Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
File: sOJbzFUwtvRvPRHLgRPyGaRt_as.mft (raw, json)
Hash identifier: rK6jW4kAQqDf40gCr0pYUKAm4uMSP2pgd7c7WR1axno=
Subject key identifier: 27:53:80:D5:82:AF:7D:1F:4C:55:18:BE:3B:CB:5C:93:9F:FC:64:FF
Authority key identifier: B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
Certificate issuer: /CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Certificate serial: 019A299E7CAAAB8136A3817C511872E9A3C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
Manifest number: 0EC4
Signing time: Tue 28 Oct 2025 07:00:43 +0000
Manifest this update: Tue 28 Oct 2025 07:00:43 +0000
Manifest next update: Wed 29 Oct 2025 07:00:43 +0000
Files and hashes: 1: 0lerfjDbBomfVzh-fPpNdTuZC_w.roa (hash: K04vSVynMPGD818PT8TEi3joicn16R1AClxmk8kzM/M=)
2: sOJbzFUwtvRvPRHLgRPyGaRt_as.crl (hash: 4rLSxkOvcK2ub2DwjYXmLdxcXijZ3CPuOQl5MfFWnsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:7c:aa:ab:81:36:a3:81:7c:51:18:72:e9:a3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Validity
Not Before: Oct 28 07:00:43 2025 GMT
Not After : Oct 29 07:00:43 2025 GMT
Subject: CN=275380d582af7d1f4c5518be3bcb5c939ffc64ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ff:98:c0:d6:2f:2e:6a:f0:66:f9:71:85:de:
53:cb:46:87:88:f2:33:48:54:e1:09:72:9c:84:fb:
c3:9b:f0:ec:6e:a2:57:b9:1b:74:d3:0d:e5:c8:30:
93:f9:7e:8b:7f:8b:22:57:1f:12:ce:8b:d8:15:f6:
d1:9d:ed:69:38:1a:7a:74:fe:52:65:19:f1:a8:45:
4f:5a:19:01:26:33:59:39:a3:57:62:7d:ca:48:0e:
f0:61:0e:7b:45:0c:6b:e2:54:8a:9d:74:7f:88:e7:
ad:b2:6b:34:53:a2:b8:d6:96:db:59:fe:c5:ac:27:
db:41:21:15:0a:77:ac:35:4e:9d:46:1b:d5:af:b3:
8b:1f:49:49:49:4f:9a:74:92:2c:9b:f0:d2:5b:56:
53:13:d0:d2:f9:99:07:95:d0:00:a0:55:86:71:ac:
ee:90:d1:7a:c8:b0:b5:8d:91:00:46:02:05:38:ef:
7f:04:d9:a4:b9:fc:c2:23:89:ba:22:bd:da:4b:1a:
d5:ec:53:14:c0:e7:98:27:98:5a:66:30:21:96:8b:
48:95:a1:01:03:da:47:44:3c:21:6a:07:9c:39:3b:
83:bb:eb:2d:50:6a:d5:0d:f3:d4:e5:90:b5:87:94:
8b:cd:6b:1a:a6:0b:30:bf:94:9c:cc:05:b2:68:cf:
d1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:53:80:D5:82:AF:7D:1F:4C:55:18:BE:3B:CB:5C:93:9F:FC:64:FF
X509v3 Authority Key Identifier:
keyid:B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6e:d9:9f:f0:b7:8e:72:13:04:76:9c:75:a4:dd:3e:7c:8a:
8f:03:c6:1c:d2:98:8d:4f:4a:32:13:de:36:98:9b:de:16:8b:
d5:1b:e9:3d:1a:6e:66:16:5d:c7:e1:00:4e:6a:0c:4d:39:fb:
49:1d:78:bf:03:59:ba:e3:76:c8:d9:8b:be:5b:ec:d6:b1:32:
9d:04:07:45:04:5f:46:27:00:68:11:d8:27:a2:df:94:ea:9f:
aa:21:eb:6a:98:a5:56:c7:b7:37:58:87:45:20:43:25:e4:29:
c9:fe:07:0d:0e:08:79:2e:a0:35:4d:23:f6:4f:68:29:dd:a8:
cf:85:75:cc:7e:fc:41:f5:48:13:22:42:b7:b0:6f:18:23:e3:
ed:05:ee:e0:3f:74:01:78:d7:40:0b:79:4c:01:13:a5:11:bf:
ac:8b:49:e9:9a:5a:e2:68:e5:1e:ae:56:f0:4d:8f:0d:9e:68:
9e:46:bf:ba:a4:2d:e6:12:49:53:3f:31:fb:f1:01:90:1c:6c:
64:92:a8:ab:ff:be:97:fc:3a:17:0c:b5:1e:44:d6:92:07:dd:
92:81:0d:1e:87:e2:a3:af:e6:54:ee:87:0e:bf:87:d9:a0:e6:
d1:27:0a:0b:2e:76:96:e7:78:2e:f9:d9:a1:93:2e:85:8d:6b:
8a:50:81:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopnnyqq4E2o4F8URhy6aPGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZTI1YmNjNTUzMGI2ZjQ2ZjNkMTFjYjgxMTNmMjE5YTQ2
ZGZkYWIwHhcNMjUxMDI4MDcwMDQzWhcNMjUxMDI5MDcwMDQzWjAzMTEwLwYDVQQD
EygyNzUzODBkNTgyYWY3ZDFmNGM1NTE4YmUzYmNiNWM5MzlmZmM2NGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf+YwNYvLmrwZvlxhd5Ty0aHiPIz
SFThCXKchPvDm/DsbqJXuRt00w3lyDCT+X6Lf4siVx8SzovYFfbRne1pOBp6dP5S
ZRnxqEVPWhkBJjNZOaNXYn3KSA7wYQ57RQxr4lSKnXR/iOetsms0U6K41pbbWf7F
rCfbQSEVCnesNU6dRhvVr7OLH0lJSU+adJIsm/DSW1ZTE9DS+ZkHldAAoFWGcazu
kNF6yLC1jZEARgIFOO9/BNmkufzCI4m6Ir3aSxrV7FMUwOeYJ5haZjAhlotIlaEB
A9pHRDwhagecOTuDu+stUGrVDfPU5ZC1h5SLzWsapgswv5SczAWyaM/RbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdTgNWCr30fTFUYvjvLXJOf/GT/MB8GA1UdIwQY
MBaAFLDiW8xVMLb0bz0Ry4ET8hmkbf2rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc09KYnpGVXd0dlJ2UFJITGdSUHlHYVJ0X2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zODMwYzgtODAyZi00ODQ2LWI2ZTUt
MWFhZGFiYTgwMDcyLzEvc09KYnpGVXd0dlJ2UFJITGdSUHlHYVJ0X2FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8zODMwYzgtODAyZi00ODQ2LWI2ZTUtMWFhZGFiYTgwMDcy
LzEvc09KYnpGVXd0dlJ2UFJITGdSUHlHYVJ0X2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS27Zn/C3
jnITBHacdaTdPnyKjwPGHNKYjU9KMhPeNpib3haL1RvpPRpuZhZdx+EATmoMTTn7
SR14vwNZuuN2yNmLvlvs1rEynQQHRQRfRicAaBHYJ6LflOqfqiHrapilVse3N1iH
RSBDJeQpyf4HDQ4IeS6gNU0j9k9oKd2oz4V1zH78QfVIEyJCt7BvGCPj7QXu4D90
AXjXQAt5TAETpRG/rItJ6Zpa4mjlHq5W8E2PDZ5onka/uqQt5hJJUz8x+/EBkBxs
ZJKoq/++l/w6Fwy1HkTWkgfdkoENHofio6/mVO6HDr+H2aDm0ScKCy52lud4LvnZ
oZMuhY1rilCBlw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 11:10:58 2025 by rpki-client