Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
File: oWKOOfRxrdx15xo5G4Ldklx_CB0.mft (raw, json)
Hash identifier: TGuBO5syXr/e7kspHhMs6sBMgtmFJ/ENmA4Epot4t/U=
Subject key identifier: 20:8B:63:9A:B9:2D:E4:C1:3C:01:C1:A9:87:61:20:0A:F7:D6:0A:53
Authority key identifier: A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
Certificate issuer: /CN=a1628e39f471addc75e71a391b82dd925c7f081d
Certificate serial: 019922FAF0863792B574906C868E73D7104C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
Manifest number: 1244
Signing time: Sun 07 Sep 2025 07:01:34 +0000
Manifest this update: Sun 07 Sep 2025 07:01:34 +0000
Manifest next update: Mon 08 Sep 2025 07:01:34 +0000
Files and hashes: 1: 1-rpUgw0W3sKSFdW3yshaE1HCCc0.roa (hash: c/Tt5N/pZWiN2mpptC/U9LHYusWW/dCE4lcNMT3U+WE=)
2: oWKOOfRxrdx15xo5G4Ldklx_CB0.crl (hash: CRiTEO7eVPxEiuaG86EBcTu77TJy7NfCJ4ZVL7u8k/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:f0:86:37:92:b5:74:90:6c:86:8e:73:d7:10:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1628e39f471addc75e71a391b82dd925c7f081d
Validity
Not Before: Sep 7 07:01:34 2025 GMT
Not After : Sep 8 07:01:34 2025 GMT
Subject: CN=208b639ab92de4c13c01c1a98761200af7d60a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:d2:48:4f:4c:e2:bd:26:b9:fe:1c:4c:b8:
d8:46:30:ca:84:f9:5f:23:5a:25:0e:3e:92:60:65:
60:6f:07:f1:b1:62:c7:a8:ce:58:ac:37:b3:79:47:
c7:99:7d:8f:35:41:e3:c7:00:a0:4e:b2:71:c2:d0:
10:e4:92:36:ce:30:61:01:4a:fd:0f:1a:d5:1c:be:
cc:38:35:02:32:30:dc:a3:e8:98:09:39:4d:33:25:
56:ef:6d:98:83:04:d6:70:7e:54:f0:78:5f:ef:29:
61:5e:b2:c6:64:b8:f9:0d:1d:4f:a7:33:ea:ec:f1:
c5:b5:76:bd:6b:d5:45:63:a5:ca:02:29:b4:af:1a:
10:da:ca:7d:72:1f:43:85:3a:11:e2:55:e0:84:72:
3b:bf:59:70:9f:aa:9e:14:0f:f3:26:01:05:76:9c:
5f:cf:32:99:e5:3c:76:f0:9e:28:55:e6:2f:69:75:
ac:08:bc:1f:b5:23:f4:87:dd:1d:57:a1:0e:77:4a:
82:f5:66:f9:af:9e:13:b2:a8:e7:4b:a1:5e:28:50:
85:69:56:36:b8:4f:6a:b6:59:65:7f:e3:a3:a3:10:
7c:8d:98:31:dd:4b:7a:34:80:7b:19:86:da:75:e6:
18:52:71:0e:cc:7f:25:1a:2e:43:c1:ed:87:27:cb:
ac:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8B:63:9A:B9:2D:E4:C1:3C:01:C1:A9:87:61:20:0A:F7:D6:0A:53
X509v3 Authority Key Identifier:
keyid:A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:81:85:c5:da:cb:11:c6:93:2e:0e:b0:fe:a4:78:4b:17:45:
5c:0e:17:8e:f6:55:ff:e9:07:68:20:46:c4:a5:9f:ed:b6:2a:
76:fd:38:ee:4c:90:b0:2e:d8:86:59:63:75:7c:11:ad:d2:9b:
0a:3f:c6:91:4c:d9:7f:14:8c:6b:4b:58:4c:e7:40:10:52:6b:
8c:90:3d:4a:a0:16:e1:b0:fd:f6:d4:c1:ce:1f:c3:6c:d7:1d:
c4:67:57:33:7f:96:66:0f:96:2b:7d:45:7a:51:54:40:a9:3e:
f4:33:e8:33:6f:11:53:0f:34:db:01:54:13:b5:0d:a7:d6:18:
d3:39:1f:96:db:bd:9b:e2:bb:fd:05:5d:10:9f:4e:19:0f:79:
7a:ac:3f:05:dc:75:35:bc:33:67:fb:94:9f:2a:6e:f5:02:b8:
36:5f:5b:44:13:49:38:3e:0e:1d:4a:c0:8c:3b:f2:3c:1c:03:
51:44:58:23:09:28:62:85:ce:6c:48:a2:64:4f:0e:af:f5:eb:
c1:98:45:60:66:50:fb:a8:a7:8b:c8:7b:11:f6:2e:ff:b6:23:
2b:20:f3:55:71:93:90:1e:2a:cc:6b:29:9b:e2:f0:58:cf:70:
0b:f7:a7:dc:c4:cf:cb:35:aa:6b:26:83:f6:87:23:d0:3f:4e:
91:05:4e:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+vCGN5K1dJBsho5z1xBMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNjI4ZTM5ZjQ3MWFkZGM3NWU3MWEzOTFiODJkZDkyNWM3
ZjA4MWQwHhcNMjUwOTA3MDcwMTM0WhcNMjUwOTA4MDcwMTM0WjAzMTEwLwYDVQQD
EygyMDhiNjM5YWI5MmRlNGMxM2MwMWMxYTk4NzYxMjAwYWY3ZDYwYTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZHSSE9M4r0muf4cTLjYRjDKhPlf
I1olDj6SYGVgbwfxsWLHqM5YrDezeUfHmX2PNUHjxwCgTrJxwtAQ5JI2zjBhAUr9
DxrVHL7MODUCMjDco+iYCTlNMyVW722YgwTWcH5U8Hhf7ylhXrLGZLj5DR1PpzPq
7PHFtXa9a9VFY6XKAim0rxoQ2sp9ch9DhToR4lXghHI7v1lwn6qeFA/zJgEFdpxf
zzKZ5Tx28J4oVeYvaXWsCLwftSP0h90dV6EOd0qC9Wb5r54TsqjnS6FeKFCFaVY2
uE9qtlllf+OjoxB8jZgx3Ut6NIB7GYbadeYYUnEOzH8lGi5Dwe2HJ8usOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCLY5q5LeTBPAHBqYdhIAr31gpTMB8GA1UdIwQY
MBaAFKFijjn0ca3cdecaORuC3ZJcfwgdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1dLT09mUnhyZHgxNXhvNUc0TGRrbHhfQ0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zODllZDItMWI4Mi00NWM5LWE3MGEt
MDI1YTBlNmYwNWFlLzEvb1dLT09mUnhyZHgxNXhvNUc0TGRrbHhfQ0IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8zODllZDItMWI4Mi00NWM5LWE3MGEtMDI1YTBlNmYwNWFl
LzEvb1dLT09mUnhyZHgxNXhvNUc0TGRrbHhfQ0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4GFxdrL
EcaTLg6w/qR4SxdFXA4XjvZV/+kHaCBGxKWf7bYqdv047kyQsC7YhlljdXwRrdKb
Cj/GkUzZfxSMa0tYTOdAEFJrjJA9SqAW4bD99tTBzh/DbNcdxGdXM3+WZg+WK31F
elFUQKk+9DPoM28RUw802wFUE7UNp9YY0zkfltu9m+K7/QVdEJ9OGQ95eqw/Bdx1
NbwzZ/uUnypu9QK4Nl9bRBNJOD4OHUrAjDvyPBwDUURYIwkoYoXObEiiZE8Or/Xr
wZhFYGZQ+6ini8h7EfYu/7YjKyDzVXGTkB4qzGspm+LwWM9wC/en3MTPyzWqayaD
9ocj0D9OkQVOBQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:57 2025 by rpki-client