Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
File: OYhH9wo15xCETpu4omK-3bQLfMk.mft (raw, json)
Hash identifier: ewIamWXtIT2N9SsHEW9HyWRay10dkWuN05p8r9RpxFo=
Subject key identifier: 35:0F:C7:2D:71:99:33:65:2B:D9:94:AB:1F:36:42:49:7E:ED:C7:7A
Authority key identifier: 39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
Certificate issuer: /CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Certificate serial: 0198733D5560EDBCE71C574646C4A5AE94A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
Manifest number: 03DA
Signing time: Mon 04 Aug 2025 04:00:55 +0000
Manifest this update: Mon 04 Aug 2025 04:00:55 +0000
Manifest next update: Tue 05 Aug 2025 04:00:55 +0000
Files and hashes: 1: AKsS4j3-VaOHBWSMj23g7vx6Zz4.roa (hash: U4YaSKjxHoIRGGCP7ydVCxsh9Cu5QYl71iaS4zOmA2c=)
2: OYhH9wo15xCETpu4omK-3bQLfMk.crl (hash: CUXNrjvs5lBKOdjy7OgHgQfWuMjkOE6P9KwIlAUtJnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:55:60:ed:bc:e7:1c:57:46:46:c4:a5:ae:94:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Validity
Not Before: Aug 4 04:00:55 2025 GMT
Not After : Aug 5 04:00:55 2025 GMT
Subject: CN=350fc72d719933652bd994ab1f3642497eedc77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:57:8a:c2:1a:f2:b9:5c:fb:7b:f9:69:b7:
98:6f:e8:09:9f:be:e2:09:e3:de:ee:0f:9f:f0:05:
bd:47:d5:e5:7e:53:af:d6:ca:34:95:56:1e:6f:df:
0f:29:42:98:12:e1:f4:d3:67:43:65:30:45:28:97:
cc:d7:88:10:1b:a7:77:02:ec:fa:c9:77:6f:8d:e9:
ff:e5:fd:c0:a3:f6:1a:c8:da:9e:50:63:6a:e7:e5:
4f:98:99:99:4d:d3:a4:20:30:76:89:62:09:0f:44:
c9:85:f4:11:b1:79:2b:e4:2d:8b:54:57:2c:60:c7:
2a:a1:0d:a4:58:b3:1e:2c:bc:bb:ce:4f:b6:3a:dd:
f8:4c:f1:48:d6:4e:9b:ac:52:50:3c:2b:cf:14:4d:
97:41:31:14:a8:7f:aa:5e:d9:b7:7d:9e:09:e6:46:
5a:81:0d:d6:e1:a4:f9:6f:58:e2:17:35:85:0a:89:
57:aa:30:1a:41:9c:7d:11:5d:a7:cf:07:84:fd:45:
28:c6:48:f2:49:f9:d2:04:ec:f3:fd:f0:01:1a:fb:
38:0d:ad:73:c7:b8:27:72:b7:a1:d1:de:52:83:b5:
5b:d4:24:0d:9c:e5:f2:04:20:3d:e9:f8:06:60:c9:
16:d1:52:52:73:44:86:06:07:80:b0:28:08:ca:59:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0F:C7:2D:71:99:33:65:2B:D9:94:AB:1F:36:42:49:7E:ED:C7:7A
X509v3 Authority Key Identifier:
keyid:39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:67:8a:93:83:8e:60:e0:b7:c8:ae:e2:f8:b1:f7:e4:9b:e9:
45:99:84:ac:d3:81:6c:9c:1d:37:15:62:04:bd:01:c1:91:bf:
