Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
File: OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft (raw, json)
Hash identifier: RwgYUcALpiijNw05pmWLlwUNdG9UBRWxcb528Ns8uUA=
Subject key identifier: B5:2E:71:C1:C9:FC:CC:89:AD:3A:3A:F2:F2:63:A0:67:6D:BA:EC:C8
Authority key identifier: 3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
Certificate issuer: /CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Certificate serial: 01974BFB666FAB6F873EA8549E4D5D154DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 20:00:56 +0000
Manifest this update: Sat 07 Jun 2025 20:00:56 +0000
Manifest next update: Sun 08 Jun 2025 20:00:56 +0000
Files and hashes: 1: 8b8hGUt6rzi1dlifxra-q3rgP6w.roa (hash: KASE+0wVItpUVcgXdu/CScsiZaEIchQxerFmFT5uHpo=)
2: OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl (hash: NBUC2Sug+2rfMAQnk+1BruwerzChQqH3KaaQTWEXczc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:66:6f:ab:6f:87:3e:a8:54:9e:4d:5d:15:4d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Validity
Not Before: Jun 7 20:00:56 2025 GMT
Not After : Jun 8 20:00:56 2025 GMT
Subject: CN=b52e71c1c9fccc89ad3a3af2f263a0676dbaecc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:13:fd:0e:8a:e4:d5:d8:37:70:f0:16:5d:15:
71:fa:80:73:d5:5c:d3:19:c2:78:e0:16:7f:d6:9e:
5e:01:8b:b6:f0:eb:fb:2f:eb:8f:46:47:ae:8c:ed:
0d:73:1d:d5:e5:dd:c9:d8:ce:fd:86:b3:30:33:10:
d8:dd:33:f0:b1:2a:56:e1:00:19:d0:3b:c0:0e:fd:
16:d2:99:c1:ff:05:70:2d:8b:e4:31:d2:be:4f:79:
8d:ab:f4:de:41:cf:82:a3:a7:97:43:d2:b6:98:4c:
bc:6c:51:e7:52:59:d0:64:05:94:ab:82:6f:8e:8b:
4d:7c:70:7e:d8:de:00:19:66:a6:41:15:dc:6b:b8:
2b:5f:b9:07:a5:49:dd:49:4d:66:cd:7a:e2:98:dc:
7d:d7:17:1d:a9:b6:23:f2:22:a2:1e:38:02:11:2d:
ae:0b:c4:cc:40:d0:40:23:a1:47:cc:b5:03:6f:f1:
f8:03:8e:22:5a:89:98:09:9b:1d:5e:85:f4:06:c5:
d4:ed:fa:a4:fe:4c:92:c4:4b:9d:99:7a:61:7b:92:
9a:52:ca:19:61:98:76:44:9e:83:71:41:66:4a:7a:
1c:e7:1c:ef:f9:95:03:69:eb:2c:9f:db:f4:08:2f:
9b:f6:fb:4d:4d:8c:83:7d:88:4a:5d:f7:7d:1f:9c:
6e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2E:71:C1:C9:FC:CC:89:AD:3A:3A:F2:F2:63:A0:67:6D:BA:EC:C8
X509v3 Authority Key Identifier:
keyid:3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1e:e4:40:2a:59:33:68:cf:31:c2:b2:47:f2:6b:f2:9c:46:
8b:40:f8:a1:0c:27:3d:e3:35:de:a6:21:0e:a2:04:d8:6c:23:
