Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
File: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft (raw, json)
Hash identifier: sbm4C/FaDMbxor4pcwuGJAhpFOQ7Gw3JWtxXNlnaIl4=
Subject key identifier: 0E:0A:B4:47:36:82:E0:97:D9:EA:F4:94:DB:CE:BB:28:92:EC:2F:59
Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a
Certificate serial: 01987B2D7BA5A7B486171D914611B5513BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
Manifest number: 0E49
Signing time: Tue 05 Aug 2025 17:00:34 +0000
Manifest this update: Tue 05 Aug 2025 17:00:34 +0000
Manifest next update: Wed 06 Aug 2025 17:00:34 +0000
Files and hashes: 1: 1C8ZLPGb7cs83tfkfpBebyBiX7w.roa (hash: tZDyBN3FPva2cn/hbdxMAaSyUjVLmEX+ROsYp3y9P/E=)
2: 2V2wgHU2PI3brwoPOMDaDc7IkC4.roa (hash: 5qFS24zNGXVe6S2Vcqz/MzGu4AiLpsxGOww3SFLkJW8=)
3: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl (hash: NzlIKugZZAxEh2Op1c7Oki0JQyrW1PqTrzz8QYzvreU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:7b:a5:a7:b4:86:17:1d:91:46:11:b5:51:3b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a
Validity
Not Before: Aug 5 17:00:34 2025 GMT
Not After : Aug 6 17:00:34 2025 GMT
Subject: CN=0e0ab4473682e097d9eaf494dbcebb2892ec2f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:16:29:94:5e:b1:08:5c:af:1b:a5:46:a4:29:
68:41:de:fe:eb:69:ab:f2:75:6c:66:d9:b8:04:f6:
42:df:0b:02:2a:e5:99:f3:da:b8:58:ca:a3:39:c4:
df:0e:5b:b0:fe:a0:88:17:ef:85:65:97:b2:fc:a8:
2c:d3:2e:e6:e5:51:c5:82:64:2f:fd:61:31:ee:d6:
93:ae:c0:51:34:af:74:85:76:25:02:a4:25:77:fb:
32:33:45:3c:73:49:e4:d0:d2:90:5b:aa:9f:58:80:
dc:b8:3f:52:e5:4a:3f:f9:b9:d4:ce:ee:d0:6e:ef:
45:0b:26:04:d2:dc:74:ad:ca:2a:c7:f7:7e:a4:a9:
73:6e:29:b0:81:55:5f:9d:39:5e:22:ef:84:5a:e0:
c2:dc:62:10:04:69:c4:e3:63:c4:b0:0b:6a:f4:fe:
d0:26:35:c0:95:93:e5:5c:d5:97:50:4c:72:9c:d9:
eb:9a:9b:c5:5d:0b:da:91:c0:9f:31:0e:5d:af:0b:
e3:ab:b6:34:52:4d:95:b3:00:0f:98:98:de:01:34:
a4:72:7e:f0:90:3b:38:4a:37:bc:02:3f:61:90:5d:
f7:b5:89:d8:2b:5a:8c:63:72:4a:85:57:81:58:27:
f2:d2:fa:3b:55:0a:79:d6:ef:d1:57:aa:d5:96:0d:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0A:B4:47:36:82:E0:97:D9:EA:F4:94:DB:CE:BB:28:92:EC:2F:59
X509v3 Authority Key Identifier:
keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:65:38:d8:91:c8:31:fe:bf:d2:40:cc:88:91:89:46:21:9e:
f0:52:af:c4:b9:65:ed:ed:96:5c:6d:4f:d9:f4:39:40:4d:c7:
