Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
File: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft (raw, json)
Hash identifier: oDYE6Rv8p0b4hoGksIJafJJXA0vZuBOv1Zya81d59Rg=
Subject key identifier: 05:64:CE:B7:0C:5E:BE:4F:BE:12:2B:73:81:E1:D7:AF:26:3B:47:0C
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial: 019838A8B084DA12B4D1DAC61F1B571B58E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
Manifest number: 09D4
Signing time: Wed 23 Jul 2025 19:00:35 +0000
Manifest this update: Wed 23 Jul 2025 19:00:35 +0000
Manifest next update: Thu 24 Jul 2025 19:00:35 +0000
Files and hashes: 1: PjUaY1pzv5i9v0-_ltmeXMvn_E8.roa (hash: 5l/O42PBuCxXNh+SRi17b1mrEEDB7Yq2rN5qBu2/Ncg=)
2: PttuSfjxa79MH7rLTOnjgReDQvw.roa (hash: AT0RYNQBGnwCZ5SCURqKkKKbeaLJOuOT7slKjRXHVFY=)
3: deFB5N1xgl-rTeswXd5-CqBWKVA.roa (hash: SlwmTaXJntPAIRyPGkCdiuNn6DwU7ntHQcI8wpRB4ws=)
4: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl (hash: tUAfk2hEsYW0KSHoiSuCNp2obkXQ+yN3JcRjQz53Eug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:a8:b0:84:da:12:b4:d1:da:c6:1f:1b:57:1b:58:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
Validity
Not Before: Jul 23 19:00:35 2025 GMT
Not After : Jul 24 19:00:35 2025 GMT
Subject: CN=0564ceb70c5ebe4fbe122b7381e1d7af263b470c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:f8:da:3d:6e:aa:44:e9:87:81:66:7c:2d:
57:d0:3a:bc:35:a7:77:c7:46:bd:89:d9:97:9b:e8:
e4:6b:0a:8e:a6:d6:0b:d3:c3:b3:49:3a:90:39:01:
b0:23:8c:10:7c:07:5a:81:9b:75:a3:31:01:b4:17:
a1:fb:52:f3:d2:16:f3:d7:8b:04:11:99:ca:95:52:
47:d4:fd:db:68:b6:74:97:d3:11:74:bc:ad:06:9a:
64:bb:88:19:8b:67:ac:21:6a:b2:9c:0d:97:c1:7a:
9d:e4:8e:ee:4c:14:9d:de:89:c9:26:18:e0:87:73:
b5:73:1a:71:ab:30:38:b2:1a:77:d9:72:d0:c9:5c:
76:2e:de:33:70:87:53:6f:c0:c9:fc:bf:11:62:97:
4c:cf:9a:aa:79:ad:48:6a:69:0f:62:92:ee:c2:71:
92:6a:99:7f:74:45:07:01:b5:2e:1e:f1:3a:3f:a5:
14:93:44:f8:dc:1d:14:31:26:4a:44:fa:97:9f:ce:
d0:be:5c:41:e0:3d:72:50:08:ee:42:b7:74:7b:5e:
74:2d:23:f9:5c:94:a4:44:b1:66:44:d7:34:af:4e:
16:d1:70:f3:5c:a5:d3:65:ee:ae:5c:7a:4d:99:7b:
33:5c:b2:6a:d8:bf:ff:e1:97:5e:76:09:4a:10:4b:
47:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:64:CE:B7:0C:5E:BE:4F:BE:12:2B:73:81:E1:D7:AF:26:3B:47:0C
X509v3 Authority Key Identifier:
keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:59:f5:26:64:00:17:95:a5:f7:6a:0f:0f:53:cd:08:9d:9f:
99:09:c8:45:41:73:ff:09:8a:65:32:00:b5:cf:9d:04:c1:72:
50:a5:e1:12:ba:20:ee:4e:59:49:7d:9d:2d:1e:d0:cd:a0:07:
d1:a0:33:b4:32:07:23:a2:c7:da:b0:3d:be:58:fc:30:d5:79:
46:f5:4f:71:45:ab:97:f1:5a:1a:f0:7b:1c:19:72:77:a7:a9:
aa:cb:26:1c:ee:df:f0:43:dc:7a:64:ef:c5:51:9c:f4:4d:5f:
fa:1a:af:45:f1:eb:08:3e:d9:07:f2:2a:14:4f:9b:63:0d:d8:
ad:ec:e7:7e:e8:34:a2:55:38:e1:19:cc:0c:8e:3c:b0:06:71:
03:58:00:92:3a:05:f2:13:35:b7:5d:c0:1a:74:00:9e:f3:d6:
9b:fc:a7:7c:4b:9d:ec:29:57:50:6c:1a:24:f6:6f:60:13:72:
d7:5b:66:0e:09:ec:4b:1b:47:45:e6:95:2b:2a:6b:10:cb:a3:
bd:65:47:8e:fc:dc:94:37:c0:53:40:b6:a4:15:d0:72:1d:27:
d2:6b:6d:52:a7:a1:9e:8a:7a:df:be:30:08:ee:71:f1:f2:7e:
da:c4:82:9a:39:b1:8e:f6:11:70:ef:53:00:36:92:12:6c:7a:
24:01:bb:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg4qLCE2hK00drGHxtXG1jnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwODhiMDU0N2YwOWZlOTIyNDA1MGQ3MGE1MjNkYTViZWRi
ZTA3MzgwHhcNMjUwNzIzMTkwMDM1WhcNMjUwNzI0MTkwMDM1WjAzMTEwLwYDVQQD
EygwNTY0Y2ViNzBjNWViZTRmYmUxMjJiNzM4MWUxZDdhZjI2M2I0NzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3j42j1uqkTph4FmfC1X0Dq8Nad3
x0a9idmXm+jkawqOptYL08OzSTqQOQGwI4wQfAdagZt1ozEBtBeh+1Lz0hbz14sE
EZnKlVJH1P3baLZ0l9MRdLytBppku4gZi2esIWqynA2XwXqd5I7uTBSd3onJJhjg
h3O1cxpxqzA4shp32XLQyVx2Lt4zcIdTb8DJ/L8RYpdMz5qqea1IamkPYpLuwnGS
apl/dEUHAbUuHvE6P6UUk0T43B0UMSZKRPqXn87QvlxB4D1yUAjuQrd0e150LSP5
XJSkRLFmRNc0r04W0XDzXKXTZe6uXHpNmXszXLJq2L//4ZdedglKEEtHtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVkzrcMXr5PvhIrc4Hh168mO0cMMB8GA1UdIwQY
MBaAFKCIsFR/Cf6SJAUNcKUj2lvtvgc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMt
ZGY4MmZhODk3MzI2LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMtZGY4MmZhODk3MzI2
LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1n1JmQA
F5Wl92oPD1PNCJ2fmQnIRUFz/wmKZTIAtc+dBMFyUKXhErog7k5ZSX2dLR7QzaAH
0aAztDIHI6LH2rA9vlj8MNV5RvVPcUWrl/FaGvB7HBlyd6epqssmHO7f8EPcemTv
xVGc9E1f+hqvRfHrCD7ZB/IqFE+bYw3Yreznfug0olU44RnMDI48sAZxA1gAkjoF
8hM1t13AGnQAnvPWm/ynfEud7ClXUGwaJPZvYBNy11tmDgnsSxtHReaVKyprEMuj
vWVHjvzclDfAU0C2pBXQch0n0mttUqehnop6374wCO5x8fJ+2sSCmjmxjvYRcO9T
ADaSEmx6JAG7Aw==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:58:41 2025 by rpki-client