Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: da9F5F3lNqj28/LTL8uEKVwYM+5E031TpCQytH3MPZU=
Subject key identifier: D3:E3:15:0F:9F:59:DE:35:E1:55:1F:FF:1F:DE:D4:E5:4D:E9:EC:4A
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 01988A32EAB812A4CB149DBE6362AF0DB5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 0D67
Signing time: Fri 08 Aug 2025 15:00:49 +0000
Manifest this update: Fri 08 Aug 2025 15:00:49 +0000
Manifest next update: Sat 09 Aug 2025 15:00:49 +0000
Files and hashes: 1: O4gR5xOTs4Ka7RxFw5S-suo9Yt4.roa (hash: cOb09Q56rNsrHJDt4uCS16lJBMq8eR81lrUaHpUt4e0=)
2: kJ8USl-CuRMFXzbxSgE8sXBGngw.roa (hash: 2xL/58KHP5Hyj8g6eO0RiATHRjr5bChJ+dvKYUca1tI=)
3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: WTh+Sv7GlGHpbpxMwqPlVgUnSLsdEBbOoAbZLy/Z06c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:32:ea:b8:12:a4:cb:14:9d:be:63:62:af:0d:b5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Aug 8 15:00:49 2025 GMT
Not After : Aug 9 15:00:49 2025 GMT
Subject: CN=d3e3150f9f59de35e1551fff1fded4e54de9ec4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f1:7a:a4:91:43:c2:56:13:57:c1:64:1d:f7:
0e:5f:c3:9e:16:ad:a8:bb:e7:cd:8a:58:b4:d0:f9:
ac:dd:ae:0b:e9:ab:82:9e:ba:70:b9:1e:08:e8:99:
1a:ec:07:91:d9:91:2a:cd:36:b1:9b:4d:8e:ad:0b:
dc:11:6d:05:40:49:48:51:39:34:e2:fb:cd:d4:d8:
35:5b:d3:54:f9:fc:63:f3:9a:00:6b:fe:79:49:f5:
ce:78:87:3d:72:20:f4:7c:e8:fd:f0:87:ee:ee:a9:
5b:28:8f:1d:f4:59:e1:d5:14:e8:e7:2b:1c:6d:58:
0f:60:b7:aa:d2:ab:ac:f4:26:a8:b8:81:85:28:83:
c7:a8:3e:e2:ac:91:18:51:9a:be:39:42:bf:f5:2a:
48:02:55:26:04:8a:44:df:45:30:12:12:b8:6a:da:
c6:3f:92:6b:e1:42:49:ee:22:db:36:95:45:3b:b7:
5e:59:d4:a3:31:12:15:00:5f:32:93:2a:81:6e:d6:
23:78:89:8b:4a:66:1d:7e:1b:3b:32:5d:b0:6f:1b:
86:ec:f5:f8:36:dd:f1:4c:f7:ac:3a:97:05:b8:16:
93:64:fc:b5:ea:68:2a:39:07:5c:83:fc:29:50:de:
db:00:d3:33:17:eb:86:f0:d7:c0:a1:79:64:e9:f7:
42:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E3:15:0F:9F:59:DE:35:E1:55:1F:FF:1F:DE:D4:E5:4D:E9:EC:4A
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2f:62:6f:10:70:a8:e7:eb:a0:27:a1:b1:08:df:97:99:65:
96:da:16:1d:42:fd:66:82:80:6a:61:61:41:2c:58:c6:01:6c:
ca:e7:c7:73:b1:78:62:6a:69:f7:94:97:20:72:4a:fa:8d:bf:
26:82:45:66:f4:48:0a:f3:20:fe:94:74:6b:a9:d8:fb:7f:dd:
59:cc:cb:f0:3c:81:72:3a:57:75:24:3f:4a:ec:61:8e:8f:07:
38:46:a3:ff:9b:10:61:55:b3:7d:97:08:94:b6:54:23:63:25:
45:01:9f:81:99:c5:48:6a:3a:bc:d6:6a:62:4f:a5:be:1d:9e:
75:f9:ea:e2:ea:c7:e7:e2:3d:33:69:ae:03:6d:5b:fd:27:05:
f7:78:dc:30:92:bb:a2:61:64:82:b0:37:21:99:80:99:64:03:
2e:43:10:cb:df:80:87:9e:c4:bb:03:cb:ec:1e:53:8d:41:02:
10:37:7b:d4:78:45:2a:fd:43:31:a9:01:2e:62:ec:f1:0a:a5:
70:b5:ae:0e:c7:aa:77:32:e8:80:d0:14:e8:77:4e:cd:0c:3b:
a0:de:68:21:30:b5:5d:11:da:21:83:85:67:60:83:26:08:de:
8a:a1:a9:4e:54:ca:e9:76:dc:b0:85:90:cd:2d:ca:4c:7b:f4:
39:c6:d9:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKMuq4EqTLFJ2+Y2KvDbWtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhODM4ZjFjYThiZGNkODFjMDRiNmI2NzhlNzliZTYxNGU1
MWIxMTEwHhcNMjUwODA4MTUwMDQ5WhcNMjUwODA5MTUwMDQ5WjAzMTEwLwYDVQQD
EyhkM2UzMTUwZjlmNTlkZTM1ZTE1NTFmZmYxZmRlZDRlNTRkZTllYzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvF6pJFDwlYTV8FkHfcOX8OeFq2o
u+fNili00Pms3a4L6auCnrpwuR4I6Jka7AeR2ZEqzTaxm02OrQvcEW0FQElIUTk0
4vvN1Ng1W9NU+fxj85oAa/55SfXOeIc9ciD0fOj98Ifu7qlbKI8d9Fnh1RTo5ysc
bVgPYLeq0qus9CaouIGFKIPHqD7irJEYUZq+OUK/9SpIAlUmBIpE30UwEhK4atrG
P5Jr4UJJ7iLbNpVFO7deWdSjMRIVAF8ykyqBbtYjeImLSmYdfhs7Ml2wbxuG7PX4
Nt3xTPesOpcFuBaTZPy16mgqOQdcg/wpUN7bANMzF+uG8NfAoXlk6fdC/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPjFQ+fWd414VUf/x/e1OVN6exKMB8GA1UdIwQY
MBaAFLqDjxyovc2BwEtrZ455vmFOUbERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzct
MDkzZWI5YTlhYThiLzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzctMDkzZWI5YTlhYThi
LzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYS9ibxBw
qOfroCehsQjfl5llltoWHUL9ZoKAamFhQSxYxgFsyufHc7F4Ympp95SXIHJK+o2/
JoJFZvRICvMg/pR0a6nY+3/dWczL8DyBcjpXdSQ/Suxhjo8HOEaj/5sQYVWzfZcI
lLZUI2MlRQGfgZnFSGo6vNZqYk+lvh2edfnq4urH5+I9M2muA21b/ScF93jcMJK7
omFkgrA3IZmAmWQDLkMQy9+Ah57EuwPL7B5TjUECEDd71HhFKv1DMakBLmLs8Qql
cLWuDseqdzLogNAU6HdOzQw7oN5oITC1XRHaIYOFZ2CDJgjeiqGpTlTK6XbcsIWQ
zS3KTHv0OcbZIg==
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:40:18 2025 by rpki-client