Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier: dc7visYH0pCq/HWgIGyJQNMIExlzclScQxtE2zQp2mE=
Subject key identifier: F5:F7:BD:C8:A2:9A:F4:7C:BB:10:20:41:8B:87:B3:3C:73:A0:03:0D
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial: 0198D7E1745123DAFE624D6654E18D68A05E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number: 026C
Signing time: Sat 23 Aug 2025 17:02:13 +0000
Manifest this update: Sat 23 Aug 2025 17:02:13 +0000
Manifest next update: Sun 24 Aug 2025 17:02:13 +0000
Files and hashes: 1: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: OsCvXShqyqPoOcCtkvVYLufpp8h24dXv+8z5f7lfkqk=)
2: Pd74fA38P8RANCLiXF7GADrVzIE.roa (hash: AFNO3rFa+kTW87hqH8It58dAbG1tgDJU3aDHfEACLtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:74:51:23:da:fe:62:4d:66:54:e1:8d:68:a0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Validity
Not Before: Aug 23 17:02:13 2025 GMT
Not After : Aug 24 17:02:13 2025 GMT
Subject: CN=f5f7bdc8a29af47cbb1020418b87b33c73a0030d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:ba:e0:e2:12:5e:9d:e6:28:67:51:81:0c:
db:34:2c:63:2e:f3:83:26:04:f7:87:a7:7f:b6:a7:
c4:ad:a1:bb:e7:93:22:22:f8:92:9a:9b:2c:2e:09:
f4:f0:b5:56:e6:a2:f6:3b:86:c8:1e:ba:45:e8:0d:
f9:47:dd:51:b8:eb:3a:aa:7b:56:4e:dc:53:73:17:
4b:01:23:19:08:34:da:78:75:41:d7:32:13:5b:12:
70:03:94:fa:88:e6:1a:78:69:60:44:21:63:46:bd:
38:8e:77:b7:0d:a8:53:80:37:8e:99:6e:01:35:93:
f2:4e:81:28:d8:05:42:82:aa:56:67:3f:31:2c:dd:
06:92:70:8a:80:ee:d6:2e:2e:0d:ce:7c:04:bc:31:
d3:c5:4c:8a:d4:82:fb:38:3b:9b:c5:7b:16:01:6c:
53:30:1f:20:7e:fd:95:66:2f:75:d9:08:87:19:cc:
96:38:36:92:d1:fe:95:93:2b:ba:c7:7d:04:10:d7:
f8:5a:2e:a1:d8:f7:5b:93:66:84:97:8f:74:2c:80:
1c:5e:ff:e7:29:f1:26:fe:62:40:66:2a:ee:4b:c4:
bd:f0:c6:63:70:5e:45:61:98:d8:b9:6b:c5:7b:a5:
1c:c7:c8:43:e3:e0:be:73:99:27:70:09:83:13:f5:
2f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F7:BD:C8:A2:9A:F4:7C:BB:10:20:41:8B:87:B3:3C:73:A0:03:0D
X509v3 Authority Key Identifier:
keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:60:2f:23:33:11:fb:ee:39:80:48:c8:18:e8:06:db:8f:54:
ca:36:57:f0:74:4b:42:af:68:79:be:85:0c:b6:fa:c4:f3:7a:
86:9b:96:6d:85:ef:bc:8f:b4:f7:3c:06:cc:25:41:f4:27:4a:
4e:c9:39:cf:ac:f5:ba:81:60:4a:fb:5c:71:a3:7b:9c:b8:be:
8b:cd:69:9f:16:0b:a3:5d:36:9a:63:3e:04:34:90:21:17:9d:
a0:2d:01:40:41:af:66:77:04:fe:62:ec:28:c9:fa:8d:b8:fc:
11:05:83:dd:52:19:1b:be:4a:8d:9f:f8:a1:ee:83:ca:25:5c:
cc:3c:50:60:d8:9d:33:1d:bd:8d:4c:ea:79:9f:d5:59:de:28:
bd:e6:41:1b:bd:c5:ef:3f:fd:5d:17:92:c3:5b:93:a2:00:fc:
23:2d:b2:0c:d3:06:56:b6:12:79:23:76:46:3b:3a:99:c4:a8:
83:cf:07:d0:4f:8f:f7:4f:a0:3d:d1:0b:5c:f3:c8:de:0e:79:
6c:53:0c:2c:1f:6d:3f:56:72:d1:ca:31:ac:18:61:31:e4:8e:
cc:38:52:4e:38:e9:27:db:c5:d5:90:7f:45:c1:be:e3:48:12:
44:d2:76:0d:94:d6:16:87:16:d9:a2:34:c9:a5:35:4a:96:27:
54:b4:32:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4XRRI9r+Yk1mVOGNaKBeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhM2VhMzNhZWE4YjM4NDI3ZjJiY2VmNWVkNGMyMTQyM2Ey
YTlkNjQwHhcNMjUwODIzMTcwMjEzWhcNMjUwODI0MTcwMjEzWjAzMTEwLwYDVQQD
EyhmNWY3YmRjOGEyOWFmNDdjYmIxMDIwNDE4Yjg3YjMzYzczYTAwMzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2C64OISXp3mKGdRgQzbNCxjLvOD
JgT3h6d/tqfEraG755MiIviSmpssLgn08LVW5qL2O4bIHrpF6A35R91RuOs6qntW
TtxTcxdLASMZCDTaeHVB1zITWxJwA5T6iOYaeGlgRCFjRr04jne3DahTgDeOmW4B
NZPyToEo2AVCgqpWZz8xLN0GknCKgO7WLi4NznwEvDHTxUyK1IL7ODubxXsWAWxT
MB8gfv2VZi912QiHGcyWODaS0f6Vkyu6x30EENf4Wi6h2Pdbk2aEl490LIAcXv/n
KfEm/mJAZiruS8S98MZjcF5FYZjYuWvFe6Ucx8hD4+C+c5kncAmDE/UvuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPX3vciimvR8uxAgQYuHszxzoAMNMB8GA1UdIwQY
MBaAFDo+ozrqizhCfyvO9e1MIUI6Kp1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2o2ak91cUxPRUpfSzg3MTdVd2hRam9xbldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wNjdiMDctNWViNi00M2YxLTg2ZmYt
MWQ2N2MzMjQ1MDFmLzEvT2o2ak91cUxPRUpfSzg3MTdVd2hRam9xbldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wNjdiMDctNWViNi00M2YxLTg2ZmYtMWQ2N2MzMjQ1MDFm
LzEvT2o2ak91cUxPRUpfSzg3MTdVd2hRam9xbldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmAvIzMR
++45gEjIGOgG249UyjZX8HRLQq9oeb6FDLb6xPN6hpuWbYXvvI+09zwGzCVB9CdK
Tsk5z6z1uoFgSvtccaN7nLi+i81pnxYLo102mmM+BDSQIRedoC0BQEGvZncE/mLs
KMn6jbj8EQWD3VIZG75KjZ/4oe6DyiVczDxQYNidMx29jUzqeZ/VWd4oveZBG73F
7z/9XReSw1uTogD8Iy2yDNMGVrYSeSN2Rjs6mcSog88H0E+P90+gPdELXPPI3g55
bFMMLB9tP1Zy0coxrBhhMeSOzDhSTjjpJ9vF1ZB/RcG+40gSRNJ2DZTWFocW2aI0
yaU1SpYnVLQyRQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:29:23 2025 by rpki-client