Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
File: Ooz8_rg-iPNror8kRduewegvDVQ.mft (raw, json)
Hash identifier: KeMoGFGCqGa4UJ5s1EdsHvsCDp/EvmAECa6Ti5cmxMU=
Subject key identifier: 4A:94:08:E4:55:59:27:70:9F:E0:03:98:4F:E6:7A:49:F9:1A:6D:AD
Authority key identifier: 3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
Certificate issuer: /CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Certificate serial: 0198D54E401BD96B8C576D54A2B6940380D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:02:11 +0000
Manifest this update: Sat 23 Aug 2025 05:02:11 +0000
Manifest next update: Sun 24 Aug 2025 05:02:11 +0000
Files and hashes: 1: 26TbrymsKsZjBkQHIbbRRWaFR8Y.roa (hash: SWIdCtaxTysSBJj/hZn1IHZ7qzsZ9zOqjJPPtoUQNGw=)
2: Ooz8_rg-iPNror8kRduewegvDVQ.crl (hash: eyPzf1S3oEEBNcptylxXqU329Xy6+JP8jYA0H17liTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:40:1b:d9:6b:8c:57:6d:54:a2:b6:94:03:80:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Validity
Not Before: Aug 23 05:02:11 2025 GMT
Not After : Aug 24 05:02:11 2025 GMT
Subject: CN=4a9408e4555927709fe003984fe67a49f91a6dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f7:5c:a5:00:64:f9:56:ad:eb:ed:7e:3c:8e:
36:a3:2e:ec:4e:d1:92:e4:0a:7b:8c:cb:16:e0:88:
d7:12:26:51:d6:53:b5:fd:04:cb:22:9c:eb:19:d2:
ea:e2:21:b1:87:be:93:c2:dd:c0:e2:02:be:78:8c:
23:bf:24:a3:58:76:57:d3:ae:57:b1:f3:8f:49:3d:
d8:0f:de:5f:1e:e3:b2:a7:0b:44:61:63:fa:da:c7:
9c:4b:b4:79:73:a6:dd:8f:d7:a0:1c:2c:d1:e5:81:
11:73:35:a2:4c:0e:ee:cd:4c:22:07:37:5d:95:a0:
2e:51:ae:bb:d2:85:96:25:4c:9a:9a:69:38:77:1c:
26:f1:b1:92:a3:64:08:97:79:df:4d:f8:cc:17:bc:
0c:84:c5:a0:99:c4:54:10:d8:d1:ad:f7:ee:8b:82:
ad:16:b9:0e:e6:57:a6:31:8e:7d:7a:2d:74:d2:8c:
fb:c2:be:14:25:70:00:dc:5d:21:95:0d:2e:5b:da:
72:6d:e8:35:6b:1e:4d:fb:27:81:32:59:1d:f5:0b:
de:c5:d5:b5:e5:fa:7a:23:94:38:e9:01:ac:c6:8a:
59:21:d9:a2:7e:75:f3:ae:b8:da:1d:d0:90:e3:7d:
47:84:de:75:a9:d1:ef:8c:79:7d:96:32:e9:4b:4a:
cd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:94:08:E4:55:59:27:70:9F:E0:03:98:4F:E6:7A:49:F9:1A:6D:AD
X509v3 Authority Key Identifier:
keyid:3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:75:d0:1d:c7:22:09:f6:ef:13:7e:6e:7c:21:ee:0c:bc:e9:
f3:1a:89:67:3b:38:ce:fd:75:42:8c:4d:02:ef:2d:e6:09:fa:
ab:89:cd:c4:71:fc:0f:13:d3:37:39:b5:fd:d6:8a:1f:f5:52:
