Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
File: oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json)
Hash identifier: 2xMy+65JFCyNekBERGac2xEUwGGpdnyIPCxrtYEZ5jQ=
Subject key identifier: 0B:92:C3:DB:6F:52:AF:99:62:88:D3:4D:35:89:AD:A2:D4:1F:5E:01
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial: 019956E88820C790765CCA9FDC593FBA0DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
Manifest number: 15B1
Signing time: Wed 17 Sep 2025 09:01:43 +0000
Manifest this update: Wed 17 Sep 2025 09:01:43 +0000
Manifest next update: Thu 18 Sep 2025 09:01:43 +0000
Files and hashes: 1: 4GMh7fIw13Bz3DUcceuO2FBtK6M.roa (hash: E9IDQ7QjcqjZJIn5bDeaHNVCqS2wv2WqYXLU0FEPSXU=)
2: XJGEpCzB4loh5ef0k98ZvXtkA5A.roa (hash: ln2eCgW4Lb0/Z2WnRMYRLGIC+qtaz3YxPhhlJZ12csI=)
3: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: ZJ41cxd/gBqRVnAZpqMPYcD2pjb8ImNZLUcJ1Ep2uZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:56:e8:88:20:c7:90:76:5c:ca:9f:dc:59:3f:ba:0d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Validity
Not Before: Sep 17 09:01:43 2025 GMT
Not After : Sep 18 09:01:43 2025 GMT
Subject: CN=0b92c3db6f52af996288d34d3589ada2d41f5e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:81:9b:c5:73:14:6c:3a:4a:7d:3d:d0:3c:
51:fc:8d:ed:47:bc:f2:ff:d7:c9:90:f1:16:72:83:
30:c1:15:29:3b:62:54:80:41:33:f3:45:04:bd:0b:
0a:5c:eb:61:2a:d0:69:ca:79:63:ff:8d:e0:a4:e5:
9d:8a:39:91:0b:6a:07:69:ec:d3:68:94:50:28:0c:
b4:06:f6:55:a8:90:a1:ba:d5:18:dd:14:b5:5b:54:
55:9d:2b:cc:dc:ce:e5:2b:2b:2d:32:3e:5e:0b:f3:
5e:7b:ee:22:15:e3:92:a6:66:fa:e0:b1:0b:f7:01:
da:65:0f:9b:a9:62:8a:68:c7:24:51:b4:89:12:22:
84:24:b0:c9:29:55:f2:e8:ed:c0:2d:b5:0b:d6:95:
09:61:2a:46:50:da:df:99:50:c3:30:76:c2:3e:05:
96:7d:58:ea:b9:98:0a:b0:0a:20:2d:e5:c9:9e:b8:
c9:eb:99:d2:a7:ad:fe:00:32:5d:20:1a:2a:57:16:
f0:cb:cb:09:50:21:1e:a2:46:ba:1f:78:3b:45:d0:
86:8b:92:7d:08:56:fe:d8:93:d0:6a:41:42:97:36:
06:5a:42:9f:c5:84:9d:d5:07:4c:86:cd:1c:9e:78:
e2:57:84:d2:cc:70:cf:19:f5:0c:2d:d0:57:4e:f3:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:92:C3:DB:6F:52:AF:99:62:88:D3:4D:35:89:AD:A2:D4:1F:5E:01
X509v3 Authority Key Identifier:
keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5a:24:67:ad:dd:df:8e:16:3a:48:89:dd:2f:e7:9b:7d:69:
3c:f7:59:84:2f:28:f5:ab:2e:38:bb:bb:f0:d4:38:69:9f:a4:
