Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: YE/bz/oCNjn96gGA9t91NCojmdxxZzrecpM6GEGYhIs=
Subject key identifier: 93:B1:0C:10:79:12:50:B1:BD:D7:9C:EB:87:8C:8C:5B:6E:2C:D8:BA
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 01988166CFF35276EFE8B039B733FD031597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 22:00:55 +0000
Manifest this update: Wed 06 Aug 2025 22:00:55 +0000
Manifest next update: Thu 07 Aug 2025 22:00:55 +0000
Files and hashes: 1: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: TJD/olcYX47OAINi2I3iNyGjhM9MkjVxxB7wCBP/dAY=)
2: qPThmJkS6FxAgaSTFhSE99KManI.roa (hash: Do8CZ36UGaGoT9RKraM+Tjl00O5s0+cXk4PDU/3dbE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:cf:f3:52:76:ef:e8:b0:39:b7:33:fd:03:15:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Aug 6 22:00:55 2025 GMT
Not After : Aug 7 22:00:55 2025 GMT
Subject: CN=93b10c10791250b1bdd79ceb878c8c5b6e2cd8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e1:1d:6f:c7:5c:05:c4:a8:9f:2a:68:99:cd:
03:af:34:3e:13:23:7a:1e:9e:53:eb:ba:03:8c:a2:
d9:66:30:8c:a2:20:e5:1f:62:04:59:a5:ee:80:e6:
06:21:c6:0f:bc:ce:30:3e:21:9f:6a:7d:a7:dd:ae:
da:ca:cc:9a:c5:00:c4:49:e5:94:a0:5f:47:ee:19:
5e:14:11:19:c4:fc:e9:8a:a1:08:dc:71:40:7d:a8:
dd:1e:89:8c:7d:8b:a0:6f:54:55:77:68:a4:61:51:
fb:23:7f:1c:06:d8:e6:32:ee:74:b2:dc:10:9a:b5:
e5:a9:18:3b:9e:83:92:92:4c:01:7f:8c:87:12:ad:
ba:1f:f8:eb:b0:e4:cd:8c:b4:bf:8f:eb:e6:6d:97:
83:92:16:c9:76:7b:a0:d0:95:02:4f:45:4c:ee:4f:
5c:9c:41:f8:ea:5e:87:47:72:a3:39:54:d1:0f:9b:
99:03:05:91:d1:4a:ab:2b:87:2c:63:3c:66:aa:ae:
0a:27:27:ce:e6:d3:e3:7d:c9:15:ff:1e:2d:77:5b:
92:7e:75:5f:ad:0b:ce:21:88:90:cf:c9:76:9a:d0:
6e:fd:63:0f:d9:30:38:0c:ad:ec:63:ed:ba:d4:ab:
30:77:01:83:23:69:0f:3d:89:b7:1f:b4:3f:d3:92:
84:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B1:0C:10:79:12:50:B1:BD:D7:9C:EB:87:8C:8C:5B:6E:2C:D8:BA
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:38:dd:a1:65:d2:c5:c0:e8:33:ad:48:ba:9b:d3:31:b1:f0:
80:88:07:82:89:63:63:60:1f:7f:3a:20:92:bb:92:27:10:66:
87:76:0f:09:9e:9e:4f:c1:ea:3f:4f:59:c0:b1:de:34:85:72:
8a:b9:bc:8e:60:ad:f1:25:47:19:c1:27:0f:3e:3f:5f:73:17:
1e:d3:86:23:b6:22:9d:90:fa:c1:8e:a0:b5:40:02:d4:01:e9:
52:f5:a5:a7:0f:a9:f5:d7:d2:46:cb:88:51:11:36:49:df:1e:
4e:b0:74:f1:66:05:8f:92:df:ed:80:60:c8:31:a3:84:03:26:
ec:2d:20:48:44:ec:43:3e:09:6d:9d:99:f9:8b:76:81:30:f5:
86:7c:83:c8:95:6f:80:99:dd:d0:19:19:b8:fe:4e:60:10:87:
f5:fa:53:ae:25:16:13:f8:e3:d6:77:83:f9:82:33:57:36:e9:
93:e3:6c:27:69:0e:2a:9f:f8:19:42:89:33:9f:ae:12:0d:8c:
85:27:3e:22:2d:cd:22:e2:4d:55:09:1d:ea:76:51:83:e7:93:
54:b9:a1:54:bf:30:44:fd:37:15:9d:39:f0:77:86:b0:e9:c0:
ad:1a:69:14:31:1d:7d:ba:da:78:e7:9d:54:2b:08:fb:65:03:
c9:e4:70:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZs/zUnbv6LA5tzP9AxWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMTk2NmM1YWI0ZWEwNjczY2M0MWM3ODZlMDc3ODM5NGI4
YmRhY2YwHhcNMjUwODA2MjIwMDU1WhcNMjUwODA3MjIwMDU1WjAzMTEwLwYDVQQD
Eyg5M2IxMGMxMDc5MTI1MGIxYmRkNzljZWI4NzhjOGM1YjZlMmNkOGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheEdb8dcBcSonypomc0DrzQ+EyN6
Hp5T67oDjKLZZjCMoiDlH2IEWaXugOYGIcYPvM4wPiGfan2n3a7aysyaxQDESeWU
oF9H7hleFBEZxPzpiqEI3HFAfajdHomMfYugb1RVd2ikYVH7I38cBtjmMu50stwQ
mrXlqRg7noOSkkwBf4yHEq26H/jrsOTNjLS/j+vmbZeDkhbJdnug0JUCT0VM7k9c
nEH46l6HR3KjOVTRD5uZAwWR0UqrK4csYzxmqq4KJyfO5tPjfckV/x4td1uSfnVf
rQvOIYiQz8l2mtBu/WMP2TA4DK3sY+261KswdwGDI2kPPYm3H7Q/05KESwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOxDBB5ElCxvdec64eMjFtuLNi6MB8GA1UdIwQY
MBaAFKEZZsWrTqBnPMQceG4HeDlLi9rPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMjBlMzItNzkzYy00ZTIzLTlkZDgt
NGE3NWExNDEyMWJmLzEvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8xMjBlMzItNzkzYy00ZTIzLTlkZDgtNGE3NWExNDEyMWJm
LzEvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDjdoWXS
xcDoM61IupvTMbHwgIgHgoljY2AffzogkruSJxBmh3YPCZ6eT8HqP09ZwLHeNIVy
irm8jmCt8SVHGcEnDz4/X3MXHtOGI7YinZD6wY6gtUAC1AHpUvWlpw+p9dfSRsuI
URE2Sd8eTrB08WYFj5Lf7YBgyDGjhAMm7C0gSETsQz4JbZ2Z+Yt2gTD1hnyDyJVv
gJnd0BkZuP5OYBCH9fpTriUWE/jj1neD+YIzVzbpk+NsJ2kOKp/4GUKJM5+uEg2M
hSc+Ii3NIuJNVQkd6nZRg+eTVLmhVL8wRP03FZ058HeGsOnArRppFDEdfbraeOed
VCsI+2UDyeRwYA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:11:08 2025 by rpki-client