Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft
File: Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft (raw, json)
Hash identifier: CQ41it8k/2F2mZ1V0Z8J4wDtkFzuJn7T++BRpVbx0CQ=
Subject key identifier: 5E:C4:D4:D8:25:39:97:E6:6E:8D:B6:DC:0A:32:D4:82:1E:91:21:67
Authority key identifier: 3A:19:35:B3:CB:C2:52:7E:AF:16:7D:69:B2:07:8D:33:E4:C4:DA:20
Certificate issuer: /CN=3a1935b3cbc2527eaf167d69b2078d33e4c4da20
Certificate serial: 01988AA07AF0373347227BB74DB04B95429F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ohk1s8vCUn6vFn1psgeNM-TE2iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft
Manifest number: 0769
Signing time: Fri 08 Aug 2025 17:00:29 +0000
Manifest this update: Fri 08 Aug 2025 17:00:29 +0000
Manifest next update: Sat 09 Aug 2025 17:00:29 +0000
Files and hashes: 1: M82sfYNUsyqK13nZZfstvwDd7Fs.roa (hash: Pwd9phO+f2VaYBcGPbgT8icjGcqdGdD4Q6fe+fixav0=)
2: Ohk1s8vCUn6vFn1psgeNM-TE2iA.crl (hash: 7yU0cjJPJbawoNgKm5vcUYN9nN7ypPNTgiQrGpBmWZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ohk1s8vCUn6vFn1psgeNM-TE2iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:7a:f0:37:33:47:22:7b:b7:4d:b0:4b:95:42:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1935b3cbc2527eaf167d69b2078d33e4c4da20
Validity
Not Before: Aug 8 17:00:29 2025 GMT
Not After : Aug 9 17:00:29 2025 GMT
Subject: CN=5ec4d4d8253997e66e8db6dc0a32d4821e912167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:09:f4:f1:c9:a0:21:67:99:62:16:88:63:
aa:4a:a6:59:06:16:b8:2e:c4:8f:6f:fa:94:db:4c:
c9:75:d4:61:19:be:ec:89:91:0f:40:e9:c4:79:67:
13:51:59:d2:52:f5:f1:d3:ca:d1:42:01:33:42:e9:
bd:d6:5d:7e:8b:ce:af:24:42:dd:6d:44:0b:bb:75:
49:5a:d7:5d:e9:49:3d:d3:4f:90:63:b3:c2:c3:f9:
b9:f1:3b:76:c5:87:0a:16:f2:e4:95:9b:15:10:d5:
ce:31:f0:bc:34:4a:d0:2f:58:6e:00:ca:41:c3:d7:
dc:6d:f7:ab:5a:e5:2d:32:d6:ca:f1:6c:7d:26:be:
ac:e8:b1:b4:3e:db:99:e8:d4:91:b5:33:88:dc:8d:
83:1a:42:47:34:3f:28:9f:98:1c:f6:36:11:b5:31:
17:b2:dc:2d:33:11:69:84:09:e3:41:f0:ef:ba:c6:
3a:db:03:50:fd:cc:d5:36:df:9c:1a:5e:27:d0:d8:
7a:47:d0:19:e6:7b:c4:eb:11:a5:7e:6c:78:c2:05:
f5:5b:08:b3:19:d7:d1:28:6c:65:37:dd:11:43:3b:
da:94:a5:41:29:3e:97:17:2d:7b:c5:27:3c:4b:50:
c7:0c:21:48:62:c6:6d:2c:ef:a9:c0:b5:ac:cc:1d:
c5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C4:D4:D8:25:39:97:E6:6E:8D:B6:DC:0A:32:D4:82:1E:91:21:67
X509v3 Authority Key Identifier:
keyid:3A:19:35:B3:CB:C2:52:7E:AF:16:7D:69:B2:07:8D:33:E4:C4:DA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ohk1s8vCUn6vFn1psgeNM-TE2iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3e:c5:cb:45:b7:13:70:7c:ec:4a:81:91:0e:ac:b9:e1:67:
fc:01:d2:91:ca:0d:20:f0:bd:34:df:46:e1:54:b5:50:ba:9d:
96:e4:22:b6:90:41:00:b5:de:c7:15:45:0d:24:25:06:3b:42:
fe:22:6c:45:f1:fb:88:f0:5d:57:8a:08:11:d3:bc:89:39:31:
7d:48:f8:25:41:16:ed:ad:aa:c6:6e:66:07:e1:c2:0f:93:f0:
fa:13:7e:ef:0e:d6:28:33:cc:f5:38:34:f7:b8:98:e4:a8:f1:
88:d4:29:8f:3f:40:d8:8c:32:16:69:ee:b9:77:e2:2b:19:7b:
5a:72:c0:34:c2:a6:51:68:1c:ed:c4:00:c8:b9:13:f4:46:95:
fb:00:21:3a:12:f4:35:51:b9:12:f6:ab:25:87:a2:d3:d8:0c:
7d:65:fa:d7:a4:96:0c:60:9f:4e:6b:36:59:f9:e5:86:87:c8:
ca:d8:9e:ca:47:6f:51:be:21:c2:91:36:6b:b2:7b:90:3d:27:
cf:14:57:f6:9d:44:4c:63:2a:cf:ad:87:09:2b:05:58:15:e3:
c0:6f:90:3d:8c:8f:c9:b2:33:dd:bc:34:c4:20:aa:46:07:89:
4c:9e:84:87:11:30:32:8b:f3:5f:37:55:ee:96:f4:79:48:0b:
7b:38:ca:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKoHrwNzNHInu3TbBLlUKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMTkzNWIzY2JjMjUyN2VhZjE2N2Q2OWIyMDc4ZDMzZTRj
NGRhMjAwHhcNMjUwODA4MTcwMDI5WhcNMjUwODA5MTcwMDI5WjAzMTEwLwYDVQQD
Eyg1ZWM0ZDRkODI1Mzk5N2U2NmU4ZGI2ZGMwYTMyZDQ4MjFlOTEyMTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjQJ9PHJoCFnmWIWiGOqSqZZBha4
LsSPb/qU20zJddRhGb7siZEPQOnEeWcTUVnSUvXx08rRQgEzQum91l1+i86vJELd
bUQLu3VJWtdd6Uk900+QY7PCw/m58Tt2xYcKFvLklZsVENXOMfC8NErQL1huAMpB
w9fcbferWuUtMtbK8Wx9Jr6s6LG0PtuZ6NSRtTOI3I2DGkJHND8on5gc9jYRtTEX
stwtMxFphAnjQfDvusY62wNQ/czVNt+cGl4n0Nh6R9AZ5nvE6xGlfmx4wgX1Wwiz
GdfRKGxlN90RQzvalKVBKT6XFy17xSc8S1DHDCFIYsZtLO+pwLWszB3FbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7E1NglOZfmbo223Aoy1IIekSFnMB8GA1UdIwQY
MBaAFDoZNbPLwlJ+rxZ9abIHjTPkxNogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2hrMXM4dkNVbjZ2Rm4xcHNnZU5NLVRFMmlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9mZmZiYTQtMmVmYS00NjVmLWFmOTYt
YWJmODM3YWNlOGU0LzEvT2hrMXM4dkNVbjZ2Rm4xcHNnZU5NLVRFMmlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9mZmZiYTQtMmVmYS00NjVmLWFmOTYtYWJmODM3YWNlOGU0
LzEvT2hrMXM4dkNVbjZ2Rm4xcHNnZU5NLVRFMmlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPz7Fy0W3
E3B87EqBkQ6sueFn/AHSkcoNIPC9NN9G4VS1ULqdluQitpBBALXexxVFDSQlBjtC
/iJsRfH7iPBdV4oIEdO8iTkxfUj4JUEW7a2qxm5mB+HCD5Pw+hN+7w7WKDPM9Tg0
97iY5KjxiNQpjz9A2IwyFmnuuXfiKxl7WnLANMKmUWgc7cQAyLkT9EaV+wAhOhL0
NVG5EvarJYei09gMfWX616SWDGCfTms2WfnlhofIytieykdvUb4hwpE2a7J7kD0n
zxRX9p1ETGMqz62HCSsFWBXjwG+QPYyPybIz3bw0xCCqRgeJTJ6EhxEwMovzXzdV
7pb0eUgLezjKGA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:52 2025 by rpki-client