Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
File: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json)
Hash identifier: jP6XssXk9jKwy/GxrauNhr9zo3UhLx+ZAbQy4K3klFs=
Subject key identifier: A7:42:27:39:44:57:9C:7B:E4:B3:B2:32:1B:8E:24:F4:E2:4D:83:61
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Certificate issuer: /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial: 01984AE5729FA868C585F414DFEC558437BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
Manifest number: 0E9B
Signing time: Sun 27 Jul 2025 08:00:07 +0000
Manifest this update: Sun 27 Jul 2025 08:00:07 +0000
Manifest next update: Mon 28 Jul 2025 08:00:07 +0000
Files and hashes: 1: 3MZjImGng2_TJgQfxQEXoUtKWiw.roa (hash: lYzKLS8Ppt5gW8YVgI20GBdeqEZoir6MkSHCqmVcyNA=)
2: WZV7tmEIwHJ8ehut-K9kROGJKis.roa (hash: RzP35ulZieWZd2YmyELJo1q+OtM5JfjqnRYO4ysXTzo=)
3: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: yWRYYNmVKN5rMDMMv8xyrwSeRSttNOuMDNxKzg+//Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:72:9f:a8:68:c5:85:f4:14:df:ec:55:84:37:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Validity
Not Before: Jul 27 08:00:07 2025 GMT
Not After : Jul 28 08:00:07 2025 GMT
Subject: CN=a742273944579c7be4b3b2321b8e24f4e24d8361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:d8:d9:44:59:4f:ea:80:a3:dd:9b:13:39:
f7:f1:5c:83:8e:69:33:8c:92:5f:4d:52:db:a2:b7:
05:0f:6a:8d:12:60:80:82:c5:cb:30:ca:b7:d2:af:
b6:5c:07:23:a8:19:44:46:ac:7e:a9:32:7a:8c:77:
7f:44:f3:5c:2f:44:f8:b8:94:36:8d:44:d7:82:4e:
db:e7:0e:17:43:a7:f0:1e:8a:ed:19:7d:ba:30:75:
21:c6:03:57:3f:b7:d0:c7:c1:b0:7a:74:fb:c2:b6:
f5:4c:12:d9:64:b5:30:0f:b9:36:a8:26:0e:34:60:
32:25:f0:c1:c4:9a:15:be:e3:cb:80:b1:56:ed:3d:
f9:9a:4f:f7:5d:f6:f2:d9:62:e8:83:10:a5:2a:c7:
c7:dc:79:08:1a:ea:88:a1:ab:71:1f:fc:ac:ce:4b:
99:3a:98:9f:bb:d2:2c:ad:71:b5:0f:bb:55:b1:05:
d4:a0:6a:b6:75:08:20:f7:e8:01:0e:40:e2:cd:24:
fd:6d:30:c5:3e:a5:d1:64:30:99:49:97:3e:f7:9b:
5e:60:49:b0:f9:47:64:84:ac:a2:b2:84:d0:f8:9a:
dc:3a:30:4f:45:c4:25:7f:6e:20:cb:48:9b:b0:71:
d2:47:eb:fa:4b:20:5d:32:d8:e9:99:87:f4:1c:fd:
26:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:42:27:39:44:57:9C:7B:E4:B3:B2:32:1B:8E:24:F4:E2:4D:83:61
X509v3 Authority Key Identifier:
keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c4:3f:23:e8:4d:7a:80:2c:73:7f:95:f3:7e:59:4d:69:05:
21:e3:64:ab:e0:11:be:57:bb:75:e4:d2:02:91:40:c4:3d:8d:
30:b3:f3:96:5c:70:4c:14:b1:1d:fe:6e:33:37:04:b4:7b:18:
bc:ea:ab:a4:42:bb:b0:7f:ed:52:aa:a6:44:dc:58:77:2b:bf:
e4:d2:12:c6:d2:5b:f9:0f:f1:5b:af:fb:73:34:1c:f6:4f:bf:
c2:71:ed:87:25:8d:ec:5d:02:86:52:81:b3:2b:df:b3:de:2b:
3d:78:f8:a4:6e:d7:d8:af:de:14:38:69:17:00:3d:11:a1:6b:
65:22:5d:7e:94:4b:cb:17:a1:6e:22:44:62:c0:03:8f:02:9e:
12:3e:f4:46:04:ec:5a:6e:6d:f1:53:c4:75:9d:6e:21:96:3a:
e7:1a:19:6c:f1:b7:da:e5:ab:56:13:2f:6a:39:da:e7:9e:d1:
38:b0:0f:57:09:5a:94:8e:49:40:42:b6:b8:22:82:62:d0:17:
fa:5e:23:26:8e:4b:54:13:1a:ed:26:fa:5e:0a:f9:32:8f:a2:
18:a1:7a:88:75:de:b1:cd:ba:42:25:b0:ab:32:a6:44:ea:2f:
df:fa:ce:6e:b5:ce:86:fb:a6:5c:8c:03:47:56:9e:e8:ab:d7:
7f:8a:87:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5XKfqGjFhfQU3+xVhDe6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNjQ2ZDNmOTA3NThkOGEzNzQzZjE1NWY2MmJmZmZmMWJi
NjM2NmEwHhcNMjUwNzI3MDgwMDA3WhcNMjUwNzI4MDgwMDA3WjAzMTEwLwYDVQQD
EyhhNzQyMjczOTQ0NTc5YzdiZTRiM2IyMzIxYjhlMjRmNGUyNGQ4MzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd7Y2URZT+qAo92bEzn38VyDjmkz
jJJfTVLborcFD2qNEmCAgsXLMMq30q+2XAcjqBlERqx+qTJ6jHd/RPNcL0T4uJQ2
jUTXgk7b5w4XQ6fwHortGX26MHUhxgNXP7fQx8GwenT7wrb1TBLZZLUwD7k2qCYO
NGAyJfDBxJoVvuPLgLFW7T35mk/3Xfby2WLogxClKsfH3HkIGuqIoatxH/yszkuZ
Opifu9IsrXG1D7tVsQXUoGq2dQgg9+gBDkDizST9bTDFPqXRZDCZSZc+95teYEmw
+UdkhKyisoTQ+JrcOjBPRcQlf24gy0ibsHHSR+v6SyBdMtjpmYf0HP0m6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdCJzlEV5x75LOyMhuOJPTiTYNhMB8GA1UdIwQY
MBaAFKFkbT+QdY2KN0PxVfYr//8btjZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1dSdFA1QjFqWW8zUV9GVjlpdl9feHUyTm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yYjcwZjAtNGRhMy00YjQ1LWE5NWQt
NDhhMjBlNmU1ZDhiLzEvb1dSdFA1QjFqWW8zUV9GVjlpdl9feHUyTm1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yYjcwZjAtNGRhMy00YjQ1LWE5NWQtNDhhMjBlNmU1ZDhi
LzEvb1dSdFA1QjFqWW8zUV9GVjlpdl9feHUyTm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMQ/I+hN
eoAsc3+V835ZTWkFIeNkq+ARvle7deTSApFAxD2NMLPzllxwTBSxHf5uMzcEtHsY
vOqrpEK7sH/tUqqmRNxYdyu/5NISxtJb+Q/xW6/7czQc9k+/wnHthyWN7F0ChlKB
syvfs94rPXj4pG7X2K/eFDhpFwA9EaFrZSJdfpRLyxehbiJEYsADjwKeEj70RgTs
Wm5t8VPEdZ1uIZY65xoZbPG32uWrVhMvajna557ROLAPVwlalI5JQEK2uCKCYtAX
+l4jJo5LVBMa7Sb6Xgr5Mo+iGKF6iHXesc26QiWwqzKmROov3/rObrXOhvumXIwD
R1ae6KvXf4qHiA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 18:03:34 2025 by rpki-client