d3:a4:cd:bf:95:0c:a9:f5:47:9b:0e:20:58:11:b0:5d:30:01:
25:14:28:b7:e1:d8:49:3c:41:a5:2c:a2:24:f0:e5:20:2c:26:
7b:a5:cd:66:96:ef:d6:76:64:ec:fd:80:8b:dd:17:28:65:3b:
ca:6d:2f:88:2c:11:1f:6c:de:66:97:b3:55:58:28:ac:e3:ba:
02:b5:02:d2:e5:68:a1:0b:5d:cb:59:11:86:7d:e4:94:15:a9:
9e:1d:01:82:99:5a:86:26:10:57:89:89:e2:0d:1e:eb:7d:95:
d9:15:1a:42:d5:92:c8:35:94:37:45:62:f1:07:7a:58:30:1e:
41:1f:20:62:92:f1:d1:e1:1c:a7:08:71:01:ac:12:92:ab:22:
a6:19:fd:a8:2d:ab:0f:44:2c:53:ab:b4:fd:2d:56:e7:d2:a0:
15:5e:22:e7:5c:7b:59:e3:1e:e3:d8:12:2a:50:df:5a:dd:cb:
bf:d7:7f:74:72:8d:13:e3:76:97:64:26:5a:1b:a1:f4:5f:e1:
16:95:37:77:fc:ff:6c:f5:a5:1d:11:a2:2c:40:d3:e6:69:87:
f4:62:18:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+2Zvq2+HPqhUnk1dFU3wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZTAwOTYyNDdhOGM1NGU1ZGU4YzFiMGRhZjEwNTRhZWM4
Y2M0NTAwHhcNMjUwNjA3MjAwMDU2WhcNMjUwNjA4MjAwMDU2WjAzMTEwLwYDVQQD
EyhiNTJlNzFjMWM5ZmNjYzg5YWQzYTNhZjJmMjYzYTA2NzZkYmFlY2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRP9Dork1dg3cPAWXRVx+oBz1VzT
GcJ44BZ/1p5eAYu28Ov7L+uPRkeujO0Ncx3V5d3J2M79hrMwMxDY3TPwsSpW4QAZ
0DvADv0W0pnB/wVwLYvkMdK+T3mNq/TeQc+Co6eXQ9K2mEy8bFHnUlnQZAWUq4Jv
jotNfHB+2N4AGWamQRXca7grX7kHpUndSU1mzXrimNx91xcdqbYj8iKiHjgCES2u
C8TMQNBAI6FHzLUDb/H4A44iWomYCZsdXoX0BsXU7fqk/kySxEudmXphe5KaUsoZ
YZh2RJ6DcUFmSnoc5xzv+ZUDaessn9v0CC+b9vtNTYyDfYhKXfd9H5xugQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUuccHJ/MyJrTo68vJjoGdtuuzIMB8GA1UdIwQY
MBaAFDrgCWJHqMVOXejBsNrxBUrsjMRQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3VBSllrZW94VTVkNk1HdzJ2RUZTdXlNeEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYWE0OTQtOTMwOC00N2VlLWE4MDgt
Yjk3MjIxNDQ1MTNmLzEvT3VBSllrZW94VTVkNk1HdzJ2RUZTdXlNeEZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wYWE0OTQtOTMwOC00N2VlLWE4MDgtYjk3MjIxNDQ1MTNm
LzEvT3VBSllrZW94VTVkNk1HdzJ2RUZTdXlNeEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlR7kQCpZ
M2jPMcKyR/Jr8pxGi0D4oQwnPeM13qYhDqIE2Gwj06TNv5UMqfVHmw4gWBGwXTAB
JRQot+HYSTxBpSyiJPDlICwme6XNZpbv1nZk7P2Ai90XKGU7ym0viCwRH2zeZpez
VVgorOO6ArUC0uVooQtdy1kRhn3klBWpnh0BgplahiYQV4mJ4g0e632V2RUaQtWS
yDWUN0Vi8Qd6WDAeQR8gYpLx0eEcpwhxAawSkqsiphn9qC2rD0QsU6u0/S1W59Kg
FV4i51x7WeMe49gSKlDfWt3Lv9d/dHKNE+N2l2QmWhuh9F/hFpU3d/z/bPWlHRGi
LEDT5mmH9GIY2Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:13:00 2025 by rpki-client