Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier: YSV9HwynnVAXxuH/bKXy/8TmXaiXjSg7ikq3AjjCt8w=
Subject key identifier: 0A:92:2D:94:99:A0:A2:D3:B5:19:41:65:96:32:C3:31:8D:B5:25:92
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 0198D65F19CF8039EFCD5CA35501B4D18D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number: 01D8
Signing time: Sat 23 Aug 2025 10:00:13 +0000
Manifest this update: Sat 23 Aug 2025 10:00:13 +0000
Manifest next update: Sun 24 Aug 2025 10:00:13 +0000
Files and hashes: 1: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: Z6QsyLttrxsaZf0+xvGxfAfPn5MP9h5dpC9t0nwuADM=)
2: MEk6COdLayDwspMkca7X6AtTbGc.roa (hash: LzuFK2lAnPM5ilB5mo7OmDeySV6Fxi80CkdMaYJoff4=)
3: ejchce-hV6tRVRay48MMQu7AoMY.roa (hash: lMIzybFQd6b9BY1auWIGvBebble5XxNM96EF4zsuItE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:19:cf:80:39:ef:cd:5c:a3:55:01:b4:d1:8d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: Aug 23 10:00:13 2025 GMT
Not After : Aug 24 10:00:13 2025 GMT
Subject: CN=0a922d9499a0a2d3b51941659632c3318db52592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:fe:bc:a5:dd:ca:c4:8f:d1:5d:d9:d6:32:
d1:79:44:a9:a8:5b:59:57:6e:1b:06:92:d9:95:c3:
1e:d7:23:bd:bf:c0:56:c9:e3:98:0a:af:e9:67:50:
95:4f:e4:ee:7e:1d:97:72:09:85:12:9d:0c:98:6a:
62:80:9d:c1:39:2d:20:bc:db:3a:64:0d:fe:e5:3f:
fc:44:20:1e:8b:bf:7a:01:5f:27:fb:a8:9a:41:b6:
7d:e6:f9:83:16:1b:19:48:07:36:4a:53:d8:49:a9:
6b:14:0a:89:14:26:26:3c:53:84:74:42:bf:82:d4:
b1:3f:bc:81:c6:6a:57:9b:57:ea:0a:60:ca:08:31:
7e:b7:71:1f:96:af:6c:5a:5a:4b:a5:a3:e6:da:a7:
9a:23:70:d9:8a:1a:70:24:b0:78:ae:e0:8e:eb:0a:
ae:46:1b:d7:04:41:f6:ac:ee:f3:71:1d:3e:ed:b2:
d2:e4:d1:73:8f:e5:d0:c7:dd:2a:d6:49:56:5c:b1:
2b:d7:e5:30:e5:79:d8:df:54:76:b7:70:a6:66:c4:
ba:dc:98:ed:7d:bc:b9:bd:31:7b:01:d3:35:d6:42:
34:76:f5:1b:14:99:d0:a8:b7:08:3c:fa:4d:fe:95:
6b:c7:be:54:d0:21:93:27:80:f1:f4:c1:70:f1:39:
ab:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:92:2D:94:99:A0:A2:D3:B5:19:41:65:96:32:C3:31:8D:B5:25:92
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:a2:ad:ed:c5:6d:47:3f:2e:75:8b:ec:9a:79:ce:5c:70:dc:
5b:b5:29:de:b4:8b:62:b1:33:61:10:a0:15:78:b5:9d:af:f5:
ac:0c:65:43:a4:de:9d:42:be:a2:e3:fb:b9:1a:4e:da:bc:c8:
bf:ef:e5:58:42:f9:a6:57:10:cd:53:89:74:a0:d2:dd:96:af:
51:18:2f:f7:3e:f0:1d:c5:15:e9:61:3f:3e:bb:d3:44:3a:5d:
ee:3d:e7:be:68:4c:eb:7d:64:de:d5:4c:19:e4:77:5f:60:14:
34:a8:80:08:0f:64:28:97:f8:05:d6:8c:85:51:53:33:50:81:
4a:7c:1e:69:56:d8:d3:0c:e9:32:86:44:72:ac:a3:c9:6f:6b:
36:e4:0e:b1:9b:fb:02:3c:81:01:74:0e:57:a2:db:8a:dc:35:
f0:17:d8:fc:07:dd:f7:9b:a2:b2:df:b4:69:98:00:52:ff:71:
63:dc:78:a8:6e:6a:b0:4f:d3:74:f2:35:55:d3:7a:fc:3c:a0:
0d:ab:a2:7f:b1:88:94:b4:83:58:81:c4:21:66:b9:41:8b:b5:
64:2d:15:85:71:98:11:9e:76:69:eb:c0:c9:d3:a2:7c:22:c0:
d1:2c:f5:20:4b:3b:9a:0b:e2:66:9a:ac:e6:c6:e7:c4:d2:8b:
d6:cb:5f:e6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjWXxnPgDnvzVyjVQG00Y1jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhOGNiOTQ2ZmU4NjAxYTBmZDJhMWIzZTQzODJiNmIxZGMw
NDRmNTcwHhcNMjUwODIzMTAwMDEzWhcNMjUwODI0MTAwMDEzWjAzMTEwLwYDVQQD
EygwYTkyMmQ5NDk5YTBhMmQzYjUxOTQxNjU5NjMyYzMzMThkYjUyNTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu3+vKXdysSP0V3Z1jLReUSpqFtZ
V24bBpLZlcMe1yO9v8BWyeOYCq/pZ1CVT+Tufh2XcgmFEp0MmGpigJ3BOS0gvNs6
ZA3+5T/8RCAei796AV8n+6iaQbZ95vmDFhsZSAc2SlPYSalrFAqJFCYmPFOEdEK/
gtSxP7yBxmpXm1fqCmDKCDF+t3Eflq9sWlpLpaPm2qeaI3DZihpwJLB4ruCO6wqu
RhvXBEH2rO7zcR0+7bLS5NFzj+XQx90q1klWXLEr1+Uw5XnY31R2t3CmZsS63Jjt
fby5vTF7AdM11kI0dvUbFJnQqLcIPPpN/pVrx75U0CGTJ4Dx9MFw8TmrZwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAqSLZSZoKLTtRlBZZYywzGNtSWSMB8GA1UdIwQY
MBaAFPqMuUb+hgGg/SobPkOCtrHcBE9XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1veTVSdjZHQWFEOUtocy1RNEsyc2R3RVQxYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMGQyMjcwLTVjNmYtNDJjZi1hNTYw
LTk0YTZlZjAxZDA0Ny8xLzEtb3k1UnY2R0FhRDlLaHMtUTRLMnNkd0VUMWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMzLzBkMjI3MC01YzZmLTQyY2YtYTU2MC05NGE2ZWYwMWQw
NDcvMS8xLW95NVJ2NkdBYUQ5S2hzLVE0SzJzZHdFVDFjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx6Kt
7cVtRz8udYvsmnnOXHDcW7Up3rSLYrEzYRCgFXi1na/1rAxlQ6TenUK+ouP7uRpO
2rzIv+/lWEL5plcQzVOJdKDS3ZavURgv9z7wHcUV6WE/PrvTRDpd7j3nvmhM631k
3tVMGeR3X2AUNKiACA9kKJf4BdaMhVFTM1CBSnweaVbY0wzpMoZEcqyjyW9rNuQO
sZv7AjyBAXQOV6Lbitw18BfY/Afd95uist+0aZgAUv9xY9x4qG5qsE/TdPI1VdN6
/DygDauif7GIlLSDWIHEIWa5QYu1ZC0VhXGYEZ52aevAydOifCLA0Sz1IEs7mgvi
Zpqs5sbnxNKL1stf5g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:44:05 2025 by rpki-client