c6:4e:a9:1b:22:73:51:92:05:e3:6b:f6:13:14:df:97:f4:56:
da:25:d2:bd:aa:12:c5:de:9d:a8:75:5b:62:d7:f1:b6:d8:70:
a0:82:a3:e5:27:9d:e2:7e:c3:d7:fd:1d:72:76:9b:2b:c9:86:
e7:fc:bc:a6:da:34:5f:6f:fd:ad:44:50:c2:d1:eb:38:ee:6d:
c1:e8:49:37:90:e4:20:18:50:6d:c0:ac:f3:e1:1e:2d:8c:27:
02:4d:bd:35:80:cb:e2:7c:a6:2c:8c:d7:eb:56:21:31:1d:85:
aa:8b:57:20:20:fa:5c:52:9b:32:c1:4d:5c:62:a7:71:ec:40:
87:f6:d6:4f:7b:d3:74:21:4d:84:51:7d:22:2c:86:2c:02:d6:
55:8c:c9:4a:d7:65:6c:e7:63:85:8a:70:01:8b:80:3a:96:e8:
35:6b:c6:68:31:7e:b9:0c:2a:c8:6a:f3:9d:6f:80:08:64:ae:
f2:ff:51:90:3b:3c:f5:7f:d9:67:6e:67:93:a9:41:80:50:49:
a2:0b:fe:d6:a6:12:01:55:27:d6:e7:86:58:b1:c8:21:56:96:
e9:1b:07:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPVVg7bznHFdGRsSlrpSjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ODg0N2Y3MGEzNWU3MTA4NDRlOWJiOGEyNjJiZWRkYjQw
YjdjYzkwHhcNMjUwODA0MDQwMDU1WhcNMjUwODA1MDQwMDU1WjAzMTEwLwYDVQQD
EygzNTBmYzcyZDcxOTkzMzY1MmJkOTk0YWIxZjM2NDI0OTdlZWRjNzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2FXisIa8rlc+3v5abeYb+gJn77i
CePe7g+f8AW9R9XlflOv1so0lVYeb98PKUKYEuH002dDZTBFKJfM14gQG6d3Auz6
yXdvjen/5f3Ao/YayNqeUGNq5+VPmJmZTdOkIDB2iWIJD0TJhfQRsXkr5C2LVFcs
YMcqoQ2kWLMeLLy7zk+2Ot34TPFI1k6brFJQPCvPFE2XQTEUqH+qXtm3fZ4J5kZa
gQ3W4aT5b1jiFzWFColXqjAaQZx9EV2nzweE/UUoxkjySfnSBOzz/fABGvs4Da1z
x7gncreh0d5Sg7Vb1CQNnOXyBCA96fgGYMkW0VJSc0SGBgeAsCgIyllKTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUPxy1xmTNlK9mUqx82Qkl+7cd6MB8GA1UdIwQY
MBaAFDmIR/cKNecQhE6buKJivt20C3zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1loSDl3bzE1eENFVHB1NG9tSy0zYlFMZk1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9mYzc2NTctMDYzZS00YWY3LTg5ZTYt
ZjlmZWEzNGI2YjAxLzEvT1loSDl3bzE1eENFVHB1NG9tSy0zYlFMZk1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9mYzc2NTctMDYzZS00YWY3LTg5ZTYtZjlmZWEzNGI2YjAx
LzEvT1loSDl3bzE1eENFVHB1NG9tSy0zYlFMZk1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmeKk4OO
YOC3yK7i+LH35JvpRZmErNOBbJwdNxViBL0BwZG/xk6pGyJzUZIF42v2ExTfl/RW
2iXSvaoSxd6dqHVbYtfxtthwoIKj5Sed4n7D1/0dcnabK8mG5/y8pto0X2/9rURQ
wtHrOO5twehJN5DkIBhQbcCs8+EeLYwnAk29NYDL4nymLIzX61YhMR2FqotXICD6
XFKbMsFNXGKncexAh/bWT3vTdCFNhFF9IiyGLALWVYzJStdlbOdjhYpwAYuAOpbo
NWvGaDF+uQwqyGrznW+ACGSu8v9RkDs89X/ZZ25nk6lBgFBJogv+1qYSAVUn1ueG
WLHIIVaW6RsHVA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:53 2025 by rpki-client