Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
File: mOszws77XaNGB7ALUAXkS3VSSh8.mft (raw, json)
Hash identifier: 28g/1E7SAYNxiTxqNIgBjpXS3U4yG7cFUzVUgSH3s+I=
Subject key identifier: 5C:3F:CE:D6:F4:94:4E:FA:36:A5:DE:17:57:F5:D2:B6:09:30:3B:4A
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Certificate issuer: /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial: 0198529F8C612BD3A45E83E95392B0CE79BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
Manifest number: 0EA1
Signing time: Mon 28 Jul 2025 20:00:44 +0000
Manifest this update: Mon 28 Jul 2025 20:00:44 +0000
Manifest next update: Tue 29 Jul 2025 20:00:44 +0000
Files and hashes: 1: FGRnxc9C3d9faJa4e9X6S4cHjFA.roa (hash: d5SgFAeT21YMWMJqdCASd/9NKR53dDrqmG/NUaV6X8s=)
2: mOszws77XaNGB7ALUAXkS3VSSh8.crl (hash: 14fwKJ0f3EXdXTb/rPQglLmovDF+W5Ed2SIILo3H6Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:8c:61:2b:d3:a4:5e:83:e9:53:92:b0:ce:79:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Validity
Not Before: Jul 28 20:00:44 2025 GMT
Not After : Jul 29 20:00:44 2025 GMT
Subject: CN=5c3fced6f4944efa36a5de1757f5d2b609303b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:05:9d:87:a1:da:2c:8c:6c:d0:0c:9e:b0:
c6:88:64:98:05:91:38:be:ee:39:50:fc:8a:7d:ad:
06:25:ad:da:66:21:2c:5a:3c:d7:d1:00:25:43:6e:
d0:b3:50:37:b6:af:4a:c1:d8:23:df:58:d1:d8:20:
28:16:92:60:5d:e7:e2:bc:1f:9c:b2:76:5d:13:43:
c9:c9:ad:61:b2:8a:b6:82:47:9a:65:4f:5f:c3:a8:
bb:c6:07:fa:42:dd:2a:ab:af:16:00:81:39:cb:02:
b0:f0:9f:a4:08:33:2c:42:24:14:07:b5:4c:53:1a:
02:89:bd:f1:a6:8d:43:06:90:a1:2a:1e:dd:44:6d:
2b:8a:91:29:98:46:29:00:a1:0b:d4:7c:35:07:2c:
6f:70:b4:a1:38:e4:b3:64:c6:d9:a8:9d:1c:f3:d6:
8d:11:05:89:8f:88:62:eb:db:4b:88:19:ae:d6:5a:
53:90:a8:62:60:c9:5d:a4:b2:42:58:89:64:53:39:
84:84:88:ba:45:a4:78:ca:a5:d0:b2:e3:8e:e7:f8:
f0:f9:32:66:a5:00:9a:01:f0:91:66:fd:23:cd:df:
fb:4d:d8:25:41:86:dc:9b:bc:ad:40:38:09:5e:65:
73:0c:34:f0:8d:f0:32:04:fd:96:18:3b:76:9d:31:
6f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3F:CE:D6:F4:94:4E:FA:36:A5:DE:17:57:F5:D2:B6:09:30:3B:4A
X509v3 Authority Key Identifier:
keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:bb:ea:ee:a3:c2:6b:b4:93:06:8c:ad:d5:82:84:da:1c:d3:
c9:82:7b:c9:be:f6:12:25:aa:7b:a2:12:05:e0:9b:2e:85:0f:
63:8b:66:f8:d2:6e:94:04:29:f7:62:e5:f6:d8:f5:f7:71:82:
c8:82:9e:54:6a:56:92:93:5b:6f:a5:26:81:3f:10:42:fe:34:
32:2a:23:62:3d:06:05:b3:62:d1:b3:76:5b:44:98:1d:2c:d6:
c7:ed:1d:e0:e8:76:b7:b5:93:4a:6f:29:21:c5:8b:0d:32:07:
52:ee:8e:64:8c:8b:60:b7:b3:83:b5:fe:9a:3d:10:aa:a2:10:
00:90:94:1c:11:8c:da:1f:c3:a7:f0:33:5b:06:7e:15:ac:04:
17:19:60:70:98:83:41:34:87:9a:64:69:3d:96:c0:92:cd:21:
09:72:3f:ac:d5:3a:24:f6:29:87:de:bf:ee:f7:5c:f9:ff:e5:
b5:70:58:11:05:20:c7:fb:79:f5:00:3d:1f:a2:c4:3f:7d:5d:
cf:39:5a:c8:61:60:04:47:98:d5:b2:f0:57:32:83:2e:95:75:
51:4c:03:51:47:28:25:33:41:29:e5:1c:c5:57:07:90:1e:c8:
bf:ac:ad:fd:4b:09:b3:56:63:17:34:6e:69:9c:a9:9d:3d:0e:
ff:de:2c:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhSn4xhK9OkXoPpU5Kwznm+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZWIzM2MyY2VmYjVkYTM0NjA3YjAwYjUwMDVlNDRiNzU1
MjRhMWYwHhcNMjUwNzI4MjAwMDQ0WhcNMjUwNzI5MjAwMDQ0WjAzMTEwLwYDVQQD
Eyg1YzNmY2VkNmY0OTQ0ZWZhMzZhNWRlMTc1N2Y1ZDJiNjA5MzAzYjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq14FnYeh2iyMbNAMnrDGiGSYBZE4
vu45UPyKfa0GJa3aZiEsWjzX0QAlQ27Qs1A3tq9Kwdgj31jR2CAoFpJgXefivB+c
snZdE0PJya1hsoq2gkeaZU9fw6i7xgf6Qt0qq68WAIE5ywKw8J+kCDMsQiQUB7VM
UxoCib3xpo1DBpChKh7dRG0ripEpmEYpAKEL1Hw1ByxvcLShOOSzZMbZqJ0c89aN
EQWJj4hi69tLiBmu1lpTkKhiYMldpLJCWIlkUzmEhIi6RaR4yqXQsuOO5/jw+TJm
pQCaAfCRZv0jzd/7TdglQYbcm7ytQDgJXmVzDDTwjfAyBP2WGDt2nTFvPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFw/ztb0lE76NqXeF1f10rYJMDtKMB8GA1UdIwQY
MBaAFJjrM8LO+12jRgewC1AF5Et1UkofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU9zendzNzdYYU5HQjdBTFVBWGtTM1ZTU2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83NmIxZDMtNGZkOS00NmNmLTgzZTYt
MjBjNGRjMWU0YTc3LzEvbU9zendzNzdYYU5HQjdBTFVBWGtTM1ZTU2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83NmIxZDMtNGZkOS00NmNmLTgzZTYtMjBjNGRjMWU0YTc3
LzEvbU9zendzNzdYYU5HQjdBTFVBWGtTM1ZTU2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtrvq7qPC
a7STBoyt1YKE2hzTyYJ7yb72EiWqe6ISBeCbLoUPY4tm+NJulAQp92Ll9tj193GC
yIKeVGpWkpNbb6UmgT8QQv40MiojYj0GBbNi0bN2W0SYHSzWx+0d4Oh2t7WTSm8p
IcWLDTIHUu6OZIyLYLezg7X+mj0QqqIQAJCUHBGM2h/Dp/AzWwZ+FawEFxlgcJiD
QTSHmmRpPZbAks0hCXI/rNU6JPYph96/7vdc+f/ltXBYEQUgx/t59QA9H6LEP31d
zzlayGFgBEeY1bLwVzKDLpV1UUwDUUcoJTNBKeUcxVcHkB7Iv6yt/UsJs1ZjFzRu
aZypnT0O/94s8A==
-----END CERTIFICATE-----
Generated at Tue Jul 29 00:52:07 2025 by rpki-client