Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
File: oLalsaFMhtTPtGxOhuzUBmgEzJA.mft (raw, json)
Hash identifier: 78h79CS7Iu4AIsQmivl+ZYLHyv3khY1sX1XNcy2kqG8=
Subject key identifier: DA:F4:C2:72:B8:D2:2A:FC:5B:36:F0:46:84:15:6C:D9:DA:79:85:F9
Authority key identifier: A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90
Certificate issuer: /CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90
Certificate serial: 01987E2F0CC2D15EDF165DDC983D700E70F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
Manifest number: 0638
Signing time: Wed 06 Aug 2025 07:01:09 +0000
Manifest this update: Wed 06 Aug 2025 07:01:09 +0000
Manifest next update: Thu 07 Aug 2025 07:01:09 +0000
Files and hashes: 1: MCk_wjcNWplBl8XuQ-Q-tXaOPdg.roa (hash: FrFfJHN2MqG7rUNbBMB2RUeLHgQ0eftZ7IS2VaSzx58=)
2: oLalsaFMhtTPtGxOhuzUBmgEzJA.crl (hash: 9S+0W6XPIO72szbM+4MG3eMCmQJI2vpPYBqnFc1fgh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2f:0c:c2:d1:5e:df:16:5d:dc:98:3d:70:0e:70:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90
Validity
Not Before: Aug 6 07:01:09 2025 GMT
Not After : Aug 7 07:01:09 2025 GMT
Subject: CN=daf4c272b8d22afc5b36f04684156cd9da7985f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:77:28:e3:3f:12:77:c4:98:21:4d:bb:28:
a8:28:bc:ca:80:c3:fe:07:76:97:e3:c6:bb:5e:62:
c6:4e:19:61:3d:71:99:52:d6:ed:04:2b:3d:b1:c6:
09:de:5e:c4:d0:10:d9:56:a2:79:38:e1:34:f6:00:
47:ba:b7:a5:42:d1:1e:66:ce:dc:b6:98:57:92:32:
9f:38:7d:a9:ae:36:2b:9e:34:ea:7b:46:7d:f6:55:
51:9c:9e:fe:0a:02:b4:87:c6:e2:61:e8:1d:33:96:
d0:5d:af:46:7c:08:69:23:48:3f:db:5f:bc:3d:7f:
ec:7b:73:c1:1f:ac:e7:5d:df:12:7e:a8:ea:69:b5:
6a:0c:fa:d1:35:4f:96:fc:99:af:21:c6:be:3a:f4:
53:f3:f3:ec:f4:95:bf:9e:f0:07:ba:c1:cf:3d:8f:
5c:82:4d:46:1a:f2:8c:3f:74:7d:b2:56:3b:7a:54:
ad:f1:15:cb:c6:ff:36:28:65:4a:ae:95:51:5e:e1:
21:2a:ac:62:32:97:fa:4c:42:ad:9f:90:b5:fb:83:
ab:b1:6d:b0:ee:d3:0c:2c:52:07:29:4c:2e:53:0e:
ab:ed:68:24:91:1b:a8:70:ad:54:33:e6:2f:c5:eb:
cc:a2:6a:fb:73:e2:89:18:7c:95:7d:67:e4:f4:cc:
1a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F4:C2:72:B8:D2:2A:FC:5B:36:F0:46:84:15:6C:D9:DA:79:85:F9
X509v3 Authority Key Identifier:
keyid:A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9c:25:f9:c0:e6:a0:71:e0:72:b3:df:e4:95:33:f6:62:39:
a1:ca:5e:a8:32:2a:5a:df:90:bf:5f:92:73:11:71:5c:b4:b6:
93:74:5a:48:f2:cd:10:57:20:69:cb:74:6d:41:60:b6:1d:f0:
a8:d4:e1:6c:9e:8f:6b:dd:c5:94:f9:32:31:cd:e2:24:0c:ee:
71:36:42:85:6d:4d:fc:63:87:1e:d6:5b:b7:84:6a:20:fb:69:
ff:01:f0:af:f8:56:af:85:6e:35:a4:76:df:78:41:b0:ac:70:
05:70:44:be:78:a5:d3:61:68:f9:82:1b:f6:e9:b8:d1:a6:84:
ec:14:06:56:97:ff:e8:bb:b5:99:f3:89:55:f0:52:6f:29:fa:
bd:3e:c0:a7:78:4a:dc:82:4e:81:e4:25:37:9a:e0:e4:68:c9:
af:7a:72:b1:a9:89:65:bf:11:88:0c:13:ef:d1:0c:ef:e2:1f:
59:d1:5e:fb:07:28:5f:c3:38:21:7b:db:3e:e5:b9:6c:8e:3a:
0a:21:52:ee:1c:e4:e9:df:51:5a:93:1e:1b:a9:b5:d0:1d:cb:
00:ac:37:08:56:31:4e:bb:28:1c:e3:0a:32:c9:a5:20:50:74:
a4:f1:3b:66:c1:6d:c2:ff:1c:09:4a:74:1c:74:ba:e8:74:49:
70:92:d0:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+LwzC0V7fFl3cmD1wDnD1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYjZhNWIxYTE0Yzg2ZDRjZmI0NmM0ZTg2ZWNkNDA2Njgw
NGNjOTAwHhcNMjUwODA2MDcwMTA5WhcNMjUwODA3MDcwMTA5WjAzMTEwLwYDVQQD
EyhkYWY0YzI3MmI4ZDIyYWZjNWIzNmYwNDY4NDE1NmNkOWRhNzk4NWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbF3KOM/EnfEmCFNuyioKLzKgMP+
B3aX48a7XmLGThlhPXGZUtbtBCs9scYJ3l7E0BDZVqJ5OOE09gBHurelQtEeZs7c
tphXkjKfOH2prjYrnjTqe0Z99lVRnJ7+CgK0h8biYegdM5bQXa9GfAhpI0g/21+8
PX/se3PBH6znXd8SfqjqabVqDPrRNU+W/JmvIca+OvRT8/Ps9JW/nvAHusHPPY9c
gk1GGvKMP3R9slY7elSt8RXLxv82KGVKrpVRXuEhKqxiMpf6TEKtn5C1+4OrsW2w
7tMMLFIHKUwuUw6r7WgkkRuocK1UM+YvxevMomr7c+KJGHyVfWfk9MwaswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr0wnK40ir8WzbwRoQVbNnaeYX5MB8GA1UdIwQY
MBaAFKC2pbGhTIbUz7RsTobs1AZoBMyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0xhbHNhRk1odFRQdEd4T2h1elVCbWdFekpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lMWZiNTItOTc5ZC00NDM2LWJlNTEt
ODU4NGJlZjBiN2Q1LzEvb0xhbHNhRk1odFRQdEd4T2h1elVCbWdFekpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9lMWZiNTItOTc5ZC00NDM2LWJlNTEtODU4NGJlZjBiN2Q1
LzEvb0xhbHNhRk1odFRQdEd4T2h1elVCbWdFekpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZwl+cDm
oHHgcrPf5JUz9mI5ocpeqDIqWt+Qv1+ScxFxXLS2k3RaSPLNEFcgact0bUFgth3w
qNThbJ6Pa93FlPkyMc3iJAzucTZChW1N/GOHHtZbt4RqIPtp/wHwr/hWr4VuNaR2
33hBsKxwBXBEvnil02Fo+YIb9um40aaE7BQGVpf/6Lu1mfOJVfBSbyn6vT7Ap3hK
3IJOgeQlN5rg5GjJr3pysamJZb8RiAwT79EM7+IfWdFe+wcoX8M4IXvbPuW5bI46
CiFS7hzk6d9RWpMeG6m10B3LAKw3CFYxTrsoHOMKMsmlIFB0pPE7ZsFtwv8cCUp0
HHS66HRJcJLQbQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:59:26 2025 by rpki-client