Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json)
Hash identifier: kHX/IQYeSAUmz3S4855t99l96ZmyW6MaClw12mGCJZs=
Subject key identifier: 42:98:0D:E8:A6:EF:D7:01:C0:C9:8C:C3:76:D9:F4:E3:A0:D0:9F:02
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 019767E0B60C5741BFAEBB4BE85D42307396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
Manifest number: 0DF8
Signing time: Fri 13 Jun 2025 06:01:09 +0000
Manifest this update: Fri 13 Jun 2025 06:01:09 +0000
Manifest next update: Sat 14 Jun 2025 06:01:09 +0000
Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: mM/iNIEREEhskK0ahYdPAhq6QtLg0JhDVfOYrNbAKq0=)
2: uurNEPjhRtDIDBb3Oc-e5-rgs-I.roa (hash: N52vo6FqVd0GdLu55AAXlbmzEZo+baOISMz+vvdeY6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:e0:b6:0c:57:41:bf:ae:bb:4b:e8:5d:42:30:73:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Jun 13 06:01:09 2025 GMT
Not After : Jun 14 06:01:09 2025 GMT
Subject: CN=42980de8a6efd701c0c98cc376d9f4e3a0d09f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:e7:dc:6e:31:ba:4f:ef:90:46:6b:35:6c:
60:38:6a:fc:a0:f0:d0:ed:43:36:7f:12:82:f5:75:
c8:a5:25:90:04:d8:b0:c2:eb:e9:b7:e8:38:fa:f8:
61:c7:d4:29:76:c2:e7:2c:33:d9:5a:37:59:4c:ba:
25:78:23:b2:00:3a:1d:38:7d:2d:82:e3:e1:ac:03:
49:76:f8:27:aa:98:6a:f9:66:db:97:52:85:3f:81:
40:b7:6c:1e:1b:e4:ef:0f:fa:ce:fd:76:35:2e:bc:
92:d4:6e:96:c7:f9:f6:25:f2:16:29:e0:67:09:25:
f8:a9:46:7a:28:6f:68:6d:69:92:8b:88:27:6d:2b:
b4:4c:c2:03:a9:a4:4e:64:52:e5:70:7b:a4:8c:c3:
48:e9:c3:c9:bc:ec:4c:df:34:54:a5:da:7b:1e:40:
67:b9:a2:e5:a2:59:2c:e6:dc:a5:95:0b:eb:f0:26:
53:3b:d1:12:74:49:e3:7f:ea:6f:5e:e9:c1:1c:e8:
da:99:6c:6c:28:b7:b2:5f:54:9e:da:23:ef:e9:80:
bd:ea:6d:5e:b0:aa:6d:84:78:99:86:b7:6d:56:2d:
fb:a2:91:91:3e:13:e6:75:d7:02:62:0a:3c:1a:c8:
86:b7:a7:d2:9f:e4:74:e4:44:37:9f:f9:48:a7:ec:
13:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:98:0D:E8:A6:EF:D7:01:C0:C9:8C:C3:76:D9:F4:E3:A0:D0:9F:02
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:80:c7:1e:90:0c:a4:d3:33:41:f3:5b:7e:79:40:02:92:be:
1b:82:0b:07:cb:f4:54:c3:69:43:ff:aa:1c:3a:50:54:59:f5:
35:a4:51:0e:28:26:62:66:fb:90:52:bf:ae:72:fd:f8:03:07:
46:d2:c6:90:a6:c5:78:03:d1:33:67:74:91:86:5f:6e:34:76:
72:65:a5:08:aa:d5:51:e6:26:e0:41:4b:43:5f:76:ab:88:d8:
e5:ae:f8:37:4a:1a:b2:91:1f:00:8f:5f:d4:bf:29:8f:bd:c4:
c8:0f:f2:2e:31:08:eb:b8:a1:ad:31:18:c8:17:66:8f:b7:37:
fc:3c:b2:60:9c:df:66:bb:00:ef:69:71:13:71:90:8d:6e:51:
e4:9b:97:7d:6b:33:b1:0c:0b:a1:7e:13:d0:46:21:1e:f4:43:
e8:5e:11:d8:cb:7a:c4:e7:eb:56:12:eb:55:eb:b5:94:dd:77:
10:d8:b0:4e:3e:6b:d6:48:3c:39:f6:8e:0f:3d:f6:1c:62:35:
70:a7:78:7c:ab:9d:79:1e:a9:aa:bc:c0:0c:5b:42:c0:09:8a:
0f:f8:fc:59:2d:51:b1:bc:4a:65:d6:bf:8a:90:7e:32:1a:08:
5d:7b:dc:33:3c:c0:ac:3d:08:19:1e:fd:9e:1e:31:89:f0:7a:
93:fa:aa:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdn4LYMV0G/rrtL6F1CMHOWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MmM2N2I0YWI0YWY4NmZlNjFlYThjNmUxN2QxMWUzZTA1
ZDBhNTEwHhcNMjUwNjEzMDYwMTA5WhcNMjUwNjE0MDYwMTA5WjAzMTEwLwYDVQQD
Eyg0Mjk4MGRlOGE2ZWZkNzAxYzBjOThjYzM3NmQ5ZjRlM2EwZDA5ZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwbn3G4xuk/vkEZrNWxgOGr8oPDQ
7UM2fxKC9XXIpSWQBNiwwuvpt+g4+vhhx9QpdsLnLDPZWjdZTLoleCOyADodOH0t
guPhrANJdvgnqphq+Wbbl1KFP4FAt2weG+TvD/rO/XY1LryS1G6Wx/n2JfIWKeBn
CSX4qUZ6KG9obWmSi4gnbSu0TMIDqaROZFLlcHukjMNI6cPJvOxM3zRUpdp7HkBn
uaLlolks5tyllQvr8CZTO9ESdEnjf+pvXunBHOjamWxsKLeyX1Se2iPv6YC96m1e
sKpthHiZhrdtVi37opGRPhPmddcCYgo8GsiGt6fSn+R05EQ3n/lIp+wTiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKYDeim79cBwMmMw3bZ9OOg0J8CMB8GA1UdIwQY
MBaAFDgsZ7SrSvhv5h6oxuF9EePgXQpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUt
Mjc5OTA2ZWI1Yzg1LzEvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUtMjc5OTA2ZWI1Yzg1
LzEvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoDHHpAM
pNMzQfNbfnlAApK+G4ILB8v0VMNpQ/+qHDpQVFn1NaRRDigmYmb7kFK/rnL9+AMH
RtLGkKbFeAPRM2d0kYZfbjR2cmWlCKrVUeYm4EFLQ192q4jY5a74N0oaspEfAI9f
1L8pj73EyA/yLjEI67ihrTEYyBdmj7c3/DyyYJzfZrsA72lxE3GQjW5R5JuXfWsz
sQwLoX4T0EYhHvRD6F4R2Mt6xOfrVhLrVeu1lN13ENiwTj5r1kg8OfaODz32HGI1
cKd4fKudeR6pqrzADFtCwAmKD/j8WS1RsbxKZda/ipB+MhoIXXvcMzzArD0IGR79
nh4xifB6k/qq1w==
-----END CERTIFICATE-----
Generated at Fri Jun 13 09:12:18 2025 by rpki-client