8d:42:f1:c4:d9:a0:ce:aa:e8:d5:1a:5d:70:7b:f0:46:63:59:
9d:ae:78:dc:bd:42:e0:96:65:6a:0b:3e:16:dd:9a:da:90:23:
15:4f:c6:96:8f:72:42:08:58:fa:04:bc:09:ec:41:72:2d:b5:
7f:95:1d:e7:99:5c:9c:b0:fc:fb:d7:94:fb:06:50:30:69:ae:
15:de:74:bc:73:53:60:44:df:37:fc:41:62:14:a4:7f:c7:fa:
ad:f9:9f:cb:5d:02:ab:98:93:48:00:76:8b:4c:9a:ff:25:e1:
b4:4c:45:4e:4b:59:25:59:ca:57:79:bf:1b:0c:9b:7c:e4:73:
3f:4c:a2:6d:03:db:c2:6d:fb:a9:33:0f:86:3e:be:17:9f:27:
d8:84:57:46:3c:29:cc:d8:6c:b1:54:a2:d8:29:a9:41:99:fd:
7b:9c:30:bc:e9:0b:2f:a6:e5:06:f2:22:6e:e4:d6:52:02:89:
50:8a:71:f5:7f:06:53:53:52:2d:c5:39:ef:4f:44:f8:0d:8d:
3c:b0:14:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTkAb2WuMV21UoraUA4DRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhOGNmY2ZlYjgzZTg4ZjM2YmEyYmYyNDQ1ZGI5ZWMxZTgy
ZjBkNTQwHhcNMjUwODIzMDUwMjExWhcNMjUwODI0MDUwMjExWjAzMTEwLwYDVQQD
Eyg0YTk0MDhlNDU1NTkyNzcwOWZlMDAzOTg0ZmU2N2E0OWY5MWE2ZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPdcpQBk+Vat6+1+PI42oy7sTtGS
5Ap7jMsW4IjXEiZR1lO1/QTLIpzrGdLq4iGxh76Twt3A4gK+eIwjvySjWHZX065X
sfOPST3YD95fHuOypwtEYWP62secS7R5c6bdj9egHCzR5YERczWiTA7uzUwiBzdd
laAuUa670oWWJUyammk4dxwm8bGSo2QIl3nfTfjMF7wMhMWgmcRUENjRrffui4Kt
FrkO5lemMY59ei100oz7wr4UJXAA3F0hlQ0uW9pybeg1ax5N+yeBMlkd9QvexdW1
5fp6I5Q46QGsxopZIdmifnXzrrjaHdCQ431HhN51qdHvjHl9ljLpS0rN5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqUCORVWSdwn+ADmE/mekn5Gm2tMB8GA1UdIwQY
MBaAFDqM/P64Pojza6K/JEXbnsHoLw1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT296OF9yZy1pUE5yb3I4a1JkdWV3ZWd2RFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MDJjMWEtMjlmNS00OGRkLWFkYTEt
NmE0ZWIzN2EzM2NjLzEvT296OF9yZy1pUE5yb3I4a1JkdWV3ZWd2RFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85MDJjMWEtMjlmNS00OGRkLWFkYTEtNmE0ZWIzN2EzM2Nj
LzEvT296OF9yZy1pUE5yb3I4a1JkdWV3ZWd2RFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3XQHcci
CfbvE35ufCHuDLzp8xqJZzs4zv11QoxNAu8t5gn6q4nNxHH8DxPTNzm1/daKH/VS
jULxxNmgzqro1RpdcHvwRmNZna543L1C4JZlags+Ft2a2pAjFU/Glo9yQghY+gS8
CexBci21f5Ud55lcnLD8+9eU+wZQMGmuFd50vHNTYETfN/xBYhSkf8f6rfmfy10C
q5iTSAB2i0ya/yXhtExFTktZJVnKV3m/GwybfORzP0yibQPbwm37qTMPhj6+F58n
2IRXRjwpzNhssVSi2CmpQZn9e5wwvOkLL6blBvIibuTWUgKJUIpx9X8GU1NSLcU5
709E+A2NPLAUoA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:50 2025 by rpki-client