Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
File: O_xkMfUzO23dMeg7aWgtjo7gb8E.mft (raw, json)
Hash identifier: Et5hIE5CEI98hbvckERZuZxBCegcD0EJXjDhAg/VE1s=
Subject key identifier: 5D:3B:53:A6:98:91:B6:2C:A8:C4:7A:4B:77:24:82:96:7D:F0:80:05
Authority key identifier: 3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
Certificate issuer: /CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Certificate serial: 0197CA951403CA90F7D0AF8C7C7FE83544DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 10:00:56 +0000
Manifest this update: Wed 02 Jul 2025 10:00:56 +0000
Manifest next update: Thu 03 Jul 2025 10:00:56 +0000
Files and hashes: 1: O_xkMfUzO23dMeg7aWgtjo7gb8E.crl (hash: ORBHOT8atzkFbwo1gcIwqgs2aoGrDw+hN+c/SP5woYg=)
2: nEwnWGMzytbCFQz7rWdabIS9yB0.roa (hash: 02h618IubyXzMPvUxA826AJsgMoOVyOdwoqacffXAD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:95:14:03:ca:90:f7:d0:af:8c:7c:7f:e8:35:44:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Validity
Not Before: Jul 2 10:00:56 2025 GMT
Not After : Jul 3 10:00:56 2025 GMT
Subject: CN=5d3b53a69891b62ca8c47a4b772482967df08005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e0:95:91:81:5b:5f:ec:2c:4c:83:64:0c:40:
90:5b:61:db:14:dd:cb:04:a8:19:e1:2b:a3:78:a1:
1c:fa:64:c7:fa:ba:1e:a3:b0:95:a8:68:b2:7d:01:
8d:fd:ae:f8:a4:d2:b9:30:bb:3c:43:d4:60:c2:04:
ed:42:0f:14:7b:d8:64:eb:01:59:c6:f4:e7:f0:c6:
35:23:2c:ad:33:17:7d:ca:23:93:e4:bb:da:9b:a9:
f3:09:e2:09:61:f9:3d:7c:2e:99:14:48:b5:ed:aa:
15:69:67:07:3b:3b:44:a3:e0:89:db:4f:fb:1b:a7:
08:bb:3a:14:c9:62:67:df:c7:1f:fa:cd:04:a0:ac:
de:15:3c:09:69:2c:03:8d:05:cc:2e:b4:eb:4b:8a:
34:6f:b5:a8:73:00:87:a5:f5:2c:58:f6:53:11:60:
e1:8e:95:5e:47:0d:73:10:8c:42:29:2f:44:5e:6e:
66:6b:13:16:4b:cd:1f:b4:f8:8b:2c:09:90:fd:43:
b5:9a:e8:01:4c:fc:41:7c:01:87:14:23:4e:cd:d8:
54:50:51:00:c1:75:75:47:d4:5c:94:84:c5:1f:8d:
d3:d6:b1:bb:8e:71:20:6b:fc:35:7c:84:12:84:3a:
66:ae:9d:e0:d3:d1:f2:b5:ae:f6:97:6d:ad:14:0b:
a9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3B:53:A6:98:91:B6:2C:A8:C4:7A:4B:77:24:82:96:7D:F0:80:05
X509v3 Authority Key Identifier:
keyid:3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9d:76:4d:a8:1f:5c:06:b0:e0:ea:a8:4f:2f:2a:3a:f9:e8:
cf:b5:28:31:43:b8:ed:e5:a1:cd:03:6d:bf:4b:83:fc:19:1f:
ca:7c:c8:ca:db:b2:62:d9:7e:e2:24:e0:62:59:58:d7:fb:4b:
59:b0:8a:3f:18:0d:cb:96:e1:52:50:66:a6:13:63:ba:ac:5c:
07:2a:e6:8f:ae:4d:11:0b:e0:bb:99:37:15:7e:57:ea:4e:85:
25:ff:fe:01:c1:41:c5:d1:15:48:39:35:08:82:a3:6b:d2:f8:
24:ce:a7:9e:9d:34:21:a3:b1:f5:ff:7e:db:c2:dd:fa:21:80:
dd:b6:49:17:b9:23:f3:14:f5:45:8a:36:36:3b:e3:c8:48:99:
05:32:46:64:d3:0d:59:57:a1:c3:d5:37:ab:3d:7b:97:20:f4:
88:0b:fd:dc:e4:07:d8:aa:cb:e4:11:50:68:f2:f0:da:d5:05:
82:b1:4f:bb:33:de:c2:24:b3:05:42:2c:6e:13:79:7f:a5:9c:
05:d5:d3:68:f8:80:14:88:8f:a9:0e:a1:5c:02:41:15:a2:3c:
51:2f:79:72:2d:31:d7:71:5a:ba:e7:5a:e6:d8:41:9f:e3:1d:
a2:81:d5:29:b2:f3:6f:43:aa:a9:ab:96:e8:02:c1:43:b5:65:
98:5c:1f:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKlRQDypD30K+MfH/oNUTbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZmM2NDMxZjUzMzNiNmRkZDMxZTgzYjY5NjgyZDhlOGVl
MDZmYzEwHhcNMjUwNzAyMTAwMDU2WhcNMjUwNzAzMTAwMDU2WjAzMTEwLwYDVQQD
Eyg1ZDNiNTNhNjk4OTFiNjJjYThjNDdhNGI3NzI0ODI5NjdkZjA4MDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+CVkYFbX+wsTINkDECQW2HbFN3L
BKgZ4SujeKEc+mTH+roeo7CVqGiyfQGN/a74pNK5MLs8Q9RgwgTtQg8Ue9hk6wFZ
xvTn8MY1IyytMxd9yiOT5Lvam6nzCeIJYfk9fC6ZFEi17aoVaWcHOztEo+CJ20/7
G6cIuzoUyWJn38cf+s0EoKzeFTwJaSwDjQXMLrTrS4o0b7WocwCHpfUsWPZTEWDh
jpVeRw1zEIxCKS9EXm5maxMWS80ftPiLLAmQ/UO1mugBTPxBfAGHFCNOzdhUUFEA
wXV1R9RclITFH43T1rG7jnEga/w1fIQShDpmrp3g09Hyta72l22tFAupCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF07U6aYkbYsqMR6S3ckgpZ98IAFMB8GA1UdIwQY
MBaAFDv8ZDH1Mztt3THoO2loLY6O4G/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mNWE4YjEtNmUyMi00OTYxLWIzOGIt
ZmUwMWVlYzQwZWMxLzEvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9mNWE4YjEtNmUyMi00OTYxLWIzOGItZmUwMWVlYzQwZWMx
LzEvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIp12Tagf
XAaw4OqoTy8qOvnoz7UoMUO47eWhzQNtv0uD/BkfynzIytuyYtl+4iTgYllY1/tL
WbCKPxgNy5bhUlBmphNjuqxcByrmj65NEQvgu5k3FX5X6k6FJf/+AcFBxdEVSDk1
CIKja9L4JM6nnp00IaOx9f9+28Ld+iGA3bZJF7kj8xT1RYo2NjvjyEiZBTJGZNMN
WVehw9U3qz17lyD0iAv93OQH2KrL5BFQaPLw2tUFgrFPuzPewiSzBUIsbhN5f6Wc
BdXTaPiAFIiPqQ6hXAJBFaI8US95ci0x13Fauuda5thBn+MdooHVKbLzb0OqqauW
6ALBQ7VlmFwfaw==
-----END CERTIFICATE-----
Generated at Wed Jul 2 13:02:41 2025 by rpki-client