Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier: ecW/8fQ4GO0ZbLJizq7HT3fJlwsV+AKEtApdaguzsA0=
Subject key identifier: 70:B8:D9:48:94:3F:23:22:11:0E:EA:9A:40:F4:6E:DF:60:62:79:9A
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 0198911113158BDB6A1019E481EEE4FDAF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number: 0B49
Signing time: Sat 09 Aug 2025 23:01:11 +0000
Manifest this update: Sat 09 Aug 2025 23:01:11 +0000
Manifest next update: Sun 10 Aug 2025 23:01:11 +0000
Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: J4ibXq/2oMvkCQQ7NbntWvfDWyrf3/F4zfmmUCWWomw=)
2: cAytH-HDjgmoQUIxFhiNXUzaQk0.roa (hash: WrCK/gy3OkunpeHSieq4WLNSBfAWRn5dFSNNGUA3mvQ=)
3: zlltM2nOjh81UxcytVZozmvMUKM.roa (hash: xAPvFxFilxhJOjDq/sl/DoT41X3vws8/d3NLTmKyCmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:11:13:15:8b:db:6a:10:19:e4:81:ee:e4:fd:af:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Aug 9 23:01:11 2025 GMT
Not After : Aug 10 23:01:11 2025 GMT
Subject: CN=70b8d948943f2322110eea9a40f46edf6062799a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:2d:c6:de:6c:3b:f4:e1:2c:9e:f5:d8:f7:
56:9a:39:19:c6:e4:34:ba:1a:18:26:20:0e:04:f3:
12:dd:7a:1c:59:39:d6:3e:3a:17:47:3c:97:e0:ee:
ca:da:5e:1a:e1:b3:d0:0b:23:da:33:28:0e:05:af:
6c:77:c9:9b:5c:81:e4:6a:3e:75:36:92:56:42:57:
df:f9:b6:2c:b7:79:c3:04:94:e8:33:30:b5:e7:49:
43:76:57:4c:a7:49:5f:b0:6a:d9:06:44:37:62:92:
5f:8a:60:d5:f6:fd:b5:33:0e:74:92:c1:f8:8c:2a:
44:88:0d:9c:ea:0f:14:08:4c:f5:a4:a1:ff:3b:7d:
e9:65:41:84:cf:bd:e8:a4:d5:2e:5b:30:0b:a3:a5:
28:29:9b:22:d5:4f:e0:e5:aa:54:4d:27:5f:5f:d2:
a7:51:b9:03:08:6c:69:91:96:ea:ac:90:ea:7d:9f:
2b:c9:e0:c1:51:05:c5:51:80:df:40:91:39:75:5c:
0e:f2:04:88:55:ad:74:8e:1d:40:d9:4d:1a:d8:93:
f8:66:94:27:87:33:66:6b:f2:1d:61:94:48:83:89:
83:47:f3:6b:39:58:33:6d:3e:72:32:ed:76:96:39:
a0:b7:6b:2e:5c:6e:bd:f2:68:41:ae:54:a4:87:d7:
36:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B8:D9:48:94:3F:23:22:11:0E:EA:9A:40:F4:6E:DF:60:62:79:9A
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9f:b9:57:27:ea:10:ef:26:22:e7:2e:47:72:11:c6:bb:55:
7e:91:c1:65:1e:45:52:1d:0e:67:59:c2:9a:44:9a:af:30:8a:
42:cf:68:b1:0c:a3:9e:9d:05:db:b4:24:7c:54:be:a2:57:3f:
bd:85:18:2d:a1:82:65:1f:64:e1:0e:1c:5b:1b:e3:c0:5c:e9:
8d:69:6f:8d:4c:a8:64:31:d9:3c:75:b7:9a:41:25:fb:6a:22:
94:b3:f6:34:57:a1:46:1d:73:14:35:1a:fe:2d:23:e7:07:03:
25:1b:fe:c2:eb:85:78:37:c6:49:b0:ea:a8:f8:6a:78:fe:65:
07:ef:0a:c6:79:72:0e:cc:ef:01:c4:ce:cf:32:6c:c1:d8:e2:
c9:12:d9:c5:f4:76:26:80:a3:53:d2:61:86:ae:55:65:8e:d6:
f2:d8:1e:16:fc:c6:db:73:a5:af:bd:39:6d:a9:f0:f1:e0:83:
a3:a0:0d:ba:f8:9d:78:70:da:e1:01:4d:81:5f:ce:7f:e0:e4:
cc:bd:f7:77:e2:ad:1c:94:53:ed:77:50:64:e6:d1:63:78:a9:
6b:90:a3:5c:b9:e3:63:1b:81:28:dc:68:5a:3a:a0:0f:e4:e2:
ef:d7:21:6d:98:34:0e:e6:4f:f8:e9:81:15:33:7d:48:19:69:
f8:e9:54:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiRERMVi9tqEBnkge7k/a91MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YTNjZWJiODExMDQ2YTA5NjZlOTU1NGQwN2U1ZDE2YjM2
ZGJmMDQwHhcNMjUwODA5MjMwMTExWhcNMjUwODEwMjMwMTExWjAzMTEwLwYDVQQD
Eyg3MGI4ZDk0ODk0M2YyMzIyMTEwZWVhOWE0MGY0NmVkZjYwNjI3OTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop0txt5sO/ThLJ712PdWmjkZxuQ0
uhoYJiAOBPMS3XocWTnWPjoXRzyX4O7K2l4a4bPQCyPaMygOBa9sd8mbXIHkaj51
NpJWQlff+bYst3nDBJToMzC150lDdldMp0lfsGrZBkQ3YpJfimDV9v21Mw50ksH4
jCpEiA2c6g8UCEz1pKH/O33pZUGEz73opNUuWzALo6UoKZsi1U/g5apUTSdfX9Kn
UbkDCGxpkZbqrJDqfZ8ryeDBUQXFUYDfQJE5dVwO8gSIVa10jh1A2U0a2JP4ZpQn
hzNma/IdYZRIg4mDR/NrOVgzbT5yMu12ljmgt2suXG698mhBrlSkh9c2GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHC42UiUPyMiEQ7qmkD0bt9gYnmaMB8GA1UdIwQY
MBaAFDmjzruBEEaglm6VVNB+XRazbb8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUt
NmYyMWY0Yzc1MWYzLzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUtNmYyMWY0Yzc1MWYz
LzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5+5Vyfq
EO8mIucuR3IRxrtVfpHBZR5FUh0OZ1nCmkSarzCKQs9osQyjnp0F27QkfFS+olc/
vYUYLaGCZR9k4Q4cWxvjwFzpjWlvjUyoZDHZPHW3mkEl+2oilLP2NFehRh1zFDUa
/i0j5wcDJRv+wuuFeDfGSbDqqPhqeP5lB+8KxnlyDszvAcTOzzJswdjiyRLZxfR2
JoCjU9Jhhq5VZY7W8tgeFvzG23Olr705banw8eCDo6ANuvideHDa4QFNgV/Of+Dk
zL33d+KtHJRT7XdQZObRY3ipa5CjXLnjYxuBKNxoWjqgD+Ti79chbZg0DuZP+OmB
FTN9SBlp+OlU/g==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:34:19 2025 by rpki-client