Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
File: OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json)
Hash identifier: aMZRVafnsZcsZIcRI1yY/LhJ44zrlkLfLuxpZlReVGU=
Subject key identifier: 79:AB:2D:4B:65:E9:C7:75:78:7B:B4:B3:55:38:1C:1B:7C:60:BB:A3
Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Certificate serial: 01988430E3442E53BEE10AA6D73ED9A95C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
Manifest number: 1626
Signing time: Thu 07 Aug 2025 11:00:52 +0000
Manifest this update: Thu 07 Aug 2025 11:00:52 +0000
Manifest next update: Fri 08 Aug 2025 11:00:52 +0000
Files and hashes: 1: MS2eFccf4vEvkGRnlPG3imTckEg.roa (hash: +v5mVYQhL/JfyFrRFVMWxQ02mierIx6iDDJ3fFkdoPo=)
2: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: 7LQscWqb4QIc9E8WA3GL+YlIghMYwIBUMBvJPUnT7Jo=)
3: XQ5elbBA2ZOvWo4wBD0xrzoPgZw.roa (hash: ziFD345nN2nfL35s2objtJIz7sADWUma9lbt9LOBqXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:30:e3:44:2e:53:be:e1:0a:a6:d7:3e:d9:a9:5c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Validity
Not Before: Aug 7 11:00:52 2025 GMT
Not After : Aug 8 11:00:52 2025 GMT
Subject: CN=79ab2d4b65e9c775787bb4b355381c1b7c60bba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:3e:16:d1:30:ef:57:d9:30:6e:53:4f:5b:
a9:7d:38:ae:0a:9c:b5:1a:af:bd:e2:82:65:58:8f:
da:ca:c0:3f:5b:22:41:64:ad:ab:6e:41:b1:41:61:
de:a2:a2:ba:79:6f:c6:8b:20:86:c4:5b:b6:8e:2a:
d8:f9:a6:bb:ee:9b:eb:3c:64:29:44:f7:6e:35:71:
c9:ce:71:25:c0:bf:21:7e:89:93:fa:6a:d2:22:29:
54:41:98:1a:7f:15:6d:03:e7:1d:6b:77:b8:00:c1:
8c:f8:c2:a8:dd:91:3f:d5:3d:89:69:6e:a9:da:65:
44:0a:1f:ba:a8:3f:ad:75:bc:2d:03:a6:55:8b:a5:
e0:4e:b3:94:6f:6f:93:1f:de:3d:de:f6:42:68:09:
e3:08:20:16:cc:9c:28:50:0c:68:e9:fe:a9:0f:c5:
26:dc:4f:71:0b:4c:b9:4f:db:a3:43:6b:96:d4:bb:
9a:4b:f5:19:c9:8f:ce:41:e7:b4:d0:a6:3b:8f:81:
4e:b2:24:da:fb:c9:b7:83:98:4a:4a:90:a7:d2:0c:
44:1f:ea:7b:34:90:17:df:c3:0c:7f:c2:d8:b6:2f:
ee:17:51:c3:93:41:df:db:6c:57:12:6b:a5:fd:47:
ad:5e:e7:9d:63:a2:43:e3:f3:68:58:36:8c:14:8b:
4e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AB:2D:4B:65:E9:C7:75:78:7B:B4:B3:55:38:1C:1B:7C:60:BB:A3
X509v3 Authority Key Identifier:
keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8a:ac:0d:c0:a1:bf:90:03:3c:8a:c2:37:95:87:5d:31:67:
94:ba:38:f0:e7:f8:82:58:f5:9c:42:96:a5:63:7f:ea:bb:76:
22:00:7c:c9:e1:c4:e5:5a:c0:59:a5:13:64:99:43:92:60:87:
21:87:bc:cc:fe:13:6e:11:15:87:ee:50:a8:3f:f0:b8:8b:c5:
45:ec:e6:80:32:8c:f8:1d:72:57:4e:b9:4c:0b:4e:44:d6:ca:
8e:86:14:9d:eb:99:38:c0:f3:a6:71:54:02:9c:69:58:1e:17:
d2:fe:b4:0d:c3:d0:e6:20:8f:c2:21:4f:ef:5d:18:bf:fe:38:
7e:d3:1e:38:7d:59:39:ef:ad:80:f6:29:e0:e0:19:f0:10:2e:
f7:e5:8c:0d:97:66:a5:5b:57:f8:57:d8:a0:d7:ee:80:b9:7a:
84:4a:0b:e9:17:42:a4:e1:6c:97:40:58:1b:3a:c7:02:aa:42:
f2:0c:a8:a4:43:4e:77:6a:49:90:8d:fd:ae:a2:1e:ca:88:8b:
06:b1:03:77:5d:0d:b8:e7:a9:92:e9:2d:81:cc:7d:e1:e7:62:
6c:c9:d0:c9:28:e5:2a:dc:28:24:2c:1b:cf:d9:37:20:fb:f8:
a1:89:87:93:fa:f7:a1:ce:38:e1:57:c1:49:50:ad:15:1e:40:
6d:0c:ef:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiEMONELlO+4Qqm1z7ZqVxEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MGVmN2ZmNWI1NGY1M2ZjZjIzMTJhYmUyZWMzZjU5NThi
YTE0MjUwHhcNMjUwODA3MTEwMDUyWhcNMjUwODA4MTEwMDUyWjAzMTEwLwYDVQQD
Eyg3OWFiMmQ0YjY1ZTljNzc1Nzg3YmI0YjM1NTM4MWMxYjdjNjBiYmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmQ+FtEw71fZMG5TT1upfTiuCpy1
Gq+94oJlWI/aysA/WyJBZK2rbkGxQWHeoqK6eW/GiyCGxFu2jirY+aa77pvrPGQp
RPduNXHJznElwL8hfomT+mrSIilUQZgafxVtA+cda3e4AMGM+MKo3ZE/1T2JaW6p
2mVECh+6qD+tdbwtA6ZVi6XgTrOUb2+TH9493vZCaAnjCCAWzJwoUAxo6f6pD8Um
3E9xC0y5T9ujQ2uW1LuaS/UZyY/OQee00KY7j4FOsiTa+8m3g5hKSpCn0gxEH+p7
NJAX38MMf8LYti/uF1HDk0Hf22xXEmul/UetXuedY6JD4/NoWDaMFItOLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmrLUtl6cd1eHu0s1U4HBt8YLujMB8GA1UdIwQY
MBaAFDgO9/9bVPU/zyMSq+LsP1lYuhQlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0E3M18xdFU5VF9QSXhLcjR1d19XVmk2RkNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kOTEyNTUtMzI0My00YTQ3LTk0NmEt
ZjA0Y2MxYzIzMGNmLzEvT0E3M18xdFU5VF9QSXhLcjR1d19XVmk2RkNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kOTEyNTUtMzI0My00YTQ3LTk0NmEtZjA0Y2MxYzIzMGNm
LzEvT0E3M18xdFU5VF9QSXhLcjR1d19XVmk2RkNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4qsDcCh
v5ADPIrCN5WHXTFnlLo48Of4glj1nEKWpWN/6rt2IgB8yeHE5VrAWaUTZJlDkmCH
IYe8zP4TbhEVh+5QqD/wuIvFRezmgDKM+B1yV065TAtORNbKjoYUneuZOMDzpnFU
ApxpWB4X0v60DcPQ5iCPwiFP710Yv/44ftMeOH1ZOe+tgPYp4OAZ8BAu9+WMDZdm
pVtX+FfYoNfugLl6hEoL6RdCpOFsl0BYGzrHAqpC8gyopENOd2pJkI39rqIeyoiL
BrEDd10NuOepkuktgcx94edibMnQySjlKtwoJCwbz9k3IPv4oYmHk/r3oc444VfB
SVCtFR5AbQzvGg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 17:31:21 2025 by rpki-client