Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
File: oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft (raw, json)
Hash identifier: 4jFsOP6uaTIee/8r3oN+WK8E+2nEzyLu878j3Bieur0=
Subject key identifier: CB:23:EC:D8:23:AC:16:20:0A:74:25:EB:E4:75:4F:66:4C:A5:CB:2F
Authority key identifier: A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED
Certificate issuer: /CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced
Certificate serial: 0198D4A8322369E4018D8862BE375E83C8F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
Manifest number: 02BB
Signing time: Sat 23 Aug 2025 02:00:49 +0000
Manifest this update: Sat 23 Aug 2025 02:00:49 +0000
Manifest next update: Sun 24 Aug 2025 02:00:49 +0000
Files and hashes: 1: KVGzhURun_Z2Cbls6jKq8-siUnI.roa (hash: ICdbcaL6JuM+fFFA7u9Ui1orbNqbZysTahR0X2YtQkM=)
2: hSxuqdFakuVuEvKUogCcsFaigPs.roa (hash: Xj6H7DBsScqxHUyFTpNMVSRKFfZSSLZGI1xOM2DNsyc=)
3: oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl (hash: JyguJ3wSVyFXzc7wW8srCXChhbbJhKsWqFMienI8CHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:32:23:69:e4:01:8d:88:62:be:37:5e:83:c8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced
Validity
Not Before: Aug 23 02:00:49 2025 GMT
Not After : Aug 24 02:00:49 2025 GMT
Subject: CN=cb23ecd823ac16200a7425ebe4754f664ca5cb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:51:20:88:48:c3:61:e6:df:27:0c:fd:aa:
fd:9a:a0:00:d3:46:10:f6:fb:c8:4c:a3:1d:6f:c6:
56:e6:ff:20:da:62:e2:b1:0f:db:2b:f4:75:76:7f:
15:69:fd:7f:cd:50:03:b5:8e:1b:b3:81:15:43:78:
56:cd:9f:e7:73:bc:e9:38:af:50:bb:be:11:c6:26:
91:52:6d:1b:ed:af:8f:a1:b9:d6:3c:16:cf:5f:b9:
8f:de:35:d2:c4:c2:c8:30:b4:13:d3:ad:ce:46:37:
89:da:5f:0c:9e:80:11:42:90:c0:84:56:e6:a7:36:
a8:96:ad:ba:d9:93:58:fc:5e:ad:89:52:76:b0:d0:
7f:f0:6e:ff:a8:54:09:51:97:64:11:2f:34:c4:b2:
a9:85:0f:db:53:74:8f:e9:61:36:6a:5a:61:d4:69:
29:e6:b6:8d:c8:4a:fe:fb:2a:0f:2e:f5:88:76:5a:
7b:f4:dd:0d:68:a9:5a:2d:32:48:e1:21:0d:da:33:
77:82:e0:00:d5:97:91:74:f8:4b:c2:94:36:a9:9d:
93:32:70:82:64:74:51:2c:e4:e5:f8:a4:04:0f:7d:
3b:8a:f2:c9:21:66:de:7c:54:48:47:cd:e7:4a:04:
17:af:2e:82:4d:8b:a6:b1:df:2d:38:42:1e:3a:5f:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:23:EC:D8:23:AC:16:20:0A:74:25:EB:E4:75:4F:66:4C:A5:CB:2F
X509v3 Authority Key Identifier:
keyid:A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:01:db:5c:b2:64:16:cb:e9:d0:d1:4d:38:d0:56:c8:fa:95:
68:f6:ad:46:7f:0f:6c:c4:26:9f:5d:9e:d3:0d:e2:2c:74:c9:
a2:82:32:3e:63:60:00:06:20:8a:84:a3:13:39:fa:0f:10:cd:
3e:ad:d6:f7:eb:3b:ce:fe:a4:0c:b8:13:27:25:97:1b:fb:f9:
f1:47:91:e8:68:96:43:60:9f:ad:89:65:c0:f7:81:91:09:b0:
83:a7:f6:56:da:38:8b:4d:bc:94:25:47:75:d7:c2:62:af:29:
0c:6e:1c:9d:52:73:f0:96:83:21:b6:c0:91:ea:19:de:52:bf:
99:4d:9a:b3:0f:7e:12:d7:23:c4:e3:ee:b5:ca:fb:a9:58:7d:
d1:c5:21:18:61:4b:24:42:26:10:db:83:dc:dd:4e:aa:91:f6:
37:77:65:bb:27:c8:fc:fd:48:1b:59:f4:53:c1:0d:58:22:4f:
8a:f7:2a:55:41:2d:51:2b:8b:1b:89:ac:4f:c0:7a:cd:44:34:
e3:3e:a1:d5:5c:f5:61:5a:b7:d0:1e:08:f1:9d:d9:1c:bd:0f:
89:f8:9c:85:96:40:c8:33:4b:a4:02:65:9a:58:8e:6a:df:0d:
cf:05:ec:6f:b3:7a:92:6f:25:77:bf:95:d6:6d:22:88:fe:c5:
2e:28:e8:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqDIjaeQBjYhivjdeg8jyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwN2Y2ZTJiNjBjYTQ2NDcwMGRkOGUyOGZiYTBkYWFkYzJj
NDBjZWQwHhcNMjUwODIzMDIwMDQ5WhcNMjUwODI0MDIwMDQ5WjAzMTEwLwYDVQQD
EyhjYjIzZWNkODIzYWMxNjIwMGE3NDI1ZWJlNDc1NGY2NjRjYTVjYjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApblRIIhIw2Hm3ycM/ar9mqAA00YQ
9vvITKMdb8ZW5v8g2mLisQ/bK/R1dn8Vaf1/zVADtY4bs4EVQ3hWzZ/nc7zpOK9Q
u74RxiaRUm0b7a+PobnWPBbPX7mP3jXSxMLIMLQT063ORjeJ2l8MnoARQpDAhFbm
pzaolq262ZNY/F6tiVJ2sNB/8G7/qFQJUZdkES80xLKphQ/bU3SP6WE2alph1Gkp
5raNyEr++yoPLvWIdlp79N0NaKlaLTJI4SEN2jN3guAA1ZeRdPhLwpQ2qZ2TMnCC
ZHRRLOTl+KQED307ivLJIWbefFRIR83nSgQXry6CTYumsd8tOEIeOl/RBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsj7NgjrBYgCnQl6+R1T2ZMpcsvMB8GA1UdIwQY
MBaAFKB/bitgykZHAN2OKPug2q3CxAztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0g5dUsyREtSa2NBM1k0by02RGFyY0xFRE8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hN2NlOWUtMTBmYy00YmRhLTgzOGIt
YmNiNzI0YmMyNjg0LzEvb0g5dUsyREtSa2NBM1k0by02RGFyY0xFRE8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hN2NlOWUtMTBmYy00YmRhLTgzOGItYmNiNzI0YmMyNjg0
LzEvb0g5dUsyREtSa2NBM1k0by02RGFyY0xFRE8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQHbXLJk
Fsvp0NFNONBWyPqVaPatRn8PbMQmn12e0w3iLHTJooIyPmNgAAYgioSjEzn6DxDN
Pq3W9+s7zv6kDLgTJyWXG/v58UeR6GiWQ2CfrYllwPeBkQmwg6f2Vto4i028lCVH
ddfCYq8pDG4cnVJz8JaDIbbAkeoZ3lK/mU2asw9+EtcjxOPutcr7qVh90cUhGGFL
JEImENuD3N1OqpH2N3dluyfI/P1IG1n0U8ENWCJPivcqVUEtUSuLG4msT8B6zUQ0
4z6h1Vz1YVq30B4I8Z3ZHL0PifichZZAyDNLpAJlmliOat8NzwXsb7N6km8ld7+V
1m0iiP7FLijo6Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:25 2025 by rpki-client