Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier: IplBLbONWLQwohdTFzwO3J0p1MQn8sHGSqjFc+OvL2s=
Subject key identifier: 14:25:F1:32:1D:ED:B5:34:52:78:ED:1F:67:EF:1C:9C:A9:CF:59:D7
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial: 01975723D937C8414FEB9BE305F4B3BD6A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number: 0347
Signing time: Tue 10 Jun 2025 00:00:56 +0000
Manifest this update: Tue 10 Jun 2025 00:00:56 +0000
Manifest next update: Wed 11 Jun 2025 00:00:56 +0000
Files and hashes: 1: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: icHz3blAwqLAuISmVNQdH9Kk/n5etWmx4WAOL+Ehv3I=)
2: b3OVVMtpKDJInQYqC6wfpj-rA1Y.roa (hash: Lyvza6TQ6bNKHI9xGfyJDbLi+A2Jo++Ry4SK3k6nPZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:23:d9:37:c8:41:4f:eb:9b:e3:05:f4:b3:bd:6a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Validity
Not Before: Jun 10 00:00:56 2025 GMT
Not After : Jun 11 00:00:56 2025 GMT
Subject: CN=1425f1321dedb5345278ed1f67ef1c9ca9cf59d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:88:c2:e6:43:13:95:8d:80:ea:ee:51:83:
db:e9:8d:50:cd:ef:26:8c:60:26:d4:fb:47:93:4e:
e3:59:c5:82:30:59:ee:4f:df:a3:6b:ae:0b:ae:3f:
c2:85:6e:81:21:cb:38:c8:88:72:28:c4:ec:d8:79:
b7:e0:0e:a1:44:5a:64:75:b6:d1:7a:36:24:e2:bf:
c2:f3:27:ea:32:a7:f4:a0:c5:39:57:10:38:4e:1b:
13:47:62:95:37:46:15:c0:1e:13:74:81:4f:d4:5e:
71:1e:96:d2:7a:ab:9d:d7:e7:65:15:ec:eb:46:99:
94:00:43:b2:00:13:97:a6:aa:7e:1d:70:cc:a6:b7:
c1:cc:cd:40:64:07:f2:96:b8:28:64:57:e6:45:2e:
e1:96:57:ab:e0:48:c8:9c:9d:83:0d:e4:4f:c8:c8:
f2:39:b2:aa:53:ce:2d:50:da:9b:d9:e4:26:70:db:
71:fa:4a:63:e1:96:bf:2f:9b:1d:a0:f4:15:e3:b9:
47:c4:01:18:54:3f:ee:90:e4:e7:eb:68:a2:85:bd:
5a:22:90:9b:7e:d5:af:cf:04:e8:81:46:04:f8:1a:
4d:36:a9:66:5e:25:db:b6:9a:b8:46:54:8d:59:1d:
42:5d:9e:09:8e:cd:3e:a0:4d:b7:f4:f8:18:52:96:
0e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:25:F1:32:1D:ED:B5:34:52:78:ED:1F:67:EF:1C:9C:A9:CF:59:D7
X509v3 Authority Key Identifier:
keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4d:e6:a9:eb:48:49:32:7d:df:1d:4e:85:78:90:67:c3:33:
be:b9:00:3c:a5:99:cf:d9:ba:fb:01:00:65:fe:af:f7:7d:cc:
f6:2f:86:60:2b:f0:56:0e:ec:31:1e:c9:0e:f1:50:d0:17:bd:
19:aa:fb:cb:1c:b9:ec:a4:1d:87:8c:ca:13:38:a0:72:fb:f0:
ca:89:fb:54:44:1c:74:37:94:19:e0:b3:24:72:ef:e5:56:72:
13:8e:a4:b0:69:3a:e4:92:1c:3c:cc:cb:99:ea:b7:75:fd:96:
64:e5:a4:50:62:38:6a:52:32:5c:33:ed:63:6f:18:1c:17:05:
00:bf:1b:ae:76:0b:c7:98:41:1e:84:e0:3b:b2:1b:f2:7b:dd:
c7:07:f1:9b:92:46:24:c0:9f:d0:80:fc:d5:e5:69:95:04:22:
87:d5:91:a9:1a:4c:02:c0:2c:54:ae:02:44:1c:e6:43:6b:31:
c7:f9:ab:23:29:ed:a4:59:09:08:1a:ae:57:6e:91:6c:4d:1b:
7f:d4:a7:72:94:e8:35:00:6d:10:c4:12:26:a8:79:84:ee:bf:
48:d6:4f:fd:93:6c:4f:29:6f:54:78:32:1f:a1:09:f7:03:1b:
da:42:44:1f:d6:ea:3e:67:5c:16:38:f9:f7:06:92:0d:2f:2d:
cf:25:aa:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdXI9k3yEFP65vjBfSzvWpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YzUxYjkxMzFmNmUzYzI1OWFmOWRkMGFkYmY1NGY3MWEy
NDk4ZWYwHhcNMjUwNjEwMDAwMDU2WhcNMjUwNjExMDAwMDU2WjAzMTEwLwYDVQQD
EygxNDI1ZjEzMjFkZWRiNTM0NTI3OGVkMWY2N2VmMWM5Y2E5Y2Y1OWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKCIwuZDE5WNgOruUYPb6Y1Qze8m
jGAm1PtHk07jWcWCMFnuT9+ja64Lrj/ChW6BIcs4yIhyKMTs2Hm34A6hRFpkdbbR
ejYk4r/C8yfqMqf0oMU5VxA4ThsTR2KVN0YVwB4TdIFP1F5xHpbSequd1+dlFezr
RpmUAEOyABOXpqp+HXDMprfBzM1AZAfylrgoZFfmRS7hller4EjInJ2DDeRPyMjy
ObKqU84tUNqb2eQmcNtx+kpj4Za/L5sdoPQV47lHxAEYVD/ukOTn62iihb1aIpCb
ftWvzwTogUYE+BpNNqlmXiXbtpq4RlSNWR1CXZ4Jjs0+oE239PgYUpYOrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQl8TId7bU0UnjtH2fvHJypz1nXMB8GA1UdIwQY
MBaAFDnFG5Ex9uPCWa+d0K2/VPcaJJjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zYTA4YzMtZWRiMC00NzVkLWI4NzAt
NzMwYzRkNDcyYThhLzEvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8zYTA4YzMtZWRiMC00NzVkLWI4NzAtNzMwYzRkNDcyYThh
LzEvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg03mqetI
STJ93x1OhXiQZ8MzvrkAPKWZz9m6+wEAZf6v933M9i+GYCvwVg7sMR7JDvFQ0Be9
Gar7yxy57KQdh4zKEzigcvvwyon7VEQcdDeUGeCzJHLv5VZyE46ksGk65JIcPMzL
meq3df2WZOWkUGI4alIyXDPtY28YHBcFAL8brnYLx5hBHoTgO7Ib8nvdxwfxm5JG
JMCf0ID81eVplQQih9WRqRpMAsAsVK4CRBzmQ2sxx/mrIyntpFkJCBquV26RbE0b
f9SncpToNQBtEMQSJqh5hO6/SNZP/ZNsTylvVHgyH6EJ9wMb2kJEH9bqPmdcFjj5
9waSDS8tzyWqGA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 03:29:08 2025 by rpki-client