Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
File: OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json)
Hash identifier: Y1OoYIuxZFMFrhyk8BDkRPIoTyfzxnLwKXJQLaeW6tM=
Subject key identifier: 87:7D:5A:27:D6:A5:85:3D:85:A9:D0:BE:48:36:26:28:A4:15:34:65
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 01983C859CEF06A0FA2892778A659BC6FE47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
Manifest number: 1604
Signing time: Thu 24 Jul 2025 13:00:46 +0000
Manifest this update: Thu 24 Jul 2025 13:00:46 +0000
Manifest next update: Fri 25 Jul 2025 13:00:46 +0000
Files and hashes: 1: Ao4f98uIFcgkhdxyPOpQgAuwN9w.roa (hash: ttNIa0Xruypw+Nr5sYx69ADzUxbcLDOTo777VDuXgok=)
2: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: LLjY+5g94JBM0IKZOhIngKAry5hdI0hGNDdHNxOdr0g=)
3: bf5JniBkyKbSSiSrUK6PpsjkA_o.roa (hash: G/EVvuIiKK3u39WnHajT6FKjkBStN9/ciaxEIQanbJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:85:9c:ef:06:a0:fa:28:92:77:8a:65:9b:c6:fe:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Jul 24 13:00:46 2025 GMT
Not After : Jul 25 13:00:46 2025 GMT
Subject: CN=877d5a27d6a5853d85a9d0be48362628a4153465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0c:c2:86:3c:3c:9f:49:b8:58:32:a2:78:96:
78:52:65:5a:6b:59:28:55:6a:4a:3d:a4:9c:b7:23:
bc:81:a5:62:6a:18:49:69:b5:1a:6e:29:7d:37:fe:
30:9a:52:51:a8:2d:b6:d3:3b:d0:bd:ed:cd:bd:ff:
59:76:79:8c:8a:3a:77:7c:8b:15:2d:c5:6d:fb:49:
24:52:9e:d6:29:70:d6:88:db:b5:b9:19:18:42:75:
0f:53:87:ef:ab:4a:d7:f2:9a:3c:f6:26:40:4c:3d:
95:fe:6b:90:8c:a1:e1:ea:e6:94:9b:e9:80:de:6e:
02:e1:34:2b:93:ed:e6:dc:b1:08:38:e0:e8:1c:81:
67:9d:15:3f:84:68:ff:0c:a7:99:e8:7b:c8:9a:3e:
46:a4:f7:e6:f8:7c:ff:f9:2f:af:a0:f6:1c:65:e2:
f0:4b:14:97:3e:94:e2:9a:4a:ca:23:dd:a9:a2:7b:
de:67:25:13:29:87:0f:9b:7b:74:54:1b:2e:24:f1:
7e:90:11:ee:17:a8:34:77:09:3e:03:02:56:c8:81:
5e:08:0d:e3:8c:56:ec:cb:63:bf:bb:27:6e:c0:15:
68:08:72:23:2a:45:e7:b8:1f:ed:73:67:e3:7f:a4:
c0:cc:0a:ee:52:93:1e:f7:9a:62:58:16:3c:db:e8:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7D:5A:27:D6:A5:85:3D:85:A9:D0:BE:48:36:26:28:A4:15:34:65
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:66:f8:83:70:c0:8a:d5:0d:f5:b3:b2:35:be:c4:88:60:59:
5a:a2:5b:89:df:cc:26:25:5b:b3:70:0f:d0:44:10:9b:d3:b2:
a5:c7:2e:cb:70:9b:56:c0:0b:56:31:92:63:3c:0a:27:62:eb:
b0:b3:71:d8:aa:f8:bf:2a:03:b5:9f:87:29:90:f8:21:70:56:
7b:ac:8b:62:72:15:de:64:68:69:64:d6:38:41:fa:8f:0d:50:
e9:63:83:9e:fd:6e:1a:01:35:70:1e:4a:19:18:13:e1:7a:7b:
a3:2b:d9:6e:49:72:60:01:4b:f2:09:75:ce:56:34:1e:1f:bd:
fb:ed:63:e8:31:39:c6:19:1d:85:4c:47:30:e0:9e:a6:a2:b7:
a8:12:e9:c8:8d:0e:07:16:7a:13:b4:43:12:9e:09:92:ba:72:
5a:a1:76:12:70:e7:bc:e7:b5:69:59:e9:3b:f4:a0:87:30:e5:
48:7c:49:92:a9:1f:4e:60:18:03:7f:37:08:49:52:f5:cc:64:
59:fe:10:6d:d8:42:a1:ec:5e:dc:eb:71:c8:b0:40:22:bb:45:
7a:98:01:ab:72:75:be:d3:dc:13:c6:c9:6e:43:d2:7f:34:74:
18:93:23:63:45:ff:1d:ac:88:27:2b:76:3f:60:15:7d:53:56:
a8:de:7b:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg8hZzvBqD6KJJ3imWbxv5HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZTdmNDdiYjliOTE2NTdlNTcyNmJmY2IyZGVmOGFhZDk3
M2UyNjgwHhcNMjUwNzI0MTMwMDQ2WhcNMjUwNzI1MTMwMDQ2WjAzMTEwLwYDVQQD
Eyg4NzdkNWEyN2Q2YTU4NTNkODVhOWQwYmU0ODM2MjYyOGE0MTUzNDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gzChjw8n0m4WDKieJZ4UmVaa1ko
VWpKPaSctyO8gaViahhJabUabil9N/4wmlJRqC220zvQve3Nvf9ZdnmMijp3fIsV
LcVt+0kkUp7WKXDWiNu1uRkYQnUPU4fvq0rX8po89iZATD2V/muQjKHh6uaUm+mA
3m4C4TQrk+3m3LEIOODoHIFnnRU/hGj/DKeZ6HvImj5GpPfm+Hz/+S+voPYcZeLw
SxSXPpTimkrKI92ponveZyUTKYcPm3t0VBsuJPF+kBHuF6g0dwk+AwJWyIFeCA3j
jFbsy2O/uyduwBVoCHIjKkXnuB/tc2fjf6TAzAruUpMe95piWBY82+jKJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFId9WifWpYU9hanQvkg2JiikFTRlMB8GA1UdIwQY
MBaAFDjn9Hu5uRZX5XJr/LLe+KrZc+JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQt
Njg2ZjBhMDYxNmNjLzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQtNjg2ZjBhMDYxNmNj
LzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2b4g3DA
itUN9bOyNb7EiGBZWqJbid/MJiVbs3AP0EQQm9Oypccuy3CbVsALVjGSYzwKJ2Lr
sLNx2Kr4vyoDtZ+HKZD4IXBWe6yLYnIV3mRoaWTWOEH6jw1Q6WODnv1uGgE1cB5K
GRgT4Xp7oyvZbklyYAFL8gl1zlY0Hh+9++1j6DE5xhkdhUxHMOCepqK3qBLpyI0O
BxZ6E7RDEp4JkrpyWqF2EnDnvOe1aVnpO/SghzDlSHxJkqkfTmAYA383CElS9cxk
Wf4QbdhCoexe3OtxyLBAIrtFepgBq3J1vtPcE8bJbkPSfzR0GJMjY0X/HayIJyt2
P2AVfVNWqN57MA==
-----END CERTIFICATE-----
Generated at Thu Jul 24 23:03:22 2025 by rpki-client