Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
File: O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json)
Hash identifier: N20TFLDcviZVGA6sWhd+kMwC2V3n0p+q+5WX6fWyO98=
Subject key identifier: CF:79:96:84:21:C0:06:D7:C4:63:6C:EE:3A:E8:BF:5A:49:8D:F8:A4
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial: 01974B8DCFDF607F79F39E678462CD1E3C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
Manifest number: 1585
Signing time: Sat 07 Jun 2025 18:01:14 +0000
Manifest this update: Sat 07 Jun 2025 18:01:14 +0000
Manifest next update: Sun 08 Jun 2025 18:01:14 +0000
Files and hashes: 1: 9BmVkWHqnPagXm5os2wnNWK9INk.roa (hash: 8RngoNykTFTJnIq5oyzFYRTf3TP7cyLKV5cry6M5mgE=)
2: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: 9qCwljMf1CaxIc9DyTka7Hk63u7HzSGjWM1shWGXQBE=)
3: UceenS0AW37r9tIac-IPww_60R8.roa (hash: V8RGgQn1l8C/6JS3VLbt67ThWSSYzYF+1zDXdf2gvmc=)
4: XMfgeWsouW7zDItYh1JZ2jjj45k.roa (hash: vbzvSSJRPNTDibm8O4OpKJZcb0gn8EqIPSb4vf2O1YQ=)
5: bfaBM6FlZYXa4nbuYDgVUb-kZ3Q.roa (hash: xgsMr2NauAKQSxWJwA/kjcmJfb7a4hHGqMdZNQtzfIo=)
6: ect9rt1iTOwU4l499MLwvhBDleI.roa (hash: uzI2RBjcPd1qUaeOmN2JzrZzLgn4U0x7LpGFh6u7YtQ=)
7: k4SuTTWtdBVQ_LKZQ1KA6lDONew.roa (hash: wlxEmhfh10lsvP/Vr0aaNNA3fnG6+QPuVB7G+98rWuk=)
8: n15MEYNvv2pMvnP0JWDh9ke-rMw.roa (hash: a5c2NX6rzpDN08ss2QyMsYiZjq6GT9uV8kCAFrcH1WA=)
9: wb50_D1ewkMOUFxLDz2rdaS7yFE.roa (hash: oMtAJWBhFmyN0NJmKrxaTP7Y/Gbn/GmAXozjV5Dt6I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:cf:df:60:7f:79:f3:9e:67:84:62:cd:1e:3c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Validity
Not Before: Jun 7 18:01:14 2025 GMT
Not After : Jun 8 18:01:14 2025 GMT
Subject: CN=cf79968421c006d7c4636cee3ae8bf5a498df8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:e0:d9:0a:e5:2d:b7:65:2f:e0:c9:62:67:
b7:75:34:18:66:ff:8f:0f:1e:b9:be:9b:19:7e:f3:
10:11:5f:d1:6c:69:67:b4:81:23:a9:dd:0f:b8:81:
b4:d2:29:3f:d5:b6:18:6d:8f:dc:c9:af:ab:4f:88:
e1:0b:c8:7e:d0:8e:6a:f5:e0:e4:4a:54:9f:f1:41:
4f:98:10:00:b0:89:40:5b:4d:ea:ba:f2:52:80:86:
20:a8:cc:5a:1f:4f:3e:4d:9b:db:73:39:f9:26:5d:
c0:79:89:d6:78:7f:2a:b2:17:5f:94:e2:01:e3:23:
ae:50:de:7d:82:94:86:3d:da:7f:da:dc:b7:b4:d6:
1c:34:cb:97:be:c9:05:96:ff:ed:94:83:f5:45:50:
89:00:85:cf:e6:d8:43:3c:0e:7d:93:da:9f:c0:a7:
a9:96:5b:78:8c:e6:8d:b5:47:f7:19:ea:28:8d:24:
9d:ae:7e:b6:5b:9e:20:a1:5f:7b:d8:78:81:75:a2:
50:53:2d:4d:c1:57:56:ae:65:41:26:55:c5:97:06:
81:4f:11:b6:9e:db:76:00:c4:e7:bc:f6:15:19:a9:
51:fa:29:43:26:34:04:de:c3:8f:ac:31:80:23:92:
