Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
File: Ooz8_rg-iPNror8kRduewegvDVQ.mft (raw, json)
Hash identifier: 8ZBv4AMwgWANvbZ4SguEofiKlgHaeMEQa/vpfYoXKaI=
Subject key identifier: 2A:85:EB:0E:C7:C0:6A:ED:6A:7C:EF:9C:74:E8:11:12:31:62:69:CB
Authority key identifier: 3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
Certificate issuer: /CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Certificate serial: 01984A419BD1332028E5AD54B09353090AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 05:01:10 +0000
Manifest this update: Sun 27 Jul 2025 05:01:10 +0000
Manifest next update: Mon 28 Jul 2025 05:01:10 +0000
Files and hashes: 1: 26TbrymsKsZjBkQHIbbRRWaFR8Y.roa (hash: SWIdCtaxTysSBJj/hZn1IHZ7qzsZ9zOqjJPPtoUQNGw=)
2: Ooz8_rg-iPNror8kRduewegvDVQ.crl (hash: SWXMSI1M4/sO9hsd6ykkGSQP0drPn8EcKb7UEywnm28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:9b:d1:33:20:28:e5:ad:54:b0:93:53:09:0a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Validity
Not Before: Jul 27 05:01:10 2025 GMT
Not After : Jul 28 05:01:10 2025 GMT
Subject: CN=2a85eb0ec7c06aed6a7cef9c74e81112316269cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:23:58:24:2a:34:f8:20:c6:45:11:50:39:36:
e4:28:a3:d7:ef:a3:78:9e:f1:2e:96:fd:68:54:d7:
10:f4:c3:90:7b:93:a7:09:0b:65:c0:ae:c7:18:50:
6c:b1:d1:7f:1a:d7:e6:25:3f:ae:e2:1a:9f:e5:b1:
82:9d:b5:28:0b:c2:0d:4c:01:58:d2:21:53:3b:9b:
7a:20:0d:66:9e:90:1e:e8:ec:9b:a6:63:23:b1:a4:
14:0d:c0:7e:dc:4e:f8:5b:06:21:52:2d:64:2b:8f:
38:78:24:96:57:e8:92:7d:de:87:1e:c4:19:a3:2b:
f1:55:7b:6c:a8:ba:8d:9e:3f:58:c0:a2:9f:5c:ab:
84:47:5d:df:ac:04:9b:7c:2b:34:5b:a7:69:be:bb:
3c:ef:b2:34:19:9d:ad:a0:da:83:cd:3c:12:6a:61:
83:b1:4c:99:0b:50:47:f2:9f:f4:bc:85:b9:ae:14:
b9:b5:bd:77:92:79:87:ab:19:7a:df:ae:4b:9a:5a:
66:dd:09:64:ad:e9:6c:78:ef:b3:2c:8b:87:3e:5d:
c3:c4:e5:a3:72:1c:94:6a:f8:9c:52:f0:99:00:21:
a2:f7:6f:98:80:a2:04:40:02:ef:b3:f5:0a:2d:d9:
fa:97:5c:75:d1:ae:b9:69:6b:16:ce:64:3f:7c:e0:
98:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:85:EB:0E:C7:C0:6A:ED:6A:7C:EF:9C:74:E8:11:12:31:62:69:CB
X509v3 Authority Key Identifier:
keyid:3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:61:67:e9:fc:f2:bb:6a:ec:4e:99:d9:a1:f9:00:49:e6:3e:
da:9f:f5:74:3b:fc:76:d0:ce:80:e5:35:c9:fe:db:c7:f8:2b:
c2:d8:3f:ff:ae:f2:f8:a8:37:78:ae:80:d4:94:22:43:1d:ee:
