Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
File: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft (raw, json)
Hash identifier: Y5NWq6/Ix1t+npZGnjz4cyFyxPsdqGamEk7BeYBjJZI=
Subject key identifier: 01:67:3D:3D:76:96:87:1C:33:FF:EC:81:83:D7:77:55:32:0D:69:A0
Authority key identifier: 38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
Certificate issuer: /CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Certificate serial: 0198458875D984BFFF8FCA9B09DC41912AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
Manifest number: 0820
Signing time: Sat 26 Jul 2025 07:00:27 +0000
Manifest this update: Sat 26 Jul 2025 07:00:27 +0000
Manifest next update: Sun 27 Jul 2025 07:00:27 +0000
Files and hashes: 1: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl (hash: tFnBCtNU41KfofSlVVIk/vEAinHEdD2wZ3utTGVV8C0=)
2: cNiza7IEiNMNBNBagOrbk4czUFI.roa (hash: cxXOTzwPl8qSVNIA1za+AwOz7dJ4d9CdZy9RaFccNUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:75:d9:84:bf:ff:8f:ca:9b:09:dc:41:91:2a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Validity
Not Before: Jul 26 07:00:27 2025 GMT
Not After : Jul 27 07:00:27 2025 GMT
Subject: CN=01673d3d7696871c33ffec8183d77755320d69a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:54:41:fe:a0:1e:5b:68:c2:c2:b8:ab:83:
32:95:f9:bd:ce:30:a0:47:56:d7:65:1f:89:46:9b:
75:4a:55:41:70:10:a8:64:4a:cf:da:66:05:c9:24:
e3:24:40:c0:09:89:2a:82:8e:89:50:d3:48:24:fc:
80:3e:8c:92:b6:2d:68:d8:e2:d5:ab:d2:ef:83:cc:
b4:e7:6d:65:7b:51:fa:bc:67:c2:cb:b2:56:3a:d7:
23:0c:22:0e:22:8d:dd:b0:25:df:a0:58:45:ef:a7:
01:2a:d0:97:c0:ca:04:e3:0a:70:3a:a3:2f:30:d9:
36:44:f7:97:9a:75:3b:2e:53:02:c0:8d:f7:60:ad:
96:0d:03:55:2c:7b:45:32:97:f4:e0:91:1f:5c:ee:
ab:fc:98:34:b6:5f:73:9c:9d:38:2f:6f:57:47:f9:
f2:bc:ed:82:ad:2d:7f:2f:de:3d:62:81:bd:ce:b4:
0d:62:7b:b2:3e:d9:1b:65:76:fd:78:6f:0f:a6:64:
7c:f6:f6:38:4c:06:af:cd:d5:bd:11:e5:d2:7d:eb:
55:60:2b:2d:ab:a3:b1:24:0c:10:f1:94:d8:64:39:
7a:73:af:5b:fc:ba:8f:48:51:ee:67:f5:7d:9b:15:
7f:dc:2a:e9:fc:03:7b:09:b4:bf:3b:7f:2f:b3:4a:
e6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:67:3D:3D:76:96:87:1C:33:FF:EC:81:83:D7:77:55:32:0D:69:A0
X509v3 Authority Key Identifier:
keyid:38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:91:93:48:e4:7a:d9:41:78:e2:ab:f0:56:8e:d2:22:08:f3:
b0:30:39:4c:d0:c5:5c:df:c5:89:d7:05:76:50:a4:61:82:b9:
67:c1:21:80:76:2e:b5:b5:0d:2b:71:b5:fa:17:c0:98:83:9b:
7d:d9:c1:df:f7:95:30:ac:8b:95:e6:64:e4:e8:fd:80:26:b4:
02:b6:53:27:88:11:3b:31:69:d1:da:c3:3e:d6:b4:eb:36:89:
85:2e:2f:0f:b1:2d:de:10:07:43:7d:e5:62:c2:85:1f:12:18:
2a:62:55:06:a8:92:46:45:42:08:d0:b0:85:25:06:20:bc:7b:
e3:b7:47:aa:cc:98:b7:72:a4:d8:20:7e:b0:ad:0a:aa:68:ac:
d6:71:40:4c:b4:37:55:d4:de:7b:aa:b6:1b:29:2c:51:5f:74:
b3:29:dc:50:2a:19:8a:a8:22:da:a5:e9:86:88:5a:1b:fd:9a:
ef:ef:79:df:9e:4e:44:a1:ce:65:95:68:43:c8:de:d5:dd:33:
90:df:05:33:66:74:6d:d4:c1:eb:61:9c:a0:4a:8e:c8:7d:b3:
0e:a3:82:a5:f0:f0:60:c7:01:c6:12:25:8b:d8:8b:a8:63:e1:
88:85:0a:94:fc:58:fd:58:66:6e:ac:2e:b8:d8:0a:2a:f2:a7:
ef:1f:8d:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiHXZhL//j8qbCdxBkSqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OTZkOWYzOTIwMWE0OWZhMTM2OTU4MmUxOGYxYTJiYjk2
NWIyODMwHhcNMjUwNzI2MDcwMDI3WhcNMjUwNzI3MDcwMDI3WjAzMTEwLwYDVQQD
EygwMTY3M2QzZDc2OTY4NzFjMzNmZmVjODE4M2Q3Nzc1NTMyMGQ2OWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcJUQf6gHltowsK4q4Mylfm9zjCg
R1bXZR+JRpt1SlVBcBCoZErP2mYFySTjJEDACYkqgo6JUNNIJPyAPoySti1o2OLV
q9Lvg8y0521le1H6vGfCy7JWOtcjDCIOIo3dsCXfoFhF76cBKtCXwMoE4wpwOqMv
MNk2RPeXmnU7LlMCwI33YK2WDQNVLHtFMpf04JEfXO6r/Jg0tl9znJ04L29XR/ny
vO2CrS1/L949YoG9zrQNYnuyPtkbZXb9eG8PpmR89vY4TAavzdW9EeXSfetVYCst
q6OxJAwQ8ZTYZDl6c69b/LqPSFHuZ/V9mxV/3Crp/AN7CbS/O38vs0rmkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFnPT12loccM//sgYPXd1UyDWmgMB8GA1UdIwQY
MBaAFDiW2fOSAaSfoTaVguGPGiu5ZbKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83ODQ2MDEtMDQ2MS00NzUzLThhNTIt
ZTgwYTA1ZTM5ZjRiLzEvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy83ODQ2MDEtMDQ2MS00NzUzLThhNTItZTgwYTA1ZTM5ZjRi
LzEvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJGTSOR6
2UF44qvwVo7SIgjzsDA5TNDFXN/FidcFdlCkYYK5Z8EhgHYutbUNK3G1+hfAmIOb
fdnB3/eVMKyLleZk5Oj9gCa0ArZTJ4gROzFp0drDPta06zaJhS4vD7Et3hAHQ33l
YsKFHxIYKmJVBqiSRkVCCNCwhSUGILx747dHqsyYt3Kk2CB+sK0Kqmis1nFATLQ3
VdTee6q2GyksUV90syncUCoZiqgi2qXphohaG/2a7+95355ORKHOZZVoQ8je1d0z
kN8FM2Z0bdTB62GcoEqOyH2zDqOCpfDwYMcBxhIli9iLqGPhiIUKlPxY/Vhmbqwu
uNgKKvKn7x+Ndg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 10:33:48 2025 by rpki-client