Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File: oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier: MQkqi68MoKsQVW5eis2HJkPY8ZSXgmv9f8g0j0CJVUk=
Subject key identifier: ED:6B:4F:45:34:BD:FD:5D:61:28:EF:5B:48:80:D8:00:1F:CC:2A:4B
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial: 019748C36350942D72084187BFF531361222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 05:00:53 +0000
Manifest this update: Sat 07 Jun 2025 05:00:53 +0000
Manifest next update: Sun 08 Jun 2025 05:00:53 +0000
Files and hashes: 1: 7C0eLiHaSivPjWvCeJI7OYyeX0w.roa (hash: QECF5Dw9n/dUuIXbwLPUz1r2SDqHk19ywfPN3IJ1Bjo=)
2: YL2mjFkL3ptl5VIC6FUskxqO4nY.roa (hash: jZ9khSDfHMU1HP/GDGXtwMlzTdVqjL0AwmhZP5bokp4=)
3: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: FhH20Tiao4EpZpFbKoIKcAaEFkVsyPp8e5bxd9gQhLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:63:50:94:2d:72:08:41:87:bf:f5:31:36:12:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Validity
Not Before: Jun 7 05:00:53 2025 GMT
Not After : Jun 8 05:00:53 2025 GMT
Subject: CN=ed6b4f4534bdfd5d6128ef5b4880d8001fcc2a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b1:e7:62:6b:ab:15:aa:3b:00:3f:13:9c:f8:
df:b6:0c:9f:cf:6d:3c:8c:68:d3:88:69:25:98:7f:
8f:ac:c5:f0:96:fd:35:aa:1f:8b:2a:57:eb:7b:c2:
f3:53:06:9f:cb:34:dd:58:70:7d:1c:fd:15:01:03:
5a:f3:a6:35:bc:6d:1c:6b:15:2e:86:64:89:b2:41:
d8:dd:55:3c:05:73:8f:11:cf:1f:55:14:b3:29:dd:
78:9c:1e:9e:d2:f2:04:eb:66:4c:b9:bd:c0:a3:16:
ff:db:be:51:95:d6:a6:b3:30:ce:24:6f:b2:85:19:
e4:e8:27:d9:c6:4a:df:47:cf:c1:7f:42:e9:a2:a3:
c7:7f:86:a7:66:2b:f8:5c:54:96:1c:b1:e8:01:b4:
23:a5:25:54:23:c9:98:f3:4c:91:56:65:11:bd:2c:
ef:04:cd:19:bc:32:bd:c2:53:c1:a9:98:3b:e8:4a:
75:d9:01:66:d5:31:65:b0:d6:6f:22:0b:e8:d0:2d:
20:5a:4f:7b:06:5d:06:5a:ee:3e:d0:10:aa:c2:29:
d7:99:f3:91:9f:33:8d:fe:46:a5:c8:ae:a7:51:95:
fe:46:65:36:fa:b1:60:84:dc:9a:e8:c0:9a:17:f5:
2b:fa:e6:01:2d:3e:6d:d6:fe:77:5a:7e:f7:dd:f5:
c5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6B:4F:45:34:BD:FD:5D:61:28:EF:5B:48:80:D8:00:1F:CC:2A:4B
X509v3 Authority Key Identifier:
keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f4:d6:2b:61:c7:b8:db:b1:de:96:8e:bc:76:41:d9:89:61:
e8:95:ba:7b:33:11:c2:f8:29:6c:9a:e5:98:27:71:d9:b1:36:
9d:9f:95:02:a8:e0:be:4d:da:e0:c9:32:c2:cd:8c:4f:b4:59:
10:70:a9:1a:b9:30:eb:32:07:6b:bd:d2:6f:3d:56:80:77:02:
1e:e0:4b:81:be:c5:dd:e9:83:b1:cf:8f:d0:7f:11:61:0c:f3:
66:78:6c:a1:8a:ca:94:32:71:dc:d0:d7:f2:65:85:e0:e7:c2:
69:df:1c:82:08:d8:c5:5a:95:93:ba:48:8e:09:97:47:f4:52:
09:d1:c9:ac:0e:7c:f5:74:e6:35:1f:81:8a:b9:c0:6d:65:c4:
08:2a:75:34:67:0c:66:61:c3:2e:55:df:33:19:13:5e:65:14:
b8:fc:45:c6:d0:c6:99:f0:26:86:08:ab:44:b1:4c:97:f7:ab:
72:32:2d:7f:ed:e1:8e:a7:4b:2f:9d:9c:1b:9c:db:93:a8:68:
15:2f:31:02:fb:2f:30:d7:64:b6:b9:54:5f:4f:1e:93:02:83:
a4:7a:67:87:83:5f:8c:7a:65:e7:68:5b:f2:b1:f3:2f:dc:d0:
bb:ea:38:cd:3b:4c:51:f7:d5:85:d6:30:4b:52:35:20:ce:c8:
ec:85:14:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIw2NQlC1yCEGHv/UxNhIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNjM5YWRmMWUwYjg0YjlmZjY0ZTRmOGViZTYzOGViYmY1
ZDI3YjkwHhcNMjUwNjA3MDUwMDUzWhcNMjUwNjA4MDUwMDUzWjAzMTEwLwYDVQQD
EyhlZDZiNGY0NTM0YmRmZDVkNjEyOGVmNWI0ODgwZDgwMDFmY2MyYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rHnYmurFao7AD8TnPjftgyfz208
jGjTiGklmH+PrMXwlv01qh+LKlfre8LzUwafyzTdWHB9HP0VAQNa86Y1vG0caxUu
hmSJskHY3VU8BXOPEc8fVRSzKd14nB6e0vIE62ZMub3Aoxb/275RldamszDOJG+y
hRnk6CfZxkrfR8/Bf0LpoqPHf4anZiv4XFSWHLHoAbQjpSVUI8mY80yRVmURvSzv
BM0ZvDK9wlPBqZg76Ep12QFm1TFlsNZvIgvo0C0gWk97Bl0GWu4+0BCqwinXmfOR
nzON/kalyK6nUZX+RmU2+rFghNya6MCaF/Ur+uYBLT5t1v53Wn733fXF+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1rT0U0vf1dYSjvW0iA2AAfzCpLMB8GA1UdIwQY
MBaAFKBjmt8eC4S5/2Tk+OvmOOu/XSe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjIt
ODEzYzVhYWI3ODNlLzEvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjItODEzYzVhYWI3ODNl
LzEvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPTWK2HH
uNux3paOvHZB2Ylh6JW6ezMRwvgpbJrlmCdx2bE2nZ+VAqjgvk3a4Mkyws2MT7RZ
EHCpGrkw6zIHa73Sbz1WgHcCHuBLgb7F3emDsc+P0H8RYQzzZnhsoYrKlDJx3NDX
8mWF4OfCad8cggjYxVqVk7pIjgmXR/RSCdHJrA589XTmNR+BirnAbWXECCp1NGcM
ZmHDLlXfMxkTXmUUuPxFxtDGmfAmhgirRLFMl/ercjItf+3hjqdLL52cG5zbk6ho
FS8xAvsvMNdktrlUX08ekwKDpHpnh4NfjHpl52hb8rHzL9zQu+o4zTtMUffVhdYw
S1I1IM7I7IUUjQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:31:59 2025 by rpki-client