Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
File: m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft (raw, json)
Hash identifier: 0SgUdpVZV7Kugvg59L6OcasMyvi4Q1H4hPgwA0IRhL0=
Subject key identifier: 47:2C:C9:CB:78:AC:62:91:98:05:75:45:09:40:7D:72:A5:A4:B3:55
Authority key identifier: 9B:EA:3A:3A:4A:36:06:C7:39:6F:15:F5:01:AC:5C:64:17:85:75:0C
Certificate issuer: /CN=9bea3a3a4a3606c7396f15f501ac5c641785750c
Certificate serial: 01974DB2D3178E63F1F8B6CCE4A615169480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
Manifest number: 0917
Signing time: Sun 08 Jun 2025 04:00:54 +0000
Manifest this update: Sun 08 Jun 2025 04:00:54 +0000
Manifest next update: Mon 09 Jun 2025 04:00:54 +0000
Files and hashes: 1: 7dGZOPsa1FU0C36WBDwIw7gL1Bo.roa (hash: 5etpC4MaJX7LndBCS5De3y9ecFGJX8+EfQl3ZBJ8rb8=)
2: m-o6Oko2Bsc5bxX1AaxcZBeFdQw.crl (hash: LLwcWb84IPFa5Egd+CzozF4Ks/U5Zsn5FI8yXSKYjF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:d3:17:8e:63:f1:f8:b6:cc:e4:a6:15:16:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bea3a3a4a3606c7396f15f501ac5c641785750c
Validity
Not Before: Jun 8 04:00:54 2025 GMT
Not After : Jun 9 04:00:54 2025 GMT
Subject: CN=472cc9cb78ac62919805754509407d72a5a4b355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:b0:02:75:9d:dd:50:3f:4b:30:2b:3e:19:
33:85:23:2a:d2:28:ba:a7:86:c5:5c:71:d3:7b:16:
69:88:b1:f0:47:32:c7:36:21:c4:12:98:d0:67:9c:
b5:81:ef:ff:78:32:8a:fd:00:e5:b5:f6:c5:51:5a:
0f:75:c0:fe:d1:10:5f:a5:14:39:6f:ca:06:d0:cb:
54:e9:7f:4b:01:94:25:5b:61:c3:59:1b:5a:b2:00:
66:e4:bb:ff:50:b9:68:56:0c:47:51:4a:16:8b:aa:
c6:51:f1:2f:eb:4b:b7:8e:79:b8:31:1a:82:93:fc:
a0:6a:b2:63:8a:be:59:0a:00:6d:a6:30:e1:40:69:
27:c5:ec:d2:bd:ce:ca:62:87:f2:b2:ce:48:9a:63:
19:8e:da:7c:d5:9b:06:d8:a3:44:5d:e4:4a:2f:ac:
12:15:9e:cf:0b:8c:14:87:81:57:90:01:05:c3:be:
29:2f:e9:57:91:c5:cf:cd:6a:55:e6:78:f6:58:2b:
3b:27:73:f3:ee:72:50:5a:c6:5d:a1:a9:1e:4f:cb:
d5:71:61:06:3e:15:7b:7c:d4:6a:10:56:fd:97:fd:
4f:dc:8b:4b:3e:c4:27:99:1d:94:bb:e0:83:cd:0c:
da:67:20:30:05:51:23:b2:66:2a:27:4b:e5:ce:82:
fa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2C:C9:CB:78:AC:62:91:98:05:75:45:09:40:7D:72:A5:A4:B3:55
X509v3 Authority Key Identifier:
keyid:9B:EA:3A:3A:4A:36:06:C7:39:6F:15:F5:01:AC:5C:64:17:85:75:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6a:21:c7:39:a7:d4:57:9b:e5:8a:e3:50:64:8c:e1:bd:d2:
96:fc:9e:70:d0:90:e5:a7:c6:99:7b:4f:13:2d:23:54:a1:ed:
1c:ad:0e:ba:d7:74:7c:c8:f7:53:88:fa:da:17:fd:7f:90:68:
36:39:06:81:ec:1d:6c:1c:4e:eb:dd:f1:aa:6d:d5:0a:97:7d:
02:80:32:fa:26:53:96:50:50:58:03:a5:cf:fe:c1:f1:0e:d2:
a0:76:6d:1d:2e:d7:85:09:df:e4:9a:00:21:f9:5d:2d:50:b2:
38:3b:d9:cb:15:e7:4e:65:8b:0e:dc:bb:01:28:1d:f0:69:19:
d2:64:6d:0c:df:f3:7c:a4:2b:c7:e9:73:9e:95:8d:28:7e:1f:
6c:ff:08:cf:5f:94:28:9f:bb:f6:5e:94:d8:15:de:ea:f5:1a:
53:16:35:70:b9:5b:7c:c9:90:37:77:9a:8f:42:cb:f0:2f:25:
3e:fc:c4:ce:87:63:e2:55:4a:a7:67:74:6d:d3:d1:e2:ca:7f:
79:b3:37:df:ac:38:7a:ac:65:1b:16:e3:ea:60:aa:5c:ad:78:
8e:8c:3d:bc:d8:4a:3e:a1:55:ac:f1:1c:6b:52:35:e0:91:ed:
65:50:7f:d4:b3:a4:0e:7a:9f:33:00:5b:29:92:33:ba:2f:b0:
ce:d7:66:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNstMXjmPx+LbM5KYVFpSAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZWEzYTNhNGEzNjA2YzczOTZmMTVmNTAxYWM1YzY0MTc4
NTc1MGMwHhcNMjUwNjA4MDQwMDU0WhcNMjUwNjA5MDQwMDU0WjAzMTEwLwYDVQQD
Eyg0NzJjYzljYjc4YWM2MjkxOTgwNTc1NDUwOTQwN2Q3MmE1YTRiMzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusCwAnWd3VA/SzArPhkzhSMq0ii6
p4bFXHHTexZpiLHwRzLHNiHEEpjQZ5y1ge//eDKK/QDltfbFUVoPdcD+0RBfpRQ5
b8oG0MtU6X9LAZQlW2HDWRtasgBm5Lv/ULloVgxHUUoWi6rGUfEv60u3jnm4MRqC
k/ygarJjir5ZCgBtpjDhQGknxezSvc7KYofyss5ImmMZjtp81ZsG2KNEXeRKL6wS
FZ7PC4wUh4FXkAEFw74pL+lXkcXPzWpV5nj2WCs7J3Pz7nJQWsZdoakeT8vVcWEG
PhV7fNRqEFb9l/1P3ItLPsQnmR2Uu+CDzQzaZyAwBVEjsmYqJ0vlzoL6vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcsyct4rGKRmAV1RQlAfXKlpLNVMB8GA1UdIwQY
MBaAFJvqOjpKNgbHOW8V9QGsXGQXhXUMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1vNk9rbzJCc2M1YnhYMUFheGNaQmVGZFF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84OWFiYjgtNjM2ZC00MDg0LTgxYTAt
YzYzYWRiNmVlNWQ5LzEvbS1vNk9rbzJCc2M1YnhYMUFheGNaQmVGZFF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84OWFiYjgtNjM2ZC00MDg0LTgxYTAtYzYzYWRiNmVlNWQ5
LzEvbS1vNk9rbzJCc2M1YnhYMUFheGNaQmVGZFF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2ohxzmn
1Feb5YrjUGSM4b3SlvyecNCQ5afGmXtPEy0jVKHtHK0Outd0fMj3U4j62hf9f5Bo
NjkGgewdbBxO693xqm3VCpd9AoAy+iZTllBQWAOlz/7B8Q7SoHZtHS7XhQnf5JoA
IfldLVCyODvZyxXnTmWLDty7ASgd8GkZ0mRtDN/zfKQrx+lznpWNKH4fbP8Iz1+U
KJ+79l6U2BXe6vUaUxY1cLlbfMmQN3eaj0LL8C8lPvzEzodj4lVKp2d0bdPR4sp/
ebM336w4eqxlGxbj6mCqXK14jow9vNhKPqFVrPEca1I14JHtZVB/1LOkDnqfMwBb
KZIzui+wztdmzg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:05:57 2025 by rpki-client