Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier: MkfH5Jhed+i2BZobAKTmyjHmWa3NT6lRl94wKQWP5Bw=
Subject key identifier: 0A:36:E3:E9:11:EF:67:E3:FD:78:C3:80:5C:19:42:4F:55:C1:7B:44
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial: 019853445ABC33DA07006A0F65847F09727E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number: 1607
Signing time: Mon 28 Jul 2025 23:00:45 +0000
Manifest this update: Mon 28 Jul 2025 23:00:45 +0000
Manifest next update: Tue 29 Jul 2025 23:00:45 +0000
Files and hashes: 1: ETzMLJ9E8ekQKvTuSVRndgg_ftE.roa (hash: zxZL9sGsfFQCpFwlHr+nLeuc9weJmZjmaUU+udBc04c=)
2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: 8kyi6Jl/5ORqm6l1UimaSi80Vw+ScZfyGqKMHWrENVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:5a:bc:33:da:07:00:6a:0f:65:84:7f:09:72:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Validity
Not Before: Jul 28 23:00:45 2025 GMT
Not After : Jul 29 23:00:45 2025 GMT
Subject: CN=0a36e3e911ef67e3fd78c3805c19424f55c17b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:46:5b:7c:37:39:91:9d:17:4e:ff:a6:a7:
48:78:30:da:c2:41:23:d4:30:a9:ab:33:4d:3f:30:
f5:78:45:34:ea:f5:82:57:2d:d0:d3:09:52:1d:78:
24:3d:c8:71:f3:54:aa:3e:50:4d:ed:db:29:ed:b0:
66:6b:0a:55:d5:78:80:f4:06:34:8e:dc:1e:83:5c:
8d:29:6b:97:5f:83:51:13:f6:20:28:7d:29:12:fc:
14:1d:e0:ec:d8:e5:79:3c:4a:76:7c:a8:1c:7f:bf:
eb:1e:6c:ef:a7:7a:9e:01:87:d7:e2:94:35:34:0c:
8e:59:c9:af:58:0e:3b:d0:b5:ad:8b:24:44:2f:00:
3a:a6:10:bb:be:cd:c4:b3:e1:fb:c5:bb:a4:f0:60:
70:b4:10:e0:2a:76:4f:ae:42:06:72:ff:a9:d1:3f:
44:2f:bd:f8:c7:74:a2:05:c7:56:bc:9f:c1:05:17:
bd:e3:a4:24:cb:83:61:84:a7:9a:2e:18:c4:74:0f:
a4:98:bb:54:a7:a4:b3:a9:8f:39:02:72:91:7f:0d:
e2:f7:c2:04:4e:6d:5d:6d:8c:c3:dc:db:d5:c3:ca:
7e:ac:9b:5a:0d:bf:8b:83:f9:67:b8:84:ce:eb:84:
86:d2:e5:b0:a0:7d:e0:55:e2:d6:92:29:57:86:f2:
79:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:36:E3:E9:11:EF:67:E3:FD:78:C3:80:5C:19:42:4F:55:C1:7B:44
X509v3 Authority Key Identifier:
keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d7:87:65:a0:7e:d7:2d:24:9c:e7:90:58:85:77:ee:b3:56:
02:e5:50:30:fd:6f:0a:04:09:ef:4f:22:8e:81:47:10:11:5a:
b2:52:a9:d4:f5:63:64:c8:41:fe:74:ca:68:12:13:90:0d:40:
d4:2c:71:6c:8c:10:14:c9:92:73:5f:0d:04:42:8d:2a:ad:18:
cb:b1:03:2e:67:40:b2:91:31:0e:f4:f1:63:30:dd:84:87:fc:
1e:e6:5f:e3:f3:fd:16:03:c2:96:2f:33:83:cf:65:ee:91:f2:
5d:d2:96:23:5a:68:25:d7:5a:d2:18:6e:07:b4:fa:07:e3:4e:
4d:0c:05:60:f3:2e:c2:80:25:6e:48:a5:32:74:9a:b8:63:7a:
a6:bc:e3:2e:1a:ba:89:fb:f9:25:0f:c0:17:cd:b6:68:c0:3f:
ee:71:49:dc:36:4c:65:c6:1a:74:a7:db:e0:8a:85:79:a6:37:
8e:61:9a:ad:e6:93:42:6f:4d:f1:a9:6b:bd:68:5e:df:a2:3b:
85:fa:7e:7c:8f:61:dc:29:95:35:c5:a5:11:33:09:f1:f4:26:
29:ff:2e:7b:fe:56:7a:7b:35:33:26:39:b1:bd:d6:9b:7d:16:
0b:81:e5:c2:3a:ed:a4:8a:2d:86:7d:0a:f1:5f:68:84:0f:cd:
37:3b:9c:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTRFq8M9oHAGoPZYR/CXJ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOTRhMWQ4ODFkZDRiZWIyZmQzMWI3NmZhMGQ1ZDU4NWE5
YjIzOGYwHhcNMjUwNzI4MjMwMDQ1WhcNMjUwNzI5MjMwMDQ1WjAzMTEwLwYDVQQD
EygwYTM2ZTNlOTExZWY2N2UzZmQ3OGMzODA1YzE5NDI0ZjU1YzE3YjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWtGW3w3OZGdF07/pqdIeDDawkEj
1DCpqzNNPzD1eEU06vWCVy3Q0wlSHXgkPchx81SqPlBN7dsp7bBmawpV1XiA9AY0
jtweg1yNKWuXX4NRE/YgKH0pEvwUHeDs2OV5PEp2fKgcf7/rHmzvp3qeAYfX4pQ1
NAyOWcmvWA470LWtiyRELwA6phC7vs3Es+H7xbuk8GBwtBDgKnZPrkIGcv+p0T9E
L734x3SiBcdWvJ/BBRe946Qky4NhhKeaLhjEdA+kmLtUp6SzqY85AnKRfw3i98IE
Tm1dbYzD3NvVw8p+rJtaDb+Lg/lnuITO64SG0uWwoH3gVeLWkilXhvJ5aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAo24+kR72fj/XjDgFwZQk9VwXtEMB8GA1UdIwQY
MBaAFDuUodiB3UvrL9MbdvoNXVhamyOPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTkt
MTYxODc3NmJkYWFlLzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTktMTYxODc3NmJkYWFl
LzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGdeHZaB+
1y0knOeQWIV37rNWAuVQMP1vCgQJ708ijoFHEBFaslKp1PVjZMhB/nTKaBITkA1A
1CxxbIwQFMmSc18NBEKNKq0Yy7EDLmdAspExDvTxYzDdhIf8HuZf4/P9FgPCli8z
g89l7pHyXdKWI1poJdda0hhuB7T6B+NOTQwFYPMuwoAlbkilMnSauGN6przjLhq6
ifv5JQ/AF822aMA/7nFJ3DZMZcYadKfb4IqFeaY3jmGareaTQm9N8alrvWhe36I7
hfp+fI9h3CmVNcWlETMJ8fQmKf8ue/5Wens1MyY5sb3Wm30WC4HlwjrtpIothn0K
8V9ohA/NNzuc0g==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:40:36 2025 by rpki-client