Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: bDj9Wyj6R4sBu7SVyJf8i8iTNzdGzPdUF5TXcGMMYqw=
Subject key identifier: 56:42:37:A4:BC:A5:82:33:2E:0C:27:F4:58:88:C6:77:C5:0B:51:46
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 0198CC1339D9BA5AA362C825AB5CB1297518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 1646
Signing time: Thu 21 Aug 2025 10:01:08 +0000
Manifest this update: Thu 21 Aug 2025 10:01:08 +0000
Manifest next update: Fri 22 Aug 2025 10:01:08 +0000
Files and hashes: 1: ABSwg5iM7lDSwpBpbSUM-jWDkxQ.roa (hash: DOO9GA+T1exZrXJnaC8HcR8le9oe4m7a+sJjxpyxjOg=)
2: GJYCLN0ib9ODqjC_4u9aKGjHiAs.roa (hash: AqwhbZ6NQ3s8EvVMwRFSwmoYz6Yquuk8Hi4hrgtZv3M=)
3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: lVU/E4nwV/f3hr8iuOsovb+j23+8c297BnzD9LNwJTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:13:39:d9:ba:5a:a3:62:c8:25:ab:5c:b1:29:75:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Aug 21 10:01:08 2025 GMT
Not After : Aug 22 10:01:08 2025 GMT
Subject: CN=564237a4bca582332e0c27f45888c677c50b5146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:26:c5:92:8a:20:7f:71:6f:72:1b:29:8c:d1:
5c:5e:81:dd:eb:5a:3d:0b:a1:92:d2:30:9a:ce:90:
93:ba:ab:83:85:50:63:0e:70:3a:e4:8f:bc:4d:99:
50:b8:f5:29:7f:63:b8:9f:55:a4:05:18:52:a2:b4:
89:55:0b:9c:31:48:53:35:b9:e4:e3:3b:4b:b4:e2:
02:5f:52:a4:ef:fd:d3:3a:73:31:57:f4:5f:db:a6:
7f:99:2b:73:e4:66:5a:8c:04:ba:08:e9:a6:c3:31:
d6:98:69:10:09:fb:71:a1:2d:5d:3d:2e:74:66:a5:
19:89:a0:5a:e0:02:7b:be:cc:12:b8:5d:4a:44:12:
59:42:5e:08:69:8c:6d:47:5e:b6:b2:3e:ed:ce:15:
60:2b:35:71:46:c0:4c:6a:55:8a:90:82:36:ab:8d:
ed:6a:00:5a:65:1b:03:fa:73:0e:17:eb:5c:41:4c:
ac:83:26:80:ef:e8:1e:52:db:fe:7f:38:29:a8:9f:
c1:dc:20:f1:b2:4e:ac:2c:e8:d4:13:7f:67:44:d8:
19:a2:a6:7a:82:00:b6:dc:90:6f:5d:0b:60:77:a2:
66:75:fa:30:79:41:15:dc:f5:8b:ea:05:42:f4:5d:
6f:01:cb:3c:b4:85:65:11:55:4e:79:e2:e3:07:65:
09:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:42:37:A4:BC:A5:82:33:2E:0C:27:F4:58:88:C6:77:C5:0B:51:46
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:85:43:4b:2e:f2:64:98:30:0b:fe:b5:9a:04:71:2c:79:d8:
68:ab:83:e0:87:92:61:28:7a:cc:8a:5c:8b:96:33:5e:6a:dd:
7e:1f:82:36:0a:28:2f:e3:70:f8:e9:18:14:17:ed:56:64:ce:
ea:fe:c9:71:43:f4:b9:cc:eb:f3:3c:3d:b6:88:59:b9:76:fa:
2c:c6:ba:07:47:36:52:cf:b4:70:c0:d0:d7:ee:01:e2:0d:84:
98:71:c7:ef:bf:1e:f5:bc:33:2d:7b:4b:b5:71:25:65:d0:de:
78:02:de:a4:a2:87:12:2a:a5:6e:31:e9:7b:86:c8:43:b6:7c:
8f:1c:38:5c:91:af:4b:c3:0d:c0:b2:d2:ea:8c:39:8d:33:33:
c7:6d:8f:eb:40:a4:b6:e5:1d:0b:d5:7c:03:85:36:32:8d:d0:
d7:44:ba:78:f8:00:12:c9:9b:b4:d8:c8:3d:43:b9:00:7e:fc:
77:7d:33:09:a9:27:07:55:22:13:34:5f:c6:6b:d2:7f:b9:0a:
71:af:4b:16:cc:28:e0:c2:1d:16:10:37:06:18:10:73:cf:80:
89:26:cc:1d:80:86:1c:4b:9e:e4:01:8f:a5:9c:3f:35:2d:84:
a3:18:43:6a:63:ea:fb:29:f2:34:3a:de:17:ca:c2:3b:93:70:
41:c6:66:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjMEznZulqjYsglq1yxKXUYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTZkNmIwODc0NjFmZGVjNmE1YjlkNTJkMjk4MzJkOGYy
OTljODcwHhcNMjUwODIxMTAwMTA4WhcNMjUwODIyMTAwMTA4WjAzMTEwLwYDVQQD
Eyg1NjQyMzdhNGJjYTU4MjMzMmUwYzI3ZjQ1ODg4YzY3N2M1MGI1MTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CbFkoogf3FvchspjNFcXoHd61o9
C6GS0jCazpCTuquDhVBjDnA65I+8TZlQuPUpf2O4n1WkBRhSorSJVQucMUhTNbnk
4ztLtOICX1Kk7/3TOnMxV/Rf26Z/mStz5GZajAS6COmmwzHWmGkQCftxoS1dPS50
ZqUZiaBa4AJ7vswSuF1KRBJZQl4IaYxtR162sj7tzhVgKzVxRsBMalWKkII2q43t
agBaZRsD+nMOF+tcQUysgyaA7+geUtv+fzgpqJ/B3CDxsk6sLOjUE39nRNgZoqZ6
ggC23JBvXQtgd6JmdfoweUEV3PWL6gVC9F1vAcs8tIVlEVVOeeLjB2UJXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZCN6S8pYIzLgwn9FiIxnfFC1FGMB8GA1UdIwQY
MBaAFKCm1rCHRh/exqW51S0pgy2PKZyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yZDc2MDktMjE0Mi00YTAzLWIxMWUt
MTE0OGZkZTdhZWY3LzEvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8yZDc2MDktMjE0Mi00YTAzLWIxMWUtMTE0OGZkZTdhZWY3
LzEvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYVDSy7y
ZJgwC/61mgRxLHnYaKuD4IeSYSh6zIpci5YzXmrdfh+CNgooL+Nw+OkYFBftVmTO
6v7JcUP0uczr8zw9tohZuXb6LMa6B0c2Us+0cMDQ1+4B4g2EmHHH778e9bwzLXtL
tXElZdDeeALepKKHEiqlbjHpe4bIQ7Z8jxw4XJGvS8MNwLLS6ow5jTMzx22P60Ck
tuUdC9V8A4U2Mo3Q10S6ePgAEsmbtNjIPUO5AH78d30zCaknB1UiEzRfxmvSf7kK
ca9LFswo4MIdFhA3BhgQc8+AiSbMHYCGHEue5AGPpZw/NS2EoxhDamPq+ynyNDre
F8rCO5NwQcZmrQ==
-----END CERTIFICATE-----
Generated at Thu Aug 21 15:25:08 2025 by rpki-client