Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
File: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft (raw, json)
Hash identifier: MnSaDr7R80FnOW5AjXhwFRwzl9mQXhJlUXdSNBJx/Zw=
Subject key identifier: F3:D3:D4:C7:AC:52:59:1D:0E:03:76:AB:2E:50:85:40:2C:2E:74:E5
Authority key identifier: 3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
Certificate issuer: /CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Certificate serial: 0198530DE76C9EE459DCC869DDC3F219F11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
Manifest number: 14A4
Signing time: Mon 28 Jul 2025 22:01:16 +0000
Manifest this update: Mon 28 Jul 2025 22:01:16 +0000
Manifest next update: Tue 29 Jul 2025 22:01:16 +0000
Files and hashes: 1: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl (hash: yOOu4Q8yIsSuqHeeJJOb2Nrosvo0uDNcIQjdErp1MvA=)
2: i7yXvmlWG45A5KxBFSXl668mPOM.roa (hash: xpvrCv1mTXlVyotmQuRYzvYT5pY/lTfAVskj11L66Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:e7:6c:9e:e4:59:dc:c8:69:dd:c3:f2:19:f1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Validity
Not Before: Jul 28 22:01:16 2025 GMT
Not After : Jul 29 22:01:16 2025 GMT
Subject: CN=f3d3d4c7ac52591d0e0376ab2e5085402c2e74e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a9:1b:cc:b6:1c:bc:b6:76:51:09:4c:cb:ad:
c6:59:c1:f3:e7:4d:39:15:19:29:b3:38:7a:5b:ad:
7b:ac:4a:1b:83:71:10:8e:6e:43:26:30:02:bd:8a:
3a:b6:82:89:45:a1:35:a2:b0:96:cc:c9:01:68:4c:
49:0b:4f:5c:06:76:c2:5a:e3:a6:0c:37:5d:5b:5e:
ee:46:b9:d8:72:54:dd:ab:50:8c:1f:cb:ab:34:7d:
4f:23:a5:82:f4:6b:82:f0:06:36:14:fb:b3:8e:c3:
30:ad:1f:42:55:b9:f7:10:fd:31:07:15:dc:47:b4:
4d:31:cd:ab:a2:83:cf:1b:9f:b8:ca:19:d9:e0:e7:
8a:40:0d:42:27:46:09:8d:fa:54:95:80:89:c0:3e:
63:7c:56:95:bd:0d:f8:f3:ad:f1:95:4d:81:b3:a2:
ca:a4:3e:9d:2c:3d:ee:ab:cf:b1:e3:a2:9b:c8:59:
88:fe:60:f5:21:2c:38:a7:fd:60:b7:86:bf:7c:d1:
1b:ac:8b:6a:be:c9:44:f1:31:95:0e:74:81:98:2b:
f1:46:e5:65:1c:65:72:12:e2:ce:c4:6b:38:23:7b:
69:14:4b:ee:b6:67:25:19:e3:14:67:e8:2d:e2:da:
a1:ba:76:4e:36:d2:3e:57:ce:c4:02:88:4c:36:15:
05:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D3:D4:C7:AC:52:59:1D:0E:03:76:AB:2E:50:85:40:2C:2E:74:E5
X509v3 Authority Key Identifier:
keyid:3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:93:f6:ef:02:9d:e8:72:c6:c9:42:12:6f:f9:3d:85:bf:5f:
26:b9:d8:2c:95:74:6d:3f:7c:f4:37:40:38:e3:34:5e:e1:f2:
58:96:09:0f:2f:b9:9a:be:92:2c:1d:f3:3d:29:a5:f4:a3:71:
ab:7d:11:40:6a:58:a0:6a:5e:8e:c4:bd:fa:72:ff:4e:07:45:
b1:31:4e:39:b7:0f:eb:b1:51:c0:61:e6:50:66:bf:c8:f7:77:
e7:e0:e2:87:3e:cf:42:77:73:6b:ce:39:7e:8b:61:55:8c:bc:
4f:88:56:6a:dd:0c:79:0a:6e:54:fa:22:e6:f9:8a:46:fd:20:
c3:5e:4e:16:66:c0:3c:2f:7d:9e:1c:e0:df:84:c4:cd:d9:56:
da:6b:d4:71:96:e2:59:b1:18:56:ff:36:37:37:d0:57:c4:43:
8e:45:0e:53:6a:72:b2:d7:0a:4f:97:a4:41:4b:c6:6a:db:96:
7f:6e:4c:4d:bc:be:c8:34:b3:44:17:bd:c0:62:26:c4:10:b1:
07:29:0e:00:dd:d2:f5:f4:fa:44:82:3b:42:02:7c:b2:fd:45:
99:c4:a4:67:58:d2:21:1c:6c:c2:0f:ba:62:06:eb:f7:b2:31:
f1:73:a1:ab:1c:e4:d5:37:68:33:75:2f:7d:7a:aa:43:c1:21:
51:96:65:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDedsnuRZ3Mhp3cPyGfEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhM2M2M2NiZDkzNDgyNWU1NWJiZTM1OWNiNzMwNjg2OWVk
NDUxY2QwHhcNMjUwNzI4MjIwMTE2WhcNMjUwNzI5MjIwMTE2WjAzMTEwLwYDVQQD
EyhmM2QzZDRjN2FjNTI1OTFkMGUwMzc2YWIyZTUwODU0MDJjMmU3NGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1akbzLYcvLZ2UQlMy63GWcHz5005
FRkpszh6W617rEobg3EQjm5DJjACvYo6toKJRaE1orCWzMkBaExJC09cBnbCWuOm
DDddW17uRrnYclTdq1CMH8urNH1PI6WC9GuC8AY2FPuzjsMwrR9CVbn3EP0xBxXc
R7RNMc2rooPPG5+4yhnZ4OeKQA1CJ0YJjfpUlYCJwD5jfFaVvQ34863xlU2Bs6LK
pD6dLD3uq8+x46KbyFmI/mD1ISw4p/1gt4a/fNEbrItqvslE8TGVDnSBmCvxRuVl
HGVyEuLOxGs4I3tpFEvutmclGeMUZ+gt4tqhunZONtI+V87EAohMNhUFNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPT1MesUlkdDgN2qy5QhUAsLnTlMB8GA1UdIwQY
MBaAFDo8Y8vZNIJeVbvjWctzBoae1FHNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2p4ank5azBnbDVWdS1OWnkzTUdocDdVVWMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zNzcwZjgtNjJmZS00MGE1LTk0YjUt
NTQ4ZTdlNGIxMDJiLzEvT2p4ank5azBnbDVWdS1OWnkzTUdocDdVVWMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zNzcwZjgtNjJmZS00MGE1LTk0YjUtNTQ4ZTdlNGIxMDJi
LzEvT2p4ank5azBnbDVWdS1OWnkzTUdocDdVVWMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpP27wKd
6HLGyUISb/k9hb9fJrnYLJV0bT989DdAOOM0XuHyWJYJDy+5mr6SLB3zPSml9KNx
q30RQGpYoGpejsS9+nL/TgdFsTFOObcP67FRwGHmUGa/yPd35+Dihz7PQndza845
fothVYy8T4hWat0MeQpuVPoi5vmKRv0gw15OFmbAPC99nhzg34TEzdlW2mvUcZbi
WbEYVv82NzfQV8RDjkUOU2pystcKT5ekQUvGatuWf25MTby+yDSzRBe9wGImxBCx
BykOAN3S9fT6RII7QgJ8sv1FmcSkZ1jSIRxswg+6Ygbr97Ix8XOhqxzk1TdoM3Uv
fXqqQ8EhUZZlRg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:09:06 2025 by rpki-client