Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
File: oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json)
Hash identifier: wiCLwCrgYIsikSK/KO2D64O9lgyAzFa8Yhqtk3uMgxA=
Subject key identifier: C1:B2:62:91:8E:C0:67:FF:15:AB:7D:B8:73:7D:CC:C5:93:84:6B:BC
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial: 019874F543E008F06288FC1DAB6404F1F019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
Manifest number: 153C
Signing time: Mon 04 Aug 2025 12:01:27 +0000
Manifest this update: Mon 04 Aug 2025 12:01:27 +0000
Manifest next update: Tue 05 Aug 2025 12:01:27 +0000
Files and hashes: 1: 4GMh7fIw13Bz3DUcceuO2FBtK6M.roa (hash: E9IDQ7QjcqjZJIn5bDeaHNVCqS2wv2WqYXLU0FEPSXU=)
2: XJGEpCzB4loh5ef0k98ZvXtkA5A.roa (hash: ln2eCgW4Lb0/Z2WnRMYRLGIC+qtaz3YxPhhlJZ12csI=)
3: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: Jn2ualit70f59t5UD2aX1gFa7lrAccr8CXWGVGbQ/eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:43:e0:08:f0:62:88:fc:1d:ab:64:04:f1:f0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Validity
Not Before: Aug 4 12:01:27 2025 GMT
Not After : Aug 5 12:01:27 2025 GMT
Subject: CN=c1b262918ec067ff15ab7db8737dccc593846bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:52:b8:c3:5f:6f:69:3e:67:1c:de:26:0d:
a4:f9:43:3c:be:6e:f3:a6:6c:26:8e:2e:9b:10:2c:
d7:f7:ef:92:32:a5:29:a9:9d:af:da:27:fe:3f:bc:
b9:ed:91:fa:cd:3c:69:3a:80:59:33:e0:0a:45:f3:
60:17:7c:24:47:d0:66:2f:a8:1e:f2:a2:dc:2f:84:
d6:eb:2c:da:ef:02:1a:c7:9b:34:b8:02:32:8d:aa:
e5:6d:83:da:98:0e:80:61:20:d7:0e:c9:60:a9:3a:
07:66:38:b2:28:5d:e6:7a:c2:d6:f7:3c:a7:6b:28:
3f:88:c3:47:73:1b:9c:6a:72:6d:37:57:f0:3c:e8:
de:f4:23:7b:89:ea:a4:73:8f:2c:24:99:17:07:8a:
21:03:c0:c4:fd:0f:57:61:1f:6d:c7:bd:21:e3:96:
ad:70:ba:e2:13:63:c6:9f:27:fd:07:20:0e:c6:c1:
33:99:94:be:cc:79:a4:73:80:d5:a8:fe:9b:f6:76:
d6:33:a8:0a:5b:bb:dc:8f:46:70:b7:24:2d:cb:16:
25:eb:2d:52:78:fc:8f:a5:0d:a5:97:ac:13:19:1a:
5f:f4:c2:45:e1:31:88:99:ed:6b:1a:21:ab:0a:be:
b9:ce:ca:2b:cc:fa:b1:67:7d:ed:fa:06:3a:bf:09:
87:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B2:62:91:8E:C0:67:FF:15:AB:7D:B8:73:7D:CC:C5:93:84:6B:BC
X509v3 Authority Key Identifier:
keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:56:19:8a:4b:ae:ce:81:2f:9c:19:4d:71:a0:f2:09:d6:4a:
af:17:ee:e6:90:8f:66:9d:d3:d9:d6:2d:2d:84:ce:83:74:ef:
