
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
File: oLqoCzEKSu7SwjPP54LE83mmYgA.mft (raw, json)
Hash identifier: 5lhvoPDoiSskLrQ4LFdMK3LAnqg8XW7ul4jNjy59IV8=
Subject key identifier: 73:70:43:8E:C4:12:7D:53:93:AF:F6:44:20:42:36:A7:35:F7:AE:CC
Authority key identifier: A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00
Certificate issuer: /CN=a0baa80b310a4aeed2c233cfe782c4f379a66200
Certificate serial: 01984A411B9D0E6BE736858D0EFAA223B5DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
Manifest number: 0124
Signing time: Sun 27 Jul 2025 05:00:37 +0000
Manifest this update: Sun 27 Jul 2025 05:00:37 +0000
Manifest next update: Mon 28 Jul 2025 05:00:37 +0000
Files and hashes: 1: oLqoCzEKSu7SwjPP54LE83mmYgA.crl (hash: 8qjdrM32DR1oQ00kuR7JiehKqlCRnHNLZGTDcFUe3kQ=)
2: sT1fnBcommpqYG28Wvu_VZnisuk.roa (hash: bgoEmCHH3xYPTJAnecz6TfwkrZtOdQNWaY0Or/vvOhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:1b:9d:0e:6b:e7:36:85:8d:0e:fa:a2:23:b5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0baa80b310a4aeed2c233cfe782c4f379a66200
Validity
Not Before: Jul 27 05:00:37 2025 GMT
Not After : Jul 28 05:00:37 2025 GMT
Subject: CN=7370438ec4127d5393aff644204236a735f7aecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ad:91:8b:3e:18:a3:1b:a4:f2:1b:e8:23:9c:
4e:6a:ea:5d:ca:b0:7b:b9:24:01:36:8e:96:96:0b:
3a:eb:01:79:07:0d:50:e7:f5:94:e5:ae:8a:3b:76:
a8:d5:82:07:6c:bc:18:40:77:c9:8b:0c:16:ad:76:
61:20:d2:e5:75:83:bb:15:2e:38:2b:e3:55:60:67:
92:a3:cd:54:88:7b:4f:63:8a:ac:25:10:83:d1:3a:
c9:86:21:6e:e0:19:b6:85:94:65:ff:95:c4:97:a6:
ec:0d:14:c1:c9:35:9b:e5:84:06:a6:fa:0f:2c:59:
3c:94:44:05:46:6c:f6:9d:92:a2:4f:0e:c2:8a:1c:
91:88:24:a7:a5:42:f7:c3:ba:0d:5c:8b:2a:c7:10:
52:07:3d:81:37:3d:8c:bc:d1:58:4d:85:3b:1d:6c:
cd:d2:b6:7f:66:6e:5c:9b:b0:39:e9:f6:f7:f8:62:
ed:b3:c1:bd:43:4e:18:5c:d2:ad:7b:cb:34:fa:55:
c7:b5:a1:41:15:52:0d:1b:93:85:ee:3f:8e:4f:9c:
75:36:9e:78:5d:57:cf:49:2b:33:23:55:7f:4e:9a:
18:49:e6:67:a1:2e:9d:0d:3b:d1:9f:f7:d3:cc:d2:
4a:07:e1:52:14:dc:0c:6c:76:e3:79:e1:10:d5:07:
4a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:70:43:8E:C4:12:7D:53:93:AF:F6:44:20:42:36:A7:35:F7:AE:CC
X509v3 Authority Key Identifier:
keyid:A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f1:0b:31:da:21:c7:d8:c0:ab:5d:15:e8:70:c6:4c:74:be:
56:a5:8a:ba:3c:d3:a2:d0:cf:52:af:db:55:d7:ed:11:63:7c:
47:d3:52:d6:bd:eb:d6:d0:6b:9c:92:33:5d:00:7f:e2:b8:b2:
b9:b9:6f:1c:4e:b9:9e:7c:63:4f:2f:d8:c8:b2:bb:28:be:de:
ba:84:4b:b3:a6:f9:aa:14:f4:e7:a9:05:55:db:c5:11:d1:db:
c7:b2:fd:55:a3:5f:cd:53:01:5e:43:7a:18:b0:b3:ab:cb:23:
c2:ff:a8:bd:69:11:47:1e:0b:d9:7b:74:ac:9d:b4:a5:b0:06:
30:fa:50:a4:d2:7d:53:b9:bb:65:5a:f9:45:cd:ac:2e:2c:f8:
c9:ca:77:04:59:ff:82:fa:71:28:e5:ed:03:bb:c6:c1:9a:7b:
a8:f3:c0:af:32:2d:c8:46:da:c0:94:81:d3:b1:82:4f:bf:01:
90:c1:e1:3d:7b:ff:8c:89:8e:af:fb:1c:95:dd:18:90:87:67:
34:1a:48:a7:a2:ef:59:14:34:ee:c2:77:1d:01:40:8a:f6:0b:
0c:06:13:78:a5:f3:15:90:85:72:0e:1b:ee:1f:b5:7b:36:6f:
82:bf:76:a1:6b:4c:91:3a:46:3a:f5:bb:d0:ba:fa:3e:ec:6e:
29:a5:f4:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQRudDmvnNoWNDvqiI7XeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYmFhODBiMzEwYTRhZWVkMmMyMzNjZmU3ODJjNGYzNzlh
NjYyMDAwHhcNMjUwNzI3MDUwMDM3WhcNMjUwNzI4MDUwMDM3WjAzMTEwLwYDVQQD
Eyg3MzcwNDM4ZWM0MTI3ZDUzOTNhZmY2NDQyMDQyMzZhNzM1ZjdhZWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+K2Riz4Yoxuk8hvoI5xOaupdyrB7
uSQBNo6Wlgs66wF5Bw1Q5/WU5a6KO3ao1YIHbLwYQHfJiwwWrXZhINLldYO7FS44
K+NVYGeSo81UiHtPY4qsJRCD0TrJhiFu4Bm2hZRl/5XEl6bsDRTByTWb5YQGpvoP
LFk8lEQFRmz2nZKiTw7CihyRiCSnpUL3w7oNXIsqxxBSBz2BNz2MvNFYTYU7HWzN
0rZ/Zm5cm7A56fb3+GLts8G9Q04YXNKte8s0+lXHtaFBFVING5OF7j+OT5x1Np54
XVfPSSszI1V/TpoYSeZnoS6dDTvRn/fTzNJKB+FSFNwMbHbjeeEQ1QdK5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNwQ47EEn1Tk6/2RCBCNqc1967MMB8GA1UdIwQY
MBaAFKC6qAsxCkru0sIzz+eCxPN5pmIAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0xxb0N6RUtTdTdTd2pQUDU0TEU4M21tWWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ODg5MTUtNjk4Ny00MTAyLWFlNGQt
MDJkNTQ4MTJjYzZlLzEvb0xxb0N6RUtTdTdTd2pQUDU0TEU4M21tWWdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84ODg5MTUtNjk4Ny00MTAyLWFlNGQtMDJkNTQ4MTJjYzZl
LzEvb0xxb0N6RUtTdTdTd2pQUDU0TEU4M21tWWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/ELMdoh
x9jAq10V6HDGTHS+VqWKujzTotDPUq/bVdftEWN8R9NS1r3r1tBrnJIzXQB/4riy
ublvHE65nnxjTy/YyLK7KL7euoRLs6b5qhT056kFVdvFEdHbx7L9VaNfzVMBXkN6
GLCzq8sjwv+ovWkRRx4L2Xt0rJ20pbAGMPpQpNJ9U7m7ZVr5Rc2sLiz4ycp3BFn/
gvpxKOXtA7vGwZp7qPPArzItyEbawJSB07GCT78BkMHhPXv/jImOr/scld0YkIdn
NBpIp6LvWRQ07sJ3HQFAivYLDAYTeKXzFZCFcg4b7h+1ezZvgr92oWtMkTpGOvW7
0Lr6PuxuKaX0+A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:15:15 2025 by rpki-client