Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: wuRbwsvA9wr1kTD/CxhP1yoybKdPAYTQWQiyyhgP0TY=
Subject key identifier: 09:FF:A1:06:C7:E1:C2:08:9D:C7:3B:F4:04:D2:D0:A4:5D:C5:E0:46
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 01984776ED5F8E29D05A2FBCD46F54ACA632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 1155
Signing time: Sat 26 Jul 2025 16:00:33 +0000
Manifest this update: Sat 26 Jul 2025 16:00:33 +0000
Manifest next update: Sun 27 Jul 2025 16:00:33 +0000
Files and hashes: 1: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: zrwan4C4RvyplHLncfm70iRokzUJt+ZLMJNAr9a1P4w=)
2: tbot_ZPo7efS_eEBsyLeDHJNVmM.roa (hash: edYIJvl9gSH8k9QetJe1JVzyMvJbYqfDW2Tyrs7Mw9w=)
3: uoHivGDaQdTRu4MbmZ1xXu7l-mk.roa (hash: UPN1y7noDZEvkhcHWjNiVxEsGCr7mcBF0YnibzrND6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:ed:5f:8e:29:d0:5a:2f:bc:d4:6f:54:ac:a6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Jul 26 16:00:33 2025 GMT
Not After : Jul 27 16:00:33 2025 GMT
Subject: CN=09ffa106c7e1c2089dc73bf404d2d0a45dc5e046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:95:bb:2e:3e:f0:6d:6b:c9:4a:fc:23:c6:
2f:27:95:c9:f7:08:ef:49:3a:33:21:64:22:20:31:
2b:e3:22:76:5a:b8:b1:74:e7:8d:00:28:a6:45:fb:
03:e7:44:c3:6e:f5:74:74:09:92:5f:e7:72:58:1f:
9c:6b:5f:24:d2:15:c9:7b:46:44:e6:50:8a:71:ff:
57:3c:0c:bd:c4:7a:68:25:a7:4d:32:e6:98:ff:c1:
9d:f8:01:e5:46:56:21:a2:4f:b4:3a:69:aa:61:a9:
67:6c:50:82:c9:b2:65:ea:d4:c9:0f:83:93:88:03:
ba:62:fc:dc:8d:15:01:34:a4:45:1c:e1:f6:74:ea:
0f:43:55:2b:78:05:8e:85:26:e7:f9:08:1e:5a:43:
99:e2:e9:43:42:b5:ac:11:08:d4:1c:6d:fb:05:19:
bf:d3:fd:df:36:33:d7:7e:65:cd:2a:15:33:94:01:
ef:b2:f0:70:13:8a:b8:0e:84:be:a0:0b:02:81:3e:
fa:79:04:17:6a:e7:0b:d8:95:6f:56:b9:5d:17:a2:
0a:d8:43:65:75:7f:f6:2f:a0:74:71:f5:99:c6:6b:
db:71:52:79:76:f8:b5:2d:a7:18:bd:c8:2a:ce:cf:
d1:07:f2:8c:26:ac:46:69:53:09:ad:e4:d3:0a:bf:
42:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FF:A1:06:C7:E1:C2:08:9D:C7:3B:F4:04:D2:D0:A4:5D:C5:E0:46
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cc:59:30:c6:cc:d4:1a:91:5a:ea:96:4a:59:3f:8f:73:df:
61:07:f0:02:12:fc:3f:40:b9:46:d4:04:31:b6:5c:11:50:8d:
bf:94:a4:96:79:e0:2e:f8:6b:d5:e6:b9:51:1b:e7:3b:42:d6:
cd:ce:f2:bc:e1:1d:1c:a2:1b:af:a3:6a:20:fc:87:eb:85:91:
56:19:d7:9b:50:b2:e0:2c:64:90:83:9f:82:fe:e8:2d:2c:c9:
ed:6f:01:a7:13:a8:9b:2c:a4:67:b5:54:9e:d0:77:cb:ab:7e:
3b:6e:c6:72:36:69:f0:e0:1d:86:57:ef:04:08:65:70:a4:b8:
23:88:b0:18:26:8d:77:c3:e9:c8:41:ff:c9:a5:c2:2c:f0:58:
e2:86:73:49:1d:15:3a:2f:db:86:b0:64:79:1e:d9:e2:b2:cf:
53:84:49:c4:3d:1d:b0:4f:d3:c8:a0:d7:dd:61:70:58:f6:ce:
92:ae:8e:4a:c1:22:64:96:8b:e3:96:37:56:0f:d4:38:04:27:
c0:33:d0:b6:bf:7d:85:02:ef:2e:01:80:be:83:a3:92:47:dc:
23:6d:ca:7f:7d:e9:8d:2b:31:e0:71:d1:0a:da:20:97:86:99:
93:07:1d:7f:f8:fd:f9:ab:ce:f2:3a:9c:12:47:e8:8b:b4:84:
05:0c:4e:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdu1fjinQWi+81G9UrKYyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzM2VlYzAzZWExMjI3MTMyNzhiNDA2NmVjZjJiZmVhYTE1
NjNjMGQwHhcNMjUwNzI2MTYwMDMzWhcNMjUwNzI3MTYwMDMzWjAzMTEwLwYDVQQD
EygwOWZmYTEwNmM3ZTFjMjA4OWRjNzNiZjQwNGQyZDBhNDVkYzVlMDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKaVuy4+8G1ryUr8I8YvJ5XJ9wjv
STozIWQiIDEr4yJ2WrixdOeNACimRfsD50TDbvV0dAmSX+dyWB+ca18k0hXJe0ZE
5lCKcf9XPAy9xHpoJadNMuaY/8Gd+AHlRlYhok+0OmmqYalnbFCCybJl6tTJD4OT
iAO6YvzcjRUBNKRFHOH2dOoPQ1UreAWOhSbn+QgeWkOZ4ulDQrWsEQjUHG37BRm/
0/3fNjPXfmXNKhUzlAHvsvBwE4q4DoS+oAsCgT76eQQXaucL2JVvVrldF6IK2ENl
dX/2L6B0cfWZxmvbcVJ5dvi1LacYvcgqzs/RB/KMJqxGaVMJreTTCr9CaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAn/oQbH4cIIncc79ATS0KRdxeBGMB8GA1UdIwQY
MBaAFKM+7APqEicTJ4tAZuzyv+qhVjwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3o3c0Etb1NKeE1uaTBCbTdQS182cUZXUEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZTNhYzAtYmUzMy00YTM3LWEwZDct
NTlhNWVlM2FkOWE4LzEvb3o3c0Etb1NKeE1uaTBCbTdQS182cUZXUEEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lZTNhYzAtYmUzMy00YTM3LWEwZDctNTlhNWVlM2FkOWE4
LzEvb3o3c0Etb1NKeE1uaTBCbTdQS182cUZXUEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8xZMMbM
1BqRWuqWSlk/j3PfYQfwAhL8P0C5RtQEMbZcEVCNv5SklnngLvhr1ea5URvnO0LW
zc7yvOEdHKIbr6NqIPyH64WRVhnXm1Cy4CxkkIOfgv7oLSzJ7W8BpxOomyykZ7VU
ntB3y6t+O27GcjZp8OAdhlfvBAhlcKS4I4iwGCaNd8PpyEH/yaXCLPBY4oZzSR0V
Oi/bhrBkeR7Z4rLPU4RJxD0dsE/TyKDX3WFwWPbOkq6OSsEiZJaL45Y3Vg/UOAQn
wDPQtr99hQLvLgGAvoOjkkfcI23Kf33pjSsx4HHRCtogl4aZkwcdf/j9+avO8jqc
Ekfoi7SEBQxONQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:32:59 2025 by rpki-client