Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
File: oI5By_3vrQuw4pckeswaIB0t9KA.mft (raw, json)
Hash identifier: kGXuFD+Gf2gTmpcfFU6f1YAuwXkKOQxrF9tOqM+qLNk=
Subject key identifier: 6D:73:6C:30:F1:7A:F2:37:98:A0:40:37:6A:0F:A0:2F:43:16:A4:B2
Authority key identifier: A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
Certificate issuer: /CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Certificate serial: 01974D0E1E84D4126C76CCDD7211DB715106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
Manifest number: 1112
Signing time: Sun 08 Jun 2025 01:01:00 +0000
Manifest this update: Sun 08 Jun 2025 01:01:00 +0000
Manifest next update: Mon 09 Jun 2025 01:01:00 +0000
Files and hashes: 1: kaGph50MrnZk9_Ae5Md0JZHkmEM.roa (hash: KOuavh84jne4Oayx4KsSyaMHm/sNkEEba6rU0bPnEbc=)
2: oI5By_3vrQuw4pckeswaIB0t9KA.crl (hash: pLc3Rl1WVQ8OaxE3wBWMpIpVppiM/b8SJUTkXY0bkrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:1e:84:d4:12:6c:76:cc:dd:72:11:db:71:51:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Validity
Not Before: Jun 8 01:01:00 2025 GMT
Not After : Jun 9 01:01:00 2025 GMT
Subject: CN=6d736c30f17af23798a040376a0fa02f4316a4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:dc:ec:a9:97:4a:f2:c7:7b:23:30:6f:25:
bd:7b:de:74:e8:cd:c4:26:8b:f5:8a:0e:06:1a:65:
ba:5b:21:76:53:50:66:2c:8a:43:75:d2:56:5a:1c:
e2:5d:25:1f:67:6a:6c:df:ae:4d:c6:1c:3d:e9:e8:
b2:31:1a:32:92:b4:89:b0:6b:c4:6c:dd:84:2d:ac:
55:ac:00:81:5c:c3:90:93:ab:c7:00:1a:30:87:06:
6b:f8:fc:75:ae:a0:8d:96:18:20:17:66:53:4f:16:
52:e5:56:99:2f:20:0f:c6:5b:d4:1a:52:45:c3:a0:
e4:3c:8b:37:a8:4e:a2:b6:bf:b5:91:da:6f:27:5d:
6a:bd:a4:52:e1:f8:fc:e6:62:e5:1f:19:5f:a7:68:
97:df:e1:81:a5:59:0c:29:20:87:f7:14:9a:94:7f:
0d:7c:2a:ae:2b:d0:6b:1f:ae:b6:3d:09:ff:41:a8:
5e:46:5d:fb:61:ae:5c:20:f8:57:a3:f2:9c:c3:d6:
d4:1e:60:76:e4:d2:e7:a2:3a:b3:89:5f:c2:b8:ba:
3c:6c:3e:49:90:1c:1b:71:d1:7f:bd:bf:49:32:04:
39:e0:46:ea:e7:7d:39:7b:19:19:60:a0:19:fb:6a:
44:e7:2c:79:19:36:da:33:a5:27:94:45:d6:8b:ae:
94:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:73:6C:30:F1:7A:F2:37:98:A0:40:37:6A:0F:A0:2F:43:16:A4:B2
X509v3 Authority Key Identifier:
keyid:A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d1:c9:fd:81:9f:59:03:5e:c7:8a:77:20:c2:44:d9:6c:59:
91:05:8d:71:49:49:77:ac:22:0e:87:7c:78:28:ce:82:80:88:
05:73:13:bd:40:6b:58:06:92:85:1c:66:1a:bd:3c:84:91:b5:
0b:d2:f7:e2:85:cc:8e:f7:d3:e1:2b:63:14:59:dc:5a:f0:b8:
71:b9:b9:d3:2d:38:b5:5a:ca:a2:b2:d6:69:ab:7b:77:32:ae:
5a:4a:a1:9e:cc:5f:6f:52:1c:a6:32:0a:1a:22:b9:09:ab:90:
3c:8d:f5:4f:cf:28:53:9e:29:2d:f6:93:5f:c5:34:2b:ed:a6:
b5:86:00:b7:b1:a9:b4:d6:fa:2a:cc:77:c5:7b:0a:33:4a:0c:
93:80:eb:01:4b:11:44:3e:8a:76:55:91:13:e0:56:ab:f9:c0:
ff:ba:02:69:e1:67:87:cd:2e:c4:fd:8d:50:b0:8f:3c:43:1c:
6d:cd:92:5d:2a:ad:6f:ef:c9:62:36:fe:9e:bb:35:89:87:02:
85:06:56:74:38:5a:95:70:29:e2:0d:9b:8c:5d:77:0d:69:41:
6a:6c:3c:e4:c3:fc:eb:49:a9:72:2d:4c:af:3a:61:99:5b:86:
0c:71:36:ca:85:11:dd:ad:00:02:f1:77:1b:bd:96:e4:09:49:
33:fa:31:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDh6E1BJsdszdchHbcVEGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOGU0MWNiZmRlZmFkMGJiMGUyOTcyNDdhY2MxYTIwMWQy
ZGY0YTAwHhcNMjUwNjA4MDEwMTAwWhcNMjUwNjA5MDEwMTAwWjAzMTEwLwYDVQQD
Eyg2ZDczNmMzMGYxN2FmMjM3OThhMDQwMzc2YTBmYTAyZjQzMTZhNGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGbc7KmXSvLHeyMwbyW9e9506M3E
Jov1ig4GGmW6WyF2U1BmLIpDddJWWhziXSUfZ2ps365Nxhw96eiyMRoykrSJsGvE
bN2ELaxVrACBXMOQk6vHABowhwZr+Px1rqCNlhggF2ZTTxZS5VaZLyAPxlvUGlJF
w6DkPIs3qE6itr+1kdpvJ11qvaRS4fj85mLlHxlfp2iX3+GBpVkMKSCH9xSalH8N
fCquK9BrH662PQn/QaheRl37Ya5cIPhXo/Kcw9bUHmB25NLnojqziV/CuLo8bD5J
kBwbcdF/vb9JMgQ54Ebq5305exkZYKAZ+2pE5yx5GTbaM6UnlEXWi66UWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1zbDDxevI3mKBAN2oPoC9DFqSyMB8GA1UdIwQY
MBaAFKCOQcv9760LsOKXJHrMGiAdLfSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0k1QnlfM3ZyUXV3NHBja2Vzd2FJQjB0OUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC83YTgwNmMtMmYwOC00N2Q5LTljYzkt
NjU4ZDRjNDYyOGFkLzEvb0k1QnlfM3ZyUXV3NHBja2Vzd2FJQjB0OUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC83YTgwNmMtMmYwOC00N2Q5LTljYzktNjU4ZDRjNDYyOGFk
LzEvb0k1QnlfM3ZyUXV3NHBja2Vzd2FJQjB0OUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9HJ/YGf
WQNex4p3IMJE2WxZkQWNcUlJd6wiDod8eCjOgoCIBXMTvUBrWAaShRxmGr08hJG1
C9L34oXMjvfT4StjFFncWvC4cbm50y04tVrKorLWaat7dzKuWkqhnsxfb1IcpjIK
GiK5CauQPI31T88oU54pLfaTX8U0K+2mtYYAt7GptNb6Ksx3xXsKM0oMk4DrAUsR
RD6KdlWRE+BWq/nA/7oCaeFnh80uxP2NULCPPEMcbc2SXSqtb+/JYjb+nrs1iYcC
hQZWdDhalXAp4g2bjF13DWlBamw85MP860mpci1MrzphmVuGDHE2yoUR3a0AAvF3
G72W5AlJM/oxVA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:16:41 2025 by rpki-client