Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
File: oE3odQHH0wgsdmWfTevZQohDtMs.mft (raw, json)
Hash identifier: jcVYPzjrJHg6bSOL703X58slt9d9lBVpRzMGL0aStL4=
Subject key identifier: 72:23:C6:EF:A1:8C:0F:65:38:E7:D1:2F:2F:25:8B:FC:AB:EC:0A:52
Authority key identifier: A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
Certificate issuer: /CN=a04de87501c7d3082c76659f4debd9428843b4cb
Certificate serial: 019853E8DAC25F239E0656A9422F0F5297BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
Manifest number: 11E9
Signing time: Tue 29 Jul 2025 02:00:25 +0000
Manifest this update: Tue 29 Jul 2025 02:00:25 +0000
Manifest next update: Wed 30 Jul 2025 02:00:25 +0000
Files and hashes: 1: 3oKx6h0eBr3yZ2nfockvN65K1_o.roa (hash: geWao+6sgTP3cLFpfRuFIKY1lyLCLqYJA9Pcg4p46Gs=)
2: oE3odQHH0wgsdmWfTevZQohDtMs.crl (hash: C2NYY3u7Z6qXhXr7xuSQYjNoqYi0xjjcNXUHNuAmj4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:da:c2:5f:23:9e:06:56:a9:42:2f:0f:52:97:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04de87501c7d3082c76659f4debd9428843b4cb
Validity
Not Before: Jul 29 02:00:25 2025 GMT
Not After : Jul 30 02:00:25 2025 GMT
Subject: CN=7223c6efa18c0f6538e7d12f2f258bfcabec0a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:70:a6:a9:7d:8c:39:20:51:2b:b8:60:7f:
ec:d0:fd:fb:95:c6:f2:6b:92:cd:f0:9a:14:fa:cf:
06:31:e7:5e:9f:c6:81:9d:76:61:26:23:72:29:e7:
10:0c:02:11:f8:71:e2:60:ca:62:2f:4c:cc:b0:1b:
c8:4b:ed:1a:a0:49:57:d0:b8:a9:3b:68:d5:28:e6:
3e:cf:3c:bf:e7:be:5f:74:46:89:b7:a2:c5:b8:18:
f0:93:2e:90:f7:07:5d:df:c0:c9:6f:e1:2f:ee:68:
92:d9:1d:c1:ea:4a:f3:19:46:66:12:f8:e4:b2:30:
3c:31:9e:34:2d:e7:98:3f:19:de:90:85:7c:b3:10:
2c:ad:e0:56:10:a7:f8:ce:a9:05:77:3f:1b:a6:81:
d3:56:68:79:69:7a:e0:31:5d:a5:81:de:7d:8e:f4:
32:71:2d:fe:e3:60:5b:f8:4a:ba:10:d9:ac:cf:63:
b7:6b:45:b9:9c:a8:c8:3b:c6:44:51:be:30:1d:32:
73:43:e0:be:53:4c:78:65:43:fa:56:21:c9:21:30:
81:23:3e:97:b8:f9:c3:5c:fb:20:3a:ae:11:a7:52:
2a:46:c8:02:f0:bb:c9:a8:21:c7:6e:b1:d3:69:8d:
26:9d:6c:ef:f2:54:a4:ea:62:06:9f:4d:8e:f9:8c:
67:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:23:C6:EF:A1:8C:0F:65:38:E7:D1:2F:2F:25:8B:FC:AB:EC:0A:52
X509v3 Authority Key Identifier:
keyid:A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b0:ec:6a:fc:b4:c8:c0:69:d1:17:d2:40:88:c6:e1:ca:9b:
17:8c:42:65:56:4f:aa:15:af:72:d1:22:c3:40:71:d3:0d:60:
d9:1a:b5:87:e7:66:f7:ef:c0:1f:bb:16:ff:09:0f:f7:3b:e7:
31:38:19:1f:29:e1:14:2b:8d:a3:37:7b:be:5d:59:e5:37:12:
56:d4:08:6f:d6:b4:9a:a8:1d:0a:e9:2b:9d:fc:21:96:80:63:
15:c7:18:e1:bb:82:54:cb:db:a4:95:e5:22:a4:75:6d:ca:34:
aa:7a:a4:ac:c3:e5:12:13:91:e3:4d:d0:4c:6a:e5:f4:ca:ff:
9d:41:fc:91:b2:51:6e:35:c7:23:46:22:7b:7f:9a:55:20:cc:
cf:e3:ad:2f:77:64:6d:fb:cc:eb:ab:8c:cb:bb:98:10:f9:9a:
27:97:33:94:ee:ef:7d:74:d0:49:7c:84:e5:54:4b:6a:37:56:
fe:85:f0:b8:55:9a:00:ab:c8:5b:2f:47:37:76:c8:2e:8b:f7:
d3:48:3b:9a:ce:5a:1b:37:12:22:01:ec:e1:ea:f9:08:f5:c6:
6d:1d:80:66:53:50:77:30:73:02:ce:7e:b4:05:13:d7:b8:81:
76:01:93:eb:b8:8d:34:a8:39:4f:40:e6:22:90:8c:81:b4:e8:
66:15:dc:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhT6NrCXyOeBlapQi8PUpe6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNGRlODc1MDFjN2QzMDgyYzc2NjU5ZjRkZWJkOTQyODg0
M2I0Y2IwHhcNMjUwNzI5MDIwMDI1WhcNMjUwNzMwMDIwMDI1WjAzMTEwLwYDVQQD
Eyg3MjIzYzZlZmExOGMwZjY1MzhlN2QxMmYyZjI1OGJmY2FiZWMwYTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIxwpql9jDkgUSu4YH/s0P37lcby
a5LN8JoU+s8GMeden8aBnXZhJiNyKecQDAIR+HHiYMpiL0zMsBvIS+0aoElX0Lip
O2jVKOY+zzy/575fdEaJt6LFuBjwky6Q9wdd38DJb+Ev7miS2R3B6krzGUZmEvjk
sjA8MZ40LeeYPxnekIV8sxAsreBWEKf4zqkFdz8bpoHTVmh5aXrgMV2lgd59jvQy
cS3+42Bb+Eq6ENmsz2O3a0W5nKjIO8ZEUb4wHTJzQ+C+U0x4ZUP6ViHJITCBIz6X
uPnDXPsgOq4Rp1IqRsgC8LvJqCHHbrHTaY0mnWzv8lSk6mIGn02O+YxnYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIjxu+hjA9lOOfRLy8li/yr7ApSMB8GA1UdIwQY
MBaAFKBN6HUBx9MILHZln03r2UKIQ7TLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NjVjOTAtNzBmYi00MDE1LWI5Njkt
NzQ4Zjc4NzgzODhhLzEvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NjVjOTAtNzBmYi00MDE1LWI5NjktNzQ4Zjc4NzgzODhh
LzEvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbDsavy0
yMBp0RfSQIjG4cqbF4xCZVZPqhWvctEiw0Bx0w1g2Rq1h+dm9+/AH7sW/wkP9zvn
MTgZHynhFCuNozd7vl1Z5TcSVtQIb9a0mqgdCukrnfwhloBjFccY4buCVMvbpJXl
IqR1bco0qnqkrMPlEhOR403QTGrl9Mr/nUH8kbJRbjXHI0Yie3+aVSDMz+OtL3dk
bfvM66uMy7uYEPmaJ5czlO7vfXTQSXyE5VRLajdW/oXwuFWaAKvIWy9HN3bILov3
00g7ms5aGzcSIgHs4er5CPXGbR2AZlNQdzBzAs5+tAUT17iBdgGT67iNNKg5T0Dm
IpCMgbToZhXc7w==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:49:41 2025 by rpki-client