Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
File: x2omXKitcnOooTChdjKD0v8bTdo.mft (raw, json)
Hash identifier: Dd8xdk31MX/wU5bmYmUYC3+mS6rtZWRQS2Z7c1WRDcg=
Subject key identifier: 1A:F5:62:E8:B8:03:B0:FA:7E:DB:72:37:4E:4A:C2:8E:7F:D3:EC:C7
Authority key identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
Certificate issuer: /CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Certificate serial: 0197469E5BB2BCEB9E673D2DFA367AA867EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
Manifest number: 139F
Signing time: Fri 06 Jun 2025 19:01:12 +0000
Manifest this update: Fri 06 Jun 2025 19:01:12 +0000
Manifest next update: Sat 07 Jun 2025 19:01:12 +0000
Files and hashes: 1: nHRmCOgf4MDZq-VWKLaXfvZ-bz8.roa (hash: 5Mcf4NqGw75Ujcm8ujMV0dwvrhU39vCuPFd4mY9vPEw=)
2: x2omXKitcnOooTChdjKD0v8bTdo.crl (hash: He7bLXn91uUDBmDm/N3Pgl8HA/SQcoNhM9yf83MQeME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:5b:b2:bc:eb:9e:67:3d:2d:fa:36:7a:a8:67:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Validity
Not Before: Jun 6 19:01:12 2025 GMT
Not After : Jun 7 19:01:12 2025 GMT
Subject: CN=1af562e8b803b0fa7edb72374e4ac28e7fd3ecc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:dd:95:0e:8b:17:c4:b5:77:84:cd:86:09:
84:e0:04:25:5b:46:0b:4e:25:31:57:46:06:c3:ca:
d4:f9:2c:f0:44:9b:67:aa:fc:d3:ee:95:50:80:38:
f4:28:83:5b:1b:d1:4d:88:ad:ba:1e:2e:7a:5b:71:
eb:65:ce:4b:ae:1d:a9:3a:ed:07:27:5f:af:dd:ed:
7f:24:8c:72:2b:2f:6b:8d:86:e5:47:b9:56:94:ed:
6d:70:79:29:a7:c5:5b:0c:89:7b:e5:8f:74:6e:30:
32:be:bb:71:e6:a1:bd:c3:7b:2b:3e:b5:3c:7b:1c:
aa:c4:63:fc:36:43:e0:7c:a0:76:03:b5:b4:80:92:
c7:3d:13:9d:45:67:ad:67:f2:15:9b:65:4a:a0:02:
3d:10:71:a4:2b:05:f8:9a:6e:b3:dc:b7:1e:18:94:
ff:77:4f:13:ed:bd:3a:1c:18:e8:f1:f4:5c:cd:00:
f6:b5:51:8c:bd:da:58:19:41:7c:47:c7:17:d4:58:
27:f7:cf:b9:5a:32:21:2e:ba:3d:a0:1e:ae:5d:de:
b3:aa:9e:1f:de:d6:62:7d:a7:58:d0:05:9f:b8:21:
f6:78:05:43:f3:99:98:7f:f9:09:69:2f:53:0a:3b:
66:a1:f5:15:0f:74:09:4e:de:74:36:92:be:16:0d:
b0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F5:62:E8:B8:03:B0:FA:7E:DB:72:37:4E:4A:C2:8E:7F:D3:EC:C7
X509v3 Authority Key Identifier:
keyid:C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b4:c2:a6:d6:fa:e4:b9:43:7f:7f:67:f0:16:3e:3f:ea:74:
55:a6:c5:ab:60:7f:f8:05:af:0c:b6:ac:ed:fa:00:4e:50:4b:
