Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
File: oOOBtudsuVIOjY9Wd27KD-F2zEA.mft (raw, json)
Hash identifier: T9eLJ/uAoXPgiy6XiabeA/cgCwEg0iWQlg+jUxmFQSE=
Subject key identifier: EA:E5:33:28:81:9F:0C:E3:9F:9C:3E:E3:9E:04:5C:AC:44:47:9A:C6
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Certificate issuer: /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial: 01992DEC6E135AB783F0B31C864F966CE513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
Manifest number: 1685
Signing time: Tue 09 Sep 2025 10:01:33 +0000
Manifest this update: Tue 09 Sep 2025 10:01:33 +0000
Manifest next update: Wed 10 Sep 2025 10:01:33 +0000
Files and hashes: 1: 95FzUOf19GAUgH-NNap3guhoYwc.roa (hash: xIP1fB6Qn9UTZZo8HocsS+GRzZb3S08GTszP5U7/+78=)
2: EFk1lNXwEBcRAFhoClA443_i5HA.roa (hash: xLW6nYf20kTwvvd9EPpkcVtHN4fslrZstANOcysv2Fs=)
3: MuDm6qOBJ8xkrh2L926I8rpU5do.roa (hash: LGlkBx/kOBt10H9SsN38yJ3HGznA6mZgmUvmJ/8iHgA=)
4: oOOBtudsuVIOjY9Wd27KD-F2zEA.crl (hash: h1cs5YG5N5+VqAtn+5+iYK99kI/KMjVjIOILBrTogpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:ec:6e:13:5a:b7:83:f0:b3:1c:86:4f:96:6c:e5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Validity
Not Before: Sep 9 10:01:33 2025 GMT
Not After : Sep 10 10:01:33 2025 GMT
Subject: CN=eae53328819f0ce39f9c3ee39e045cac44479ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4d:a8:a3:47:a4:b4:cf:da:11:06:f2:9e:4f:
f4:07:40:00:fb:ce:54:79:85:21:42:81:bc:f3:69:
3e:9e:90:0f:9a:6d:5d:83:50:5a:c0:3f:5b:b6:c3:
7d:c5:82:3f:36:ed:3e:65:a2:ee:85:a7:4b:86:90:
51:bd:f0:2f:32:0c:f1:b5:02:e0:37:96:3e:0a:b2:
11:8f:30:51:db:32:14:9e:b0:60:4a:be:7f:11:71:
c8:7d:78:8c:63:b3:dc:4b:7e:78:b0:90:11:4c:a1:
ab:06:9f:53:6a:01:1f:cd:07:63:f5:43:62:71:b3:
9d:26:14:fd:95:bf:75:0a:50:c8:0a:3e:d6:69:85:
9c:1b:e7:9f:11:f3:d0:fe:9a:4c:12:2e:e6:32:ee:
a3:69:58:b7:13:46:86:56:11:16:32:45:7a:52:1e:
6e:9a:c3:bf:2c:fa:8d:1b:80:c9:2b:2f:9b:2b:98:
62:3b:18:8e:d2:ae:a7:12:b7:bb:31:c1:f8:65:fc:
d9:f1:fc:bc:3d:6f:c6:15:78:5a:f3:46:c2:7f:86:
47:43:1c:67:b7:d5:06:cf:c4:c1:bd:d6:64:27:38:
a5:88:06:44:83:ad:9c:ae:54:7e:c0:87:e4:8d:35:
32:5a:78:91:da:ba:a0:b7:ee:ad:b0:c5:89:a6:35:
d9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E5:33:28:81:9F:0C:E3:9F:9C:3E:E3:9E:04:5C:AC:44:47:9A:C6
X509v3 Authority Key Identifier:
keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e7:d5:b4:fd:59:08:fc:ae:94:99:35:87:b8:de:89:37:2c:
