Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
File: O8o0owNBd9CEM40zsIm34DzKOoo.mft (raw, json)
Hash identifier: x6gbt0XDF479+1kogCxT9PzD+QO5MKTr1dYpQt5L8tc=
Subject key identifier: 85:78:74:12:45:F8:33:AB:E0:44:87:C5:A7:91:80:13:B7:89:E4:3D
Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Certificate issuer: /CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Certificate serial: 0197458BB16BE20BFA9CD1E4AB92AC841208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
Manifest number: 0940
Signing time: Fri 06 Jun 2025 14:01:12 +0000
Manifest this update: Fri 06 Jun 2025 14:01:12 +0000
Manifest next update: Sat 07 Jun 2025 14:01:12 +0000
Files and hashes: 1: 9gtsAx5FJEnGGDpA05vpeEmKqKo.roa (hash: o4FWNQc0AMne1CzN76Z/FZhfpanxpLPH29H5fHhS0kY=)
2: O8o0owNBd9CEM40zsIm34DzKOoo.crl (hash: vxasNxqtpA+whG455d0Nzqior087DTDhbYFVNrwUxl0=)
3: hLarQu01JmUX4vnwkcXB98ezIuw.roa (hash: iDJuyq+rVzU9ZgKvDwW/L+MmLaOlvdq9nbxde1XNlsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:b1:6b:e2:0b:fa:9c:d1:e4:ab:92:ac:84:12:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Validity
Not Before: Jun 6 14:01:12 2025 GMT
Not After : Jun 7 14:01:12 2025 GMT
Subject: CN=8578741245f833abe04487c5a7918013b789e43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ac:bc:c5:2b:41:a8:b9:76:e5:8f:a6:c2:b4:
64:4c:3e:3f:d3:0e:49:b5:10:04:fd:ce:cf:33:c6:
bc:2c:f0:08:57:3b:64:e9:e2:ae:ca:8d:2e:74:1d:
18:53:e8:ca:07:af:2f:4b:5d:45:fc:c2:3b:9f:b7:
17:93:7a:0b:9b:0b:08:de:c9:bd:3a:27:7b:34:a1:
97:c2:29:10:f6:26:09:fe:a0:d2:db:ab:bf:18:3c:
ff:ea:33:0b:f5:f6:28:a2:cc:5a:55:7f:51:c5:f3:
fc:12:58:fd:03:03:5f:42:f8:88:e6:88:bb:9d:0d:
4a:64:eb:8b:96:30:d1:fb:4b:9d:44:23:6a:c3:17:
02:c0:c1:38:a1:77:c8:1e:0b:38:3f:b9:f2:54:1b:
b3:14:22:07:89:3c:fe:25:85:90:1f:f4:05:9d:b9:
b7:0f:77:f0:42:d8:92:6f:c1:e8:40:69:c3:fb:e1:
0f:31:7f:ba:1b:15:e5:bf:47:c9:ec:08:77:f8:e9:
f0:91:58:46:28:2e:d4:dc:92:94:8c:28:1a:0c:09:
64:06:ce:0f:e5:b7:51:c0:83:33:6d:c1:ca:39:42:
00:74:ea:33:05:5b:05:40:4c:df:d8:2e:00:d2:a7:
80:f5:87:f5:cb:ab:3f:ba:78:8b:0f:7d:64:22:10:
9d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:78:74:12:45:F8:33:AB:E0:44:87:C5:A7:91:80:13:B7:89:E4:3D
X509v3 Authority Key Identifier:
keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f2:5e:30:8c:e1:81:84:f9:d1:bd:e2:b1:ee:86:55:ec:54:
62:ea:71:97:ae:7a:28:b1:3b:83:5a:3f:15:13:df:a5:04:93:
52:77:91:1c:7a:b0:83:5d:fb:95:5d:fc:54:a2:88:84:02:d9:
4b:21:98:6c:e4:57:f8:f5:ce:3d:65:1a:d5:8d:d7:00:d1:b7:
29:6f:04:26:31:14:96:9d:3e:dc:a3:8e:eb:96:15:1c:ba:ca:
06:1e:5b:25:3f:7d:96:ac:6d:5e:37:d0:77:25:4a:fc:fc:dc:
80:4c:4f:6f:51:22:fe:4a:2d:d6:61:d7:03:01:8c:e0:6f:1c:
02:f1:f2:eb:33:03:e2:58:3f:db:0b:a6:81:11:10:b4:05:17:
05:a9:c9:70:be:7a:83:f0:3b:f1:04:b1:dc:be:d3:47:f6:6f:
3e:2e:b6:17:b1:67:ec:c1:a8:bc:2b:c0:79:fe:f5:f2:ca:3d:
ad:7d:cd:e6:97:85:35:0a:9e:34:30:57:cd:f3:0b:6e:17:87:
69:c2:52:f7:57:48:2f:a4:5b:b2:fd:cd:b6:36:1b:b7:bc:0c:
64:e0:2b:d9:3d:41:8f:e6:66:95:d9:ea:5c:c7:18:53:26:4e:
80:27:f9:a8:d0:23:55:3d:c5:d2:42:6c:41:36:bc:ec:7c:01:
15:25:28:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdFi7Fr4gv6nNHkq5KshBIIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiY2EzNGEzMDM0MTc3ZDA4NDMzOGQzM2IwODliN2UwM2Nj
YTNhOGEwHhcNMjUwNjA2MTQwMTEyWhcNMjUwNjA3MTQwMTEyWjAzMTEwLwYDVQQD
Eyg4NTc4NzQxMjQ1ZjgzM2FiZTA0NDg3YzVhNzkxODAxM2I3ODllNDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16y8xStBqLl25Y+mwrRkTD4/0w5J
tRAE/c7PM8a8LPAIVztk6eKuyo0udB0YU+jKB68vS11F/MI7n7cXk3oLmwsI3sm9
Oid7NKGXwikQ9iYJ/qDS26u/GDz/6jML9fYoosxaVX9RxfP8Elj9AwNfQviI5oi7
nQ1KZOuLljDR+0udRCNqwxcCwME4oXfIHgs4P7nyVBuzFCIHiTz+JYWQH/QFnbm3
D3fwQtiSb8HoQGnD++EPMX+6GxXlv0fJ7Ah3+OnwkVhGKC7U3JKUjCgaDAlkBs4P
5bdRwIMzbcHKOUIAdOozBVsFQEzf2C4A0qeA9Yf1y6s/uniLD31kIhCdKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIV4dBJF+DOr4ESHxaeRgBO3ieQ9MB8GA1UdIwQY
MBaAFDvKNKMDQXfQhDONM7CJt+A8yjqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzhvMG93TkJkOUNFTTQwenNJbTM0RHpLT29vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kMTI0NWMtMDJjZi00OGI1LTllNDIt
ODk3NTNmMmI0N2RjLzEvTzhvMG93TkJkOUNFTTQwenNJbTM0RHpLT29vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9kMTI0NWMtMDJjZi00OGI1LTllNDItODk3NTNmMmI0N2Rj
LzEvTzhvMG93TkJkOUNFTTQwenNJbTM0RHpLT29vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPJeMIzh
gYT50b3ise6GVexUYupxl656KLE7g1o/FRPfpQSTUneRHHqwg137lV38VKKIhALZ
SyGYbORX+PXOPWUa1Y3XANG3KW8EJjEUlp0+3KOO65YVHLrKBh5bJT99lqxtXjfQ
dyVK/PzcgExPb1Ei/kot1mHXAwGM4G8cAvHy6zMD4lg/2wumgREQtAUXBanJcL56
g/A78QSx3L7TR/ZvPi62F7Fn7MGovCvAef718so9rX3N5peFNQqeNDBXzfMLbheH
acJS91dIL6Rbsv3NtjYbt7wMZOAr2T1Bj+ZmldnqXMcYUyZOgCf5qNAjVT3F0kJs
QTa87HwBFSUoig==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:31 2025 by rpki-client