Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
File: oHFXHI4QtBnXo7824Qhf_VzXipg.mft (raw, json)
Hash identifier: xU9ontfEVVFNy+62er7zgfvqQSFuu5CYaYFfTCpEifg=
Subject key identifier: 48:9F:80:55:C6:9B:22:7B:1F:46:03:4C:D3:EE:B1:02:BF:DD:44:55
Authority key identifier: A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
Certificate issuer: /CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Certificate serial: 0198A15F787717978FC8D2B5A9EAE018FEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
Manifest number: 0FF6
Signing time: Wed 13 Aug 2025 03:00:45 +0000
Manifest this update: Wed 13 Aug 2025 03:00:45 +0000
Manifest next update: Thu 14 Aug 2025 03:00:45 +0000
Files and hashes: 1: _RMv1Q7O2CnoWhcrAcn90ZX5USk.roa (hash: I2FYErDanPUJADaKO92Q6jyRK2EK15cN4Qdxt/bs9vQ=)
2: oHFXHI4QtBnXo7824Qhf_VzXipg.crl (hash: KISuPrrhfnQVUnyDPQDpxiTWvyw+nNbG3jFf/zZ1Jn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:5f:78:77:17:97:8f:c8:d2:b5:a9:ea:e0:18:fe:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Validity
Not Before: Aug 13 03:00:45 2025 GMT
Not After : Aug 14 03:00:45 2025 GMT
Subject: CN=489f8055c69b227b1f46034cd3eeb102bfdd4455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:d6:3a:46:11:be:47:91:e3:92:92:78:51:
79:8d:ae:5d:b0:45:ac:0d:c3:52:2b:c2:ec:94:69:
bf:cc:c2:11:94:f7:b3:e0:8d:5e:ce:8d:48:11:63:
c2:ae:6c:e4:57:04:85:b0:04:bb:d0:6d:db:81:b4:
78:4c:1e:44:18:88:b0:a3:f2:15:0a:66:3a:c7:f0:
84:f9:e6:be:b3:55:32:5a:c4:ad:b9:7a:78:7b:61:
1b:9d:f7:51:13:a5:fa:95:13:c5:0a:56:80:71:74:
1e:2e:ea:18:79:77:8f:ee:98:ff:79:bd:05:71:cd:
56:d2:6d:4c:b8:0f:ef:f3:15:c2:15:e2:a4:0a:da:
c1:0e:26:c5:6b:ee:50:42:62:05:9f:b0:db:14:9a:
c3:8e:a2:94:93:eb:61:f0:b2:4c:e6:43:25:58:a2:
a0:87:d6:02:b4:8a:e1:85:43:df:4f:66:b6:45:33:
cc:43:4d:c2:df:f2:35:de:78:c0:39:e1:a8:15:5c:
42:3a:fb:66:eb:05:ea:85:b5:ca:fb:8f:32:65:39:
4a:b0:7c:77:67:e9:1e:93:3e:32:78:d8:95:cf:1a:
1c:9d:1f:8e:5b:8f:59:42:4e:f2:14:4a:39:7e:fb:
8f:03:e6:9f:c1:24:23:b3:e1:09:7e:b4:27:ee:6c:
9f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9F:80:55:C6:9B:22:7B:1F:46:03:4C:D3:EE:B1:02:BF:DD:44:55
X509v3 Authority Key Identifier:
keyid:A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bf:ca:f1:14:f4:5b:ad:5a:3a:26:56:bf:7c:d2:06:8e:a9:
99:08:91:6a:02:42:7a:f8:9f:6a:97:02:bb:21:da:e2:7a:64:
