Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: 2lBW570499DSqfw5p7wwgw84g4DCIJTGeRXXOFK5Loc=
Subject key identifier: 4F:23:FF:DE:40:10:31:7B:0A:64:14:34:86:89:BA:54:0B:55:EB:1C
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 019922FAD4FB32933AEBCA9109BF9020232C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 06C2
Signing time: Sun 07 Sep 2025 07:01:27 +0000
Manifest this update: Sun 07 Sep 2025 07:01:27 +0000
Manifest next update: Mon 08 Sep 2025 07:01:27 +0000
Files and hashes: 1: 6zhmWGIe4Q-ZROn6ekXb0Zv33_A.roa (hash: F27SVg7KmPKSSSpLfMg9+298fdBlmLMbNRr359aPHLc=)
2: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: TJO1SSjexuUp8DEGfAZtMrflzFCtC3e/2v2u6+zSMAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:d4:fb:32:93:3a:eb:ca:91:09:bf:90:20:23:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Sep 7 07:01:27 2025 GMT
Not After : Sep 8 07:01:27 2025 GMT
Subject: CN=4f23ffde4010317b0a6414348689ba540b55eb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6f:3d:80:d1:b6:14:19:61:f8:85:91:25:73:
1b:d8:72:8e:e5:ec:f9:d7:15:1e:31:47:26:40:c1:
6a:d1:51:b6:01:f2:c3:03:56:6f:44:90:85:b2:c0:
39:9d:72:6d:92:63:11:cc:65:e6:ee:ef:2d:f6:4e:
00:a3:79:24:b9:32:1b:f8:e2:df:6f:14:73:84:ea:
e4:45:92:c3:a9:9e:4c:1e:17:78:ee:76:ef:64:ec:
10:a1:bf:23:09:26:5b:ef:8e:48:12:4f:96:23:3d:
31:1e:91:81:61:ea:c0:e3:4f:54:0e:3f:d8:b5:c3:
64:16:76:79:4e:61:c6:8e:32:7b:9d:cf:42:bb:97:
24:9f:b7:1f:f7:23:61:bb:07:0b:94:69:b0:24:79:
e9:4f:18:db:45:0c:e1:36:e7:06:58:39:df:cd:5b:
8c:af:0e:80:77:c1:b4:16:93:57:db:66:bb:04:45:
8c:30:36:63:0c:d1:b6:b6:84:e0:06:e7:90:17:ae:
67:ab:e7:d7:85:09:65:04:0a:dc:dd:2e:c4:ba:03:
90:db:43:97:c9:b0:1d:2a:61:58:ec:1f:25:7c:86:
4c:cc:60:52:ec:d6:82:d9:0c:f8:91:4d:b0:1e:21:
37:2a:00:8a:0e:12:a1:74:64:97:ad:5f:4c:8d:24:
f4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:23:FF:DE:40:10:31:7B:0A:64:14:34:86:89:BA:54:0B:55:EB:1C
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:75:f2:93:9b:5d:c2:e4:cb:b3:46:cb:dd:2a:23:32:a2:f0:
ce:63:3f:d9:ff:13:b7:c8:3a:75:4a:43:a7:fd:3b:a8:6e:4d:
cb:3e:9c:92:7d:5d:ac:fd:e1:b4:55:4f:be:46:d6:87:10:cc:
10:4d:37:df:0e:cf:0c:70:ac:31:3d:ef:4d:db:51:48:82:19:
fc:69:8e:46:66:5f:20:5b:24:d2:db:d0:b7:66:a5:96:0d:f4:
75:6f:e0:0e:2c:19:87:ce:87:1e:0a:06:32:e5:71:e6:7d:3e:
09:2b:27:eb:12:54:66:6d:0e:75:65:75:53:c7:c7:f2:26:af:
b6:93:69:79:1e:5b:5a:c9:a3:27:25:83:c0:45:05:86:99:39:
e6:98:18:f2:9b:46:fc:26:ee:f8:a3:3c:fc:1c:36:a7:ff:80:
44:2f:c3:18:b5:3b:fc:f7:d2:1d:d1:07:1b:23:ed:4e:d6:0b:
89:94:13:d4:c4:cd:b5:5d:6a:49:3a:b0:8b:46:14:67:56:4d:
58:5f:66:f8:12:9c:a1:f8:19:a3:ac:cc:40:5c:98:af:aa:ff:
be:ca:b0:af:14:b1:7a:46:68:0b:bf:be:11:82:ec:43:b6:9f:
65:7d:2a:37:90:e9:88:48:5a:51:2c:f4:19:b5:9b:c7:37:1d:
de:93:64:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+tT7MpM668qRCb+QICMsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MDJjNzk4NzAwNGFlNzgxOTBlNjkxZTM3MGRlNTA5ZmY1
OTEyN2IwHhcNMjUwOTA3MDcwMTI3WhcNMjUwOTA4MDcwMTI3WjAzMTEwLwYDVQQD
Eyg0ZjIzZmZkZTQwMTAzMTdiMGE2NDE0MzQ4Njg5YmE1NDBiNTVlYjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0289gNG2FBlh+IWRJXMb2HKO5ez5
1xUeMUcmQMFq0VG2AfLDA1ZvRJCFssA5nXJtkmMRzGXm7u8t9k4Ao3kkuTIb+OLf
bxRzhOrkRZLDqZ5MHhd47nbvZOwQob8jCSZb745IEk+WIz0xHpGBYerA409UDj/Y
tcNkFnZ5TmHGjjJ7nc9Cu5ckn7cf9yNhuwcLlGmwJHnpTxjbRQzhNucGWDnfzVuM
rw6Ad8G0FpNX22a7BEWMMDZjDNG2toTgBueQF65nq+fXhQllBArc3S7EugOQ20OX
ybAdKmFY7B8lfIZMzGBS7NaC2Qz4kU2wHiE3KgCKDhKhdGSXrV9MjST0TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8j/95AEDF7CmQUNIaJulQLVescMB8GA1UdIwQY
MBaAFDgCx5hwBK54GQ5pHjcN5Qn/WRJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAt
YmYyNWNlMGY4MzkzLzEvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAtYmYyNWNlMGY4Mzkz
LzEvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHXyk5td
wuTLs0bL3SojMqLwzmM/2f8Tt8g6dUpDp/07qG5Nyz6ckn1drP3htFVPvkbWhxDM
EE033w7PDHCsMT3vTdtRSIIZ/GmORmZfIFsk0tvQt2allg30dW/gDiwZh86HHgoG
MuVx5n0+CSsn6xJUZm0OdWV1U8fH8iavtpNpeR5bWsmjJyWDwEUFhpk55pgY8ptG
/Cbu+KM8/Bw2p/+ARC/DGLU7/PfSHdEHGyPtTtYLiZQT1MTNtV1qSTqwi0YUZ1ZN
WF9m+BKcofgZo6zMQFyYr6r/vsqwrxSxekZoC7++EYLsQ7afZX0qN5DpiEhaUSz0
GbWbxzcd3pNkkw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:50:45 2025 by rpki-client