Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
File: Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json)
Hash identifier: c6P+fH7y+Omyz53QKqEjvoBU4wA7Z6ZE4DbouNBQ5Z4=
Subject key identifier: 94:07:7B:73:DE:B8:D1:E0:62:26:2B:92:57:80:7C:A1:64:F9:A4:0F
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial: 019873E37783E459894B956566D968496A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:02:23 +0000
Manifest this update: Mon 04 Aug 2025 07:02:23 +0000
Manifest next update: Tue 05 Aug 2025 07:02:23 +0000
Files and hashes: 1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: 9N0FQO0QXAzeAVWjtYHtOHWGuYVWmSdehkVbdXNjrNg=)
2: jm4B5paf_GVr-GpkHFsecVdl0nk.roa (hash: l8vtbC+hCoUUJ+YOCg7b9XUWVs7njLshIKLeOlHSZao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:77:83:e4:59:89:4b:95:65:66:d9:68:49:6a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Validity
Not Before: Aug 4 07:02:23 2025 GMT
Not After : Aug 5 07:02:23 2025 GMT
Subject: CN=94077b73deb8d1e062262b9257807ca164f9a40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:44:83:33:71:52:ce:40:05:dc:ca:8f:8b:08:
65:fa:a7:ce:fc:8b:5d:ba:40:5c:36:34:56:95:96:
d4:b2:ef:2c:fc:b3:5a:02:a7:f3:47:88:d0:56:d9:
24:d0:78:23:82:49:38:e0:71:a6:39:c9:d0:06:cd:
d7:f7:d5:63:56:45:2d:cf:96:32:17:92:76:08:c5:
e4:c2:35:6c:0f:c0:d8:e1:77:b3:93:b3:1b:b9:e0:
af:af:10:d3:d6:15:25:0c:26:30:02:ee:46:ff:21:
a6:7d:02:92:10:7a:b2:8a:f1:0c:2e:4e:4f:e4:72:
b3:b8:16:a9:69:4f:97:16:ac:2a:a8:06:d0:96:bb:
ea:f1:40:5c:0f:20:28:98:61:7a:79:96:ba:76:2a:
40:36:b3:e5:5f:5b:a8:f3:2c:e3:66:f9:95:8a:fc:
fb:d0:98:25:9a:7a:e5:1b:59:b2:52:12:82:eb:49:
78:5a:49:57:54:20:4c:73:be:14:ad:91:4e:04:f3:
81:ce:ef:57:e8:26:40:48:9a:1d:9d:59:8f:bd:a8:
7a:c4:b7:13:24:dd:73:65:b1:0b:47:41:b1:7d:89:
b4:fe:89:04:1d:e3:c3:11:44:b1:b9:f0:f2:29:0c:
92:21:dc:1a:e7:0c:ef:38:68:68:eb:91:54:eb:23:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:07:7B:73:DE:B8:D1:E0:62:26:2B:92:57:80:7C:A1:64:F9:A4:0F
X509v3 Authority Key Identifier:
keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c8:86:32:cc:a9:f7:66:a8:00:3f:31:5d:ae:ad:71:e8:87:
26:69:96:99:0e:34:81:7a:64:61:fa:ab:bc:b2:ca:3b:34:05:
2b:3c:9f:18:04:a2:4b:8e:cd:38:ce:dc:72:f1:3b:a2:0b:51:
10:f6:7a:e2:a2:6c:9c:06:4b:ec:d5:c4:6f:84:cc:98:07:8d:
94:e9:f5:44:e5:8f:7a:dd:9b:95:b2:06:10:97:b1:80:ca:b9:
33:59:5d:17:19:3e:59:97:c3:3d:49:15:30:9b:ed:5c:67:d3:
8c:75:a5:47:4a:38:13:09:25:59:e4:be:91:9f:36:ea:35:8b:
3a:58:2d:77:26:5d:84:c7:80:16:48:e7:ce:49:b7:04:52:8a:
06:6e:cc:f7:27:70:f8:d7:40:25:8a:a6:42:c4:64:bf:40:1f:
63:fe:75:1f:51:64:72:45:2c:f0:21:d8:0e:1c:30:8d:98:36:
66:91:b5:67:e8:bd:61:ed:20:9d:61:ca:92:e4:d2:4f:0a:b6:
d6:75:7e:46:28:ab:52:6a:b2:29:7f:1d:e4:b0:61:26:93:30:
dd:9a:ef:b8:d2:06:4a:81:73:7e:a9:b0:69:6d:94:f1:62:d9:
ee:ef:45:b0:bd:9a:d3:57:97:a3:85:ab:f5:e9:82:67:24:64:
0e:ff:de:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz43eD5FmJS5VlZtloSWo/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhM2NmOTkxOWEyYzgxNDZjOTZmNWExNGIxNTc0NTliNzk0
YjZhMmUwHhcNMjUwODA0MDcwMjIzWhcNMjUwODA1MDcwMjIzWjAzMTEwLwYDVQQD
Eyg5NDA3N2I3M2RlYjhkMWUwNjIyNjJiOTI1NzgwN2NhMTY0ZjlhNDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqESDM3FSzkAF3MqPiwhl+qfO/Itd
ukBcNjRWlZbUsu8s/LNaAqfzR4jQVtkk0Hgjgkk44HGmOcnQBs3X99VjVkUtz5Yy
F5J2CMXkwjVsD8DY4Xezk7MbueCvrxDT1hUlDCYwAu5G/yGmfQKSEHqyivEMLk5P
5HKzuBapaU+XFqwqqAbQlrvq8UBcDyAomGF6eZa6dipANrPlX1uo8yzjZvmVivz7
0JglmnrlG1myUhKC60l4WklXVCBMc74UrZFOBPOBzu9X6CZASJodnVmPvah6xLcT
JN1zZbELR0GxfYm0/okEHePDEUSxufDyKQySIdwa5wzvOGho65FU6yNPLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQHe3PeuNHgYiYrkleAfKFk+aQPMB8GA1UdIwQY
MBaAFDo8+ZGaLIFGyW9aFLFXRZt5S2ouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85ZWE0OWEtY2Y2Ny00NjZhLWFiNWMt
NzBjYmY1MTQ5YTVhLzEvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85ZWE0OWEtY2Y2Ny00NjZhLWFiNWMtNzBjYmY1MTQ5YTVh
LzEvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMiGMsyp
92aoAD8xXa6tceiHJmmWmQ40gXpkYfqrvLLKOzQFKzyfGASiS47NOM7ccvE7ogtR
EPZ64qJsnAZL7NXEb4TMmAeNlOn1ROWPet2blbIGEJexgMq5M1ldFxk+WZfDPUkV
MJvtXGfTjHWlR0o4EwklWeS+kZ826jWLOlgtdyZdhMeAFkjnzkm3BFKKBm7M9ydw
+NdAJYqmQsRkv0AfY/51H1FkckUs8CHYDhwwjZg2ZpG1Z+i9Ye0gnWHKkuTSTwq2
1nV+RiirUmqyKX8d5LBhJpMw3ZrvuNIGSoFzfqmwaW2U8WLZ7u9FsL2a01eXo4Wr
9emCZyRkDv/eKg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:21 2025 by rpki-client