Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: 8Pdzb+hU+HBB1cD/I6q7/5rCH8rFHU+3JYe5xXIHMQI=
Subject key identifier: 29:48:B8:C5:1F:44:C6:47:AF:15:3A:53:7F:4A:AD:31:0B:36:74:7B
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 0198D4E0447C2C699AC4733B0BE35FE3C819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 058E
Signing time: Sat 23 Aug 2025 03:02:04 +0000
Manifest this update: Sat 23 Aug 2025 03:02:04 +0000
Manifest next update: Sun 24 Aug 2025 03:02:04 +0000
Files and hashes: 1: RAu0fNtqwivhpDFk4ehwbUssHTc.roa (hash: ASO7jKRNvxEqEpBOo5wevxzSp2tNnkfm3RRt0ZwZtAw=)
2: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: swJNRxVpu7seBifCM30oaavvtngh/IM/4LLvBcSftjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:44:7c:2c:69:9a:c4:73:3b:0b:e3:5f:e3:c8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Aug 23 03:02:04 2025 GMT
Not After : Aug 24 03:02:04 2025 GMT
Subject: CN=2948b8c51f44c647af153a537f4aad310b36747b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ab:1c:25:f2:66:eb:e4:35:ec:2a:2f:6c:65:
14:b5:87:28:29:ea:ca:12:6c:96:ad:75:1c:cd:d2:
53:3e:10:b8:7e:a9:f5:6b:0c:ca:c2:06:ca:61:af:
17:8f:6e:bf:58:00:cf:f7:af:0e:b0:2b:03:e6:1d:
32:9c:86:da:7f:05:33:54:17:58:2a:86:93:64:02:
9b:ad:7a:d4:e2:df:22:ed:07:2b:e2:48:1e:b1:e0:
6a:8c:52:d6:d1:87:b7:a9:fa:63:54:74:2d:0c:5b:
9a:1e:45:01:64:48:03:3e:50:97:97:2b:2c:85:fe:
85:29:95:f4:7a:cb:c0:81:41:db:62:61:de:98:b5:
13:95:84:b6:8f:f6:2f:95:df:97:67:43:51:ab:73:
86:32:a7:63:60:84:47:66:4c:f3:16:be:5e:cf:c5:
5c:3f:6b:85:2b:05:53:16:df:51:6f:4a:56:68:53:
6c:37:8b:b7:ae:92:2c:62:86:de:38:62:28:26:0d:
26:fe:4d:97:5f:e9:4a:ca:b9:07:20:a3:e0:07:25:
fd:ae:f1:6d:3b:47:77:d8:73:37:4a:40:15:b2:6f:
2a:12:65:24:72:c5:db:e0:ae:1f:0d:47:28:d0:ac:
20:53:a7:43:b0:7a:79:28:b9:81:05:7f:8b:02:71:
51:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:48:B8:C5:1F:44:C6:47:AF:15:3A:53:7F:4A:AD:31:0B:36:74:7B
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f2:99:e9:3a:da:cf:27:f3:95:59:8c:82:38:8b:fa:40:51:
57:63:ea:7b:bb:a5:b5:93:bd:52:8e:43:74:a7:99:12:dc:96:
4c:96:bf:37:25:73:cb:76:a0:97:d9:f6:cb:d7:58:de:58:15:
04:b8:9f:cd:32:a2:4c:6e:d9:c6:f7:5a:c3:7e:14:2f:20:82:
68:61:f0:51:98:9b:3c:b4:d3:49:45:10:b7:80:7e:1e:b9:cc:
a8:05:65:ba:d2:61:42:43:7e:bb:49:17:68:4d:4f:9d:7b:c2:
9a:47:ca:bb:21:63:ca:56:28:20:4f:f7:b5:c8:60:9c:e2:ad:
7f:ef:ab:34:a4:fb:d7:8b:f7:b1:2e:7e:ed:e9:b4:f1:37:0e:
e3:ff:fd:f4:36:07:7a:c0:2e:1a:d7:41:a3:b0:7e:94:ff:93:
e8:71:b4:d5:23:32:5a:ad:bb:5f:ec:2b:35:a2:de:af:c3:05:
84:77:d3:fa:a7:7a:5c:34:2b:c4:75:bc:88:99:75:98:fa:ff:
d5:a2:98:42:18:81:15:6c:80:57:a0:ee:30:16:e4:1f:d6:3f:
ff:a2:69:4b:6c:42:94:41:6a:69:ba:bc:bc:b9:ca:2b:96:6b:
fb:40:f4:c2:2d:e4:37:40:e1:f3:88:ee:82:12:52:ae:af:ba:
93:b2:e3:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4ER8LGmaxHM7C+Nf48gZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYTU1YmYyODg4NzUzZTQ0Njc1YjYxZGRhMzAzOTRkOTAx
NTZjMGEwHhcNMjUwODIzMDMwMjA0WhcNMjUwODI0MDMwMjA0WjAzMTEwLwYDVQQD
EygyOTQ4YjhjNTFmNDRjNjQ3YWYxNTNhNTM3ZjRhYWQzMTBiMzY3NDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06scJfJm6+Q17CovbGUUtYcoKerK
EmyWrXUczdJTPhC4fqn1awzKwgbKYa8Xj26/WADP968OsCsD5h0ynIbafwUzVBdY
KoaTZAKbrXrU4t8i7Qcr4kgeseBqjFLW0Ye3qfpjVHQtDFuaHkUBZEgDPlCXlyss
hf6FKZX0esvAgUHbYmHemLUTlYS2j/Yvld+XZ0NRq3OGMqdjYIRHZkzzFr5ez8Vc
P2uFKwVTFt9Rb0pWaFNsN4u3rpIsYobeOGIoJg0m/k2XX+lKyrkHIKPgByX9rvFt
O0d32HM3SkAVsm8qEmUkcsXb4K4fDUco0KwgU6dDsHp5KLmBBX+LAnFRzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClIuMUfRMZHrxU6U39KrTELNnR7MB8GA1UdIwQY
MBaAFKGlW/KIh1PkRnW2HdowOU2QFWwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yZGFiMTgtN2JiNy00YWExLTk4YWQt
MjdjOWQ5MTE0MjM4LzEvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yZGFiMTgtN2JiNy00YWExLTk4YWQtMjdjOWQ5MTE0MjM4
LzEvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq/KZ6Tra
zyfzlVmMgjiL+kBRV2Pqe7ultZO9Uo5DdKeZEtyWTJa/NyVzy3agl9n2y9dY3lgV
BLifzTKiTG7Zxvdaw34ULyCCaGHwUZibPLTTSUUQt4B+HrnMqAVlutJhQkN+u0kX
aE1PnXvCmkfKuyFjylYoIE/3tchgnOKtf++rNKT714v3sS5+7em08TcO4//99DYH
esAuGtdBo7B+lP+T6HG01SMyWq27X+wrNaLer8MFhHfT+qd6XDQrxHW8iJl1mPr/
1aKYQhiBFWyAV6DuMBbkH9Y//6JpS2xClEFqabq8vLnKK5Zr+0D0wi3kN0Dh84ju
ghJSrq+6k7LjyA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:23:51 2025 by rpki-client