Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
File: O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft (raw, json)
Hash identifier: K7GILClJVYTB9dvGXMiv8N823p2RJUZO8RQmsvgevUQ=
Subject key identifier: 5E:1F:F2:38:E3:7E:93:D6:79:AF:AA:23:97:CB:6C:86:91:05:B2:55
Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
Certificate issuer: /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Certificate serial: 01974B1F54B050E29D5CDA0E81FF9F7736F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
Manifest number: 1201
Signing time: Sat 07 Jun 2025 16:00:33 +0000
Manifest this update: Sat 07 Jun 2025 16:00:33 +0000
Manifest next update: Sun 08 Jun 2025 16:00:33 +0000
Files and hashes: 1: O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl (hash: ztFMXZxWS0BxSrrs6GJ7R1DxkyPXJEuIj8D6HkJrWm8=)
2: OcIpHvqAwT2M9dTBJHDbqY1xej4.roa (hash: gnCvl1Md/DWtZz5X5Y7WYVBP9HfFDhgD11ts2150gvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:54:b0:50:e2:9d:5c:da:0e:81:ff:9f:77:36:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Validity
Not Before: Jun 7 16:00:33 2025 GMT
Not After : Jun 8 16:00:33 2025 GMT
Subject: CN=5e1ff238e37e93d679afaa2397cb6c869105b255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0b:de:8c:74:68:19:25:19:ed:33:16:cd:09:
3f:cb:05:6b:75:c1:8c:de:9e:39:53:52:15:3b:2b:
64:09:16:bf:4a:b6:94:76:cb:29:2f:75:62:17:e1:
0e:4f:aa:ee:f3:32:01:2b:e6:d1:c2:19:e3:e5:59:
66:7c:8d:20:bc:92:e0:95:69:2a:37:d6:35:26:62:
3e:5b:26:88:48:62:0c:26:9d:16:f2:8a:fd:84:d5:
64:06:e9:a9:c9:10:6e:b5:5b:e9:8d:82:bd:21:a1:
74:94:61:b3:66:dc:49:22:ef:5e:6c:f0:b0:d4:4b:
ac:cb:95:9e:7f:be:61:b7:f0:84:41:cf:d8:ed:4c:
e3:bb:2c:20:68:4a:a4:ac:65:e3:78:30:29:19:b0:
12:e9:7d:2f:3a:c4:cf:d7:a4:9e:e9:1e:82:89:ca:
90:74:f3:21:2b:57:6a:9c:08:46:f5:5a:36:6d:e6:
99:d2:e2:b9:b6:02:e9:7a:f4:7d:9b:52:e7:9d:5f:
7f:67:1c:07:a5:10:e0:1f:34:2b:b3:9c:98:4e:f0:
3d:dc:81:f3:ec:2b:51:32:57:9f:4d:3c:18:aa:54:
89:a9:ee:03:f6:4a:d9:ba:65:46:f2:80:e6:36:89:
cf:54:da:71:b6:30:27:f7:ac:d5:84:a7:1f:5f:a9:
00:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1F:F2:38:E3:7E:93:D6:79:AF:AA:23:97:CB:6C:86:91:05:B2:55
X509v3 Authority Key Identifier:
keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e1:36:3f:a4:63:c0:9b:df:b0:6a:2a:06:f3:88:60:94:8f:
1d:d4:fe:5d:b8:73:66:67:db:d8:bf:03:fd:fd:c0:45:57:bd:
8e:ba:2c:3e:4f:27:57:29:fd:12:09:79:4f:ad:32:2b:d5:dc:
7a:89:cc:31:f5:e5:b4:08:a4:a3:1f:51:20:78:dd:a8:47:fd:
1a:e7:18:2e:a9:d3:0a:ee:ef:f5:51:f8:23:c7:b2:83:5a:20:
ca:e2:b1:da:80:aa:78:9b:52:f6:0a:ec:66:c4:8e:71:95:4e:
0a:a1:3b:07:8f:50:31:1a:75:6b:b4:a2:c2:2c:de:42:d1:87:
09:e9:81:1b:28:ef:3e:61:6b:a2:04:83:72:33:a9:67:20:b6:
18:aa:b7:56:73:8d:97:81:1b:1b:2a:03:44:ce:58:d0:80:96:
a7:ae:3b:54:99:3e:30:6b:a5:c9:47:f2:a6:da:c6:99:03:1c:
f2:86:da:3c:38:3c:dc:b0:26:d6:b0:7b:b7:ba:37:97:09:4b:
ed:42:8c:8c:25:ad:11:cd:6c:7b:29:c1:a5:d8:1e:33:c0:93:
a4:db:3e:2c:97:d8:1a:9e:50:c6:74:8b:4c:36:0a:8d:f0:88:
e2:db:df:63:ea:52:2d:dc:52:72:73:48:55:ec:12:31:6d:62:
66:75:2f:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLH1SwUOKdXNoOgf+fdzb3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZDlmYjU3ZjRiMGYyNTNmOWFmODU4MzAzZTZiNDZhNTI5
YzE5NGUwHhcNMjUwNjA3MTYwMDMzWhcNMjUwNjA4MTYwMDMzWjAzMTEwLwYDVQQD
Eyg1ZTFmZjIzOGUzN2U5M2Q2NzlhZmFhMjM5N2NiNmM4NjkxMDViMjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQvejHRoGSUZ7TMWzQk/ywVrdcGM
3p45U1IVOytkCRa/SraUdsspL3ViF+EOT6ru8zIBK+bRwhnj5VlmfI0gvJLglWkq
N9Y1JmI+WyaISGIMJp0W8or9hNVkBumpyRButVvpjYK9IaF0lGGzZtxJIu9ebPCw
1Eusy5Wef75ht/CEQc/Y7UzjuywgaEqkrGXjeDApGbAS6X0vOsTP16Se6R6CicqQ
dPMhK1dqnAhG9Vo2beaZ0uK5tgLpevR9m1LnnV9/ZxwHpRDgHzQrs5yYTvA93IHz
7CtRMlefTTwYqlSJqe4D9krZumVG8oDmNonPVNpxtjAn96zVhKcfX6kAIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4f8jjjfpPWea+qI5fLbIaRBbJVMB8GA1UdIwQY
MBaAFDvZ+1f0sPJT+a+FgwPmtGpSnBlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzluN1ZfU3c4bFA1cjRXREEtYTBhbEtjR1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yMDRjZGYtZjZlNy00ODc0LTk4MDIt
NjUwZGQxMzhlNmEyLzEvTzluN1ZfU3c4bFA1cjRXREEtYTBhbEtjR1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8yMDRjZGYtZjZlNy00ODc0LTk4MDItNjUwZGQxMzhlNmEy
LzEvTzluN1ZfU3c4bFA1cjRXREEtYTBhbEtjR1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+E2P6Rj
wJvfsGoqBvOIYJSPHdT+XbhzZmfb2L8D/f3ARVe9jrosPk8nVyn9Egl5T60yK9Xc
eonMMfXltAikox9RIHjdqEf9GucYLqnTCu7v9VH4I8eyg1ogyuKx2oCqeJtS9grs
ZsSOcZVOCqE7B49QMRp1a7SiwizeQtGHCemBGyjvPmFrogSDcjOpZyC2GKq3VnON
l4EbGyoDRM5Y0ICWp647VJk+MGulyUfyptrGmQMc8obaPDg83LAm1rB7t7o3lwlL
7UKMjCWtEc1seynBpdgeM8CTpNs+LJfYGp5QxnSLTDYKjfCI4tvfY+pSLdxScnNI
VewSMW1iZnUvJA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:53:00 2025 by rpki-client