82:04:0a:a7:d5:bc:85:f4:ca:1f:2b:6c:8b:ae:45:db:db:63:
c6:01:f4:3f:12:3c:9a:23:98:81:cb:05:a5:06:c9:8c:a4:86:
5e:7b:d0:80:2b:2d:ab:0c:21:78:57:f4:51:b1:84:de:01:e2:
2c:fc:f0:82:2c:f4:7c:08:87:5d:c9:29:c7:9d:72:a3:fc:18:
90:8e:51:4e:8d:71:42:9c:85:b3:cd:15:ab:96:40:79:89:5d:
99:f1:7f:d6:e0:02:d0:86:b4:ef:c5:eb:0c:9a:73:3b:97:25:
6b:71:03:03:15:85:45:d9:a3:0c:40:cb:05:31:9b:2f:91:74:
77:dd:e2:8e:cd:cf:4d:88:29:ec:41:ef:66:fb:3d:6d:81:f3:
40:0c:6f:69:0e:da:fb:ca:9c:7e:62:6f:ea:59:3c:ad:84:4e:
96:80:4b:9d:5d:c8:9d:d3:c8:15:5f:90:32:84:17:c4:b4:12:
3d:93:1a:d8:b9:3f:55:a7:79:9f:a6:b9:5b:1e:ff:99:05:5f:
4a:86:c7:2f:4b:6b:8a:77:d9:c6:f5:29:a6:00:04:72:5f:90:
6a:39:6f:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZihX3h3F5ePyNK1qergGP6yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNzE1NzFjOGUxMGI0MTlkN2EzYmYzNmUxMDg1ZmZkNWNk
NzhhOTgwHhcNMjUwODEzMDMwMDQ1WhcNMjUwODE0MDMwMDQ1WjAzMTEwLwYDVQQD
Eyg0ODlmODA1NWM2OWIyMjdiMWY0NjAzNGNkM2VlYjEwMmJmZGQ0NDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bbWOkYRvkeR45KSeFF5ja5dsEWs
DcNSK8LslGm/zMIRlPez4I1ezo1IEWPCrmzkVwSFsAS70G3bgbR4TB5EGIiwo/IV
CmY6x/CE+ea+s1UyWsStuXp4e2EbnfdRE6X6lRPFClaAcXQeLuoYeXeP7pj/eb0F
cc1W0m1MuA/v8xXCFeKkCtrBDibFa+5QQmIFn7DbFJrDjqKUk+th8LJM5kMlWKKg
h9YCtIrhhUPfT2a2RTPMQ03C3/I13njAOeGoFVxCOvtm6wXqhbXK+48yZTlKsHx3
Z+kekz4yeNiVzxocnR+OW49ZQk7yFEo5fvuPA+afwSQjs+EJfrQn7myfLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEifgFXGmyJ7H0YDTNPusQK/3URVMB8GA1UdIwQY
MBaAFKBxVxyOELQZ16O/NuEIX/1c14qYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0hGWEhJNFF0Qm5Ybzc4MjRRaGZfVnpYaXBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9jMjgyOWYtYjNlZC00NGQzLWE1Y2Yt
MGMxZjY5YjdhZWU3LzEvb0hGWEhJNFF0Qm5Ybzc4MjRRaGZfVnpYaXBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9jMjgyOWYtYjNlZC00NGQzLWE1Y2YtMGMxZjY5YjdhZWU3
LzEvb0hGWEhJNFF0Qm5Ybzc4MjRRaGZfVnpYaXBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPr/K8RT0
W61aOiZWv3zSBo6pmQiRagJCevifapcCuyHa4npkggQKp9W8hfTKHytsi65F29tj
xgH0PxI8miOYgcsFpQbJjKSGXnvQgCstqwwheFf0UbGE3gHiLPzwgiz0fAiHXckp
x51yo/wYkI5RTo1xQpyFs80Vq5ZAeYldmfF/1uAC0Ia078XrDJpzO5cla3EDAxWF
RdmjDEDLBTGbL5F0d93ijs3PTYgp7EHvZvs9bYHzQAxvaQ7a+8qcfmJv6lk8rYRO
loBLnV3IndPIFV+QMoQXxLQSPZMa2Lk/Vad5n6a5Wx7/mQVfSobHL0trinfZxvUp
pgAEcl+Qajlv6Q==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:43 2025 by rpki-client