Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
File: oE3odQHH0wgsdmWfTevZQohDtMs.mft (raw, json)
Hash identifier: wSeAWGxdIpNvlxoQqimIIpmirBZ6uh66Tl6vznvDRPg=
Subject key identifier: 42:95:D5:F3:2C:93:11:52:3E:DD:3A:2D:E8:E4:34:46:CF:52:35:FE
Authority key identifier: A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
Certificate issuer: /CN=a04de87501c7d3082c76659f4debd9428843b4cb
Certificate serial: 01996246EFC25CB2971046F73520BAB81581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
Manifest number: 1275
Signing time: Fri 19 Sep 2025 14:00:40 +0000
Manifest this update: Fri 19 Sep 2025 14:00:40 +0000
Manifest next update: Sat 20 Sep 2025 14:00:40 +0000
Files and hashes: 1: 3oKx6h0eBr3yZ2nfockvN65K1_o.roa (hash: geWao+6sgTP3cLFpfRuFIKY1lyLCLqYJA9Pcg4p46Gs=)
2: oE3odQHH0wgsdmWfTevZQohDtMs.crl (hash: 2z+yGjtXqZUsZHlyloJsm9ery6BL3J+U8f1tM70JNN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:46:ef:c2:5c:b2:97:10:46:f7:35:20:ba:b8:15:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04de87501c7d3082c76659f4debd9428843b4cb
Validity
Not Before: Sep 19 14:00:40 2025 GMT
Not After : Sep 20 14:00:40 2025 GMT
Subject: CN=4295d5f32c9311523edd3a2de8e43446cf5235fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a6:1a:ec:65:a6:0f:a9:1e:87:e2:ac:d5:b2:
7a:48:ff:84:1a:b8:2e:8b:2c:a3:d8:e3:d5:6a:a9:
d8:1f:0b:87:34:39:0b:ac:f0:82:19:7a:08:0a:06:
2f:9d:a1:94:2c:4e:9c:34:1b:f0:fd:c8:31:53:54:
9b:3e:b4:0f:0e:ae:f4:6e:f8:b3:0f:fd:ec:01:87:
52:6d:4b:66:4d:aa:0f:f8:04:08:8c:5f:12:73:03:
08:4d:95:7b:c4:16:cc:3c:cc:98:fd:76:44:39:aa:
33:e9:5b:0c:c0:8d:c4:83:11:81:50:30:8d:29:e1:
53:96:35:a8:52:3b:fa:d4:3a:79:b6:74:23:5e:5f:
75:25:24:fe:be:a8:68:6e:02:e9:83:17:19:93:70:
59:e5:27:fa:65:36:c3:00:4a:26:77:67:f3:d5:d3:
69:a3:71:26:4b:8c:f6:7b:97:af:28:30:db:6b:94:
24:08:78:e2:db:14:10:f5:24:77:63:81:dc:28:18:
16:18:97:ed:1a:c8:b8:49:db:9c:8a:f3:3e:4a:c9:
be:28:b8:21:f2:28:3c:20:e5:a0:5b:88:ce:b6:44:
37:a6:fb:4f:93:3c:76:92:b7:b8:29:76:c5:3c:14:
39:0e:d7:64:1f:a8:6b:85:fe:da:8b:54:7a:6c:0d:
92:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:95:D5:F3:2C:93:11:52:3E:DD:3A:2D:E8:E4:34:46:CF:52:35:FE
X509v3 Authority Key Identifier:
keyid:A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e3:3c:7c:63:5f:80:ad:0f:6e:fe:da:4c:34:ea:72:bf:4a:
d0:b7:64:88:c0:cd:0b:ef:20:9a:0a:88:9e:b2:22:fc:f7:1a:
87:a1:65:ce:50:91:35:1e:8c:de:53:9c:4e:1e:35:1d:9a:47:
54:09:c7:8f:e1:a1:a2:6d:95:14:28:cf:92:6d:55:7b:25:19:
8a:42:25:df:2e:63:56:ef:56:9f:eb:92:68:b4:90:45:42:2f:
63:96:67:a0:32:23:80:3c:1a:8e:cd:41:ab:0d:e5:00:23:26:
e9:af:fe:e3:c9:18:cd:e0:48:0e:c9:5b:5e:26:25:3d:b3:96:
b1:f8:e0:54:64:b1:19:30:01:e3:2e:77:65:f2:ca:96:61:96:
bd:fd:c2:a7:7e:2d:07:96:91:1e:78:57:16:78:eb:d3:21:73:
5a:09:a2:9a:d6:b6:f6:8c:4e:24:ef:cb:2a:e8:b4:5c:11:92:
61:e0:fa:7b:e0:9a:71:99:05:14:0d:26:ef:40:80:9a:78:0d:
bf:d6:10:eb:f2:49:72:9d:f2:ea:95:b2:32:4c:53:45:4e:de:
8f:b4:65:cb:a9:d9:85:ed:5d:9b:fe:42:1d:72:2d:06:f8:6f:
3a:28:40:db:23:b1:99:f6:bc:89:10:e2:43:46:a3:e1:40:2c:
33:43:ec:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZliRu/CXLKXEEb3NSC6uBWBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNGRlODc1MDFjN2QzMDgyYzc2NjU5ZjRkZWJkOTQyODg0
M2I0Y2IwHhcNMjUwOTE5MTQwMDQwWhcNMjUwOTIwMTQwMDQwWjAzMTEwLwYDVQQD
Eyg0Mjk1ZDVmMzJjOTMxMTUyM2VkZDNhMmRlOGU0MzQ0NmNmNTIzNWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56Ya7GWmD6keh+Ks1bJ6SP+EGrgu
iyyj2OPVaqnYHwuHNDkLrPCCGXoICgYvnaGULE6cNBvw/cgxU1SbPrQPDq70bviz
D/3sAYdSbUtmTaoP+AQIjF8ScwMITZV7xBbMPMyY/XZEOaoz6VsMwI3EgxGBUDCN
KeFTljWoUjv61Dp5tnQjXl91JST+vqhobgLpgxcZk3BZ5Sf6ZTbDAEomd2fz1dNp
o3EmS4z2e5evKDDba5QkCHji2xQQ9SR3Y4HcKBgWGJftGsi4SducivM+Ssm+KLgh
8ig8IOWgW4jOtkQ3pvtPkzx2kre4KXbFPBQ5DtdkH6hrhf7ai1R6bA2S9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKV1fMskxFSPt06LejkNEbPUjX+MB8GA1UdIwQY
MBaAFKBN6HUBx9MILHZln03r2UKIQ7TLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NjVjOTAtNzBmYi00MDE1LWI5Njkt
NzQ4Zjc4NzgzODhhLzEvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NjVjOTAtNzBmYi00MDE1LWI5NjktNzQ4Zjc4NzgzODhh
LzEvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+M8fGNf
gK0Pbv7aTDTqcr9K0LdkiMDNC+8gmgqInrIi/Pcah6FlzlCRNR6M3lOcTh41HZpH
VAnHj+Ghom2VFCjPkm1VeyUZikIl3y5jVu9Wn+uSaLSQRUIvY5ZnoDIjgDwajs1B
qw3lACMm6a/+48kYzeBIDslbXiYlPbOWsfjgVGSxGTAB4y53ZfLKlmGWvf3Cp34t
B5aRHnhXFnjr0yFzWgmimta29oxOJO/LKui0XBGSYeD6e+CacZkFFA0m70CAmngN
v9YQ6/JJcp3y6pWyMkxTRU7ej7Rly6nZhe1dm/5CHXItBvhvOihA2yOxmfa8iRDi
Q0aj4UAsM0Psbw==
-----END CERTIFICATE-----
Generated at Fri Sep 19 16:11:38 2025 by rpki-client