f2:b8:50:b0:06:e6:c5:7c:27:7b:89:1b:e8:c0:6a:29:4c:c3:
19:28:81:03:41:ac:af:da:56:d1:74:94:a3:75:0c:93:1e:bb:
70:d4:5a:e9:91:53:46:ec:d5:92:16:f3:df:6a:b0:01:92:3e:
2c:f1:33:ff:36:5f:9c:8b:1d:d8:21:6f:41:bb:b2:80:8a:d3:
59:92:49:d8:73:e6:d9:44:60:1f:68:6c:14:0b:71:9b:b2:c8:
5f:c8:03:fc:07:c2:cd:cc:72:b4:f2:68:23:8e:70:5a:2a:7f:
f6:03:52:37:49:cd:0a:e1:de:d2:0d:d0:8c:b1:46:12:45:e3:
7d:bd:4f:96:85:7d:2a:e6:7e:bd:c8:d3:a4:31:b6:71:97:a4:
c0:47:5e:7b:ab:b9:fb:4b:64:91:69:a3:0c:27:ce:b7:e3:6f:
6c:ae:bf:1e:f7:0d:fb:9e:5c:69:21:b6:73:f6:f4:10:d0:43:
7f:a6:15:0e:9a:4c:af:fe:f8:65:51:51:86:62:e2:56:8c:7b:
07:b8:e5:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQZvRMyAo5a1UsJNTCQrYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhOGNmY2ZlYjgzZTg4ZjM2YmEyYmYyNDQ1ZGI5ZWMxZTgy
ZjBkNTQwHhcNMjUwNzI3MDUwMTEwWhcNMjUwNzI4MDUwMTEwWjAzMTEwLwYDVQQD
EygyYTg1ZWIwZWM3YzA2YWVkNmE3Y2VmOWM3NGU4MTExMjMxNjI2OWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yNYJCo0+CDGRRFQOTbkKKPX76N4
nvEulv1oVNcQ9MOQe5OnCQtlwK7HGFBssdF/GtfmJT+u4hqf5bGCnbUoC8INTAFY
0iFTO5t6IA1mnpAe6OybpmMjsaQUDcB+3E74WwYhUi1kK484eCSWV+iSfd6HHsQZ
oyvxVXtsqLqNnj9YwKKfXKuER13frASbfCs0W6dpvrs877I0GZ2toNqDzTwSamGD
sUyZC1BH8p/0vIW5rhS5tb13knmHqxl6365Lmlpm3QlkrelseO+zLIuHPl3DxOWj
chyUavicUvCZACGi92+YgKIEQALvs/UKLdn6l1x10a65aWsWzmQ/fOCYUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqF6w7HwGrtanzvnHToERIxYmnLMB8GA1UdIwQY
MBaAFDqM/P64Pojza6K/JEXbnsHoLw1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT296OF9yZy1pUE5yb3I4a1JkdWV3ZWd2RFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MDJjMWEtMjlmNS00OGRkLWFkYTEt
NmE0ZWIzN2EzM2NjLzEvT296OF9yZy1pUE5yb3I4a1JkdWV3ZWd2RFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85MDJjMWEtMjlmNS00OGRkLWFkYTEtNmE0ZWIzN2EzM2Nj
LzEvT296OF9yZy1pUE5yb3I4a1JkdWV3ZWd2RFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmFn6fzy
u2rsTpnZofkASeY+2p/1dDv8dtDOgOU1yf7bx/grwtg//67y+Kg3eK6A1JQiQx3u
8rhQsAbmxXwne4kb6MBqKUzDGSiBA0Gsr9pW0XSUo3UMkx67cNRa6ZFTRuzVkhbz
32qwAZI+LPEz/zZfnIsd2CFvQbuygIrTWZJJ2HPm2URgH2hsFAtxm7LIX8gD/AfC
zcxytPJoI45wWip/9gNSN0nNCuHe0g3QjLFGEkXjfb1PloV9KuZ+vcjTpDG2cZek
wEdee6u5+0tkkWmjDCfOt+NvbK6/HvcN+55caSG2c/b0ENBDf6YVDppMr/74ZVFR
hmLiVox7B7jlIw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:41:50 2025 by rpki-client