Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
File: oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft (raw, json)
Hash identifier: VQTHbolJse1oGWBdSaMRYoN1mWOj0G3Ly88Kkcv1EQM=
Subject key identifier: DF:14:5B:87:89:D8:3A:03:A5:EC:70:A2:48:A0:51:7F:20:A7:CA:B9
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 01987ED3FDC50F8A3D031B0B42AD7D90C69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
Manifest number: 0B7D
Signing time: Wed 06 Aug 2025 10:01:18 +0000
Manifest this update: Wed 06 Aug 2025 10:01:18 +0000
Manifest next update: Thu 07 Aug 2025 10:01:18 +0000
Files and hashes: 1: I9sseHHLcXl8IcXdLhoUbx9JLxs.roa (hash: C/Kew6JtLz4pztsJd8mKeGa9ZAlJTK60yskRJShN3Uo=)
2: oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl (hash: zzW3X+ibGoMbgLlTxFO0lNngtj06lJRfKCcJHjxHKLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:fd:c5:0f:8a:3d:03:1b:0b:42:ad:7d:90:c6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Aug 6 10:01:18 2025 GMT
Not After : Aug 7 10:01:18 2025 GMT
Subject: CN=df145b8789d83a03a5ec70a248a0517f20a7cab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:f9:9b:b6:a0:3c:b8:9a:b0:fd:d4:60:d5:
b7:57:40:cb:58:5b:95:02:fb:70:c7:4c:0f:87:67:
1a:96:42:f5:65:26:28:27:bc:b6:fb:fa:1f:4b:a2:
b0:00:e6:52:5f:f4:06:86:96:f9:05:8d:5d:e4:c4:
b5:73:91:81:c4:fd:10:46:21:62:64:42:92:a0:69:
35:61:fc:5c:40:bb:e2:94:8d:35:b9:bd:f5:58:77:
85:97:49:f0:ba:30:56:6f:03:92:35:e8:7b:31:ec:
1c:38:c9:41:88:6c:38:4b:ba:41:3e:84:62:22:62:
19:b0:91:64:cb:58:b8:00:a8:ea:d8:4d:5b:bc:3f:
c5:09:ea:b9:42:c1:e2:8c:34:93:6a:8e:8b:a3:2b:
40:8b:58:3d:90:c9:f9:1e:de:7e:86:59:c4:10:de:
66:cd:22:7c:7e:91:4c:03:e0:e9:b4:93:9b:a2:c0:
d4:1a:54:42:2a:21:16:da:89:bf:d3:c0:3b:a6:d4:
91:f0:f5:b6:c1:a9:84:f0:b7:dd:10:b7:18:de:af:
84:66:d5:13:b8:2c:da:cb:9f:fd:f8:a0:d4:e6:e5:
97:4e:f3:bd:40:e5:63:cd:b2:22:b4:41:1e:78:b7:
dd:9f:66:44:88:91:0b:b6:ad:ea:6e:ac:7b:51:5a:
8d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:14:5B:87:89:D8:3A:03:A5:EC:70:A2:48:A0:51:7F:20:A7:CA:B9
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:0b:45:d5:d4:a3:fd:7b:13:15:99:5b:b0:27:35:d2:25:a2:
26:41:40:b8:a0:5d:ca:93:a9:83:d7:1c:ee:45:05:ff:f3:98:
4e:fb:fe:3e:87:80:92:9a:0d:ad:5e:cc:46:8e:70:43:24:2d:
90:42:64:97:ac:d9:e9:9e:0b:4b:b7:3a:ad:4a:ea:e3:32:97:
8e:37:e8:9d:7e:e7:e3:59:4f:2a:a7:de:2e:e0:85:88:d3:00:
de:08:c5:b0:24:08:2a:d4:92:8c:20:68:39:b7:f5:49:80:40:
0b:ed:ae:16:50:68:b1:af:28:ae:b4:c7:2f:92:82:b6:56:fb:
2f:75:a0:35:37:cd:5d:99:2a:df:de:22:aa:71:ee:92:48:46:
fd:66:37:99:96:df:5a:d0:cb:bc:ac:c1:60:6c:e9:b0:89:b3:
22:45:cb:66:e6:68:8d:78:c3:ea:a5:9d:15:8f:39:00:c5:b3:
0d:6c:09:2a:c1:3d:01:58:b5:ff:be:ca:e6:90:5c:84:2d:60:
51:6b:62:fe:94:a1:a7:45:85:0d:ef:c3:26:f9:79:a1:0f:18:
4d:17:71:2f:92:fa:d7:ea:ca:2e:52:00:8a:7d:44:90:54:b3:
3a:87:02:89:98:c9:de:4c:21:26:7f:8f:22:f5:8b:1c:0a:b8:
f6:91:bb:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+0/3FD4o9AxsLQq19kMafMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTY0N2RhYzcyOWY0N2IwNjM2OWM0Yzk3NDFjZjk0Mzk1
M2RjNTkwHhcNMjUwODA2MTAwMTE4WhcNMjUwODA3MTAwMTE4WjAzMTEwLwYDVQQD
EyhkZjE0NWI4Nzg5ZDgzYTAzYTVlYzcwYTI0OGEwNTE3ZjIwYTdjYWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBv5m7agPLiasP3UYNW3V0DLWFuV
Avtwx0wPh2calkL1ZSYoJ7y2+/ofS6KwAOZSX/QGhpb5BY1d5MS1c5GBxP0QRiFi
ZEKSoGk1YfxcQLvilI01ub31WHeFl0nwujBWbwOSNeh7MewcOMlBiGw4S7pBPoRi
ImIZsJFky1i4AKjq2E1bvD/FCeq5QsHijDSTao6LoytAi1g9kMn5Ht5+hlnEEN5m
zSJ8fpFMA+DptJObosDUGlRCKiEW2om/08A7ptSR8PW2wamE8LfdELcY3q+EZtUT
uCzay5/9+KDU5uWXTvO9QOVjzbIitEEeeLfdn2ZEiJELtq3qbqx7UVqNVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8UW4eJ2DoDpexwokigUX8gp8q5MB8GA1UdIwQY
MBaAFKCmR9rHKfR7BjacTJdBz5Q5U9xZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0taSDJzY3A5SHNHTnB4TWwwSFBsRGxUM0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iYTFmODgtNzA3Zi00MWJkLWI5YmQt
ZmI2OTgzY2U5ZGZmLzEvb0taSDJzY3A5SHNHTnB4TWwwSFBsRGxUM0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iYTFmODgtNzA3Zi00MWJkLWI5YmQtZmI2OTgzY2U5ZGZm
LzEvb0taSDJzY3A5SHNHTnB4TWwwSFBsRGxUM0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuwtF1dSj
/XsTFZlbsCc10iWiJkFAuKBdypOpg9cc7kUF//OYTvv+PoeAkpoNrV7MRo5wQyQt
kEJkl6zZ6Z4LS7c6rUrq4zKXjjfonX7n41lPKqfeLuCFiNMA3gjFsCQIKtSSjCBo
Obf1SYBAC+2uFlBosa8orrTHL5KCtlb7L3WgNTfNXZkq394iqnHukkhG/WY3mZbf
WtDLvKzBYGzpsImzIkXLZuZojXjD6qWdFY85AMWzDWwJKsE9AVi1/77K5pBchC1g
UWti/pShp0WFDe/DJvl5oQ8YTRdxL5L61+rKLlIAin1EkFSzOocCiZjJ3kwhJn+P
IvWLHAq49pG7Jg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:10:29 2025 by rpki-client