Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft
File: oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft (raw, json)
Hash identifier: g2R4NQh+rEOpLCxngQb2QfxdAifgBpLG1lgF9xdm9y8=
Subject key identifier: EF:43:01:A3:61:BD:69:38:ED:FD:B5:3D:20:CD:44:85:01:8B:52:9C
Authority key identifier: A2:20:DD:A6:48:43:A4:EE:36:4B:08:93:56:CA:87:99:58:30:FD:77
Certificate issuer: /CN=a220dda64843a4ee364b089356ca87995830fd77
Certificate serial: 01984965A16E5A3204F34B087AEF51B2CF03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft
Manifest number: 0D28
Signing time: Sun 27 Jul 2025 01:00:53 +0000
Manifest this update: Sun 27 Jul 2025 01:00:53 +0000
Manifest next update: Mon 28 Jul 2025 01:00:53 +0000
Files and hashes: 1: f3Wn9TOfcfxB3VYXWanqfMC6WRI.roa (hash: CJSEzeKkH+A8u48zVCzb/MrI7FvV/Beze1CPp3UTLZU=)
2: oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl (hash: eq1qUEEF9xnEsbc7IUzcgwZsWHlRraGgh9Dy3S5KdeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:a1:6e:5a:32:04:f3:4b:08:7a:ef:51:b2:cf:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a220dda64843a4ee364b089356ca87995830fd77
Validity
Not Before: Jul 27 01:00:53 2025 GMT
Not After : Jul 28 01:00:53 2025 GMT
Subject: CN=ef4301a361bd6938edfdb53d20cd4485018b529c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e0:71:6c:2f:68:64:89:ce:20:70:e7:1b:5d:
20:f4:85:83:29:9e:e1:87:b1:96:e7:52:18:f9:9f:
88:41:d2:7b:50:d0:b6:3e:fb:b4:03:70:94:1e:52:
df:0a:c6:17:af:c6:88:94:a1:21:6a:7f:75:45:66:
f9:83:ee:4f:de:a8:06:7f:e7:a8:ea:d3:d6:d3:68:
cb:34:2f:22:d0:a9:9b:fe:70:1a:c2:4c:d2:67:1b:
f7:6f:9e:f1:70:1d:85:02:b3:2f:94:cf:ec:ed:cf:
7d:86:3d:21:29:39:b1:e3:81:9f:e3:f8:a9:c1:da:
d7:6b:57:db:d2:8e:10:9d:c3:8d:6c:83:9c:a9:c1:
d0:d3:9d:b4:1a:e9:9b:e4:a4:36:a0:6d:ae:ef:ee:
ad:6d:f2:a2:da:92:92:fd:27:b6:66:8d:12:fa:03:
fc:9b:5c:6c:68:4d:19:1a:f9:ea:9f:db:8d:bc:08:
3b:5f:e6:c8:b5:73:36:e3:87:cc:23:ad:1f:00:45:
8a:b7:8f:2d:d4:25:8f:63:c8:14:b8:9f:2e:d3:f8:
ff:a6:fd:93:2f:2d:31:6f:d3:aa:4f:61:87:f4:24:
06:a4:68:d8:e4:df:a4:d5:17:ed:73:1f:7d:bb:3c:
56:a6:8d:9c:15:4c:e7:01:88:ac:29:e5:02:58:6a:
3d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:43:01:A3:61:BD:69:38:ED:FD:B5:3D:20:CD:44:85:01:8B:52:9C
X509v3 Authority Key Identifier:
keyid:A2:20:DD:A6:48:43:A4:EE:36:4B:08:93:56:CA:87:99:58:30:FD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a3:c6:d7:6b:83:df:58:c7:83:29:d1:f1:d0:0d:3e:e9:54:
b3:ca:c1:53:13:a4:ac:30:dc:c2:46:15:7f:9b:84:6e:bb:33:
08:1e:52:1e:69:17:05:30:c3:be:b5:f7:cc:53:e4:0e:06:60:
e7:06:b7:0f:86:b7:56:28:47:ad:07:de:49:11:a7:f0:e8:38:
4e:dd:8f:2f:d3:2f:44:13:20:47:6f:ac:55:6a:41:f0:0f:92:
4e:ac:be:03:56:4d:ad:89:97:ce:d8:2d:f2:7d:e6:d5:18:3f:
d3:24:74:1d:53:be:48:02:c6:ce:59:19:1b:43:fb:09:00:3b:
8f:83:a1:82:3a:71:24:17:81:8b:be:92:d2:5f:32:b5:7f:9b:
e8:96:06:09:b7:84:b6:d7:7e:c4:54:78:5f:7d:1b:df:4a:74:
a1:0d:5e:e5:31:52:34:f1:7a:7e:cc:62:b4:f4:2c:1c:9c:68:
35:d2:0c:f4:00:b2:4d:62:89:52:53:a2:75:6e:01:5d:fe:95:
10:ee:aa:61:fb:73:bc:c8:55:59:a3:c3:7c:a4:18:69:49:24:
d3:0a:27:ba:5e:df:b3:8b:8e:e7:3c:c5:bc:9e:b4:08:90:51:
4e:ee:31:fd:e2:58:c9:d7:8f:77:6a:68:71:90:94:0f:a0:9f:
61:6c:59:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZaFuWjIE80sIeu9Rss8DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMjBkZGE2NDg0M2E0ZWUzNjRiMDg5MzU2Y2E4Nzk5NTgz
MGZkNzcwHhcNMjUwNzI3MDEwMDUzWhcNMjUwNzI4MDEwMDUzWjAzMTEwLwYDVQQD
EyhlZjQzMDFhMzYxYmQ2OTM4ZWRmZGI1M2QyMGNkNDQ4NTAxOGI1MjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uBxbC9oZInOIHDnG10g9IWDKZ7h
h7GW51IY+Z+IQdJ7UNC2Pvu0A3CUHlLfCsYXr8aIlKEhan91RWb5g+5P3qgGf+eo
6tPW02jLNC8i0Kmb/nAawkzSZxv3b57xcB2FArMvlM/s7c99hj0hKTmx44Gf4/ip
wdrXa1fb0o4QncONbIOcqcHQ0520Gumb5KQ2oG2u7+6tbfKi2pKS/Se2Zo0S+gP8
m1xsaE0ZGvnqn9uNvAg7X+bItXM244fMI60fAEWKt48t1CWPY8gUuJ8u0/j/pv2T
Ly0xb9OqT2GH9CQGpGjY5N+k1Rftcx99uzxWpo2cFUznAYisKeUCWGo9CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9DAaNhvWk47f21PSDNRIUBi1KcMB8GA1UdIwQY
MBaAFKIg3aZIQ6TuNksIk1bKh5lYMP13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2lEZHBraERwTzQyU3dpVFZzcUhtVmd3X1hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mZmE2ZDQtNTA4OS00NWE3LWEzOGYt
ZjVmODE0NTY1MWQzLzEvb2lEZHBraERwTzQyU3dpVFZzcUhtVmd3X1hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mZmE2ZDQtNTA4OS00NWE3LWEzOGYtZjVmODE0NTY1MWQz
LzEvb2lEZHBraERwTzQyU3dpVFZzcUhtVmd3X1hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqqPG12uD
31jHgynR8dANPulUs8rBUxOkrDDcwkYVf5uEbrszCB5SHmkXBTDDvrX3zFPkDgZg
5wa3D4a3VihHrQfeSRGn8Og4Tt2PL9MvRBMgR2+sVWpB8A+STqy+A1ZNrYmXztgt
8n3m1Rg/0yR0HVO+SALGzlkZG0P7CQA7j4OhgjpxJBeBi76S0l8ytX+b6JYGCbeE
ttd+xFR4X30b30p0oQ1e5TFSNPF6fsxitPQsHJxoNdIM9ACyTWKJUlOidW4BXf6V
EO6qYftzvMhVWaPDfKQYaUkk0wonul7fs4uO5zzFvJ60CJBRTu4x/eJYydePd2po
cZCUD6CfYWxZxQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:15:22 2025 by rpki-client