Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
File: 9OcXTG90-poisK3uJRqNZDEjE_I.mft (raw, json)
Hash identifier: YkdoOI9bFYhQV2krTCxJyk6JsCeb0FDw8k9zYPnQB7k=
Subject key identifier: AA:56:21:CE:36:D8:B0:6D:EE:07:81:4F:64:ED:AD:D9:55:10:1A:09
Authority key identifier: F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
Certificate issuer: /CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Certificate serial: 0197372B8DF585B50E4C1DA423BF43AA634A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
Manifest number: 1504
Signing time: Tue 03 Jun 2025 19:01:30 +0000
Manifest this update: Tue 03 Jun 2025 19:01:30 +0000
Manifest next update: Wed 04 Jun 2025 19:01:30 +0000
Files and hashes: 1: 9OcXTG90-poisK3uJRqNZDEjE_I.crl (hash: UNu25zRIYDfIy11+UXWTWGVeQxhovZfQ2vIscNaTC4Q=)
2: DSwyNAuAz2bJdfrLonxlYBob04I.roa (hash: 3+/CvQ/0iqsF5SqvqkyipksHlcWBh/rqDJFf0zM3tC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 15:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:37:2b:8d:f5:85:b5:0e:4c:1d:a4:23:bf:43:aa:63:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Validity
Not Before: Jun 3 19:01:30 2025 GMT
Not After : Jun 4 19:01:30 2025 GMT
Subject: CN=aa5621ce36d8b06dee07814f64edadd955101a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:3c:2d:b7:55:69:31:ac:01:2a:79:54:73:
0f:26:79:6f:ad:10:de:da:8f:74:51:93:4b:25:77:
31:30:67:ca:e6:40:76:c3:69:5a:f5:ac:98:49:00:
11:04:7f:5e:d0:30:90:23:44:74:d6:b3:26:f6:5a:
32:29:d7:95:eb:12:1b:0e:eb:a8:c2:28:41:c9:89:
71:74:71:a6:f9:99:a9:68:0e:12:85:1d:0c:82:e8:
77:d8:fa:e6:24:9d:3e:1c:9a:4b:48:69:25:1e:90:
e5:09:09:03:cb:31:f2:3a:09:5a:a3:4a:07:d8:2f:
12:b7:e8:28:7f:07:1a:76:75:88:2d:4c:64:7c:85:
24:a6:c7:2c:3c:84:4d:f3:44:6e:a1:13:b5:d5:c2:
20:f4:67:b3:d7:7d:27:68:f8:2c:39:0c:6a:46:80:
31:c1:b4:b9:6c:85:10:67:5e:5a:d3:22:b3:e7:f6:
ee:f4:f2:cd:6d:9e:54:54:cf:50:8a:b1:f0:85:31:
08:f8:75:79:5e:36:b4:0e:88:0a:bc:cd:ed:48:4b:
fe:24:f6:b6:a7:78:76:04:4d:c1:bc:d9:f4:fd:00:
90:f3:d3:42:c8:0c:2a:ae:67:df:4b:52:36:f7:33:
c1:1d:38:a5:21:43:87:a4:ee:28:0c:64:4d:7e:ba:
10:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:56:21:CE:36:D8:B0:6D:EE:07:81:4F:64:ED:AD:D9:55:10:1A:09
X509v3 Authority Key Identifier:
keyid:F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:13:bb:3c:99:22:a0:d8:b3:d8:b0:71:8d:a5:d9:72:4c:30:
a8:a1:4f:6f:db:29:58:11:b0:c8:45:ac:ca:b7:9f:27:5c:9e:
be:2b:8f:d1:c9:b4:f2:1e:a5:fa:e7:84:aa:13:20:74:3d:13:
ac:6a:ac:e1:37:28:4d:bb:93:c8:dc:0a:c9:ed:22:c3:ac:03:
2c:61:ae:86:1f:ed:f6:81:7e:71:8a:5c:b5:95:53:9c:a3:a4:
81:28:e3:7c:c9:45:61:b0:77:c0:3b:bf:a0:ba:2b:66:b2:4b:
10:f9:b9:47:d7:76:f2:9d:40:1b:33:42:fa:6d:d5:a3:14:c1:
07:2e:21:2e:2b:a0:c9:0b:ff:d4:86:21:de:6d:21:f7:94:5d:
d7:d4:59:90:97:e9:5d:43:91:f9:b0:b4:c2:5b:e2:3c:53:16:
58:75:6e:a0:2e:e0:17:67:5a:cb:ab:c2:a6:58:8b:22:78:b0:
10:b6:09:9a:af:53:0f:cf:87:a2:f7:86:f6:fe:01:a7:fb:d8:
1f:1d:ea:d8:92:1f:1f:ce:8b:c3:82:59:ad:c3:59:af:11:33:
9a:23:bf:9d:45:d5:7e:0d:b3:b8:79:06:06:9e:13:67:6b:a0:
63:37:d0:4c:1a:2e:99:a2:6a:df:08:dd:a5:ac:53:16:54:47:
4f:da:26:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc3K431hbUOTB2kI79DqmNKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTcxNzRjNmY3NGZhOWEyMmIwYWRlZTI1MWE4ZDY0MzEy
MzEzZjIwHhcNMjUwNjAzMTkwMTMwWhcNMjUwNjA0MTkwMTMwWjAzMTEwLwYDVQQD
EyhhYTU2MjFjZTM2ZDhiMDZkZWUwNzgxNGY2NGVkYWRkOTU1MTAxYTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIU8LbdVaTGsASp5VHMPJnlvrRDe
2o90UZNLJXcxMGfK5kB2w2la9ayYSQARBH9e0DCQI0R01rMm9loyKdeV6xIbDuuo
wihByYlxdHGm+ZmpaA4ShR0Mguh32PrmJJ0+HJpLSGklHpDlCQkDyzHyOglao0oH
2C8St+gofwcadnWILUxkfIUkpscsPIRN80RuoRO11cIg9Gez130naPgsOQxqRoAx
wbS5bIUQZ15a0yKz5/bu9PLNbZ5UVM9QirHwhTEI+HV5Xja0DogKvM3tSEv+JPa2
p3h2BE3BvNn0/QCQ89NCyAwqrmffS1I29zPBHTilIUOHpO4oDGRNfroQ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpWIc422LBt7geBT2TtrdlVEBoJMB8GA1UdIwQY
MBaAFPTnF0xvdPqaIrCt7iUajWQxIxPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9jWFRHOTAtcG9pc0szdUpScU5aREVqRV9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NmVmYjMtZWYxZS00NjljLWFlYjQt
Mjg5NzhjM2M3ZWM1LzEvOU9jWFRHOTAtcG9pc0szdUpScU5aREVqRV9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84NmVmYjMtZWYxZS00NjljLWFlYjQtMjg5NzhjM2M3ZWM1
LzEvOU9jWFRHOTAtcG9pc0szdUpScU5aREVqRV9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARO7PJki
oNiz2LBxjaXZckwwqKFPb9spWBGwyEWsyrefJ1yeviuP0cm08h6l+ueEqhMgdD0T
rGqs4TcoTbuTyNwKye0iw6wDLGGuhh/t9oF+cYpctZVTnKOkgSjjfMlFYbB3wDu/
oLorZrJLEPm5R9d28p1AGzNC+m3VoxTBBy4hLiugyQv/1IYh3m0h95Rd19RZkJfp
XUOR+bC0wlviPFMWWHVuoC7gF2day6vCpliLIniwELYJmq9TD8+HoveG9v4Bp/vY
Hx3q2JIfH86Lw4JZrcNZrxEzmiO/nUXVfg2zuHkGBp4TZ2ugYzfQTBoumaJq3wjd
paxTFlRHT9omOQ==
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:44:25 2025 by rpki-client