Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
File: oED5aPpS5ssv5lcQlwD6B0wZC4U.mft (raw, json)
Hash identifier: eQvkmI/i08ePUVyLUAaT+Ff29gDDlqpdlGydhsQSQ7E=
Subject key identifier: 31:49:CF:18:5E:20:CC:78:37:C6:D0:45:88:2B:FA:0F:21:4C:7C:4E
Authority key identifier: A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85
Certificate issuer: /CN=a040f968fa52e6cb2fe657109700fa074c190b85
Certificate serial: 0198534476442E0A9EEED5E23A8F92BA6A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
Manifest number: 05B1
Signing time: Mon 28 Jul 2025 23:00:52 +0000
Manifest this update: Mon 28 Jul 2025 23:00:52 +0000
Manifest next update: Tue 29 Jul 2025 23:00:52 +0000
Files and hashes: 1: lG9M0ytelOsltsM45OHzpDj8VA0.roa (hash: NbXxBP1wpUJzGfc6WpWH6JS4IiG1rIjC9o+D9ASG5hQ=)
2: oED5aPpS5ssv5lcQlwD6B0wZC4U.crl (hash: d05rAftZQdjMA4SKwP61GsanKXUpod7xiaa518+DSfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:76:44:2e:0a:9e:ee:d5:e2:3a:8f:92:ba:6a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a040f968fa52e6cb2fe657109700fa074c190b85
Validity
Not Before: Jul 28 23:00:52 2025 GMT
Not After : Jul 29 23:00:52 2025 GMT
Subject: CN=3149cf185e20cc7837c6d045882bfa0f214c7c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:ec:8e:21:ad:d4:c8:7f:13:71:5e:eb:8f:
a6:aa:72:79:a9:db:51:fa:af:c1:1e:c2:4a:54:c4:
2d:95:fe:7b:61:22:83:d5:26:83:e1:05:ae:46:43:
ff:f8:ed:eb:4c:3a:15:6c:76:21:ae:a4:ac:a1:f1:
58:6d:09:04:56:dc:85:29:3b:ce:08:1a:fd:42:2d:
7e:db:10:11:35:00:13:a6:75:5c:93:3c:88:77:4a:
98:5a:39:a1:de:98:fa:43:3a:03:fb:97:7f:2e:c1:
30:12:d2:e6:5f:fa:73:7c:8f:6b:fe:b4:ac:16:fc:
cd:88:9d:eb:7d:63:5f:6c:09:38:79:ee:20:70:89:
23:57:9d:4f:db:d5:3a:ec:0a:85:11:c0:2b:16:5a:
6c:15:54:52:be:5f:4c:34:7a:07:ce:d0:2e:e5:32:
fb:11:1d:72:4d:f8:eb:f5:d3:1a:c0:7b:6f:36:7e:
ff:0c:42:32:2e:b7:ff:93:6d:9e:e8:97:13:0d:bd:
d1:ae:ce:68:db:68:59:e9:e0:ce:cf:da:1a:5b:32:
47:84:7c:d3:7b:d4:03:4e:01:2b:4f:0c:3f:6f:94:
2f:72:4e:88:ce:fd:7b:67:b8:41:76:74:da:a2:db:
d4:73:08:6a:cc:ab:58:63:7c:d2:59:7a:ea:20:cb:
37:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:49:CF:18:5E:20:CC:78:37:C6:D0:45:88:2B:FA:0F:21:4C:7C:4E
X509v3 Authority Key Identifier:
keyid:A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:c5:ed:6d:f9:17:66:0e:2b:d3:ef:95:5e:34:1c:c2:30:ab:
fe:7e:4f:88:a0:2f:17:a2:71:3a:48:64:89:47:f1:03:d8:2c:
e7:f7:43:dd:1e:27:1a:db:7e:e7:fa:d9:cc:34:ba:19:cb:74:
ae:42:d8:49:ea:bb:06:36:c8:a6:29:0a:bf:c2:3c:2f:5d:db:
73:5d:fd:1d:86:75:2c:b3:64:57:81:e4:1c:92:68:a2:50:d8:
52:04:b4:89:75:ff:8c:46:f4:80:a9:9e:f4:49:eb:86:9d:c1:
fd:28:be:a0:0e:53:b8:6d:47:2b:4f:39:80:5c:e7:1b:14:e5:
81:d8:60:3c:91:83:36:89:63:2a:c1:f1:26:75:ba:8f:56:25:
a7:b1:27:4f:00:10:55:33:c0:c6:ea:85:94:7b:30:dc:04:aa:
90:fc:bd:40:1f:98:63:8b:b7:05:dd:32:7a:94:70:a1:f5:16:
87:27:45:b8:88:2c:e7:5e:6c:5e:d2:61:34:85:ac:8f:89:b7:
3d:c2:ae:c6:b9:35:0b:1c:fc:df:1a:45:23:7c:88:6a:eb:3b:
f6:8d:38:2f:a3:1f:cb:0c:48:c2:43:d5:af:a0:c9:de:ed:bb:
52:77:b5:9f:cb:62:39:c9:8e:47:5a:a5:2b:93:fb:c4:09:b9:
f3:6e:74:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTRHZELgqe7tXiOo+Sumo0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNDBmOTY4ZmE1MmU2Y2IyZmU2NTcxMDk3MDBmYTA3NGMx
OTBiODUwHhcNMjUwNzI4MjMwMDUyWhcNMjUwNzI5MjMwMDUyWjAzMTEwLwYDVQQD
EygzMTQ5Y2YxODVlMjBjYzc4MzdjNmQwNDU4ODJiZmEwZjIxNGM3YzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpDsjiGt1Mh/E3Fe64+mqnJ5qdtR
+q/BHsJKVMQtlf57YSKD1SaD4QWuRkP/+O3rTDoVbHYhrqSsofFYbQkEVtyFKTvO
CBr9Qi1+2xARNQATpnVckzyId0qYWjmh3pj6QzoD+5d/LsEwEtLmX/pzfI9r/rSs
FvzNiJ3rfWNfbAk4ee4gcIkjV51P29U67AqFEcArFlpsFVRSvl9MNHoHztAu5TL7
ER1yTfjr9dMawHtvNn7/DEIyLrf/k22e6JcTDb3Rrs5o22hZ6eDOz9oaWzJHhHzT
e9QDTgErTww/b5Qvck6Izv17Z7hBdnTaotvUcwhqzKtYY3zSWXrqIMs3twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFJzxheIMx4N8bQRYgr+g8hTHxOMB8GA1UdIwQY
MBaAFKBA+Wj6UubLL+ZXEJcA+gdMGQuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0VENWFQcFM1c3N2NWxjUWx3RDZCMHdaQzRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84OTU1MDItNGUxNC00OTYzLWEzMDUt
M2I2YjBhNTU1NWVmLzEvb0VENWFQcFM1c3N2NWxjUWx3RDZCMHdaQzRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84OTU1MDItNGUxNC00OTYzLWEzMDUtM2I2YjBhNTU1NWVm
LzEvb0VENWFQcFM1c3N2NWxjUWx3RDZCMHdaQzRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv8XtbfkX
Zg4r0++VXjQcwjCr/n5PiKAvF6JxOkhkiUfxA9gs5/dD3R4nGtt+5/rZzDS6Gct0
rkLYSeq7BjbIpikKv8I8L13bc139HYZ1LLNkV4HkHJJoolDYUgS0iXX/jEb0gKme
9Enrhp3B/Si+oA5TuG1HK085gFznGxTlgdhgPJGDNoljKsHxJnW6j1Ylp7EnTwAQ
VTPAxuqFlHsw3ASqkPy9QB+YY4u3Bd0yepRwofUWhydFuIgs515sXtJhNIWsj4m3
PcKuxrk1Cxz83xpFI3yIaus79o04L6MfywxIwkPVr6DJ3u27Une1n8tiOcmOR1ql
K5P7xAm58250lQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 02:00:09 2025 by rpki-client