Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
File: oaLRWp2N_ezej-awwYBNCp7i5ig.mft (raw, json)
Hash identifier: J0JcUtJckro1FJWgtDXaibu28qX7esYTv2YrPnewJg4=
Subject key identifier: 71:AA:07:45:4A:26:36:3A:B5:0D:17:7D:36:49:E7:43:93:3E:63:71
Authority key identifier: A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
Certificate issuer: /CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Certificate serial: 01992330EF6ECB1D80177DB0904C43A00FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
Manifest number: 110C
Signing time: Sun 07 Sep 2025 08:00:33 +0000
Manifest this update: Sun 07 Sep 2025 08:00:33 +0000
Manifest next update: Mon 08 Sep 2025 08:00:33 +0000
Files and hashes: 1: g8PGSyPYHcwtTKtN52pgkwL2VLw.roa (hash: d/0R1T8TL/elS7S9V2dPYN7wq40xN73ObdYQKEckxT4=)
2: oaLRWp2N_ezej-awwYBNCp7i5ig.crl (hash: bzhlkNSK/ZzVkV3wQkM09Nhv4guYi20dzjW3UQvcaZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:ef:6e:cb:1d:80:17:7d:b0:90:4c:43:a0:0f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Validity
Not Before: Sep 7 08:00:33 2025 GMT
Not After : Sep 8 08:00:33 2025 GMT
Subject: CN=71aa07454a26363ab50d177d3649e743933e6371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ef:4a:8d:40:c6:03:e4:c7:69:11:97:f0:74:
ab:8f:6b:a2:23:df:f8:d6:31:26:f7:ff:2e:d9:2b:
c6:4e:5d:8e:ef:11:8a:4b:e8:93:72:ad:e2:47:8b:
9a:f2:49:8a:c4:ed:96:fd:8c:ce:a1:f7:e2:e8:8e:
32:52:14:6b:5c:5c:f4:85:02:94:25:ff:e2:75:03:
13:35:9c:4d:8b:b6:0d:86:59:ce:15:a8:67:21:73:
f6:db:08:1e:f2:97:38:a2:30:74:91:e4:84:3a:ca:
b5:62:e6:a1:01:e2:d6:ab:21:fa:2f:75:1e:5b:d8:
59:b1:4f:96:48:52:2f:5d:6d:16:ae:7f:f2:9d:79:
99:2e:2f:5a:a9:e3:6b:82:e5:a8:77:49:4b:b2:8f:
89:d8:cb:ad:83:7d:45:85:d1:13:3e:6b:0f:20:08:
8b:a8:9e:c6:da:b4:94:68:2a:21:78:1b:3a:a9:4b:
5f:ea:75:ba:94:44:c6:39:8b:91:72:c4:41:85:83:
63:2f:4c:1f:09:71:87:03:15:21:1e:0b:cc:7f:c3:
36:7c:6e:2a:0c:84:be:12:64:3f:63:bd:ff:10:f2:
1c:57:a8:06:fd:4e:95:af:5a:ef:20:d5:d2:83:04:
b2:65:cb:0c:eb:29:50:1a:8c:d0:24:43:e2:b9:46:
d0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AA:07:45:4A:26:36:3A:B5:0D:17:7D:36:49:E7:43:93:3E:63:71
X509v3 Authority Key Identifier:
keyid:A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ab:cc:2e:b7:ae:ce:02:23:ed:90:54:55:1a:a3:c3:c0:cb:
7c:fa:93:a1:8c:73:43:b5:66:b3:a8:59:2d:1b:a9:c6:16:71:
36:10:da:45:64:33:e5:7a:7d:e8:f7:82:9e:89:3e:21:da:69:
c3:c3:88:fd:d6:c0:c6:30:a7:36:02:cb:3a:a9:17:5d:1d:9b:
42:9c:70:b2:c3:71:50:b7:d1:32:39:bc:dc:e4:25:fb:4b:c3:
ee:26:f9:05:e3:e3:f5:15:14:55:ba:5d:4d:a4:fc:8d:70:30:
16:1c:71:59:ee:ea:6a:3e:05:4e:fa:86:d4:3e:48:da:47:83:
7f:0f:2a:7d:74:64:89:bc:51:d8:b0:e8:28:a9:af:54:27:fb:
29:f6:30:8c:b7:d2:55:43:f7:e3:4e:1b:d5:08:9d:43:42:f8:
11:c7:71:10:0c:7d:0b:ec:0b:14:8d:09:33:4e:45:4e:2f:01:
da:2b:38:4b:1a:c4:31:61:c3:88:05:b5:cb:5d:8a:fd:2b:4d:
d7:76:e6:70:26:0f:42:00:1f:ab:d3:90:69:27:0c:11:ed:83:
f2:74:45:a9:d3:8e:35:03:49:5f:42:1c:01:d7:13:b1:bd:c9:
6b:10:88:d9:de:9b:9c:3e:d0:b2:67:9f:59:8e:be:b3:66:1f:
27:1d:85:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMO9uyx2AF32wkExDoA/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYTJkMTVhOWQ4ZGZkZWNkZThmZTZiMGMxODA0ZDBhOWVl
MmU2MjgwHhcNMjUwOTA3MDgwMDMzWhcNMjUwOTA4MDgwMDMzWjAzMTEwLwYDVQQD
Eyg3MWFhMDc0NTRhMjYzNjNhYjUwZDE3N2QzNjQ5ZTc0MzkzM2U2MzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO9KjUDGA+THaRGX8HSrj2uiI9/4
1jEm9/8u2SvGTl2O7xGKS+iTcq3iR4ua8kmKxO2W/YzOoffi6I4yUhRrXFz0hQKU
Jf/idQMTNZxNi7YNhlnOFahnIXP22wge8pc4ojB0keSEOsq1YuahAeLWqyH6L3Ue
W9hZsU+WSFIvXW0Wrn/ynXmZLi9aqeNrguWod0lLso+J2Mutg31FhdETPmsPIAiL
qJ7G2rSUaCoheBs6qUtf6nW6lETGOYuRcsRBhYNjL0wfCXGHAxUhHgvMf8M2fG4q
DIS+EmQ/Y73/EPIcV6gG/U6Vr1rvINXSgwSyZcsM6ylQGozQJEPiuUbQnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGqB0VKJjY6tQ0XfTZJ50OTPmNxMB8GA1UdIwQY
MBaAFKGi0Vqdjf3s3o/msMGATQqe4uYoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2FMUldwMk5fZXplai1hd3dZQk5DcDdpNWlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9iNjQwYTYtN2VjZC00MjBiLTg2ZWQt
ODZkMTk0YWU4YTcxLzEvb2FMUldwMk5fZXplai1hd3dZQk5DcDdpNWlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9iNjQwYTYtN2VjZC00MjBiLTg2ZWQtODZkMTk0YWU4YTcx
LzEvb2FMUldwMk5fZXplai1hd3dZQk5DcDdpNWlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKvMLreu
zgIj7ZBUVRqjw8DLfPqToYxzQ7Vms6hZLRupxhZxNhDaRWQz5Xp96PeCnok+Idpp
w8OI/dbAxjCnNgLLOqkXXR2bQpxwssNxULfRMjm83OQl+0vD7ib5BePj9RUUVbpd
TaT8jXAwFhxxWe7qaj4FTvqG1D5I2keDfw8qfXRkibxR2LDoKKmvVCf7KfYwjLfS
VUP3404b1QidQ0L4EcdxEAx9C+wLFI0JM05FTi8B2is4SxrEMWHDiAW1y12K/StN
13bmcCYPQgAfq9OQaScMEe2D8nRFqdOONQNJX0IcAdcTsb3JaxCI2d6bnD7Qsmef
WY6+s2YfJx2Frg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:52:03 2025 by rpki-client