7yDciV+eemZcN7Kjh6
Lp0Sv5E+GRQUDpFxDNXCNkaKGyNnB49AAlcePnAK0ZOEhqEr61AtJ13hAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVU85BnngJcL1xmCAH8uRlcj9IXMB8GA1UdIwQY
MBaAFDvi8BZLZqdnlYYLTqNYb61WO6xHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTy1Md0ZrdG1wMmVWaGd0T28xaHZyVlk3ckVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNzJiNjctNzZlYy00YWZhLWIzNzYt
ZjlhZDM4MDUxMjIwLzEvTy1Md0ZrdG1wMmVWaGd0T28xaHZyVlk3ckVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jNzJiNjctNzZlYy00YWZhLWIzNzYtZjlhZDM4MDUxMjIw
LzEvTy1Md0ZrdG1wMmVWaGd0T28xaHZyVlk3ckVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqY0gT7VG
9S2LRlerJVHEWjS0lyxUymoGeT4PeULhwIwEUeI1lrfXDZAJbwJI/Fav0ule/Qpv
An9A6oW8hwj1yuaNT4+6MLz51FVZMBdd1KRKvHivaiWQrWOJo5xW4OEgFWTmzf/o
bWpjFgdCJd3rsaptha7LOu9HwryYmhuUmQ5IUFnYMCy/cfUz+ue1VR6cbWVMpNYC
KSaG+B2HZFydL0PyiDngBtlWUWra2EUX3LwIZ1EevKwSy5V7G8h1ExPkxZY91jfY
/I4Frl+L90dqeCaC1Cp5KUqnegMOaKZ0uOqkohwz/ZSenMn/FBBQaG5ohAu9K4yK
S2tDFgfDIaRnmQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 20:57:20 2025 by rpki-client