Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
File: o7R_qStyxJ6grFNx3jU7HicdxdA.mft (raw, json)
Hash identifier: N3KhNPdOFhBwLfAB0LKpeoH6r7xw34o4oBV6RU8WZLA=
Subject key identifier: 47:59:90:3C:35:C9:2E:19:B9:E3:29:BD:34:1F:77:2A:BC:3B:45:C2
Authority key identifier: A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0
Certificate issuer: /CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0
Certificate serial: 019749D615A320D67A43605D7BBB7CAAE64A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
Manifest number: 0D0C
Signing time: Sat 07 Jun 2025 10:00:56 +0000
Manifest this update: Sat 07 Jun 2025 10:00:56 +0000
Manifest next update: Sun 08 Jun 2025 10:00:56 +0000
Files and hashes: 1: WIaOxFihvMngyRoJ51mATU-OelM.roa (hash: yYmLv2domUt4Svy4VBfcVVdHWZ/TicTJ4cMQnZnE8zs=)
2: o7R_qStyxJ6grFNx3jU7HicdxdA.crl (hash: RFfVkL+RE6/fzccV1hYPgFzHBgj3HDSJ2qnJDQTdAAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:15:a3:20:d6:7a:43:60:5d:7b:bb:7c:aa:e6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0
Validity
Not Before: Jun 7 10:00:56 2025 GMT
Not After : Jun 8 10:00:56 2025 GMT
Subject: CN=4759903c35c92e19b9e329bd341f772abc3b45c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:c3:f8:28:1a:41:8b:8b:b8:04:bd:a4:ac:
ab:bd:b0:7e:cc:4d:39:19:a8:95:38:02:66:ab:49:
73:57:b8:44:29:2a:65:2a:e9:f3:b0:25:82:35:51:
37:f1:d0:91:bd:49:e1:fd:ab:8a:b5:12:eb:cf:36:
44:47:03:20:e8:1b:3e:b3:4c:61:15:ff:65:1c:bb:
d7:cc:a4:0d:2a:a5:7b:34:99:39:07:f2:7d:13:05:
b0:54:f3:e3:61:e7:22:7b:1f:26:c9:c0:49:10:a9:
f8:ac:bb:f0:e7:de:3a:a8:33:2e:3e:fe:15:04:85:
b4:f1:9b:80:e3:e1:74:2a:d8:ba:50:f4:49:1f:a2:
98:6f:3c:6b:5e:01:b8:ee:7b:dc:6d:52:a5:a2:8e:
5b:17:ad:2f:dc:d9:eb:47:56:94:e2:d5:af:37:c7:
b8:ae:80:08:74:8e:e3:b3:4c:ef:9e:9e:f7:28:ac:
f6:5e:82:bc:4c:04:11:95:8f:b4:b9:05:aa:a9:b4:
dc:53:fe:6c:b6:3c:80:2d:00:cf:62:5c:2d:74:dc:
45:66:59:68:02:f0:d1:bb:51:c3:27:48:c0:42:8a:
0c:81:92:46:37:13:25:a4:35:87:3b:ee:dd:54:e3:
18:82:b6:4d:02:b5:65:f9:44:ed:c3:0d:81:82:da:
6f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:59:90:3C:35:C9:2E:19:B9:E3:29:BD:34:1F:77:2A:BC:3B:45:C2
X509v3 Authority Key Identifier:
keyid:A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2e:15:a5:f7:85:8c:6a:c4:c1:17:4b:a5:b7:14:ce:f0:9a:
50:a6:c5:6e:51:cd:d8:ca:39:04:88:ae:97:bf:b3:c8:f3:1f:
ad:1e:3c:d2:2b:0f:46:fd:21:bc:0a:f9:db:39:f7:04:d0:88:
2a:6f:30:1c:f1:30:d2:79:94:de:d1:b4:c5:cc:28:14:3c:95:
e6:fe:8d:01:8d:31:45:a0:6f:0f:c2:ca:fd:fb:98:b1:1b:80:
50:67:e6:a7:1f:c7:10:77:e3:ac:60:98:f6:19:d8:01:a2:ca:
f3:7f:f3:62:f8:32:69:64:1a:07:29:de:b8:23:ac:36:78:56:
33:58:fb:ec:26:c5:29:bc:43:ff:f1:4a:4b:42:40:a2:49:06:
ce:e6:3c:d3:ba:bf:67:49:7e:68:8b:be:58:a4:96:9e:51:a3:
42:69:d1:28:81:ec:3e:4c:1a:93:26:df:7c:91:d1:b1:0e:62:
55:20:9d:be:f1:d5:ef:09:72:59:fc:1a:de:34:08:8c:06:36:
b9:1a:e6:03:ae:3c:93:94:84:cc:3e:29:3c:28:83:ee:10:57:
c5:c7:0f:9a:a3:45:79:aa:08:32:d4:86:18:68:20:bc:9f:59:
be:d6:fa:a5:06:df:56:82:30:36:3c:53:80:ff:3c:11:17:be:
2f:db:71:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1hWjINZ6Q2Bde7t8quZKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYjQ3ZmE5MmI3MmM0OWVhMGFjNTM3MWRlMzUzYjFlMjcx
ZGM1ZDAwHhcNMjUwNjA3MTAwMDU2WhcNMjUwNjA4MTAwMDU2WjAzMTEwLwYDVQQD
Eyg0NzU5OTAzYzM1YzkyZTE5YjllMzI5YmQzNDFmNzcyYWJjM2I0NWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunbD+CgaQYuLuAS9pKyrvbB+zE05
GaiVOAJmq0lzV7hEKSplKunzsCWCNVE38dCRvUnh/auKtRLrzzZERwMg6Bs+s0xh
Ff9lHLvXzKQNKqV7NJk5B/J9EwWwVPPjYeciex8mycBJEKn4rLvw5946qDMuPv4V
BIW08ZuA4+F0Kti6UPRJH6KYbzxrXgG47nvcbVKloo5bF60v3NnrR1aU4tWvN8e4
roAIdI7js0zvnp73KKz2XoK8TAQRlY+0uQWqqbTcU/5stjyALQDPYlwtdNxFZllo
AvDRu1HDJ0jAQooMgZJGNxMlpDWHO+7dVOMYgrZNArVl+UTtww2Bgtpv0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdZkDw1yS4ZueMpvTQfdyq8O0XCMB8GA1UdIwQY
MBaAFKO0f6krcsSeoKxTcd41Ox4nHcXQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzdSX3FTdHl4SjZnckZOeDNqVTdIaWNkeGRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOTQ4ZjMtNjdkOS00ZjM1LTllMGQt
YmM2ZDFiM2Y4NmI5LzEvbzdSX3FTdHl4SjZnckZOeDNqVTdIaWNkeGRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hOTQ4ZjMtNjdkOS00ZjM1LTllMGQtYmM2ZDFiM2Y4NmI5
LzEvbzdSX3FTdHl4SjZnckZOeDNqVTdIaWNkeGRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAi4VpfeF
jGrEwRdLpbcUzvCaUKbFblHN2Mo5BIiul7+zyPMfrR480isPRv0hvAr52zn3BNCI
Km8wHPEw0nmU3tG0xcwoFDyV5v6NAY0xRaBvD8LK/fuYsRuAUGfmpx/HEHfjrGCY
9hnYAaLK83/zYvgyaWQaByneuCOsNnhWM1j77CbFKbxD//FKS0JAokkGzuY807q/
Z0l+aIu+WKSWnlGjQmnRKIHsPkwakybffJHRsQ5iVSCdvvHV7wlyWfwa3jQIjAY2
uRrmA648k5SEzD4pPCiD7hBXxccPmqNFeaoIMtSGGGggvJ9Zvtb6pQbfVoIwNjxT
gP88ERe+L9tx3Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:13:02 2025 by rpki-client