
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
File: ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft (raw, json)
Hash identifier: 8HuKEZaiaw373goxprVvb2T605z+BG4MwsjHvZeduns=
Subject key identifier: 40:F4:0A:AF:EC:17:40:63:F3:03:A6:87:FF:1B:F7:EB:5E:1E:F5:FF
Authority key identifier: A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C
Certificate issuer: /CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
Certificate serial: 019853E9140DA245A6A11347EACA3BC937D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
Manifest number: 1605
Signing time: Tue 29 Jul 2025 02:00:40 +0000
Manifest this update: Tue 29 Jul 2025 02:00:40 +0000
Manifest next update: Wed 30 Jul 2025 02:00:40 +0000
Files and hashes: 1: e-gDJNXzm0Ybkz_ors_9mzoknFc.roa (hash: EmVgkp+dxUqbi6FSU/qMEIRuJJb2TeTwsYYhWoEauko=)
2: ghlEwsQZQs2UcsGEnGv2GYmqozE.roa (hash: IupvEzCg2+AgoEqXLEZo9g4xmShB4z81Opbof+wzS0A=)
3: mEEdwwEWwRFuOQjXEE0GqAJtD6g.roa (hash: 9OEXXQKo0v2yF8ajNKcSoh8Qu8qa2iGEylM4hM3dSfo=)
4: ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl (hash: oPSfxwvj3CvVxpWpH0vfPokaAHImoZwGn4B41tMqrSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:14:0d:a2:45:a6:a1:13:47:ea:ca:3b:c9:37:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
Validity
Not Before: Jul 29 02:00:40 2025 GMT
Not After : Jul 30 02:00:40 2025 GMT
Subject: CN=40f40aafec174063f303a687ff1bf7eb5e1ef5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:72:55:1e:a5:37:f1:c0:08:36:ed:af:1b:ce:
6a:f2:7a:69:2d:da:db:be:e7:de:c4:42:c9:6f:ad:
e3:60:cf:7b:7e:e8:4b:44:16:17:21:ef:50:2a:47:
1e:1b:6a:d5:ab:ea:f4:85:a2:b5:d9:4f:e7:02:b6:
7b:cb:00:15:a0:c5:64:a8:d4:8c:83:a4:22:2a:2f:
f6:69:25:24:af:07:d4:d2:84:ed:b9:2f:22:b9:38:
3a:4e:09:54:f2:51:26:ec:b9:c7:63:4e:99:bb:34:
3e:fd:db:20:d3:3a:f1:2a:6a:ea:77:e3:66:74:ca:
d8:21:e0:05:b2:f9:80:1b:fa:90:f1:d5:20:5c:dd:
35:6d:13:71:c1:f6:11:60:96:09:03:e9:d2:cb:04:
12:6a:e4:01:5a:e2:79:d0:12:0d:75:d1:95:e0:89:
fe:26:9d:2e:ec:3f:66:a4:2b:70:56:11:d6:9b:66:
bf:33:2d:c2:a5:ba:a1:c3:9d:4d:92:f7:7d:8d:cf:
a7:23:bb:7d:22:a2:b8:8f:2a:18:3e:61:3b:aa:ed:
f7:4d:3c:5d:12:80:14:e8:89:4b:b5:38:69:ac:24:
e9:bc:02:db:ce:eb:15:72:4a:3f:87:3a:b4:43:53:
5a:84:cf:b3:78:cf:55:ec:0c:af:87:8d:04:cc:41:
6e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F4:0A:AF:EC:17:40:63:F3:03:A6:87:FF:1B:F7:EB:5E:1E:F5:FF
X509v3 Authority Key Identifier:
keyid:A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:66:4e:97:06:a3:bd:8c:c7:1a:75:49:68:11:45:62:af:c5:
be:e1:85:38:39:20:d6:21:fc:c8:94:36:58:b6:a9:e1:c0:1c:
7f:db:3f:d4:7c:80:ae:9b:8d:86:4e:99:ec:eb:5b:de:8c:67:
28:ee:26:ad:eb:a1:48:3f:b4:d4:a6:90:fb:c4:59:09:47:32:
f0:d5:40:3a:7f:b3:d4:5f:56:10:68:27:3e:68:e7:92:d5:c2:
05:75:82:51:e2:c1:00:c2:48:14:8f:f2:59:d0:a5:a5:7a:db:
04:be:53:5e:95:99:7f:b0:88:30:95:0f:9a:d6:cd:bc:e2:c3:
4c:42:bc:39:08:0a:6e:0c:01:23:c9:f5:8b:bd:ab:a3:53:70:
71:a4:ae:4d:ae:43:37:92:a1:41:b2:34:4a:50:26:b6:77:76:
78:be:3d:5d:5c:2f:74:a1:05:c4:d6:ab:c7:96:50:f8:77:2c:
69:82:2f:9d:67:d9:35:81:44:eb:76:03:30:c0:cc:90:d7:4d:
1d:58:f8:b3:15:fb:06:18:03:fc:b8:9f:0e:fd:91:95:0b:f5:
f6:09:d8:67:2f:3b:8d:2d:73:32:2b:19:aa:4a:0d:77:5d:e2:
bf:29:85:f3:be:1d:c8:d7:58:97:6d:3a:1b:18:2c:f1:1c:01:
39:ba:80:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhT6RQNokWmoRNH6so7yTfTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyM2I3MWJmZDc1MWMwY2YzZjcxNDM3ODZmZGE0NDMyZTdj
Y2VjMmMwHhcNMjUwNzI5MDIwMDQwWhcNMjUwNzMwMDIwMDQwWjAzMTEwLwYDVQQD
Eyg0MGY0MGFhZmVjMTc0MDYzZjMwM2E2ODdmZjFiZjdlYjVlMWVmNWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHJVHqU38cAINu2vG85q8nppLdrb
vufexELJb63jYM97fuhLRBYXIe9QKkceG2rVq+r0haK12U/nArZ7ywAVoMVkqNSM
g6QiKi/2aSUkrwfU0oTtuS8iuTg6TglU8lEm7LnHY06ZuzQ+/dsg0zrxKmrqd+Nm
dMrYIeAFsvmAG/qQ8dUgXN01bRNxwfYRYJYJA+nSywQSauQBWuJ50BINddGV4In+
Jp0u7D9mpCtwVhHWm2a/My3Cpbqhw51Nkvd9jc+nI7t9IqK4jyoYPmE7qu33TTxd
EoAU6IlLtThprCTpvALbzusVcko/hzq0Q1NahM+zeM9V7Ayvh40EzEFulQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFED0Cq/sF0Bj8wOmh/8b9+teHvX/MB8GA1UdIwQY
MBaAFKI7cb/XUcDPP3FDeG/aRDLnzOwsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2p0eHY5ZFJ3TThfY1VONGI5cEVNdWZNN0N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84MTZiOGEtZWNjYy00Nzg5LWExZjMt
MzU3MGQ5YmY1Njc5LzEvb2p0eHY5ZFJ3TThfY1VONGI5cEVNdWZNN0N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84MTZiOGEtZWNjYy00Nzg5LWExZjMtMzU3MGQ5YmY1Njc5
LzEvb2p0eHY5ZFJ3TThfY1VONGI5cEVNdWZNN0N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWZOlwaj
vYzHGnVJaBFFYq/FvuGFODkg1iH8yJQ2WLap4cAcf9s/1HyArpuNhk6Z7Otb3oxn
KO4mreuhSD+01KaQ+8RZCUcy8NVAOn+z1F9WEGgnPmjnktXCBXWCUeLBAMJIFI/y
WdClpXrbBL5TXpWZf7CIMJUPmtbNvOLDTEK8OQgKbgwBI8n1i72ro1NwcaSuTa5D
N5KhQbI0SlAmtnd2eL49XVwvdKEFxNarx5ZQ+HcsaYIvnWfZNYFE63YDMMDMkNdN
HVj4sxX7BhgD/LifDv2RlQv19gnYZy87jS1zMisZqkoNd13ivymF874dyNdYl206
Gxgs8RwBObqAFQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:38:13 2025 by rpki-client