22:bf:ca:e1:eb:a2:0e:dd:61:19:77:ee:b5:ca:24:22:4d:64:
ae:d7:f3:ad:1a:d2:ec:49:00:1f:d8:e8:f4:44:5f:b2:da:10:
07:3c:b3:dc:96:71:aa:f0:77:91:cf:f6:fd:0a:94:2c:fe:91:
d6:fc:c6:be:a2:f2:fe:c1:45:eb:b2:c7:1a:07:42:f0:71:87:
b6:8b:b7:b1:9b:32:4d:96:f3:70:14:a4:e7:69:db:07:64:94:
a9:7a:61:0b:15:64:d2:54:b0:e3:5b:a5:71:db:54:cb:b8:41:
94:15:db:b6:3d:4b:fa:b1:f8:23:f5:ac:d9:fd:38:44:70:42:
db:a2:bb:e4:35:99:39:ba:a8:97:3c:ff:21:12:e1:64:52:49:
d8:e7:cb:41:31:20:11:14:69:82:97:00:83:ea:97:16:b3:3e:
cf:11:18:fe:f4:8d:bc:76:f2:2c:c8:43:53:c2:55:80:ae:3c:
82:a9:ce:af:d2:3e:05:f5:c4:7e:42:95:62:72:e6:3e:56:af:
77:10:47:91:07:b7:55:94:d6:b6:b7:55:f9:1a:ec:2f:ca:23:
62:ac:f9:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnluyvOueZz0t+jZ6qGfvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmEyNjVjYThhZDcyNzNhOGExMzBhMTc2MzI4M2QyZmYx
YjRkZGEwHhcNMjUwNjA2MTkwMTEyWhcNMjUwNjA3MTkwMTEyWjAzMTEwLwYDVQQD
EygxYWY1NjJlOGI4MDNiMGZhN2VkYjcyMzc0ZTRhYzI4ZTdmZDNlY2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubrdlQ6LF8S1d4TNhgmE4AQlW0YL
TiUxV0YGw8rU+SzwRJtnqvzT7pVQgDj0KINbG9FNiK26Hi56W3HrZc5Lrh2pOu0H
J1+v3e1/JIxyKy9rjYblR7lWlO1tcHkpp8VbDIl75Y90bjAyvrtx5qG9w3srPrU8
exyqxGP8NkPgfKB2A7W0gJLHPROdRWetZ/IVm2VKoAI9EHGkKwX4mm6z3LceGJT/
d08T7b06HBjo8fRczQD2tVGMvdpYGUF8R8cX1Fgn98+5WjIhLro9oB6uXd6zqp4f
3tZifadY0AWfuCH2eAVD85mYf/kJaS9TCjtmofUVD3QJTt50NpK+Fg2wZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBr1Yui4A7D6fttyN05Kwo5/0+zHMB8GA1UdIwQY
MBaAFMdqJlyorXJzqKEwoXYyg9L/G03aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJvbVhLaXRjbk9vb1RDaGRqS0QwdjhiVGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wMmMyNTQtMzZiZi00YzhjLTk4ZDkt
N2U5ODM3YTkyMjhjLzEveDJvbVhLaXRjbk9vb1RDaGRqS0QwdjhiVGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8wMmMyNTQtMzZiZi00YzhjLTk4ZDktN2U5ODM3YTkyMjhj
LzEveDJvbVhLaXRjbk9vb1RDaGRqS0QwdjhiVGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrTCptb6
5LlDf39n8BY+P+p0VabFq2B/+AWvDLas7foATlBLIr/K4euiDt1hGXfutcokIk1k
rtfzrRrS7EkAH9jo9ERfstoQBzyz3JZxqvB3kc/2/QqULP6R1vzGvqLy/sFF67LH
GgdC8HGHtou3sZsyTZbzcBSk52nbB2SUqXphCxVk0lSw41ulcdtUy7hBlBXbtj1L
+rH4I/Ws2f04RHBC26K75DWZObqolzz/IRLhZFJJ2OfLQTEgERRpgpcAg+qXFrM+
zxEY/vSNvHbyLMhDU8JVgK48gqnOr9I+BfXEfkKVYnLmPlavdxBHkQe3VZTWtrdV
+RrsL8ojYqz5Pw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:31 2025 by rpki-client