Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
File: oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft (raw, json)
Hash identifier: 5s8OznzlYcpAvBqE0yfpfVFrzzDUd9qhZe82HfxNGq8=
Subject key identifier: 46:70:48:98:E9:F1:2C:38:77:33:CC:A5:E0:2E:B2:B2:B1:A0:3A:0F
Authority key identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
Certificate issuer: /CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Certificate serial: 019847ADF3D887C2F30C5CA491B08134763D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 17:00:39 +0000
Manifest this update: Sat 26 Jul 2025 17:00:39 +0000
Manifest next update: Sun 27 Jul 2025 17:00:39 +0000
Files and hashes: 1: 2OFA6f1DjHXZMhryh5jA0oQbPrI.roa (hash: 4LohZFyvURnINNqOgIllTWqy2TcXQvTUTxllcCyXfjc=)
2: oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl (hash: sa2bTINSFWla5cxZKSoZjphBPZ+1t3tea7PHmSmQJlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:f3:d8:87:c2:f3:0c:5c:a4:91:b0:81:34:76:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Validity
Not Before: Jul 26 17:00:39 2025 GMT
Not After : Jul 27 17:00:39 2025 GMT
Subject: CN=46704898e9f12c387733cca5e02eb2b2b1a03a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:35:fc:8a:b3:79:4a:77:52:b2:1c:aa:ab:
4c:57:ff:db:d1:64:d8:ed:3a:f0:56:e4:e6:1e:df:
8d:e3:c2:76:d0:b8:68:30:00:58:54:e5:22:82:dc:
50:bd:fe:33:99:c7:bb:37:e1:98:75:cb:4a:f6:00:
f8:4f:b6:10:ec:9c:bd:ad:39:44:71:6a:c5:fa:a3:
0f:c9:45:e6:55:3b:9c:1c:a4:0f:f2:80:1b:17:59:
a6:d4:ec:07:0e:f9:65:13:56:5b:3f:96:27:de:48:
c2:3d:3c:cc:3b:b2:0d:1e:ff:bf:e3:37:ff:30:db:
b9:f5:95:84:3b:32:39:50:18:5d:c1:4b:55:24:b8:
2d:b6:4e:56:01:b1:c2:f8:e7:03:2b:7e:33:84:4c:
d7:5a:aa:74:cc:76:ef:a6:c3:bd:77:d5:81:a9:31:
97:e7:12:da:c7:66:96:08:cf:6e:fb:f5:c0:8f:44:
65:5d:c7:6c:59:e5:48:ca:d3:89:c7:d5:7d:e8:2d:
c9:da:b9:ce:ac:90:03:77:7f:e8:08:ab:64:f2:7d:
a6:bf:df:0a:4b:1e:39:b7:5a:d3:78:4c:b5:7e:d8:
21:5b:8c:0b:64:9d:07:15:a9:6a:bc:56:4e:5c:2c:
7b:33:9d:4f:c9:65:0d:60:66:1a:fc:95:8f:1e:4a:
be:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:70:48:98:E9:F1:2C:38:77:33:CC:A5:E0:2E:B2:B2:B1:A0:3A:0F
X509v3 Authority Key Identifier:
keyid:A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d5:e0:ee:fc:bd:3f:ff:ed:90:91:01:e7:3f:65:d4:b9:16:
8c:3c:68:5d:e7:dd:db:b8:90:2f:e9:6d:06:68:cc:fc:4b:c0:
d4:37:74:5d:70:cd:cf:08:bd:77:19:67:8b:5b:b3:6a:6c:7a:
0a:fb:b3:af:b6:38:4b:61:b3:11:2d:38:ae:4b:7c:51:aa:d2:
e8:3c:b4:3c:43:49:43:e5:1d:2d:d5:cb:5a:9c:ad:d0:59:4b:
70:77:4a:b2:bb:80:7a:6c:81:07:a2:09:53:a0:8a:af:ad:b8:
a4:2e:90:a2:e9:95:48:6a:2f:cf:61:1e:86:f1:7e:ec:4b:dc:
4c:ce:e4:73:43:ab:78:4e:71:a3:12:9b:a9:f9:5e:a1:1f:57:
45:77:2d:7d:8a:01:4c:77:b5:dd:ec:25:a8:ee:4a:f5:a6:68:
3f:e2:bf:5d:1a:92:11:c1:f6:54:cf:60:b0:23:e0:3d:98:4c:
05:3b:af:92:1a:ee:16:dc:2b:2e:45:e9:8c:65:9b:b2:39:58:
69:57:19:f3:8f:3a:42:8c:e6:8c:f8:86:17:ea:a8:9c:92:a6:
cd:f4:98:b6:2d:04:46:90:fa:28:2d:f9:92:ff:b2:fe:ac:98:
92:1d:55:af:9e:f8:1b:05:28:7f:ad:d6:8a:f9:d4:a3:66:23:
df:c8:4d:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHrfPYh8LzDFykkbCBNHY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMGI0MjYwNGIzZjhlOWU1YjcyZjIzMjkzODlhZjE4ZmZi
ZDIwYjgwHhcNMjUwNzI2MTcwMDM5WhcNMjUwNzI3MTcwMDM5WjAzMTEwLwYDVQQD
Eyg0NjcwNDg5OGU5ZjEyYzM4NzczM2NjYTVlMDJlYjJiMmIxYTAzYTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHw1/IqzeUp3UrIcqqtMV//b0WTY
7TrwVuTmHt+N48J20LhoMABYVOUigtxQvf4zmce7N+GYdctK9gD4T7YQ7Jy9rTlE
cWrF+qMPyUXmVTucHKQP8oAbF1mm1OwHDvllE1ZbP5Yn3kjCPTzMO7INHv+/4zf/
MNu59ZWEOzI5UBhdwUtVJLgttk5WAbHC+OcDK34zhEzXWqp0zHbvpsO9d9WBqTGX
5xLax2aWCM9u+/XAj0RlXcdsWeVIytOJx9V96C3J2rnOrJADd3/oCKtk8n2mv98K
Sx45t1rTeEy1ftghW4wLZJ0HFalqvFZOXCx7M51PyWUNYGYa/JWPHkq+fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZwSJjp8Sw4dzPMpeAusrKxoDoPMB8GA1UdIwQY
MBaAFKALQmBLP46eW3LyMpOJrxj/vSC4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lOWYzMTMtY2Q2OC00ZmI1LWJiOGQt
NzM5NmQ4YjY0MGFkLzEvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lOWYzMTMtY2Q2OC00ZmI1LWJiOGQtNzM5NmQ4YjY0MGFk
LzEvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9Xg7vy9
P//tkJEB5z9l1LkWjDxoXefd27iQL+ltBmjM/EvA1Dd0XXDNzwi9dxlni1uzamx6
Cvuzr7Y4S2GzES04rkt8UarS6Dy0PENJQ+UdLdXLWpyt0FlLcHdKsruAemyBB6IJ
U6CKr624pC6QoumVSGovz2EehvF+7EvcTM7kc0OreE5xoxKbqfleoR9XRXctfYoB
THe13ewlqO5K9aZoP+K/XRqSEcH2VM9gsCPgPZhMBTuvkhruFtwrLkXpjGWbsjlY
aVcZ8486QozmjPiGF+qonJKmzfSYti0ERpD6KC35kv+y/qyYkh1Vr574GwUof63W
ivnUo2Yj38hNXg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:12:10 2025 by rpki-client