6d:c1:59:12:df:3b:b0:e6:47:ed:0c:3e:74:56:b0:8a:bf:e3:
41:d4:f4:a0:64:85:38:36:59:1f:04:46:31:47:95:00:48:a2:
fb:09:3f:86:d3:39:46:5a:55:4d:08:5a:c6:da:2b:84:6e:db:
48:7d:c5:db:e5:bd:39:bf:be:54:da:a5:29:b3:ca:fa:a6:bf:
dd:1c:83:32:15:2d:aa:5b:3a:ae:ac:02:79:49:58:c4:57:3f:
fb:76:62:72:5f:e0:35:b2:65:33:bf:a5:02:3f:02:85:29:8b:
00:5a:e0:dc:4a:4f:d4:6c:ea:02:98:ae:6d:a3:ea:f8:f7:e9:
d1:95:4a:61:36:2a:e3:37:74:d3:c5:bb:ac:70:89:8f:27:38:
53:6b:78:b2:85:ff:13:6a:3c:09:c1:da:7e:81:a6:b6:44:eb:
99:87:24:70:ab:69:98:29:a6:75:b8:53:16:6f:9a:61:1d:78:
d1:1d:67:b2:31:7f:51:c3:2f:59:76:c6:f4:5e:ca:49:95:1f:
3d:c0:ae:f2:31:fa:c0:6f:55:e0:b9:94:0a:11:bb:8b:36:be:
16:91:3a:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7LXulp7SGFx2RRhG1UTu5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5Y2U0YzBhYmUyNzg1ZDQ2YTU1NzE4NTIxNzAzNzA0MjNi
NWM1OWEwHhcNMjUwODA1MTcwMDM0WhcNMjUwODA2MTcwMDM0WjAzMTEwLwYDVQQD
EygwZTBhYjQ0NzM2ODJlMDk3ZDllYWY0OTRkYmNlYmIyODkyZWMyZjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhYplF6xCFyvG6VGpCloQd7+62mr
8nVsZtm4BPZC3wsCKuWZ89q4WMqjOcTfDluw/qCIF++FZZey/Kgs0y7m5VHFgmQv
/WEx7taTrsBRNK90hXYlAqQld/syM0U8c0nk0NKQW6qfWIDcuD9S5Uo/+bnUzu7Q
bu9FCyYE0tx0rcoqx/d+pKlzbimwgVVfnTleIu+EWuDC3GIQBGnE42PEsAtq9P7Q
JjXAlZPlXNWXUExynNnrmpvFXQvakcCfMQ5drwvjq7Y0Uk2VswAPmJjeATSkcn7w
kDs4Sje8Aj9hkF33tYnYK1qMY3JKhVeBWCfy0vo7VQp51u/RV6rVlg3hKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4KtEc2guCX2er0lNvOuyiS7C9ZMB8GA1UdIwQY
MBaAFDnOTAq+J4XUalVxhSFwNwQjtcWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2M1TUNyNG5oZFJxVlhHRklYQTNCQ08xeFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC80OTIzZTktNDc2NC00MTFjLTg1OTYt
OWY0NDI5ZjMzODFlLzEvT2M1TUNyNG5oZFJxVlhHRklYQTNCQ08xeFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC80OTIzZTktNDc2NC00MTFjLTg1OTYtOWY0NDI5ZjMzODFl
LzEvT2M1TUNyNG5oZFJxVlhHRklYQTNCQ08xeFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmU42JHI
Mf6/0kDMiJGJRiGe8FKvxLll7e2WXG1P2fQ5QE3HbcFZEt87sOZH7Qw+dFawir/j
QdT0oGSFODZZHwRGMUeVAEii+wk/htM5RlpVTQhaxtorhG7bSH3F2+W9Ob++VNql
KbPK+qa/3RyDMhUtqls6rqwCeUlYxFc/+3Zicl/gNbJlM7+lAj8ChSmLAFrg3EpP
1GzqApiubaPq+Pfp0ZVKYTYq4zd008W7rHCJjyc4U2t4soX/E2o8CcHafoGmtkTr
mYckcKtpmCmmdbhTFm+aYR140R1nsjF/UcMvWXbG9F7KSZUfPcCu8jH6wG9V4LmU
ChG7iza+FpE6IA==
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:00:38 2025 by rpki-client