Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier: YLpAA1Md25oq9D6NGTRmHzt6nBZS8ZYHj44yLH7gQyM=
Subject key identifier: DA:6B:6D:9A:16:7D:EF:D2:72:78:35:C2:98:0F:A5:4E:F7:80:72:4F
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 01975346EBD237B71C84F98F6CE398689FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 06:00:46 +0000
Manifest this update: Mon 09 Jun 2025 06:00:46 +0000
Manifest next update: Tue 10 Jun 2025 06:00:46 +0000
Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: 3w9i6KO+J9tnWUSk4JjHlbANpSILOQENV0Lz313LXyI=)
2: Pd3Tb2muXCCBgS-W8Cu_lBpJ2x8.roa (hash: nzjWO6dCtijYtA3RGgwEtQM/oq2xd/x0bLHHza1oxV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:46:eb:d2:37:b7:1c:84:f9:8f:6c:e3:98:68:9f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: Jun 9 06:00:46 2025 GMT
Not After : Jun 10 06:00:46 2025 GMT
Subject: CN=da6b6d9a167defd2727835c2980fa54ef780724f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:6d:8a:ec:9b:00:95:16:af:cc:44:8d:ed:
da:2a:aa:8e:3d:01:34:d3:cd:07:31:0d:ba:14:c0:
27:11:47:61:da:35:dc:e6:54:bd:42:87:65:5d:99:
36:19:99:49:51:a1:24:87:b2:ce:19:13:8d:2c:2c:
cf:9e:a4:f6:f4:4d:8e:bf:20:73:09:77:aa:1b:d5:
e9:76:af:ce:70:87:2d:5a:8a:92:96:7f:a4:04:ba:
ba:4a:50:e0:1a:74:63:c1:78:95:ff:fd:e2:d3:89:
53:75:b2:96:7b:43:1f:7c:fc:80:5a:a5:df:2b:48:
a5:e2:20:11:cd:ff:a3:47:26:f8:ff:38:8b:7d:82:
4d:3e:88:0b:e5:c6:e1:1e:99:c6:be:23:95:ad:ed:
ed:b3:c9:d6:9d:da:e9:0c:67:ba:08:f2:33:88:a4:
82:96:ab:d7:2a:0e:6c:ed:93:16:78:39:9a:a9:40:
52:89:e3:a7:de:7e:e6:0c:67:3c:1b:f8:50:8e:92:
e8:eb:52:33:de:0f:9b:53:f4:57:9c:ac:2c:0c:63:
c6:1c:bc:6a:26:1c:7b:e0:be:e9:1f:43:86:93:2e:
ec:20:a5:e8:04:1d:c9:8e:71:de:d6:24:b4:00:a0:
7d:c3:5e:b5:31:3f:d0:63:04:e5:97:12:9e:98:29:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6B:6D:9A:16:7D:EF:D2:72:78:35:C2:98:0F:A5:4E:F7:80:72:4F
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:40:ce:5b:70:5f:15:90:3a:68:9c:d6:fc:04:71:3b:ac:40:
9a:b5:b3:45:e7:9a:d8:c1:35:26:8c:ef:b5:88:67:bf:d9:83:
9f:a8:75:53:0d:33:1b:eb:b7:b7:59:52:ab:89:fc:99:c2:30:
de:53:88:03:f6:a3:24:3d:26:04:57:67:96:5d:9d:df:a5:f7:
a5:71:30:3b:21:09:da:d6:2e:e3:7c:d4:a8:c9:5e:26:f3:a9:
9d:f0:26:e6:ee:44:58:cb:7a:86:ad:ef:b0:28:38:ad:e4:39:
60:22:3c:7e:2f:e0:bf:0f:01:cc:1d:cf:69:27:8f:83:5a:7d:
59:8f:a5:0a:47:f9:df:b9:9b:9b:b3:25:e2:38:ad:9f:6f:dc:
7c:e2:84:d4:ab:87:05:7d:bd:cb:90:70:12:41:26:26:09:d1:
ca:15:a3:fc:36:44:89:06:41:50:f4:89:73:16:07:36:18:64:
5b:e8:f7:10:22:4a:d0:fb:e0:86:b5:97:01:e7:fe:22:ee:84:
1a:c9:44:84:11:51:42:f8:0d:c8:26:06:69:10:0e:30:bb:84:
6c:2a:0c:e4:38:7e:48:4c:57:61:33:46:ef:29:39:c2:6b:53:
9f:64:62:37:8e:cd:d4:4d:06:fc:c3:7c:f1:92:94:5b:79:52:
b9:4d:3d:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTRuvSN7cchPmPbOOYaJ+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNjhlNTQ2MGRiYTU4NzFkYmU1MjMyMTQ4NDM5ZTIxNWIy
OWJkNDQwHhcNMjUwNjA5MDYwMDQ2WhcNMjUwNjEwMDYwMDQ2WjAzMTEwLwYDVQQD
EyhkYTZiNmQ5YTE2N2RlZmQyNzI3ODM1YzI5ODBmYTU0ZWY3ODA3MjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqBtiuybAJUWr8xEje3aKqqOPQE0
080HMQ26FMAnEUdh2jXc5lS9QodlXZk2GZlJUaEkh7LOGRONLCzPnqT29E2OvyBz
CXeqG9Xpdq/OcIctWoqSln+kBLq6SlDgGnRjwXiV//3i04lTdbKWe0MffPyAWqXf
K0il4iARzf+jRyb4/ziLfYJNPogL5cbhHpnGviOVre3ts8nWndrpDGe6CPIziKSC
lqvXKg5s7ZMWeDmaqUBSieOn3n7mDGc8G/hQjpLo61Iz3g+bU/RXnKwsDGPGHLxq
Jhx74L7pH0OGky7sIKXoBB3JjnHe1iS0AKB9w161MT/QYwTllxKemCkoXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNprbZoWfe/Scng1wpgPpU73gHJPMB8GA1UdIwQY
MBaAFDto5UYNulhx2+UjIUhDniFbKb1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWIt
MDU1MTEyNTYwZmM5LzEvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWItMDU1MTEyNTYwZmM5
LzEvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEDOW3Bf
FZA6aJzW/ARxO6xAmrWzReea2ME1JozvtYhnv9mDn6h1Uw0zG+u3t1lSq4n8mcIw
3lOIA/ajJD0mBFdnll2d36X3pXEwOyEJ2tYu43zUqMleJvOpnfAm5u5EWMt6hq3v
sCg4reQ5YCI8fi/gvw8BzB3PaSePg1p9WY+lCkf537mbm7Ml4jitn2/cfOKE1KuH
BX29y5BwEkEmJgnRyhWj/DZEiQZBUPSJcxYHNhhkW+j3ECJK0PvghrWXAef+Iu6E
GslEhBFRQvgNyCYGaRAOMLuEbCoM5Dh+SExXYTNG7yk5wmtTn2RiN47N1E0G/MN8
8ZKUW3lSuU09FQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 09:31:15 2025 by rpki-client