Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
File: oiw84jcbnyHFfgw6V4fZWnNctQA.mft (raw, json)
Hash identifier: U6QkN77dzssYp/ZhwJvE71ZuBh2+5zFN4/1rsfCEbOQ=
Subject key identifier: 29:03:E6:B3:DB:D8:15:1A:21:FF:F6:44:8E:3F:4B:84:29:18:E7:BA
Authority key identifier: A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
Certificate issuer: /CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Certificate serial: 01988AA101CBD4155195A7F88819DBA229B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
Manifest number: 101D
Signing time: Fri 08 Aug 2025 17:01:04 +0000
Manifest this update: Fri 08 Aug 2025 17:01:04 +0000
Manifest next update: Sat 09 Aug 2025 17:01:04 +0000
Files and hashes: 1: U4H4DXiB1R3t2sbazcIxIzp8LJM.roa (hash: d9YRAg9H/qZYSSHmjXFBkp2EkGuj36QH5Z/4fdmKOEA=)
2: oiw84jcbnyHFfgw6V4fZWnNctQA.crl (hash: DC5cpQNsf+v8XtFUyPSd6tD7axCwcgiloUHoL+r6sTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a1:01:cb:d4:15:51:95:a7:f8:88:19:db:a2:29:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Validity
Not Before: Aug 8 17:01:04 2025 GMT
Not After : Aug 9 17:01:04 2025 GMT
Subject: CN=2903e6b3dbd8151a21fff6448e3f4b842918e7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:56:68:7d:51:70:1c:03:e9:10:64:a6:5d:
f0:af:70:b2:13:00:0d:99:a6:d3:d5:13:93:ec:6c:
86:f8:b0:a7:65:b3:74:9b:be:ce:a7:e6:0e:b7:cd:
bf:e3:06:21:6a:b1:9b:ca:c1:a1:47:cb:ad:d3:d7:
95:f8:8b:b6:04:85:8b:1e:59:cb:bf:fb:56:6e:c1:
7e:3d:6b:fe:47:26:e2:2f:cb:dc:e5:9b:77:86:08:
ad:58:46:01:c5:5e:4d:84:4b:5e:1b:09:a7:5d:fd:
b0:98:43:02:19:52:bb:fe:1e:35:e8:b9:37:60:ce:
8c:e5:2d:12:1a:51:37:85:32:9a:e5:eb:37:f2:51:
28:f6:8e:24:c1:cc:cf:87:5c:2e:db:10:53:c0:f6:
66:61:f8:c6:30:53:63:ef:e2:2f:92:51:1f:f8:03:
19:af:6a:38:b2:57:cd:55:71:71:fa:bd:51:38:97:
ed:43:cf:24:8c:d6:7f:4d:0b:b3:fd:a5:cb:08:7a:
f1:b7:af:11:f5:67:7e:1b:43:49:cb:e6:14:b6:b0:
04:13:46:b8:de:61:61:45:b4:b1:7f:18:bb:44:82:
b5:75:a2:5d:d5:fd:3d:e8:ab:d5:b4:54:34:43:44:
a8:41:a1:da:8a:d6:32:70:8c:eb:6e:a4:ce:ee:4d:
8a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:03:E6:B3:DB:D8:15:1A:21:FF:F6:44:8E:3F:4B:84:29:18:E7:BA
X509v3 Authority Key Identifier:
keyid:A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fa:9a:da:e3:e8:4c:83:45:24:a6:f8:3a:94:e3:5d:92:4c:
39:1a:02:f9:33:c1:e8:45:28:ba:00:01:cf:46:7c:26:2d:71:
b7:7f:18:a7:21:ed:a6:e3:e1:29:8a:d9:8a:07:b3:9c:71:6c:
6f:57:94:84:d3:31:f8:43:7e:e2:f7:6b:f0:e2:e0:8f:4f:38:
bc:f3:2d:58:26:f1:8b:c5:b9:3c:a7:b1:f9:06:2a:3a:9e:1b:
78:22:bd:33:7a:09:62:86:c8:23:01:82:24:6a:63:62:34:83:
d5:3f:fc:14:17:cc:18:22:d1:c0:fa:d2:7a:21:8c:5e:2e:c8:
e1:8d:be:c1:f4:cc:19:3a:87:7b:2c:4f:a8:13:c1:1f:b1:36:
80:c3:98:ca:42:08:43:66:38:14:38:48:bd:1f:78:1f:7c:fc:
cb:13:41:be:56:0a:ee:6d:31:3d:9e:8e:d2:84:45:fb:42:4a:
cf:8c:e2:04:9c:63:17:f7:c5:96:5b:0e:d9:81:fe:60:51:1e:
d4:ce:bb:5c:28:0e:4f:1c:19:32:25:b9:1f:43:5e:24:40:41:
75:5a:d6:58:97:f1:c0:d1:34:ef:bf:ef:4d:80:32:44:35:26:
aa:40:ba:32:59:ce:41:55:f5:18:e8:89:8d:8a:1b:60:f5:28:
76:ae:3b:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKoQHL1BVRlaf4iBnboim4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMmMzY2UyMzcxYjlmMjFjNTdlMGMzYTU3ODdkOTVhNzM1
Y2I1MDAwHhcNMjUwODA4MTcwMTA0WhcNMjUwODA5MTcwMTA0WjAzMTEwLwYDVQQD
EygyOTAzZTZiM2RiZDgxNTFhMjFmZmY2NDQ4ZTNmNGI4NDI5MThlN2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq11WaH1RcBwD6RBkpl3wr3CyEwAN
mabT1ROT7GyG+LCnZbN0m77Op+YOt82/4wYharGbysGhR8ut09eV+Iu2BIWLHlnL
v/tWbsF+PWv+RybiL8vc5Zt3hgitWEYBxV5NhEteGwmnXf2wmEMCGVK7/h416Lk3
YM6M5S0SGlE3hTKa5es38lEo9o4kwczPh1wu2xBTwPZmYfjGMFNj7+IvklEf+AMZ
r2o4slfNVXFx+r1ROJftQ88kjNZ/TQuz/aXLCHrxt68R9Wd+G0NJy+YUtrAEE0a4
3mFhRbSxfxi7RIK1daJd1f096KvVtFQ0Q0SoQaHaitYycIzrbqTO7k2KkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkD5rPb2BUaIf/2RI4/S4QpGOe6MB8GA1UdIwQY
MBaAFKIsPOI3G58hxX4MOleH2VpzXLUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2l3ODRqY2JueUhGZmd3NlY0ZlpXbk5jdFFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81MDZlYzgtMTUwZi00Mjc1LWFjMDUt
MDUzOTNmMmIzYTQ3LzEvb2l3ODRqY2JueUhGZmd3NlY0ZlpXbk5jdFFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81MDZlYzgtMTUwZi00Mjc1LWFjMDUtMDUzOTNmMmIzYTQ3
LzEvb2l3ODRqY2JueUhGZmd3NlY0ZlpXbk5jdFFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/qa2uPo
TINFJKb4OpTjXZJMORoC+TPB6EUougABz0Z8Ji1xt38YpyHtpuPhKYrZigeznHFs
b1eUhNMx+EN+4vdr8OLgj084vPMtWCbxi8W5PKex+QYqOp4beCK9M3oJYobIIwGC
JGpjYjSD1T/8FBfMGCLRwPrSeiGMXi7I4Y2+wfTMGTqHeyxPqBPBH7E2gMOYykII
Q2Y4FDhIvR94H3z8yxNBvlYK7m0xPZ6O0oRF+0JKz4ziBJxjF/fFllsO2YH+YFEe
1M67XCgOTxwZMiW5H0NeJEBBdVrWWJfxwNE077/vTYAyRDUmqkC6MlnOQVX1GOiJ
jYobYPUodq47fQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 03:04:22 2025 by rpki-client