Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
File: oJfWos9CiA2-v0KjJRkHohyRpKU.mft (raw, json)
Hash identifier: aoH4mWA2YXlFHaD1sJ5QhU8aANzqmzyNZlQal+tr0dI=
Subject key identifier: 01:A6:C5:EC:C6:41:C5:C8:C2:38:18:E0:85:79:62:BC:45:9F:28:0B
Authority key identifier: A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5
Certificate issuer: /CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5
Certificate serial: 0197474288A53E741ECA8BFFE67FD54F82CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 22:00:32 +0000
Manifest this update: Fri 06 Jun 2025 22:00:32 +0000
Manifest next update: Sat 07 Jun 2025 22:00:32 +0000
Files and hashes: 1: 9xc32CvuOjNWHQB-PWYWWQOY_yA.roa (hash: PjbNQ/Rs2a2yPfO42XDBv2ntO3mtq/Wj2Yqgz9eO9jA=)
2: oJfWos9CiA2-v0KjJRkHohyRpKU.crl (hash: a/+t7CngA5bnoogcKA7gjz0c/Skv5WGkq4IfWbOblEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:88:a5:3e:74:1e:ca:8b:ff:e6:7f:d5:4f:82:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5
Validity
Not Before: Jun 6 22:00:32 2025 GMT
Not After : Jun 7 22:00:32 2025 GMT
Subject: CN=01a6c5ecc641c5c8c23818e0857962bc459f280b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5d:40:a7:8c:4d:d1:e9:8d:b6:86:0d:29:c5:
dc:8d:15:84:e9:b6:d8:ee:4c:c6:bb:ab:d8:66:ef:
3f:8d:f5:3e:77:a2:30:0a:fd:4d:98:48:88:d3:db:
b4:d7:d8:ea:29:29:a4:ec:69:1f:c7:f7:e5:46:fb:
6f:81:73:d8:ea:05:40:d8:8a:88:92:8d:53:2c:dc:
38:d8:5f:0c:a1:d4:ef:79:7b:72:4b:90:cc:e1:ea:
f3:8e:57:b6:d9:db:d6:ed:4b:51:ca:06:e8:3c:44:
dc:6b:2f:71:59:c1:40:14:93:11:e4:17:f9:ce:ee:
c5:01:f1:63:ae:f3:94:ad:a0:de:d3:ee:58:6a:3e:
6a:35:c7:de:4f:59:92:3b:02:85:27:9e:fe:fd:70:
ba:6b:64:52:4b:29:7d:9a:75:0b:12:c6:ec:73:80:
ca:7a:6e:21:ea:19:a4:9d:b0:9b:b4:5d:32:87:65:
88:cc:77:cb:75:86:d0:9f:1e:67:b3:87:be:f0:e2:
bd:ba:9f:22:36:76:bc:a8:cf:2c:f7:7e:9c:d7:aa:
0e:ce:c3:86:c9:ee:2e:1b:ee:92:bc:4d:05:65:0c:
2d:08:d1:bc:53:5a:c1:7b:89:75:04:d5:c7:76:43:
7a:16:a8:e3:d6:52:c2:a7:2c:bd:a6:19:80:40:62:
f6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A6:C5:EC:C6:41:C5:C8:C2:38:18:E0:85:79:62:BC:45:9F:28:0B
X509v3 Authority Key Identifier:
keyid:A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d8:c9:1d:58:09:36:a8:00:df:0b:84:b2:4c:3d:ff:aa:fa:
6c:74:d1:04:39:d8:c4:ab:9e:43:03:9b:f0:cd:99:95:f9:44:
e7:08:ae:6c:bf:ed:cd:d7:cc:9d:85:49:79:5e:50:84:cb:68:
18:7b:81:4b:57:cf:f5:69:7d:52:ec:8d:25:77:71:84:91:e2:
e4:aa:a3:10:df:dc:9d:24:ab:30:91:e8:dc:9b:de:ca:cd:63:
9c:39:2d:63:67:68:8c:b4:a4:9a:37:0f:e5:48:6d:c7:4c:2f:
30:ae:15:c7:c7:5d:c5:fa:f8:4b:50:82:69:45:76:e1:ae:cd:
ae:bb:ad:d9:f4:64:da:65:da:88:24:a6:81:7b:ed:08:af:bb:
4c:06:3e:7a:92:d9:a9:8d:a0:7a:59:0c:ff:ee:d5:eb:5c:52:
85:1e:e6:de:78:a0:2d:57:1d:a3:ee:55:a5:cd:f4:d6:0e:21:
c0:40:b4:45:f2:71:93:f0:08:f5:1f:e4:9b:11:d4:3f:bb:16:
a0:fb:3e:f2:f5:15:9e:e3:41:35:fb:28:28:1b:26:5d:0e:34:
97:45:df:7f:dd:b5:76:b5:52:88:3e:30:d1:57:0f:db:b4:7e:
9f:6a:65:f1:45:26:62:33:35:80:11:9e:51:f9:05:1b:61:a7:
d7:0e:21:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQoilPnQeyov/5n/VT4LPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOTdkNmEyY2Y0Mjg4MGRiZWJmNDJhMzI1MTkwN2EyMWM5
MWE0YTUwHhcNMjUwNjA2MjIwMDMyWhcNMjUwNjA3MjIwMDMyWjAzMTEwLwYDVQQD
EygwMWE2YzVlY2M2NDFjNWM4YzIzODE4ZTA4NTc5NjJiYzQ1OWYyODBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV1Ap4xN0emNtoYNKcXcjRWE6bbY
7kzGu6vYZu8/jfU+d6IwCv1NmEiI09u019jqKSmk7Gkfx/flRvtvgXPY6gVA2IqI
ko1TLNw42F8ModTveXtyS5DM4erzjle22dvW7UtRygboPETcay9xWcFAFJMR5Bf5
zu7FAfFjrvOUraDe0+5Yaj5qNcfeT1mSOwKFJ57+/XC6a2RSSyl9mnULEsbsc4DK
em4h6hmknbCbtF0yh2WIzHfLdYbQnx5ns4e+8OK9up8iNna8qM8s936c16oOzsOG
ye4uG+6SvE0FZQwtCNG8U1rBe4l1BNXHdkN6Fqjj1lLCpyy9phmAQGL2/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGmxezGQcXIwjgY4IV5YrxFnygLMB8GA1UdIwQY
MBaAFKCX1qLPQogNvr9CoyUZB6IckaSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0pmV29zOUNpQTItdjBLakpSa0hvaHlScEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80YzJiNjgtODE4Yi00OTAyLWI0MmYt
NmZjYWYyNzI5YmU1LzEvb0pmV29zOUNpQTItdjBLakpSa0hvaHlScEtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80YzJiNjgtODE4Yi00OTAyLWI0MmYtNmZjYWYyNzI5YmU1
LzEvb0pmV29zOUNpQTItdjBLakpSa0hvaHlScEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNjJHVgJ
NqgA3wuEskw9/6r6bHTRBDnYxKueQwOb8M2ZlflE5wiubL/tzdfMnYVJeV5QhMto
GHuBS1fP9Wl9UuyNJXdxhJHi5KqjEN/cnSSrMJHo3Jveys1jnDktY2dojLSkmjcP
5Uhtx0wvMK4Vx8ddxfr4S1CCaUV24a7Nrrut2fRk2mXaiCSmgXvtCK+7TAY+epLZ
qY2gelkM/+7V61xShR7m3nigLVcdo+5Vpc301g4hwEC0RfJxk/AI9R/kmxHUP7sW
oPs+8vUVnuNBNfsoKBsmXQ40l0Xff921drVSiD4w0VcP27R+n2pl8UUmYjM1gBGe
UfkFG2Gn1w4hRA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:32 2025 by rpki-client