f2:0f:2a:89:a4:fb:1e:09:6b:33:4d:35:12:6e:b0:5f:1f:0e:
f9:a5:43:a6:fe:48:ac:ce:ff:4a:31:89:69:42:ba:94:fd:4d:
e8:b0:6f:f5:3a:9e:a5:6e:db:ac:f3:8c:12:da:2f:f1:53:24:
30:da:fb:c6:34:bf:b5:ec:35:77:6e:82:04:8a:80:99:44:78:
12:2d:ee:d7:d1:70:ec:a2:fd:6b:5d:55:74:ed:04:0c:bc:66:
ba:b9:f8:f6:8f:a7:50:dc:24:8a:d0:e6:f1:b0:c3:c3:9a:10:
cd:24:5b:56:f9:5c:ae:4a:85:44:e4:45:28:a5:68:f0:70:45:
66:87:cd:a4:0d:e8:4a:67:ab:f7:5b:21:53:d9:b1:7b:85:20:
a9:81:fc:c4:b4:95:46:ab:7e:1b:3c:8d:4c:77:da:c2:d1:ef:
70:2b:93:86:5e:90:c1:44:9d:fc:88:41:fc:17:71:0b:09:7b:
67:00:b9:43:90:26:a7:16:1e:e1:3c:07:7f:5b:4d:38:21:ae:
00:a3:f8:4a:99:96:f9:f5:3f:35:7d:79:59:60:49:30:5e:c6:
9b:4e:06:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlW6Iggx5B2XMqf3Fk/ug3nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNTZiNDIzODNhZDg2MmNlNmEzNzRhZDJjYTZkMzZjMjU0
ZGM3YjEwHhcNMjUwOTE3MDkwMTQzWhcNMjUwOTE4MDkwMTQzWjAzMTEwLwYDVQQD
EygwYjkyYzNkYjZmNTJhZjk5NjI4OGQzNGQzNTg5YWRhMmQ0MWY1ZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXSBm8VzFGw6Sn090DxR/I3tR7zy
/9fJkPEWcoMwwRUpO2JUgEEz80UEvQsKXOthKtBpynlj/43gpOWdijmRC2oHaezT
aJRQKAy0BvZVqJChutUY3RS1W1RVnSvM3M7lKystMj5eC/Nee+4iFeOSpmb64LEL
9wHaZQ+bqWKKaMckUbSJEiKEJLDJKVXy6O3ALbUL1pUJYSpGUNrfmVDDMHbCPgWW
fVjquZgKsAogLeXJnrjJ65nSp63+ADJdIBoqVxbwy8sJUCEeoka6H3g7RdCGi5J9
CFb+2JPQakFClzYGWkKfxYSd1QdMhs0cnnjiV4TSzHDPGfUMLdBXTvN2jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuSw9tvUq+ZYojTTTWJraLUH14BMB8GA1UdIwQY
MBaAFKBWtCODrYYs5qN0rSym02wlTcexMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0ZhMEk0T3RoaXptbzNTdExLYlRiQ1ZOeDdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zZThkY2MtYTc2NC00NGJlLWI1MDct
OWIzZGQ0MTdjMzA4LzEvb0ZhMEk0T3RoaXptbzNTdExLYlRiQ1ZOeDdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8zZThkY2MtYTc2NC00NGJlLWI1MDctOWIzZGQ0MTdjMzA4
LzEvb0ZhMEk0T3RoaXptbzNTdExLYlRiQ1ZOeDdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFokZ63d
344WOkiJ3S/nm31pPPdZhC8o9asuOLu78NQ4aZ+k8g8qiaT7HglrM001Em6wXx8O
+aVDpv5IrM7/SjGJaUK6lP1N6LBv9TqepW7brPOMEtov8VMkMNr7xjS/tew1d26C
BIqAmUR4Ei3u19Fw7KL9a11VdO0EDLxmurn49o+nUNwkitDm8bDDw5oQzSRbVvlc
rkqFRORFKKVo8HBFZofNpA3oSmer91shU9mxe4UgqYH8xLSVRqt+GzyNTHfawtHv
cCuThl6QwUSd/IhB/BdxCwl7ZwC5Q5AmpxYe4TwHf1tNOCGuAKP4SpmW+fU/NX15
WWBJMF7Gm04GXQ==
-----END CERTIFICATE-----
Generated at Wed Sep 17 19:00:43 2025 by rpki-client