cd:51:49:64:31:e4:9f:6c:93:e2:a7:9c:49:8f:91:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:79:96:84:21:C0:06:D7:C4:63:6C:EE:3A:E8:BF:5A:49:8D:F8:A4
X509v3 Authority Key Identifier:
keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ed:c1:17:a3:04:9a:55:a2:62:4b:1e:e1:74:01:bc:8f:1d:
e3:ba:87:86:d7:f8:13:6a:af:22:ff:ab:e8:2f:16:85:3b:d0:
26:d7:b9:59:02:f0:74:50:7f:30:1e:77:97:93:9a:3e:89:14:
e1:37:e0:f3:d8:74:fd:e6:d7:8c:45:e4:e2:66:2a:01:d4:41:
25:86:20:28:60:6c:a2:b6:98:05:76:75:14:3d:6e:55:e2:07:
0c:fa:df:d3:31:e8:46:74:ff:e9:c8:b4:57:0e:42:ce:cb:b3:
bd:54:24:32:59:a5:c3:3e:b9:64:36:a8:e3:6f:88:7a:a3:0f:
cc:88:1e:07:85:13:40:11:40:96:3b:01:45:c8:2c:db:47:9a:
19:b6:57:2e:8d:a9:a8:66:be:41:bb:f2:e0:a7:52:d4:e5:eb:
4b:ba:b5:f7:aa:83:3c:a6:66:ff:cb:da:2e:61:5d:84:9e:c7:
1b:ae:f4:01:9b:cb:ad:4b:58:3f:1a:dd:44:c7:34:43:e8:0d:
28:75:f9:04:95:60:fc:c8:5c:ef:cb:dc:4f:2c:9c:46:a5:82:
9f:eb:fc:bf:df:f0:21:28:54:15:28:da:9b:4f:ed:27:87:55:
dc:9b:ca:62:a1:4a:bf:bb:9d:35:7a:11:f7:64:db:e6:73:59:
15:df:bd:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjc/fYH95855nhGLNHjwUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZmE2NjM2ZmU2NDQwYWNmMjkzYjc1NzA1YTdhMWRjYWRh
ODQyMGIwHhcNMjUwNjA3MTgwMTE0WhcNMjUwNjA4MTgwMTE0WjAzMTEwLwYDVQQD
EyhjZjc5OTY4NDIxYzAwNmQ3YzQ2MzZjZWUzYWU4YmY1YTQ5OGRmOGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokTg2QrlLbdlL+DJYme3dTQYZv+P
Dx65vpsZfvMQEV/RbGlntIEjqd0PuIG00ik/1bYYbY/cya+rT4jhC8h+0I5q9eDk
SlSf8UFPmBAAsIlAW03quvJSgIYgqMxaH08+TZvbczn5Jl3AeYnWeH8qshdflOIB
4yOuUN59gpSGPdp/2ty3tNYcNMuXvskFlv/tlIP1RVCJAIXP5thDPA59k9qfwKep
llt4jOaNtUf3GeoojSSdrn62W54goV972HiBdaJQUy1NwVdWrmVBJlXFlwaBTxG2
ntt2AMTnvPYVGalR+ilDJjQE3sOPrDGAI5LNUUlkMeSfbJPip5xJj5GQPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM95loQhwAbXxGNs7jrov1pJjfikMB8GA1UdIwQY
MBaAFDv6Zjb+ZECs8pO3VwWnodytqEILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEt
OTJlYzUxNWM1OTVhLzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEtOTJlYzUxNWM1OTVh
LzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIO3BF6ME
mlWiYkse4XQBvI8d47qHhtf4E2qvIv+r6C8WhTvQJte5WQLwdFB/MB53l5OaPokU
4Tfg89h0/ebXjEXk4mYqAdRBJYYgKGBsoraYBXZ1FD1uVeIHDPrf0zHoRnT/6ci0
Vw5CzsuzvVQkMlmlwz65ZDao42+IeqMPzIgeB4UTQBFAljsBRcgs20eaGbZXLo2p
qGa+Qbvy4KdS1OXrS7q196qDPKZm/8vaLmFdhJ7HG670AZvLrUtYPxrdRMc0Q+gN
KHX5BJVg/Mhc78vcTyycRqWCn+v8v9/wIShUFSjam0/tJ4dV3JvKYqFKv7udNXoR
92Tb5nNZFd+9dg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:29:46 2025 by rpki-client