5d:f0:a7:6a:70:e9:d5:22:c2:e4:fb:d4:51:b3:4d:88:c5:d9:
89:d3:7e:75:38:7b:05:db:2e:96:c4:81:58:85:56:0f:71:61:
a9:b3:a4:b6:d0:a3:78:51:6f:b5:fe:43:21:bb:63:35:f7:e8:
c6:7a:b7:8e:0c:17:94:8c:df:0a:ac:44:52:d8:21:7e:a1:e5:
b5:dc:5d:c4:9a:c5:7e:2a:88:10:49:c5:23:7e:70:21:4a:e6:
f2:e5:86:90:9f:ce:49:7d:02:f8:6e:a5:21:3e:c6:64:e0:3c:
ce:47:82:34:49:49:c8:18:9f:8d:37:55:39:41:68:7c:8f:1d:
b4:ff:f1:cf:19:d8:0c:fd:f2:71:c3:be:1a:53:13:79:54:c7:
e5:16:2e:cb:b7:7f:58:40:e5:cb:bf:f2:c1:76:31:52:e6:f4:
d7:bd:44:18:85:fb:9f:da:9d:8f:13:29:bf:1c:5f:60:9c:87:
32:83:26:0c:36:92:37:bf:e2:75:c4:f3:6a:84:29:22:be:5d:
e7:88:df:e7:0c:21:50:33:30:c4:b6:59:9c:80:4b:e8:51:4b:
df:b8:58:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh09UPgCPBiiPwdq2QE8fAZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNTZiNDIzODNhZDg2MmNlNmEzNzRhZDJjYTZkMzZjMjU0
ZGM3YjEwHhcNMjUwODA0MTIwMTI3WhcNMjUwODA1MTIwMTI3WjAzMTEwLwYDVQQD
EyhjMWIyNjI5MThlYzA2N2ZmMTVhYjdkYjg3MzdkY2NjNTkzODQ2YmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp15SuMNfb2k+ZxzeJg2k+UM8vm7z
pmwmji6bECzX9++SMqUpqZ2v2if+P7y57ZH6zTxpOoBZM+AKRfNgF3wkR9BmL6ge
8qLcL4TW6yza7wIax5s0uAIyjarlbYPamA6AYSDXDslgqToHZjiyKF3mesLW9zyn
ayg/iMNHcxucanJtN1fwPOje9CN7ieqkc48sJJkXB4ohA8DE/Q9XYR9tx70h45at
cLriE2PGnyf9ByAOxsEzmZS+zHmkc4DVqP6b9nbWM6gKW7vcj0ZwtyQtyxYl6y1S
ePyPpQ2ll6wTGRpf9MJF4TGIme1rGiGrCr65zsorzPqxZ33t+gY6vwmHZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGyYpGOwGf/Fat9uHN9zMWThGu8MB8GA1UdIwQY
MBaAFKBWtCODrYYs5qN0rSym02wlTcexMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0ZhMEk0T3RoaXptbzNTdExLYlRiQ1ZOeDdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zZThkY2MtYTc2NC00NGJlLWI1MDct
OWIzZGQ0MTdjMzA4LzEvb0ZhMEk0T3RoaXptbzNTdExLYlRiQ1ZOeDdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8zZThkY2MtYTc2NC00NGJlLWI1MDctOWIzZGQ0MTdjMzA4
LzEvb0ZhMEk0T3RoaXptbzNTdExLYlRiQ1ZOeDdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVYZikuu
zoEvnBlNcaDyCdZKrxfu5pCPZp3T2dYtLYTOg3TvXfCnanDp1SLC5PvUUbNNiMXZ
idN+dTh7BdsulsSBWIVWD3FhqbOkttCjeFFvtf5DIbtjNffoxnq3jgwXlIzfCqxE
UtghfqHltdxdxJrFfiqIEEnFI35wIUrm8uWGkJ/OSX0C+G6lIT7GZOA8zkeCNElJ
yBifjTdVOUFofI8dtP/xzxnYDP3yccO+GlMTeVTH5RYuy7d/WEDly7/ywXYxUub0
171EGIX7n9qdjxMpvxxfYJyHMoMmDDaSN7/idcTzaoQpIr5d54jf5wwhUDMwxLZZ
nIBL6FFL37hYvA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:31:48 2025 by rpki-client