Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
File: oHejVvB-B0yubybn9Yk9zp2sitM.mft (raw, json)
Hash identifier: bK4U8kPLpkCOMz1mRBfdZAK3G14bvcWCHdtj+JMOS4Y=
Subject key identifier: CC:EE:9C:78:00:F6:C4:24:BA:46:09:6F:77:1E:E8:66:E8:68:BF:D3
Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
Certificate issuer: /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Certificate serial: 019929D7CAA2A3507F9B05EAE483C63A4E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
Manifest number: 1164
Signing time: Mon 08 Sep 2025 15:00:31 +0000
Manifest this update: Mon 08 Sep 2025 15:00:31 +0000
Manifest next update: Tue 09 Sep 2025 15:00:31 +0000
Files and hashes: 1: lxW4zSYAimUluowH0s8gP36GI8E.roa (hash: ACOT5wzA2KcUFV8Qgc3AQN3HAUIG6x6Guns6Pzhv5rk=)
2: oHejVvB-B0yubybn9Yk9zp2sitM.crl (hash: MC3wHuZ1ElwAjI+QC7cGITtmFpnDm/3RRFWlnp5Frcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:d7:ca:a2:a3:50:7f:9b:05:ea:e4:83:c6:3a:4e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Validity
Not Before: Sep 8 15:00:31 2025 GMT
Not After : Sep 9 15:00:31 2025 GMT
Subject: CN=ccee9c7800f6c424ba46096f771ee866e868bfd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:c6:ce:dc:80:28:f2:28:33:14:f5:55:c2:
93:e3:84:fd:b0:a1:f9:fa:cb:a9:8f:85:de:62:22:
1a:7a:10:4a:1f:80:93:f0:a4:15:21:73:79:bd:47:
4b:03:29:8f:45:3d:4b:b8:3d:f2:fd:f8:b7:7a:0f:
0d:29:07:7a:33:2e:ca:f2:bd:f1:e9:92:b4:e4:0e:
60:fd:7e:dd:e3:21:e0:63:00:af:db:6e:3f:0e:64:
c4:b5:ca:83:d3:f4:d6:f8:8e:94:99:41:52:14:f7:
9a:ea:70:b3:69:61:9e:2f:b2:ac:07:01:a3:3b:07:
21:01:71:0a:26:94:3c:c5:f7:41:b8:0f:46:0b:5e:
4e:1a:a0:cb:c9:c9:c8:ed:c7:69:5c:24:1c:cf:cf:
00:38:af:96:fa:cc:5d:60:18:b2:a1:bd:2a:1b:ae:
22:4b:35:a1:22:22:c5:f9:b6:8e:d9:8a:29:54:fd:
69:70:c4:80:4c:92:12:ad:95:07:58:aa:3c:84:3b:
e5:6a:d5:5f:9d:07:52:24:db:76:39:2c:c4:ae:19:
93:6a:51:4b:81:0d:4e:ca:dd:5d:1c:ab:6d:9c:19:
48:7d:52:d7:8d:0c:da:07:21:2b:4a:c6:dc:28:4f:
6a:e5:ab:ac:1c:b0:73:5c:c7:57:e8:34:20:d6:96:
ae:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EE:9C:78:00:F6:C4:24:BA:46:09:6F:77:1E:E8:66:E8:68:BF:D3
X509v3 Authority Key Identifier:
keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a3:dc:68:67:60:78:2d:27:e0:ce:ac:93:c5:b8:ff:c4:05:
8b:cb:df:8c:e2:08:aa:58:59:d6:07:65:2f:81:04:a6:85:d6:
2b:fd:b6:17:eb:8c:50:8a:31:c6:60:14:7a:74:c0:3a:2c:78:
