Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json)
Hash identifier: hX1zpFvFYN7u7Isv1kIC1xWBwjlZWDGPyiC0tuI0G3E=
Subject key identifier: 46:E2:8C:95:B1:CD:E7:CB:4A:6F:DD:1D:CE:A2:CA:6E:30:2F:91:01
Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Certificate serial: 01983E3C8021295C6C7428D9F2F1F61427F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
Manifest number: 0C79
Signing time: Thu 24 Jul 2025 21:00:08 +0000
Manifest this update: Thu 24 Jul 2025 21:00:08 +0000
Manifest next update: Fri 25 Jul 2025 21:00:08 +0000
Files and hashes: 1: Mbpk8QVkIW5FKgYutE5nhEuorhg.roa (hash: XJAfJvP6njUJvUjL+QeRVdBXhasJwe6UWIW0OOiZ2es=)
2: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: xZ7/K1qjC6zDHy2dMggQeighkKUnCoc42o3PY+89xjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 21:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:3c:80:21:29:5c:6c:74:28:d9:f2:f1:f6:14:27:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Validity
Not Before: Jul 24 21:00:08 2025 GMT
Not After : Jul 25 21:00:08 2025 GMT
Subject: CN=46e28c95b1cde7cb4a6fdd1dcea2ca6e302f9101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e5:f2:b0:8c:2a:96:97:2e:e8:dc:75:e1:5c:
00:ef:05:6e:a3:cc:f4:c0:b7:bb:c0:2f:29:01:5a:
b7:a9:79:03:98:0f:f0:d7:dd:c6:f4:43:e5:e2:eb:
1f:c2:6e:be:86:e1:8e:f1:51:99:0a:64:60:03:3f:
7d:d1:7d:fc:77:4c:d5:a3:7e:65:9b:0e:9d:b3:5a:
be:86:4f:a3:8d:ae:45:7a:3b:90:5c:bf:bf:39:91:
b5:9d:87:68:b4:5d:5e:90:7c:86:bc:1c:f5:3f:61:
74:07:fa:2d:19:bd:b8:58:36:12:7f:78:39:78:5c:
60:9e:5c:80:a3:1c:cf:fa:ca:23:7e:cb:44:98:a1:
f3:15:72:b2:e9:26:1f:90:c9:da:7a:27:27:3f:93:
86:5a:40:7f:b5:3c:55:5e:60:19:46:81:93:e0:ac:
bc:79:d2:39:61:86:1e:bf:81:42:b6:be:7a:41:c6:
b3:26:93:5c:4a:16:af:e3:c1:c7:6f:9d:5c:12:d3:
56:da:e1:b5:96:2c:fc:f8:45:76:eb:9c:ed:da:06:
64:32:4e:44:7e:bd:75:25:a2:3d:e9:ca:57:4b:f6:
be:7d:b9:c6:0e:cd:65:2e:9a:ad:3a:fb:20:a6:05:
52:a7:3e:0e:6a:ed:85:d3:f9:e3:9d:c3:51:37:df:
ad:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E2:8C:95:B1:CD:E7:CB:4A:6F:DD:1D:CE:A2:CA:6E:30:2F:91:01
X509v3 Authority Key Identifier:
keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7c:25:48:20:fa:29:6d:85:4e:23:dc:82:78:4b:d9:13:5b:
d9:e6:e0:5b:58:8f:54:f8:9f:dd:5f:4d:bf:cf:69:49:0a:34:
b7:42:44:ac:54:48:0a:44:67:96:42:2d:50:d9:d8:65:0e:b5:
fe:7c:76:47:6c:15:08:af:03:fe:ae:8c:09:96:46:84:90:7b:
5a:09:53:a2:cd:d0:ca:8d:f0:0f:42:2a:d9:bd:af:5e:43:ab:
31:61:77:aa:37:39:b9:5a:98:49:9b:d1:83:10:81:29:33:df:
77:07:c3:49:22:65:5c:63:a2:bc:6d:05:eb:4f:c7:ec:dd:09:
05:51:f8:37:7f:56:80:89:b8:7b:7e:1e:f1:b5:6a:0e:18:59:
46:c5:fe:a5:4c:d3:4c:b4:da:7a:d3:11:46:d2:aa:04:de:91:
2e:81:e9:8a:51:ae:2e:28:08:95:2e:37:5f:98:46:9f:12:52:
dc:1c:a3:5a:8e:fe:1c:2e:cb:85:93:2a:bf:05:c5:a6:ec:2d:
55:b9:25:0e:49:57:81:e9:bb:b3:4b:b1:b7:a6:a3:09:4b:43:
82:8b:9e:52:4f:88:d3:6e:88:d7:63:d7:f8:5f:19:69:84:d9:
f4:7e:9d:26:28:2d:4a:11:b0:46:5e:eb:62:0a:07:7c:cc:3a:
d6:e5:8a:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg+PIAhKVxsdCjZ8vH2FCf3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ODM3ZTQ4YWFmNTk4YmNhYjU0YTVmYzhhZTQzYjE3YmUy
NTQyMjkwHhcNMjUwNzI0MjEwMDA4WhcNMjUwNzI1MjEwMDA4WjAzMTEwLwYDVQQD
Eyg0NmUyOGM5NWIxY2RlN2NiNGE2ZmRkMWRjZWEyY2E2ZTMwMmY5MTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuXysIwqlpcu6Nx14VwA7wVuo8z0
wLe7wC8pAVq3qXkDmA/w193G9EPl4usfwm6+huGO8VGZCmRgAz990X38d0zVo35l
mw6ds1q+hk+jja5FejuQXL+/OZG1nYdotF1ekHyGvBz1P2F0B/otGb24WDYSf3g5
eFxgnlyAoxzP+sojfstEmKHzFXKy6SYfkMnaeicnP5OGWkB/tTxVXmAZRoGT4Ky8
edI5YYYev4FCtr56QcazJpNcShav48HHb51cEtNW2uG1liz8+EV265zt2gZkMk5E
fr11JaI96cpXS/a+fbnGDs1lLpqtOvsgpgVSpz4Oau2F0/njncNRN9+tTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbijJWxzefLSm/dHc6iym4wL5EBMB8GA1UdIwQY
MBaAFDiDfkiq9Zi8q1Sl/IrkOxe+JUIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kZmZiYzgtYjE0OS00NmI0LWJiYjgt
MzFlYTIwOTRiNTU3LzEvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9kZmZiYzgtYjE0OS00NmI0LWJiYjgtMzFlYTIwOTRiNTU3
LzEvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnwlSCD6
KW2FTiPcgnhL2RNb2ebgW1iPVPif3V9Nv89pSQo0t0JErFRICkRnlkItUNnYZQ61
/nx2R2wVCK8D/q6MCZZGhJB7WglTos3Qyo3wD0Iq2b2vXkOrMWF3qjc5uVqYSZvR
gxCBKTPfdwfDSSJlXGOivG0F60/H7N0JBVH4N39WgIm4e34e8bVqDhhZRsX+pUzT
TLTaetMRRtKqBN6RLoHpilGuLigIlS43X5hGnxJS3ByjWo7+HC7LhZMqvwXFpuwt
VbklDklXgem7s0uxt6ajCUtDgoueUk+I026I12PX+F8ZaYTZ9H6dJigtShGwRl7r
YgoHfMw61uWK7w==
-----END CERTIFICATE-----
Generated at Fri Jul 25 01:34:57 2025 by rpki-client