Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: d/x+gQp7XCGr0KWVZEAPGyy/JSxWUr4bUxCKPyCQpaQ=
Subject key identifier: C4:48:52:E0:BB:5E:77:FC:B2:AF:DD:A4:4B:E7:26:BD:31:61:16:40
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 0198733DE800E3C24E6F660C850063065619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 0667
Signing time: Mon 04 Aug 2025 04:01:33 +0000
Manifest this update: Mon 04 Aug 2025 04:01:33 +0000
Manifest next update: Tue 05 Aug 2025 04:01:33 +0000
Files and hashes: 1: 6zhmWGIe4Q-ZROn6ekXb0Zv33_A.roa (hash: F27SVg7KmPKSSSpLfMg9+298fdBlmLMbNRr359aPHLc=)
2: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: I0uWZbZn68u6BgQBehSu5XG1NDCl7UC/UljSHG+gsTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:e8:00:e3:c2:4e:6f:66:0c:85:00:63:06:56:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Aug 4 04:01:33 2025 GMT
Not After : Aug 5 04:01:33 2025 GMT
Subject: CN=c44852e0bb5e77fcb2afdda44be726bd31611640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:b3:fb:91:50:fc:c8:92:7a:2f:ef:43:77:
83:f2:4c:f5:6e:bf:6d:83:ce:ca:7e:17:f7:fc:90:
d6:2f:7c:64:7c:d5:51:a2:1b:fe:12:e4:a3:80:b9:
af:e9:57:6f:16:1f:aa:43:f4:b4:51:27:2f:df:3b:
54:7e:2e:c9:2a:27:fa:22:53:6c:e9:9c:98:6d:cc:
41:6c:c2:7b:84:a0:32:98:97:eb:b6:f2:63:0c:11:
c0:33:d4:bb:0d:ba:1a:81:40:ca:62:8e:fe:f4:c5:
a4:37:15:e2:b8:fe:43:4d:0f:5c:6a:c4:2e:05:da:
31:b5:a4:67:29:4b:0b:51:be:f5:35:a5:e7:8b:f4:
21:0d:53:05:6b:c1:de:ea:4a:c7:59:40:24:20:72:
8a:f7:dc:21:81:8a:af:b6:b0:74:c5:ab:ba:96:bd:
0c:98:df:9a:ca:5a:3a:1c:9d:ac:31:35:89:8f:a7:
27:7a:e1:12:71:1b:da:2a:21:fa:a8:e6:41:b0:32:
41:05:04:f5:40:5e:17:0a:5c:5f:d9:c8:8d:78:f1:
40:2a:54:cb:a5:48:20:a8:f2:c0:07:7a:c6:82:0d:
ed:cd:37:8b:d3:d5:65:02:f9:f1:74:57:c4:4c:43:
8f:38:c2:30:79:bf:fa:ab:14:75:aa:a9:15:94:84:
91:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:48:52:E0:BB:5E:77:FC:B2:AF:DD:A4:4B:E7:26:BD:31:61:16:40
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:79:41:89:d3:d1:e0:0e:4e:19:e1:c6:c1:fb:d4:0b:de:45:
99:37:d1:db:7f:94:e0:33:e6:3f:f7:1e:8d:46:db:47:5e:2b:
ac:1b:b9:50:90:dc:1f:73:50:c5:06:90:3a:e5:99:1d:2a:98:
7a:78:6b:3e:8d:05:71:b9:9b:3c:c9:ab:e1:1d:14:e9:c2:f6:
c6:a3:e7:66:fd:c3:c3:d8:1f:ca:b3:4c:ad:5d:71:19:7d:b5:
b0:9b:ed:49:0a:29:fa:b7:7e:20:ca:85:cd:2b:23:5e:46:32:
35:75:2b:b2:27:ae:b0:cf:d0:7b:1b:53:a8:77:a2:7e:58:88:
6c:de:88:9d:e4:15:68:14:b6:f2:16:91:29:aa:1a:59:64:40:
22:31:fd:94:09:98:7e:c5:82:90:0f:64:b8:f2:6a:55:2b:a4:
36:ec:30:d5:5b:c0:c1:58:3d:47:89:49:b9:cf:e0:bc:f7:37:
ea:ef:4b:65:61:93:e8:e8:c2:49:6d:94:d4:55:24:fe:4b:94:
0a:c3:c8:ad:f4:8b:d4:e0:88:ef:b0:54:5d:70:43:65:9d:9e:
36:4d:2b:6b:a1:a7:db:4b:66:87:bf:ef:c5:3c:63:c7:5a:24:
8b:70:05:87:68:67:35:83:4b:83:3a:4e:31:f3:2a:b7:fd:78:
ca:b7:39:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPegA48JOb2YMhQBjBlYZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MDJjNzk4NzAwNGFlNzgxOTBlNjkxZTM3MGRlNTA5ZmY1
OTEyN2IwHhcNMjUwODA0MDQwMTMzWhcNMjUwODA1MDQwMTMzWjAzMTEwLwYDVQQD
EyhjNDQ4NTJlMGJiNWU3N2ZjYjJhZmRkYTQ0YmU3MjZiZDMxNjExNjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssyz+5FQ/MiSei/vQ3eD8kz1br9t
g87Kfhf3/JDWL3xkfNVRohv+EuSjgLmv6VdvFh+qQ/S0UScv3ztUfi7JKif6IlNs
6ZyYbcxBbMJ7hKAymJfrtvJjDBHAM9S7DboagUDKYo7+9MWkNxXiuP5DTQ9casQu
BdoxtaRnKUsLUb71NaXni/QhDVMFa8He6krHWUAkIHKK99whgYqvtrB0xau6lr0M
mN+aylo6HJ2sMTWJj6cneuEScRvaKiH6qOZBsDJBBQT1QF4XClxf2ciNePFAKlTL
pUggqPLAB3rGgg3tzTeL09VlAvnxdFfETEOPOMIweb/6qxR1qqkVlISR1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRIUuC7Xnf8sq/dpEvnJr0xYRZAMB8GA1UdIwQY
MBaAFDgCx5hwBK54GQ5pHjcN5Qn/WRJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAt
YmYyNWNlMGY4MzkzLzEvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAtYmYyNWNlMGY4Mzkz
LzEvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXlBidPR
4A5OGeHGwfvUC95FmTfR23+U4DPmP/cejUbbR14rrBu5UJDcH3NQxQaQOuWZHSqY
enhrPo0FcbmbPMmr4R0U6cL2xqPnZv3Dw9gfyrNMrV1xGX21sJvtSQop+rd+IMqF
zSsjXkYyNXUrsieusM/QextTqHeifliIbN6IneQVaBS28haRKaoaWWRAIjH9lAmY
fsWCkA9kuPJqVSukNuww1VvAwVg9R4lJuc/gvPc36u9LZWGT6OjCSW2U1FUk/kuU
CsPIrfSL1OCI77BUXXBDZZ2eNk0ra6Gn20tmh7/vxTxjx1oki3AFh2hnNYNLgzpO
MfMqt/14yrc5yQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:20 2025 by rpki-client