Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft
File: OmqMuD6zZTfKf_csW07WqNKtpMQ.mft (raw, json)
Hash identifier: Ceia6F6+QfPvjRpTzYIq9N4ATkHv/XCwef7xQjFd1Js=
Subject key identifier: 09:95:4E:E5:0F:36:0C:B6:21:5A:E0:44:0B:10:6B:A1:FD:07:09:B1
Authority key identifier: 3A:6A:8C:B8:3E:B3:65:37:CA:7F:F7:2C:5B:4E:D6:A8:D2:AD:A4:C4
Certificate issuer: /CN=3a6a8cb83eb36537ca7ff72c5b4ed6a8d2ada4c4
Certificate serial: 019747E76181DB8076285F5E26421A9DDD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmqMuD6zZTfKf_csW07WqNKtpMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft
Manifest number: 0CDC
Signing time: Sat 07 Jun 2025 01:00:35 +0000
Manifest this update: Sat 07 Jun 2025 01:00:35 +0000
Manifest next update: Sun 08 Jun 2025 01:00:35 +0000
Files and hashes: 1: OmqMuD6zZTfKf_csW07WqNKtpMQ.crl (hash: DEG+0Py/iQk3l/qpIDcruQ0N0Ec6QIrdtrN39lkXPGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmqMuD6zZTfKf_csW07WqNKtpMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:61:81:db:80:76:28:5f:5e:26:42:1a:9d:dd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6a8cb83eb36537ca7ff72c5b4ed6a8d2ada4c4
Validity
Not Before: Jun 7 01:00:35 2025 GMT
Not After : Jun 8 01:00:35 2025 GMT
Subject: CN=09954ee50f360cb6215ae0440b106ba1fd0709b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:e0:2e:c9:c6:61:de:0c:04:0a:04:65:70:
10:d6:11:03:16:02:7f:08:c2:f0:c3:04:18:80:9e:
82:a7:af:30:dc:eb:bb:15:d4:87:7e:8f:0f:e1:68:
02:93:7a:3a:9e:07:b4:2a:7a:4a:0f:7b:46:54:f0:
b7:bf:e8:6e:ad:44:17:24:d7:7c:34:e4:6c:bc:f5:
34:60:8f:cc:da:7b:b0:78:c7:de:2b:dc:47:9c:4c:
56:bb:a6:99:e1:92:cd:8d:e6:cd:0d:ef:e2:9c:97:
ee:1f:ce:d1:ad:24:ad:5b:f1:eb:b9:63:f8:51:43:
8a:0e:ab:f7:47:34:dc:c5:a2:3c:41:7d:26:e4:d5:
ac:4d:fd:f6:ce:f9:63:0f:92:25:5e:ec:15:54:b2:
96:29:6d:92:3e:e7:de:86:81:70:70:1b:c8:ad:10:
f6:be:3f:32:39:4f:af:91:ab:6d:cd:12:81:42:3d:
76:45:c2:a3:a4:69:f1:e2:b1:6b:42:47:a0:3d:56:
2f:10:79:23:8d:af:44:e8:b4:9b:bc:79:b4:29:3b:
df:b0:ba:cd:30:9b:5d:6e:5f:fc:3a:15:0a:1d:75:
86:71:93:7d:a8:a3:69:bc:bb:27:83:64:6e:95:22:
52:b4:5c:e6:51:86:4a:31:f1:42:6b:eb:55:76:36:
bc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:95:4E:E5:0F:36:0C:B6:21:5A:E0:44:0B:10:6B:A1:FD:07:09:B1
X509v3 Authority Key Identifier:
keyid:3A:6A:8C:B8:3E:B3:65:37:CA:7F:F7:2C:5B:4E:D6:A8:D2:AD:A4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmqMuD6zZTfKf_csW07WqNKtpMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a9:3e:a0:9b:da:01:ca:0d:03:20:dd:67:f6:63:62:20:39:
8a:29:84:97:1a:73:af:a3:56:cc:32:c0:63:84:5f:3a:38:41:
c8:a4:de:af:b5:d7:27:92:f6:2a:ec:49:f7:f3:22:1e:2d:6e:
05:8c:25:12:48:38:fd:3a:d6:93:dc:5f:22:92:9d:06:b3:35:
f7:a1:1f:f3:e4:6e:da:83:93:c0:bd:63:8d:bb:0a:1e:d7:c9:
82:35:56:8c:4f:97:14:80:cf:f0:1e:d0:08:ba:22:71:57:97:
be:e0:a1:fa:5d:e0:6c:f7:02:80:d7:84:4a:2c:48:4e:34:5b:
8f:e9:56:9b:f6:9b:1c:6e:0f:59:99:e0:f2:d0:0f:d2:96:6b:
45:e3:fe:c5:6e:db:0a:d7:ea:63:62:7f:07:84:f6:16:1a:47:
e2:16:90:0b:03:00:d2:fa:c3:34:f6:83:72:8c:9e:e8:b8:e7:
63:47:07:67:63:51:29:0a:ee:93:a5:48:4a:91:6a:29:f7:5a:
00:f9:67:3d:c9:b8:1a:ce:13:27:81:a0:8b:24:8f:de:19:5f:
34:5a:a4:d3:bb:d7:86:9b:a2:dc:57:4a:6c:41:28:42:51:91:
07:6c:ee:19:a7:04:5e:be:9f:9f:1f:b0:ed:d5:de:6a:e8:d7:
ba:60:0b:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH52GB24B2KF9eJkIand0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNmE4Y2I4M2ViMzY1MzdjYTdmZjcyYzViNGVkNmE4ZDJh
ZGE0YzQwHhcNMjUwNjA3MDEwMDM1WhcNMjUwNjA4MDEwMDM1WjAzMTEwLwYDVQQD
EygwOTk1NGVlNTBmMzYwY2I2MjE1YWUwNDQwYjEwNmJhMWZkMDcwOWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEvgLsnGYd4MBAoEZXAQ1hEDFgJ/
CMLwwwQYgJ6Cp68w3Ou7FdSHfo8P4WgCk3o6nge0KnpKD3tGVPC3v+hurUQXJNd8
NORsvPU0YI/M2nuweMfeK9xHnExWu6aZ4ZLNjebNDe/inJfuH87RrSStW/HruWP4
UUOKDqv3RzTcxaI8QX0m5NWsTf32zvljD5IlXuwVVLKWKW2SPufehoFwcBvIrRD2
vj8yOU+vkattzRKBQj12RcKjpGnx4rFrQkegPVYvEHkjja9E6LSbvHm0KTvfsLrN
MJtdbl/8OhUKHXWGcZN9qKNpvLsng2RulSJStFzmUYZKMfFCa+tVdja8aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmVTuUPNgy2IVrgRAsQa6H9BwmxMB8GA1UdIwQY
MBaAFDpqjLg+s2U3yn/3LFtO1qjSraTEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT21xTXVENnpaVGZLZl9jc1cwN1dxTkt0cE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ZjczZDQtNTYwZC00MTkzLWE3YmIt
M2UzN2JhY2RhZTBkLzEvT21xTXVENnpaVGZLZl9jc1cwN1dxTkt0cE1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84ZjczZDQtNTYwZC00MTkzLWE3YmItM2UzN2JhY2RhZTBk
LzEvT21xTXVENnpaVGZLZl9jc1cwN1dxTkt0cE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6k+oJva
AcoNAyDdZ/ZjYiA5iimElxpzr6NWzDLAY4RfOjhByKTer7XXJ5L2KuxJ9/MiHi1u
BYwlEkg4/TrWk9xfIpKdBrM196Ef8+Ru2oOTwL1jjbsKHtfJgjVWjE+XFIDP8B7Q
CLoicVeXvuCh+l3gbPcCgNeESixITjRbj+lWm/abHG4PWZng8tAP0pZrReP+xW7b
CtfqY2J/B4T2FhpH4haQCwMA0vrDNPaDcoye6LjnY0cHZ2NRKQruk6VISpFqKfda
APlnPcm4Gs4TJ4GgiySP3hlfNFqk07vXhpui3FdKbEEoQlGRB2zuGacEXr6fnx+w
7dXeaujXumALGw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:00:08 2025 by rpki-client