
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
File: OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft (raw, json)
Hash identifier: oNZ4R7fIAM/BqZRCc2LoToudRcEayUMLUqx7jcjQEGk=
Subject key identifier: 10:C7:A0:F8:6D:14:E3:B0:7F:4C:12:B9:C7:17:30:27:BC:D4:D2:2F
Authority key identifier: 39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
Certificate issuer: /CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Certificate serial: 019880F936F8810608C03DCB692F330DD43C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
Manifest number: 020C
Signing time: Wed 06 Aug 2025 20:01:12 +0000
Manifest this update: Wed 06 Aug 2025 20:01:12 +0000
Manifest next update: Thu 07 Aug 2025 20:01:12 +0000
Files and hashes: 1: HAUk0L8nWB16tKZ41rvifWUUlnM.roa (hash: z7P8z3hdUqv0dJQpV8Dg51dK3XAE9P4Hf5LV3YuSIpA=)
2: OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl (hash: wQQre7dMgVzQLo2b8/a2Eeg4uhyDKeyZJAiBHXkDDKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:36:f8:81:06:08:c0:3d:cb:69:2f:33:0d:d4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Validity
Not Before: Aug 6 20:01:12 2025 GMT
Not After : Aug 7 20:01:12 2025 GMT
Subject: CN=10c7a0f86d14e3b07f4c12b9c7173027bcd4d22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:58:f9:9a:e9:dd:86:2d:5a:b5:31:c8:84:
93:10:27:eb:e6:11:6a:69:0d:bf:16:8b:b7:ae:1a:
a1:52:b7:f5:0d:82:14:09:fa:28:3e:27:f2:30:62:
17:55:8b:3d:66:6a:7c:bf:1e:74:15:b2:89:2a:26:
d7:25:31:62:e2:eb:14:48:1b:4b:62:2c:02:27:cb:
20:54:19:21:8f:35:48:2f:73:df:9e:42:07:6a:9b:
d9:46:f6:74:f7:98:fe:ec:ba:f9:cc:39:4b:68:1a:
02:23:03:a9:00:db:06:b7:a8:bd:e6:e3:86:39:aa:
a7:a9:77:b6:ca:b3:2d:bc:2b:a8:1e:7b:a9:06:84:
69:05:db:3c:2a:ec:01:9c:53:86:03:15:57:03:01:
ff:b4:d0:ba:cf:6a:45:d1:96:c2:b4:84:23:22:ae:
9d:10:23:21:41:b7:ce:1c:a8:2e:c7:97:48:20:49:
61:37:ff:50:b7:c4:95:6e:d8:ce:11:68:7f:57:1b:
42:02:ac:0c:10:3d:70:f7:e6:3d:35:c5:74:4b:99:
6e:5d:db:33:b8:87:77:8b:dd:1c:93:eb:60:bf:ba:
a1:cd:ff:fd:d4:b0:bb:63:7b:7b:cd:c5:95:d3:73:
f8:5e:25:68:2d:d1:82:a8:04:e9:9b:50:9a:f3:43:
f2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C7:A0:F8:6D:14:E3:B0:7F:4C:12:B9:C7:17:30:27:BC:D4:D2:2F
X509v3 Authority Key Identifier:
keyid:39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d0:af:c2:5a:05:15:62:e7:6c:04:26:ca:54:36:02:ec:c4:
9f:d8:49:71:87:34:6f:dc:d4:da:00:96:13:96:3c:24:a2:bd:
dd:47:c6:7f:6d:06:3a:69:e8:f3:e1:82:15:4e:f6:f6:a8:64:
4b:64:8f:3f:74:0c:dd:6f:16:cc:d4:75:25:cb:6c:47:24:11:
87:0f:31:49:3c:c7:87:42:fe:5e:c0:e3:1b:00:cd:f3:8d:42:
f1:aa:92:aa:4a:87:7e:4f:c2:79:47:b0:58:5c:f5:48:4b:c6:
18:43:41:3e:b8:a3:46:40:4d:48:df:2d:8a:80:20:6a:17:b4:
91:c1:72:cc:00:1b:ce:6a:6e:bd:27:0f:48:89:ce:8a:26:6d:
9b:f7:cb:98:88:f8:88:2c:c6:b8:f3:c6:9f:60:d0:70:c4:96:
02:b8:3f:74:70:d1:04:1c:3c:0f:56:de:49:16:9c:a1:ff:2f:
39:ef:2b:e0:58:ec:3a:87:0f:a2:87:69:36:e8:70:e0:d9:f5:
64:2a:e2:c8:cf:2a:ce:6c:4a:77:cf:a4:68:08:58:b0:b2:73:
99:b4:64:87:eb:31:4f:a9:dc:2a:84:45:0a:2e:da:cc:3a:85:
db:63:31:39:7b:e9:ce:aa:5a:00:75:a4:4e:6e:07:9c:f0:64:
db:62:a4:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiA+Tb4gQYIwD3LaS8zDdQ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YTQ2MDNiMjQ1YjFkMjA4NDlkZjg4ZjE2ZWUzNzBjYzBi
NDM5MGQwHhcNMjUwODA2MjAwMTEyWhcNMjUwODA3MjAwMTEyWjAzMTEwLwYDVQQD
EygxMGM3YTBmODZkMTRlM2IwN2Y0YzEyYjljNzE3MzAyN2JjZDRkMjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/5Y+Zrp3YYtWrUxyISTECfr5hFq
aQ2/Fou3rhqhUrf1DYIUCfooPifyMGIXVYs9Zmp8vx50FbKJKibXJTFi4usUSBtL
YiwCJ8sgVBkhjzVIL3PfnkIHapvZRvZ095j+7Lr5zDlLaBoCIwOpANsGt6i95uOG
OaqnqXe2yrMtvCuoHnupBoRpBds8KuwBnFOGAxVXAwH/tNC6z2pF0ZbCtIQjIq6d
ECMhQbfOHKgux5dIIElhN/9Qt8SVbtjOEWh/VxtCAqwMED1w9+Y9NcV0S5luXdsz
uId3i90ck+tgv7qhzf/91LC7Y3t7zcWV03P4XiVoLdGCqATpm1Ca80PycQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDHoPhtFOOwf0wSuccXMCe81NIvMB8GA1UdIwQY
MBaAFDmkYDskWx0ghJ34jxbuNwzAtDkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi81ZTE3N2YtNWY1Zi00MjE0LWE4MTEt
ZmNmMTA1ZmQyMDRjLzEvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi81ZTE3N2YtNWY1Zi00MjE0LWE4MTEtZmNmMTA1ZmQyMDRj
LzEvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNCvwloF
FWLnbAQmylQ2AuzEn9hJcYc0b9zU2gCWE5Y8JKK93UfGf20GOmno8+GCFU729qhk
S2SPP3QM3W8WzNR1JctsRyQRhw8xSTzHh0L+XsDjGwDN841C8aqSqkqHfk/CeUew
WFz1SEvGGENBPrijRkBNSN8tioAgahe0kcFyzAAbzmpuvScPSInOiiZtm/fLmIj4
iCzGuPPGn2DQcMSWArg/dHDRBBw8D1beSRacof8vOe8r4FjsOocPoodpNuhw4Nn1
ZCriyM8qzmxKd8+kaAhYsLJzmbRkh+sxT6ncKoRFCi7azDqF22MxOXvpzqpaAHWk
Tm4HnPBk22KkOQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:32:35 2025 by rpki-client