
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier: vYjeyBDgM6pCq/akcG/vIBr3aFGgWNjRlsd6RO6xNZE=
Subject key identifier: 23:73:0A:F3:62:AA:A0:22:50:AC:DF:5D:9B:D7:B8:4C:88:B1:47:1D
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 019874BD97541337AA33EEEC3F03655F9E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number: 15B9
Signing time: Mon 04 Aug 2025 11:00:38 +0000
Manifest this update: Mon 04 Aug 2025 11:00:38 +0000
Manifest next update: Tue 05 Aug 2025 11:00:38 +0000
Files and hashes: 1: 3Kw90ItO7TUOrV2eE5yvx9jqpuc.roa (hash: fbxMMDDeQ+we4nZz/v5oIPx4/3sbHXCdx1jupmXCzFU=)
2: 3bXgf6qiHkZ7wpe3NbEbqd19UII.roa (hash: GFgPfBtoaTen3iMblZ9KSc5rE6intd3/umoBeZq+ejs=)
3: MIKj6NwkBoijX5RCu9BLUoczIOA.roa (hash: TpSQaRTCbf9UYf4e5y2oNI5uWSWIkWo+nLWFnRcfelo=)
4: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: tNEtJUfbcQN+qM9CEa+26CIBWKaWntqj+OFHMZXAbZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:97:54:13:37:aa:33:ee:ec:3f:03:65:5f:9e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Aug 4 11:00:38 2025 GMT
Not After : Aug 5 11:00:38 2025 GMT
Subject: CN=23730af362aaa02250acdf5d9bd7b84c88b1471d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3c:a6:c7:0a:9a:5c:0b:67:d6:06:04:e6:e1:
fa:68:0f:7b:fd:46:39:92:07:b4:98:7c:db:88:c1:
57:37:08:c7:d4:ad:6e:0c:4b:4a:14:07:0f:10:40:
3b:81:e6:05:db:2c:f0:83:c2:cb:ee:28:6c:bf:4c:
63:12:dd:15:98:b6:25:88:76:67:db:01:00:17:98:
12:91:5a:cc:32:ae:06:54:46:1a:a2:76:72:71:00:
12:66:36:c8:f1:af:a0:1e:0b:bb:72:1b:6b:98:7d:
bf:99:7c:89:43:c2:70:99:f1:b7:a4:4f:4d:8c:28:
85:58:32:ad:df:97:43:7a:27:8e:5a:98:67:62:38:
4a:2b:2b:fb:52:c3:a1:1a:a6:75:a1:c3:58:a2:4b:
42:bb:4d:e4:ba:75:0f:7f:97:fb:14:95:be:1d:02:
89:73:6a:29:c7:33:dd:b6:d6:eb:58:c6:b6:50:46:
23:0b:01:a5:a5:89:a9:a6:b4:7d:ab:57:b9:72:93:
bb:26:b6:f9:ad:7a:28:51:d9:98:c0:8d:8c:a6:f3:
a9:21:ac:b8:0a:66:f4:65:50:cd:a2:c8:77:39:24:
9b:dc:fd:1d:b8:6c:cd:7a:6b:0b:e2:ba:1b:e6:97:
81:54:da:34:22:24:f3:11:9d:c6:f4:2d:f7:74:0c:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:73:0A:F3:62:AA:A0:22:50:AC:DF:5D:9B:D7:B8:4C:88:B1:47:1D
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:02:30:7b:e3:46:5b:3d:9c:a5:9e:db:01:8f:48:0d:c4:5c:
51:d3:8c:68:77:56:03:57:d1:fb:45:71:49:70:c0:dc:b9:54:
1c:e6:4f:7e:6d:65:02:13:f3:5a:b0:79:49:12:29:1c:3d:dd:
63:ca:27:4f:69:34:c9:21:57:97:1f:e9:8a:98:53:5d:3b:06:
b4:4a:08:fc:65:b7:2c:64:ed:d2:db:1a:45:09:38:a1:b8:34:
7d:f1:0d:4f:45:59:ac:d9:28:88:fc:df:f8:82:94:b8:04:eb:
90:62:83:22:d7:d9:ce:b5:12:4f:a4:af:b6:d9:30:7c:81:cd:
64:37:0a:2b:a2:46:b4:9f:5a:b2:e6:d0:c9:f3:4a:de:a1:99:
40:9f:0f:68:47:75:2a:7b:8b:b2:a6:63:fc:f5:ac:e8:7d:cf:
c7:18:bc:80:d4:f7:17:20:7d:a4:a7:40:12:84:b8:b6:cc:71:
70:f2:5e:9c:e4:18:79:d3:8d:c2:fe:4d:50:a2:b9:77:74:fe:
83:21:9e:8a:bb:92:e5:89:1b:04:fb:69:b3:51:86:af:39:67:
a0:23:5d:f0:b4:54:19:2b:2c:f8:60:a2:59:8e:a1:5c:27:58:
b7:77:0b:7b:5e:c2:3d:9e:3f:b5:be:c9:6d:52:9b:6d:37:5a:
60:a2:bf:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0vZdUEzeqM+7sPwNlX56TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MWEwZWNjMmI5YmVhYmE5ZWI3NmQ1NTE5ZmU3ODdiNDAz
M2ZjMTIwHhcNMjUwODA0MTEwMDM4WhcNMjUwODA1MTEwMDM4WjAzMTEwLwYDVQQD
EygyMzczMGFmMzYyYWFhMDIyNTBhY2RmNWQ5YmQ3Yjg0Yzg4YjE0NzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TymxwqaXAtn1gYE5uH6aA97/UY5
kge0mHzbiMFXNwjH1K1uDEtKFAcPEEA7geYF2yzwg8LL7ihsv0xjEt0VmLYliHZn
2wEAF5gSkVrMMq4GVEYaonZycQASZjbI8a+gHgu7chtrmH2/mXyJQ8JwmfG3pE9N
jCiFWDKt35dDeieOWphnYjhKKyv7UsOhGqZ1ocNYoktCu03kunUPf5f7FJW+HQKJ
c2opxzPdttbrWMa2UEYjCwGlpYmpprR9q1e5cpO7Jrb5rXooUdmYwI2MpvOpIay4
Cmb0ZVDNosh3OSSb3P0duGzNemsL4rob5peBVNo0IiTzEZ3G9C33dAxEcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNzCvNiqqAiUKzfXZvXuEyIsUcdMB8GA1UdIwQY
MBaAFDkaDswrm+q6nrdtVRn+eHtAM/wSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jMjdjZDEtNTcwYi00N2QxLWIyNTYt
MTgxNDIyM2Q5MmNlLzEvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9jMjdjZDEtNTcwYi00N2QxLWIyNTYtMTgxNDIyM2Q5MmNl
LzEvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAIwe+NG
Wz2cpZ7bAY9IDcRcUdOMaHdWA1fR+0VxSXDA3LlUHOZPfm1lAhPzWrB5SRIpHD3d
Y8onT2k0ySFXlx/piphTXTsGtEoI/GW3LGTt0tsaRQk4obg0ffENT0VZrNkoiPzf
+IKUuATrkGKDItfZzrUST6SvttkwfIHNZDcKK6JGtJ9asubQyfNK3qGZQJ8PaEd1
KnuLsqZj/PWs6H3Pxxi8gNT3FyB9pKdAEoS4tsxxcPJenOQYedONwv5NUKK5d3T+
gyGeiruS5YkbBPtps1GGrzlnoCNd8LRUGSss+GCiWY6hXCdYt3cLe17CPZ4/tb7J
bVKbbTdaYKK/Fw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:04 2025 by rpki-client