Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
File: oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json)
Hash identifier: FuiOpT1INNnYNpzblUfxG1joONDrXrB1bzJKfC0/BLI=
Subject key identifier: 40:B0:52:16:07:CF:57:3B:7C:21:EB:27:73:66:C0:00:03:76:20:FC
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial: 01974CD6A07C521655548E1607C63E5C7B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
Manifest number: 0D59
Signing time: Sun 08 Jun 2025 00:00:23 +0000
Manifest this update: Sun 08 Jun 2025 00:00:23 +0000
Manifest next update: Mon 09 Jun 2025 00:00:23 +0000
Files and hashes: 1: o9hMDi-VrcUI4pB3FZBa-_jIwnc.roa (hash: avmrJ2rsXtwjFy7tu4gv+fivfWYGTorP5jQUfY03fLE=)
2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: vF8+OLfmDK4N1HwA1Qe7KQdu8OLD0MpBbjQfcFRVNP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:a0:7c:52:16:55:54:8e:16:07:c6:3e:5c:7b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Validity
Not Before: Jun 8 00:00:23 2025 GMT
Not After : Jun 9 00:00:23 2025 GMT
Subject: CN=40b0521607cf573b7c21eb277366c000037620fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:7c:5c:77:c0:53:e6:3e:7c:87:ba:67:a7:
dc:39:33:53:09:a1:b2:af:c9:f3:b1:08:32:2c:76:
29:f3:20:ee:97:d4:71:3d:13:aa:d5:18:a0:e6:47:
ad:4c:5a:d0:f0:ed:68:ee:32:35:00:16:bd:4b:18:
e2:6c:7d:8e:ad:28:c4:3c:98:67:ed:09:0e:56:d8:
22:00:b3:30:be:f5:95:56:bb:95:2e:c1:3f:16:e7:
df:a6:1f:82:c1:5a:1d:db:c8:11:5a:22:a9:4c:2e:
2b:7c:3e:66:6e:2f:3e:f3:dd:77:ae:14:18:4d:ec:
34:a2:2d:8b:49:52:38:09:94:4c:a5:e4:8d:c4:90:
5c:18:30:b3:d0:a1:98:7e:a3:66:55:17:f5:d7:43:
8b:b5:73:ad:93:15:f8:e2:eb:c9:15:6f:98:da:66:
48:cb:05:c1:57:6c:9d:5e:ec:0a:c3:ba:3b:37:a1:
7c:b9:fb:23:13:70:d3:08:03:f7:61:52:40:01:ba:
c7:c4:40:78:32:51:7d:48:a5:ca:c4:cb:30:9f:50:
38:52:79:c7:01:1d:7b:ec:29:8b:9f:da:0d:ba:20:
ca:34:ad:80:06:77:6e:c2:fe:00:60:ca:4f:b4:d7:
7f:23:61:30:bd:8d:bb:d8:42:4b:cd:df:f9:af:96:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B0:52:16:07:CF:57:3B:7C:21:EB:27:73:66:C0:00:03:76:20:FC
X509v3 Authority Key Identifier:
keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d4:1e:c3:e1:4f:c8:96:0d:ce:b3:2c:92:29:05:49:0c:0e:
b6:73:00:a9:ac:bc:6e:c4:b2:2c:48:30:ce:71:58:38:04:7f:
7f:28:07:b4:20:9f:7e:a0:5b:96:3b:8b:10:e4:57:65:eb:47:
ab:76:f7:80:bf:6e:7e:9c:5f:17:44:83:50:74:68:d5:2b:7a:
bc:e8:c0:b4:70:ea:5d:cd:21:5f:82:b2:c2:a1:4f:b7:38:46:
28:51:28:a2:b4:e3:b7:3a:62:25:99:d6:25:f8:05:48:dc:05:
79:3e:b7:66:68:ba:37:a1:a9:31:58:f1:40:c8:24:31:bf:20:
7d:71:c7:41:11:ce:b2:98:2a:a7:e5:7d:36:09:c8:ca:bd:f6:
e4:6a:ec:5c:fe:1d:5f:51:b6:55:23:5d:d6:6b:92:b5:0b:c7:
da:f6:16:5e:6a:cf:de:c0:4f:9c:b8:df:33:45:3f:08:ac:f5:
b1:00:97:c0:3d:fa:4c:db:b2:f4:cd:a4:06:ad:b1:51:cf:a6:
6e:6f:42:3a:7f:99:e2:13:43:46:c5:d4:c8:2d:e0:73:00:16:
83:de:49:48:d3:87:88:6c:b4:d0:95:fb:da:b7:8d:33:27:d5:
9e:e7:18:6a:67:36:7d:5b:0a:db:6d:21:ac:df:9e:4a:4e:ce:
85:24:03:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM1qB8UhZVVI4WB8Y+XHuXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYWUzNTY5Njg5ZmY1NDJhOTExZDcwOThiODI0NjZlNmVh
OWZjODUwHhcNMjUwNjA4MDAwMDIzWhcNMjUwNjA5MDAwMDIzWjAzMTEwLwYDVQQD
Eyg0MGIwNTIxNjA3Y2Y1NzNiN2MyMWViMjc3MzY2YzAwMDAzNzYyMGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2p8XHfAU+Y+fIe6Z6fcOTNTCaGy
r8nzsQgyLHYp8yDul9RxPROq1Rig5ketTFrQ8O1o7jI1ABa9SxjibH2OrSjEPJhn
7QkOVtgiALMwvvWVVruVLsE/Fuffph+CwVod28gRWiKpTC4rfD5mbi8+8913rhQY
Tew0oi2LSVI4CZRMpeSNxJBcGDCz0KGYfqNmVRf110OLtXOtkxX44uvJFW+Y2mZI
ywXBV2ydXuwKw7o7N6F8ufsjE3DTCAP3YVJAAbrHxEB4MlF9SKXKxMswn1A4UnnH
AR177CmLn9oNuiDKNK2ABnduwv4AYMpPtNd/I2EwvY272EJLzd/5r5ZvDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECwUhYHz1c7fCHrJ3NmwAADdiD8MB8GA1UdIwQY
MBaAFKKuNWlon/VCqRHXCYuCRm5uqfyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85ODg2N2MtODU2ZS00NmM5LTg5MjUt
NmVhNWQ4Yjc1NDExLzEvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85ODg2N2MtODU2ZS00NmM5LTg5MjUtNmVhNWQ4Yjc1NDEx
LzEvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9Qew+FP
yJYNzrMskikFSQwOtnMAqay8bsSyLEgwznFYOAR/fygHtCCffqBbljuLEORXZetH
q3b3gL9ufpxfF0SDUHRo1St6vOjAtHDqXc0hX4KywqFPtzhGKFEoorTjtzpiJZnW
JfgFSNwFeT63Zmi6N6GpMVjxQMgkMb8gfXHHQRHOspgqp+V9NgnIyr325GrsXP4d
X1G2VSNd1muStQvH2vYWXmrP3sBPnLjfM0U/CKz1sQCXwD36TNuy9M2kBq2xUc+m
bm9COn+Z4hNDRsXUyC3gcwAWg95JSNOHiGy00JX72reNMyfVnucYamc2fVsK220h
rN+eSk7OhSQDSA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 02:41:09 2025 by rpki-client