Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
File: ojIkxQF9NOzcKNDPNkQtZb754KA.mft (raw, json)
Hash identifier: 5J04aWrCHLZib+UZ66VwPncjLTPwsz02dP2kBX0aTEo=
Subject key identifier: E4:05:CA:B7:28:6B:AA:33:F2:B8:5E:C9:F7:C1:D1:12:C9:0C:70:02
Authority key identifier: A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
Certificate issuer: /CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Certificate serial: 01987B2E20EE127C8EBFA7F063C951E9A614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
Manifest number: 1624
Signing time: Tue 05 Aug 2025 17:01:17 +0000
Manifest this update: Tue 05 Aug 2025 17:01:17 +0000
Manifest next update: Wed 06 Aug 2025 17:01:17 +0000
Files and hashes: 1: bEhBHj_5ND7DPkcxJc-eHtfnjVE.roa (hash: q7DP36VzuoeI79R3/z9nukbV52RDnraBhFmpjcuFOJ0=)
2: fUWog8dQyKlZmDz3Jt4aoMe12ZM.roa (hash: m7C2vWzzKK+0unJuovK786RQ7kI+1mqtBwzlHAjE+E0=)
3: ojIkxQF9NOzcKNDPNkQtZb754KA.crl (hash: ZaqT5wXmG7Wi669JNmeyEpQnNh4Cg6zDe+EubURZjn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2e:20:ee:12:7c:8e:bf:a7:f0:63:c9:51:e9:a6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Validity
Not Before: Aug 5 17:01:17 2025 GMT
Not After : Aug 6 17:01:17 2025 GMT
Subject: CN=e405cab7286baa33f2b85ec9f7c1d112c90c7002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:3a:55:17:88:e9:6c:49:58:e9:e1:6b:72:
6c:8b:9d:73:76:2d:c9:d1:b9:c8:cb:c0:ef:77:70:
4f:20:53:96:b5:91:65:d7:9a:aa:a6:c2:53:ee:85:
9b:c6:d5:7a:8f:5c:00:b3:75:50:19:3b:f1:be:a7:
16:5e:3d:72:87:22:a4:09:16:a1:85:f5:81:bb:5c:
c6:b0:76:d2:89:14:d5:5e:02:61:f3:00:33:f3:c8:
77:62:4d:80:09:36:19:17:11:79:9c:55:12:82:13:
68:61:43:b8:ae:39:cd:19:c5:cc:4f:b4:c1:ce:54:
99:99:d6:c7:34:a8:98:f8:aa:2b:81:72:99:c8:bc:
1d:d4:1b:7d:f4:8a:59:e1:76:0a:4f:0b:e0:72:fd:
1e:9a:85:be:1b:7a:5e:3e:d6:82:d5:f3:12:3e:2c:
1a:38:6e:7c:71:29:61:5f:66:89:d1:6f:75:7e:71:
66:fa:1b:12:12:1c:53:3d:17:8f:45:60:9e:b8:47:
5f:99:4f:e6:ed:45:3a:1b:6c:b8:f8:98:ed:e1:3b:
31:af:02:77:21:99:e8:d9:d2:d4:0b:8c:13:ee:ac:
c8:06:68:38:3d:fa:b1:bb:47:d5:84:f1:e3:e0:5b:
49:26:90:31:b5:0c:fa:63:5e:54:23:c6:86:08:b1:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:05:CA:B7:28:6B:AA:33:F2:B8:5E:C9:F7:C1:D1:12:C9:0C:70:02
X509v3 Authority Key Identifier:
keyid:A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:0f:64:77:ac:52:4b:fc:3f:e8:af:c4:49:43:db:bf:06:0e:
0b:ae:e2:8b:98:11:59:c5:e2:1c:38:50:05:25:c4:17:26:12:
3d:85:8d:e4:47:32:cd:9a:22:58:10:4c:5a:b2:81:e7:35:2f:
4a:86:c8:0f:0f:d7:87:7b:c7:df:4c:c1:ae:42:70:e6:0f:c6:
70:42:5c:4b:4c:e6:be:54:d6:02:a2:c8:cf:93:f8:24:b3:fa:
f8:90:4f:3f:23:01:d7:d9:62:1e:ca:b0:a4:b9:c7:a7:8c:41:
26:e7:6d:cc:54:c9:84:34:8f:60:b3:cd:6f:cc:ee:7f:f3:db:
9c:9d:b6:72:b8:38:be:d5:6f:36:df:21:86:c1:36:3b:96:62:
e8:13:d9:c9:d8:53:4e:e0:95:a9:46:b0:f5:1d:b0:73:34:ab:
e0:29:30:a9:d5:9d:1f:3e:79:4e:97:4c:bc:47:ef:e1:2e:b9:
89:76:d5:51:1a:55:43:72:63:4f:98:f9:c6:81:43:2e:3d:c4:
1f:da:4b:6d:08:d6:76:fc:6e:4b:55:b4:fe:76:97:4c:eb:1c:
2f:a8:c4:aa:e5:12:2e:71:fb:6f:86:a1:a3:95:94:b5:56:dd:
f8:46:eb:1f:94:38:04:3b:af:89:73:0a:43:d6:30:c6:20:60:
1e:01:f0:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7LiDuEnyOv6fwY8lR6aYUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMzIyNGM1MDE3ZDM0ZWNkYzI4ZDBjZjM2NDQyZDY1YmVm
OWUwYTAwHhcNMjUwODA1MTcwMTE3WhcNMjUwODA2MTcwMTE3WjAzMTEwLwYDVQQD
EyhlNDA1Y2FiNzI4NmJhYTMzZjJiODVlYzlmN2MxZDExMmM5MGM3MDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaI6VReI6WxJWOnha3Jsi51zdi3J
0bnIy8Dvd3BPIFOWtZFl15qqpsJT7oWbxtV6j1wAs3VQGTvxvqcWXj1yhyKkCRah
hfWBu1zGsHbSiRTVXgJh8wAz88h3Yk2ACTYZFxF5nFUSghNoYUO4rjnNGcXMT7TB
zlSZmdbHNKiY+KorgXKZyLwd1Bt99IpZ4XYKTwvgcv0emoW+G3pePtaC1fMSPiwa
OG58cSlhX2aJ0W91fnFm+hsSEhxTPRePRWCeuEdfmU/m7UU6G2y4+Jjt4TsxrwJ3
IZno2dLUC4wT7qzIBmg4Pfqxu0fVhPHj4FtJJpAxtQz6Y15UI8aGCLGysQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQFyrcoa6oz8rheyffB0RLJDHACMB8GA1UdIwQY
MBaAFKIyJMUBfTTs3CjQzzZELWW++eCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yMjdkMTQtZDc1MS00NTczLTk5MTkt
ZmVjOGE4MGVkMjMzLzEvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yMjdkMTQtZDc1MS00NTczLTk5MTktZmVjOGE4MGVkMjMz
LzEvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMA9kd6xS
S/w/6K/ESUPbvwYOC67ii5gRWcXiHDhQBSXEFyYSPYWN5EcyzZoiWBBMWrKB5zUv
SobIDw/Xh3vH30zBrkJw5g/GcEJcS0zmvlTWAqLIz5P4JLP6+JBPPyMB19liHsqw
pLnHp4xBJudtzFTJhDSPYLPNb8zuf/PbnJ22crg4vtVvNt8hhsE2O5Zi6BPZydhT
TuCVqUaw9R2wczSr4CkwqdWdHz55TpdMvEfv4S65iXbVURpVQ3JjT5j5xoFDLj3E
H9pLbQjWdvxuS1W0/naXTOscL6jEquUSLnH7b4aho5WUtVbd+EbrH5Q4BDuviXMK
Q9YwxiBgHgHw7g==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:34:11 2025 by rpki-client