Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
File: iOpSVfiNS5VxicFC-KxWgcUMaKY.mft (raw, json)
Hash identifier: 9Zq/RJxrh66h+C0okxcMzTzSau3vLRnGL8BMFPzWaXk=
Subject key identifier: C1:80:F1:32:5C:21:80:93:66:0A:1A:15:D1:BA:B0:0C:21:E1:C1:A7
Authority key identifier: 88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
Certificate issuer: /CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Certificate serial: 01976EF4CCBB56A0E81FD17A32EC4676A789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
Manifest number: 0814
Signing time: Sat 14 Jun 2025 15:00:26 +0000
Manifest this update: Sat 14 Jun 2025 15:00:26 +0000
Manifest next update: Sun 15 Jun 2025 15:00:26 +0000
Files and hashes: 1: OdavAlmZTVSUEn8DEUG0x7Aup4c.roa (hash: zvm6Bet4M7SswbKtgyqQXpZEDV7VAUhO/RsUj5lDxjA=)
2: iOpSVfiNS5VxicFC-KxWgcUMaKY.crl (hash: eaFewsXFch+oC6jOXO11RpdiBKDMatouaSiae/7eNTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:cc:bb:56:a0:e8:1f:d1:7a:32:ec:46:76:a7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Validity
Not Before: Jun 14 15:00:26 2025 GMT
Not After : Jun 15 15:00:26 2025 GMT
Subject: CN=c180f1325c218093660a1a15d1bab00c21e1c1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:7a:4b:81:a4:bc:89:91:a0:5c:21:45:6f:
12:19:8e:73:be:a0:f5:54:2c:0a:3d:72:de:90:0e:
77:35:17:6a:9f:8b:b6:a5:f7:12:68:84:ed:be:7e:
0e:2d:c1:cf:2c:fe:27:6e:cd:58:dd:91:3e:c8:79:
fc:8b:59:d1:cc:48:cf:91:44:f2:84:1e:8f:d7:47:
83:75:12:9f:61:6a:0d:06:c9:94:5f:2a:59:27:bf:
bb:68:a4:5e:ed:ac:52:ca:4f:aa:90:d7:3f:68:c7:
da:d5:bd:6d:5d:58:05:c6:4d:da:d5:2b:4c:43:3a:
05:07:0f:74:e4:64:aa:b8:6a:7e:d2:fb:56:15:f4:
f7:2e:c0:2d:e6:30:c3:2f:43:75:c9:5d:f7:1e:c2:
e0:41:37:22:97:ad:0f:2b:c6:53:86:0a:7a:ce:c4:
b1:d1:d9:12:34:df:d9:75:40:4b:5d:36:2e:f2:9b:
40:60:d8:a2:42:13:4d:fa:d8:23:ef:f6:b3:79:7a:
be:9e:86:78:d9:4b:79:b5:e0:2f:3b:02:f7:ab:22:
8c:94:9b:a6:f7:ca:ea:cd:02:6d:dd:90:33:2c:b5:
b6:af:17:7c:79:bc:5f:22:1b:25:86:42:8d:2e:5e:
6f:9d:36:13:cb:9f:73:ec:70:11:0b:b1:38:29:36:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:80:F1:32:5C:21:80:93:66:0A:1A:15:D1:BA:B0:0C:21:E1:C1:A7
X509v3 Authority Key Identifier:
keyid:88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:6c:4f:1e:ae:45:cb:86:ff:31:06:d5:53:59:3d:7e:57:92:
b1:3e:13:8a:1a:17:bf:f6:d6:7a:7b:a4:f1:7e:6d:fa:fb:ee:
0d:2b:97:d9:92:14:ef:fd:b9:fe:47:3e:30:bc:08:f9:14:d7:
91:43:f1:6f:65:e3:d0:b8:e0:6c:c4:61:c8:35:67:1f:7d:40:
72:83:c9:17:95:21:ba:d5:2a:46:3d:53:76:d9:d8:1a:cb:26:
eb:34:97:e4:bf:2d:76:d4:fc:0d:c5:13:59:6c:1f:f9:f9:7c:
2b:e3:c1:d9:d6:6a:12:46:b3:3a:a4:b5:53:56:af:cb:45:6e:
56:51:22:72:ea:a3:0e:94:87:98:54:9a:77:7f:85:d8:23:27:
de:04:91:46:18:50:36:a7:d9:e0:85:6d:88:c1:4f:5a:77:91:
35:69:ca:b8:81:bd:13:e3:4d:e9:ad:0d:eb:c4:15:ef:34:87:
b9:2b:63:85:f4:ca:92:c2:cd:45:62:de:aa:9f:d5:df:46:4a:
9b:96:ca:91:47:b3:83:a3:52:ae:aa:a5:16:f7:65:73:7c:da:
9b:5d:5f:72:49:d5:0a:3a:96:5f:77:02:5e:3e:c8:0c:07:fa:
87:42:9e:54:e6:7e:e5:eb:c0:3c:ba:e3:ff:c4:7b:28:75:75:
fc:c7:b5:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9My7VqDoH9F6MuxGdqeJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZWE1MjU1Zjg4ZDRiOTU3MTg5YzE0MmY4YWM1NjgxYzUw
YzY4YTYwHhcNMjUwNjE0MTUwMDI2WhcNMjUwNjE1MTUwMDI2WjAzMTEwLwYDVQQD
EyhjMTgwZjEzMjVjMjE4MDkzNjYwYTFhMTVkMWJhYjAwYzIxZTFjMWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoB6S4GkvImRoFwhRW8SGY5zvqD1
VCwKPXLekA53NRdqn4u2pfcSaITtvn4OLcHPLP4nbs1Y3ZE+yHn8i1nRzEjPkUTy
hB6P10eDdRKfYWoNBsmUXypZJ7+7aKRe7axSyk+qkNc/aMfa1b1tXVgFxk3a1StM
QzoFBw905GSquGp+0vtWFfT3LsAt5jDDL0N1yV33HsLgQTcil60PK8ZThgp6zsSx
0dkSNN/ZdUBLXTYu8ptAYNiiQhNN+tgj7/azeXq+noZ42Ut5teAvOwL3qyKMlJum
98rqzQJt3ZAzLLW2rxd8ebxfIhslhkKNLl5vnTYTy59z7HARC7E4KTZ0dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGA8TJcIYCTZgoaFdG6sAwh4cGnMB8GA1UdIwQY
MBaAFIjqUlX4jUuVcYnBQvisVoHFDGimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU9wU1ZmaU5TNVZ4aWNGQy1LeFdnY1VNYUtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9iYjg3MjctNzhmNy00MDFmLTkzMzkt
ZTdjZTI2ODg0YmU2LzEvaU9wU1ZmaU5TNVZ4aWNGQy1LeFdnY1VNYUtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9iYjg3MjctNzhmNy00MDFmLTkzMzktZTdjZTI2ODg0YmU2
LzEvaU9wU1ZmaU5TNVZ4aWNGQy1LeFdnY1VNYUtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWxPHq5F
y4b/MQbVU1k9fleSsT4TihoXv/bWenuk8X5t+vvuDSuX2ZIU7/25/kc+MLwI+RTX
kUPxb2Xj0LjgbMRhyDVnH31AcoPJF5UhutUqRj1TdtnYGssm6zSX5L8tdtT8DcUT
WWwf+fl8K+PB2dZqEkazOqS1U1avy0VuVlEicuqjDpSHmFSad3+F2CMn3gSRRhhQ
NqfZ4IVtiMFPWneRNWnKuIG9E+NN6a0N68QV7zSHuStjhfTKksLNRWLeqp/V30ZK
m5bKkUezg6NSrqqlFvdlc3zam11fcknVCjqWX3cCXj7IDAf6h0KeVOZ+5evAPLrj
/8R7KHV1/Me1SA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:36:19 2025 by rpki-client