89:d4:f9:3d:40:c7:c5:c6:51:ef:04:42:22:41:33:06:42:9a:
db:11:97:dc:36:d8:36:64:f2:35:1f:3c:a5:40:8d:04:1d:f5:
e3:79:dd:b2:d1:8a:42:f6:4d:0f:2d:d1:a6:09:f9:93:ec:ea:
22:0d:64:8a:b7:63:82:cb:52:91:a5:91:3d:e6:c3:e0:e8:dd:
d8:89:1f:95:30:09:b4:ea:30:fc:5b:9e:e8:0a:12:6b:3a:5b:
ea:06:88:1e:4a:0e:53:8a:bf:fc:81:69:7f:0b:51:0a:03:78:
53:7f:1f:05:5b:98:95:53:dd:98:da:98:fe:5c:69:7a:37:2b:
89:3d:dc:2e:9c:df:3e:48:ec:a3:e2:46:95:13:36:4b:63:22:
df:2a:61:be:13:c2:29:d6:5f:9d:83:6a:1b:a4:03:1b:86:a5:
00:1d:ff:cd:56:41:15:4c:8e:59:66:89:6c:bf:76:b2:9c:8c:
3d:4e:54:00:1e:7a:a5:1f:00:4b:ab:f2:23:9e:7f:62:a3:f2:
c7:b9:1f:5e:47:df:13:27:61:9b:0d:87:c7:64:66:ac:5d:da:
2c:ce:08:50:11:10:e5:d5:43:64:39:57:29:6c:78:b1:a5:75:
62:db:b5:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkt7G4TWreD8LMchk+WbOUTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZTM4MWI2ZTc2Y2I5NTIwZThkOGY1Njc3NmVjYTBmZTE3
NmNjNDAwHhcNMjUwOTA5MTAwMTMzWhcNMjUwOTEwMTAwMTMzWjAzMTEwLwYDVQQD
EyhlYWU1MzMyODgxOWYwY2UzOWY5YzNlZTM5ZTA0NWNhYzQ0NDc5YWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA502oo0ektM/aEQbynk/0B0AA+85U
eYUhQoG882k+npAPmm1dg1BawD9btsN9xYI/Nu0+ZaLuhadLhpBRvfAvMgzxtQLg
N5Y+CrIRjzBR2zIUnrBgSr5/EXHIfXiMY7PcS354sJARTKGrBp9TagEfzQdj9UNi
cbOdJhT9lb91ClDICj7WaYWcG+efEfPQ/ppMEi7mMu6jaVi3E0aGVhEWMkV6Uh5u
msO/LPqNG4DJKy+bK5hiOxiO0q6nEre7McH4ZfzZ8fy8PW/GFXha80bCf4ZHQxxn
t9UGz8TBvdZkJziliAZEg62crlR+wIfkjTUyWniR2rqgt+6tsMWJpjXZYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrlMyiBnwzjn5w+454EXKxER5rGMB8GA1UdIwQY
MBaAFKDjgbbnbLlSDo2PVnduyg/hdsxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb09PQnR1ZHN1VklPalk5V2QyN0tELUYyekVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS84ZTZmMDgtMzBmMC00NmRkLWE3YTEt
YTljMzg0MTI4ZDQyLzEvb09PQnR1ZHN1VklPalk5V2QyN0tELUYyekVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS84ZTZmMDgtMzBmMC00NmRkLWE3YTEtYTljMzg0MTI4ZDQy
LzEvb09PQnR1ZHN1VklPalk5V2QyN0tELUYyekVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUufVtP1Z
CPyulJk1h7jeiTcsidT5PUDHxcZR7wRCIkEzBkKa2xGX3DbYNmTyNR88pUCNBB31
43ndstGKQvZNDy3Rpgn5k+zqIg1kirdjgstSkaWRPebD4Ojd2IkflTAJtOow/Fue
6AoSazpb6gaIHkoOU4q//IFpfwtRCgN4U38fBVuYlVPdmNqY/lxpejcriT3cLpzf
Pkjso+JGlRM2S2Mi3yphvhPCKdZfnYNqG6QDG4alAB3/zVZBFUyOWWaJbL92spyM
PU5UAB56pR8AS6vyI55/YqPyx7kfXkffEydhmw2Hx2RmrF3aLM4IUBEQ5dVDZDlX
KWx4saV1Ytu1Tg==
-----END CERTIFICATE-----
Generated at Tue Sep 9 12:21:21 2025 by rpki-client