Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
File: OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft (raw, json)
Hash identifier: PdITS1WplkxfvlrsU1MJXrOKdPoBTrcUTtlJFGJmyc4=
Subject key identifier: 27:27:A4:7C:C7:BE:23:FE:94:F7:72:95:FD:AE:6B:CC:23:D9:D1:39
Authority key identifier: 39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
Certificate issuer: /CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Certificate serial: 0199233119BD4FACE4186B5484D535AAF2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
Manifest number: 0260
Signing time: Sun 07 Sep 2025 08:00:44 +0000
Manifest this update: Sun 07 Sep 2025 08:00:44 +0000
Manifest next update: Mon 08 Sep 2025 08:00:44 +0000
Files and hashes: 1: HAUk0L8nWB16tKZ41rvifWUUlnM.roa (hash: z7P8z3hdUqv0dJQpV8Dg51dK3XAE9P4Hf5LV3YuSIpA=)
2: OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl (hash: Nt7s+yHLMznm6cjxMW7GbHEBqndjkqZ82CwgkI3273E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:19:bd:4f:ac:e4:18:6b:54:84:d5:35:aa:f2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Validity
Not Before: Sep 7 08:00:44 2025 GMT
Not After : Sep 8 08:00:44 2025 GMT
Subject: CN=2727a47cc7be23fe94f77295fdae6bcc23d9d139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:54:b1:4b:68:4f:a4:b7:bc:9e:32:49:ea:a4:
a0:23:8a:fb:98:d3:09:e3:2d:90:f8:4a:bc:aa:88:
0f:99:54:70:93:ae:26:3f:76:a3:5d:8a:09:d1:b6:
f0:aa:6a:dc:22:17:43:d8:bb:76:cd:00:b8:9c:0b:
51:d9:76:9b:58:7e:2a:55:1a:6a:a5:c8:e5:b0:a4:
af:e0:3a:38:57:e6:1c:29:75:d0:34:86:b1:29:b4:
57:34:56:59:93:3e:a0:5a:3e:09:d1:22:8b:aa:05:
b6:fd:f7:5f:ef:e1:a6:26:f6:82:a0:a5:c0:c8:91:
ff:bc:f0:d3:86:21:0b:35:a8:f0:7b:5b:6e:d6:92:
d6:e2:36:1d:6e:e1:ba:26:50:07:40:b3:6b:48:a9:
9b:da:bc:07:0e:c7:43:08:fb:d0:e5:df:07:e1:51:
fb:33:a3:1f:22:21:ad:bd:fd:f3:62:cb:7e:13:b7:
25:dd:89:65:df:c2:64:8a:d1:a5:84:de:30:78:f1:
4b:91:6f:2e:59:a7:b7:b5:48:6a:1a:3b:28:c8:91:
46:73:e8:1e:d4:94:34:19:db:e7:42:a1:ac:81:28:
f6:04:c5:68:de:01:24:2a:b8:37:0b:7e:8b:b7:5e:
ae:a3:90:ed:c2:2f:f5:3a:be:3d:fc:1c:e5:c6:88:
f9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:27:A4:7C:C7:BE:23:FE:94:F7:72:95:FD:AE:6B:CC:23:D9:D1:39
X509v3 Authority Key Identifier:
keyid:39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:24:40:77:4a:63:a7:fa:27:a3:d5:7c:a6:11:89:2f:8f:c6:
62:b8:af:50:af:7f:2e:79:9a:90:68:e7:03:ed:e1:2d:85:9a:
35:87:65:69:77:dd:90:3f:b9:ca:bb:c2:af:96:2f:ca:1f:d6:
44:f6:f5:b9:e4:dc:6c:2f:51:27:38:0c:8b:42:a2:72:ab:22:
15:bb:fb:af:b7:dc:13:94:dc:d8:b6:50:51:03:6a:52:c2:31:
32:05:57:93:a6:95:f8:13:47:c5:0e:78:e5:91:29:97:2c:cc:
e1:81:ff:64:c8:42:29:44:4f:82:6e:b9:3d:4b:a0:77:57:5b:
5a:02:97:0e:fc:45:f5:5d:38:c7:82:cf:4b:62:00:ee:4b:d9:
40:c5:c7:35:4c:3b:2c:68:35:60:83:eb:d9:e0:25:b0:53:fe:
89:b2:e0:7a:1d:8e:79:86:0c:d4:6f:58:27:10:8e:d7:a7:33:
68:ea:e9:36:ec:4b:18:0a:0b:51:1d:6b:bd:10:7c:b2:75:82:
a1:db:0d:9a:e9:49:ab:87:8f:c0:4d:bb:da:8e:db:f4:f1:af:
b7:68:6a:b3:7c:e7:be:48:82:47:9b:b3:2f:bf:9e:9b:5c:c9:
2f:d6:9e:e3:4e:49:59:ff:e0:b2:4c:c6:2d:0c:93:57:62:33:
8e:11:2c:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMRm9T6zkGGtUhNU1qvKlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YTQ2MDNiMjQ1YjFkMjA4NDlkZjg4ZjE2ZWUzNzBjYzBi
NDM5MGQwHhcNMjUwOTA3MDgwMDQ0WhcNMjUwOTA4MDgwMDQ0WjAzMTEwLwYDVQQD
EygyNzI3YTQ3Y2M3YmUyM2ZlOTRmNzcyOTVmZGFlNmJjYzIzZDlkMTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlSxS2hPpLe8njJJ6qSgI4r7mNMJ
4y2Q+Eq8qogPmVRwk64mP3ajXYoJ0bbwqmrcIhdD2Lt2zQC4nAtR2XabWH4qVRpq
pcjlsKSv4Do4V+YcKXXQNIaxKbRXNFZZkz6gWj4J0SKLqgW2/fdf7+GmJvaCoKXA
yJH/vPDThiELNajwe1tu1pLW4jYdbuG6JlAHQLNrSKmb2rwHDsdDCPvQ5d8H4VH7
M6MfIiGtvf3zYst+E7cl3Yll38JkitGlhN4wePFLkW8uWae3tUhqGjsoyJFGc+ge
1JQ0GdvnQqGsgSj2BMVo3gEkKrg3C36Lt16uo5Dtwi/1Or49/Bzlxoj5sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcnpHzHviP+lPdylf2ua8wj2dE5MB8GA1UdIwQY
MBaAFDmkYDskWx0ghJ34jxbuNwzAtDkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi81ZTE3N2YtNWY1Zi00MjE0LWE4MTEt
ZmNmMTA1ZmQyMDRjLzEvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi81ZTE3N2YtNWY1Zi00MjE0LWE4MTEtZmNmMTA1ZmQyMDRj
LzEvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSRAd0pj
p/ono9V8phGJL4/GYrivUK9/LnmakGjnA+3hLYWaNYdlaXfdkD+5yrvCr5Yvyh/W
RPb1ueTcbC9RJzgMi0KicqsiFbv7r7fcE5Tc2LZQUQNqUsIxMgVXk6aV+BNHxQ54
5ZEplyzM4YH/ZMhCKURPgm65PUugd1dbWgKXDvxF9V04x4LPS2IA7kvZQMXHNUw7
LGg1YIPr2eAlsFP+ibLgeh2OeYYM1G9YJxCO16czaOrpNuxLGAoLUR1rvRB8snWC
odsNmulJq4ePwE272o7b9PGvt2hqs3znvkiCR5uzL7+em1zJL9ae405JWf/gskzG
LQyTV2IzjhEsBQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:09 2025 by rpki-client