Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
File: OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json)
Hash identifier: AwABGH1ih8aMmMPAHmKZkX2q4eCLYbdcKrIktaiJiQA=
Subject key identifier: 86:0C:BA:D2:A5:40:3F:AE:1E:96:A4:92:83:42:12:DC:A5:93:0A:DA
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 019883FA3FA80594B6CD2D51E124ABFA947F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
Manifest number: 1629
Signing time: Thu 07 Aug 2025 10:01:12 +0000
Manifest this update: Thu 07 Aug 2025 10:01:12 +0000
Manifest next update: Fri 08 Aug 2025 10:01:12 +0000
Files and hashes: 1: Ao4f98uIFcgkhdxyPOpQgAuwN9w.roa (hash: ttNIa0Xruypw+Nr5sYx69ADzUxbcLDOTo777VDuXgok=)
2: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: azq0xFGWybikHBGx7DgybYbYV9wG7dq9h8xQ0XrLyPk=)
3: bf5JniBkyKbSSiSrUK6PpsjkA_o.roa (hash: G/EVvuIiKK3u39WnHajT6FKjkBStN9/ciaxEIQanbJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:fa:3f:a8:05:94:b6:cd:2d:51:e1:24:ab:fa:94:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Aug 7 10:01:12 2025 GMT
Not After : Aug 8 10:01:12 2025 GMT
Subject: CN=860cbad2a5403fae1e96a492834212dca5930ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:c8:ea:f1:e0:b0:be:cb:c0:96:bf:15:f9:
69:27:ac:f8:9d:dc:19:6f:dc:f5:9b:79:0a:e9:15:
62:6e:0f:20:18:92:22:07:76:77:85:87:d8:18:7a:
5f:21:92:cb:92:e1:c1:a8:11:16:e8:7a:02:c2:e5:
e6:21:a3:47:db:82:82:af:17:50:d3:7a:04:80:7c:
5b:27:2e:23:07:73:4b:eb:e1:8e:f1:3a:f9:bc:56:
c0:bb:a4:90:18:d4:b8:6c:40:2f:91:9f:5a:dc:2d:
2c:b1:fc:99:98:d8:78:32:f6:4e:14:1c:19:92:08:
6f:53:eb:2e:04:e8:c9:2a:a9:2a:6c:d6:8f:70:45:
68:bd:3a:19:8c:02:be:66:23:c5:7d:78:f6:b3:be:
25:32:3d:e2:00:27:d5:40:96:1e:d6:40:00:b9:a9:
47:05:ac:7f:de:f6:4d:ce:1b:a2:f3:8e:e0:18:29:
83:0d:ce:47:fa:95:51:41:18:18:ce:01:c3:79:7d:
f8:c3:53:e9:4f:4c:54:cd:78:51:1b:1c:47:d1:08:
4e:95:ab:5c:56:db:51:44:f9:f4:33:84:ac:7e:b1:
e5:61:8e:73:b1:f5:57:71:fa:01:55:f0:7e:40:02:
ab:11:33:0a:e5:29:7d:da:5e:fa:e5:e4:0e:61:63:
4c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0C:BA:D2:A5:40:3F:AE:1E:96:A4:92:83:42:12:DC:A5:93:0A:DA
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b1:fd:fe:64:61:ec:c5:99:27:df:6f:31:d8:a8:b0:92:44:
26:c5:e7:a8:27:c2:d6:c8:49:5b:87:df:3e:fd:42:82:9f:b4:
19:1a:b3:a5:2a:c4:cf:e8:4e:26:4b:91:0e:ac:7d:be:31:87:
32:18:13:ac:19:c0:ec:69:84:93:1f:3c:df:5e:fb:6f:35:a4:
b9:51:44:b5:e8:22:81:8c:ec:dd:54:34:d4:8e:6b:c5:b5:03:
f7:7c:10:d7:28:1a:ae:48:6c:39:d6:e8:04:13:1f:12:7f:34:
fc:17:b0:0d:82:4e:92:70:ba:3c:18:4b:b4:b4:fe:13:05:fc:
16:17:84:6e:6d:af:da:7f:3f:e3:64:de:53:f0:84:03:95:c1:
48:00:24:07:04:bf:bc:ec:b7:db:27:d8:ce:ad:31:09:0a:01:
9a:e8:d7:6a:a3:81:88:82:2f:f3:22:61:33:fe:f4:8c:bf:c2:
2d:35:06:fc:f6:b2:d6:31:17:93:3d:d0:d3:f2:b4:b0:b4:a4:
8a:a7:81:ef:96:a4:f3:0c:ae:ec:49:1f:4a:4c:0e:59:0d:97:
fa:62:18:91:94:63:e3:f5:6e:6c:e5:0b:3e:6a:ab:07:9b:37:
37:eb:d0:ab:70:b3:22:89:de:b8:ee:4c:a3:a8:55:7f:09:8f:
68:06:90:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiD+j+oBZS2zS1R4SSr+pR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZTdmNDdiYjliOTE2NTdlNTcyNmJmY2IyZGVmOGFhZDk3
M2UyNjgwHhcNMjUwODA3MTAwMTEyWhcNMjUwODA4MTAwMTEyWjAzMTEwLwYDVQQD
Eyg4NjBjYmFkMmE1NDAzZmFlMWU5NmE0OTI4MzQyMTJkY2E1OTMwYWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBLI6vHgsL7LwJa/FflpJ6z4ndwZ
b9z1m3kK6RVibg8gGJIiB3Z3hYfYGHpfIZLLkuHBqBEW6HoCwuXmIaNH24KCrxdQ
03oEgHxbJy4jB3NL6+GO8Tr5vFbAu6SQGNS4bEAvkZ9a3C0ssfyZmNh4MvZOFBwZ
kghvU+suBOjJKqkqbNaPcEVovToZjAK+ZiPFfXj2s74lMj3iACfVQJYe1kAAualH
Bax/3vZNzhui847gGCmDDc5H+pVRQRgYzgHDeX34w1PpT0xUzXhRGxxH0QhOlatc
VttRRPn0M4SsfrHlYY5zsfVXcfoBVfB+QAKrETMK5Sl92l765eQOYWNMgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYMutKlQD+uHpakkoNCEtylkwraMB8GA1UdIwQY
MBaAFDjn9Hu5uRZX5XJr/LLe+KrZc+JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQt
Njg2ZjBhMDYxNmNjLzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQtNjg2ZjBhMDYxNmNj
LzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrH9/mRh
7MWZJ99vMdiosJJEJsXnqCfC1shJW4ffPv1Cgp+0GRqzpSrEz+hOJkuRDqx9vjGH
MhgTrBnA7GmEkx883177bzWkuVFEtegigYzs3VQ01I5rxbUD93wQ1ygarkhsOdbo
BBMfEn80/BewDYJOknC6PBhLtLT+EwX8FheEbm2v2n8/42TeU/CEA5XBSAAkBwS/
vOy32yfYzq0xCQoBmujXaqOBiIIv8yJhM/70jL/CLTUG/Pay1jEXkz3Q0/K0sLSk
iqeB75ak8wyu7EkfSkwOWQ2X+mIYkZRj4/VubOULPmqrB5s3N+vQq3CzIoneuO5M
o6hVfwmPaAaQlg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 14:48:29 2025 by rpki-client