10:f4:01:33:68:86:fa:a6:2b:66:f1:75:62:13:56:2c:46:84:
46:70:90:f2:f3:e7:21:04:52:cb:93:3f:7f:3b:3c:2a:a3:30:
a5:e5:58:5b:d3:17:f1:a3:80:4e:b0:22:ea:30:d4:eb:4d:c7:
62:22:08:98:99:ea:b7:63:0a:41:81:f8:e7:25:4b:76:fc:1f:
75:b3:f5:41:53:6c:9f:aa:47:aa:fe:1d:5c:13:0e:c4:b7:1c:
1c:a5:27:b8:10:47:94:77:04:3d:80:a7:41:f3:27:59:d5:2d:
c8:d1:ec:ac:87:e7:1b:c2:13:8c:39:23:c0:da:ff:0e:bb:ca:
55:4e:da:8e:d8:70:42:ae:14:f4:5e:b3:e2:ea:03:01:a8:45:
17:53:f0:14:5f:79:13:3c:1d:36:c4:34:b5:57:4c:95:e5:dc:
5b:42:e6:23:65:cb:71:e3:b3:1d:e0:54:8c:d8:af:8b:f3:b5:
48:b7:af:ee:32:85:e7:bc:94:5a:43:42:3e:a8:91:6d:8f:f9:
ff:fe:b0:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkp18qio1B/mwXq5IPGOk6CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNzdhMzU2ZjA3ZTA3NGNhZTZmMjZlN2Y1ODkzZGNlOWRh
YzhhZDMwHhcNMjUwOTA4MTUwMDMxWhcNMjUwOTA5MTUwMDMxWjAzMTEwLwYDVQQD
EyhjY2VlOWM3ODAwZjZjNDI0YmE0NjA5NmY3NzFlZTg2NmU4NjhiZmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszDGztyAKPIoMxT1VcKT44T9sKH5
+supj4XeYiIaehBKH4CT8KQVIXN5vUdLAymPRT1LuD3y/fi3eg8NKQd6My7K8r3x
6ZK05A5g/X7d4yHgYwCv224/DmTEtcqD0/TW+I6UmUFSFPea6nCzaWGeL7KsBwGj
OwchAXEKJpQ8xfdBuA9GC15OGqDLycnI7cdpXCQcz88AOK+W+sxdYBiyob0qG64i
SzWhIiLF+baO2YopVP1pcMSATJISrZUHWKo8hDvlatVfnQdSJNt2OSzErhmTalFL
gQ1Oyt1dHKttnBlIfVLXjQzaByErSsbcKE9q5ausHLBzXMdX6DQg1pauAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzunHgA9sQkukYJb3ce6GboaL/TMB8GA1UdIwQY
MBaAFKB3o1bwfgdMrm8m5/WJPc6drIrTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0hlalZ2Qi1CMHl1YnlibjlZazl6cDJzaXRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8yM2IzY2UtOTkyMi00MmZiLWExMjQt
NDgwOTNmYjZjNjdmLzEvb0hlalZ2Qi1CMHl1YnlibjlZazl6cDJzaXRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8yM2IzY2UtOTkyMi00MmZiLWExMjQtNDgwOTNmYjZjNjdm
LzEvb0hlalZ2Qi1CMHl1YnlibjlZazl6cDJzaXRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqPcaGdg
eC0n4M6sk8W4/8QFi8vfjOIIqlhZ1gdlL4EEpoXWK/22F+uMUIoxxmAUenTAOix4
EPQBM2iG+qYrZvF1YhNWLEaERnCQ8vPnIQRSy5M/fzs8KqMwpeVYW9MX8aOATrAi
6jDU603HYiIImJnqt2MKQYH45yVLdvwfdbP1QVNsn6pHqv4dXBMOxLccHKUnuBBH
lHcEPYCnQfMnWdUtyNHsrIfnG8ITjDkjwNr/DrvKVU7ajthwQq4U9F6z4uoDAahF
F1PwFF95EzwdNsQ0tVdMleXcW0LmI2XLceOzHeBUjNivi/O1SLev7jKF57yUWkNC
PqiRbY/5//6wKA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 01:09:49 2025 by rpki-client