Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
File: OUiGnOVLnTsvPjmu4snI6xnLWw8.mft (raw, json)
Hash identifier: VMbo1ZpUnFfE8RoDOmau7/q3fdZcp5+4tXzk2FHrCQc=
Subject key identifier: 77:05:C2:40:24:B6:F3:02:D2:56:44:2C:D0:7A:8A:BF:E8:C5:11:81
Authority key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
Certificate issuer: /CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Certificate serial: 0198D6CE0528DC062FE1B7BC7E5F59F8260A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 12:01:22 +0000
Manifest this update: Sat 23 Aug 2025 12:01:22 +0000
Manifest next update: Sun 24 Aug 2025 12:01:22 +0000
Files and hashes: 1: Jxs0meMKDCLBz_dVByd3J3wLTdc.roa (hash: ZCvr3TtSBPIKAQupwsVmwJ8f7SSejV5g4WH6kmkpM1s=)
2: OUiGnOVLnTsvPjmu4snI6xnLWw8.crl (hash: D3sPLmjYRZ8XlxXR9+um0IBYUDumjLaHrEbIpy+GMiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:ce:05:28:dc:06:2f:e1:b7:bc:7e:5f:59:f8:26:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Validity
Not Before: Aug 23 12:01:22 2025 GMT
Not After : Aug 24 12:01:22 2025 GMT
Subject: CN=7705c24024b6f302d256442cd07a8abfe8c51181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:83:9b:b3:05:ef:6e:1f:cc:88:54:d0:0e:
9b:d7:da:11:8e:55:57:0c:46:6b:f7:e6:89:65:dc:
db:26:49:e5:88:c6:cb:85:2a:dc:81:10:56:97:d8:
84:0c:3b:6b:ed:07:24:79:2c:f4:7c:6f:f2:31:e0:
e4:0d:ce:04:a8:15:3d:b8:8f:c9:8d:48:f4:4b:73:
ce:ef:0a:74:47:4b:8b:d0:f1:27:47:de:3d:4b:b7:
a3:62:ba:1d:ca:ce:67:e3:8a:95:69:d4:98:da:4d:
7a:cb:e0:63:d3:b9:59:94:13:17:2a:0f:e1:2c:5a:
03:18:1b:0d:b3:59:43:70:11:0f:1b:d4:9f:b5:c3:
e4:58:28:f2:61:fa:cc:87:fc:7d:00:1f:cd:13:b6:
a7:22:79:da:fe:f4:ae:fd:d4:7b:74:f9:fd:c9:0f:
66:f5:26:b3:d8:00:fd:1c:e8:c6:ff:5d:05:3e:60:
3f:ce:32:14:5b:87:c0:f2:cd:bc:e1:98:b3:ce:b6:
5f:d1:8c:27:b0:49:fe:83:b0:cd:ae:e1:4a:29:ae:
ba:0c:75:c1:4f:4f:23:92:04:f1:df:e8:0f:7f:49:
ff:e5:4b:55:77:83:cd:7b:80:65:92:06:e9:42:a2:
2c:5c:b2:01:b0:80:b2:2e:31:97:eb:a0:f5:c5:25:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:05:C2:40:24:B6:F3:02:D2:56:44:2C:D0:7A:8A:BF:E8:C5:11:81
X509v3 Authority Key Identifier:
keyid:39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:35:0f:ae:b2:19:23:f3:d3:62:79:d1:8e:fb:8a:22:ee:fe:
b8:b1:e5:02:cd:b3:ac:fa:65:d0:8c:50:9e:a4:99:27:4a:b1:
50:38:6d:3f:a3:f7:92:17:6d:8c:e3:d3:85:7c:21:22:73:33:
2d:f9:8e:e4:80:50:57:8c:76:f4:29:78:10:fa:13:50:c9:c2:
b3:39:9e:25:f2:6f:e9:9c:7d:9c:a3:6d:a0:10:36:53:1c:aa:
d7:2d:f0:3d:dc:0a:d8:f6:a1:e8:21:4b:b2:26:00:85:23:03:
fb:fe:fa:58:66:5d:05:9b:76:e2:84:a0:f7:52:8a:74:b7:58:
fb:22:06:72:f9:b8:b9:75:af:b5:aa:00:ad:74:d1:a1:4d:99:
44:ed:a8:b5:e7:cd:ad:a9:d8:9f:94:a0:8b:a2:de:d9:97:cd:
84:dd:9a:75:43:c8:70:29:4d:bd:43:85:fb:13:70:8d:3d:bc:
9a:b6:dc:69:67:23:e0:4c:41:34:33:ae:86:48:64:fb:96:b1:
ae:6a:de:3b:46:84:33:15:29:89:14:b9:50:6c:cb:61:79:f3:
8c:ea:fa:5c:3c:28:0c:25:b8:4e:19:d3:4d:07:e2:09:95:14:
20:fd:82:a9:0a:50:3c:0a:6a:e3:db:82:cf:02:83:80:27:d7:
0a:26:98:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzgUo3AYv4be8fl9Z+CYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NDg4NjljZTU0YjlkM2IyZjNlMzlhZWUyYzljOGViMTlj
YjViMGYwHhcNMjUwODIzMTIwMTIyWhcNMjUwODI0MTIwMTIyWjAzMTEwLwYDVQQD
Eyg3NzA1YzI0MDI0YjZmMzAyZDI1NjQ0MmNkMDdhOGFiZmU4YzUxMTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtheDm7MF724fzIhU0A6b19oRjlVX
DEZr9+aJZdzbJknliMbLhSrcgRBWl9iEDDtr7QckeSz0fG/yMeDkDc4EqBU9uI/J
jUj0S3PO7wp0R0uL0PEnR949S7ejYrodys5n44qVadSY2k16y+Bj07lZlBMXKg/h
LFoDGBsNs1lDcBEPG9SftcPkWCjyYfrMh/x9AB/NE7anInna/vSu/dR7dPn9yQ9m
9Saz2AD9HOjG/10FPmA/zjIUW4fA8s284ZizzrZf0YwnsEn+g7DNruFKKa66DHXB
T08jkgTx3+gPf0n/5UtVd4PNe4BlkgbpQqIsXLIBsICyLjGX66D1xSWoawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcFwkAktvMC0lZELNB6ir/oxRGBMB8GA1UdIwQY
MBaAFDlIhpzlS507Lz45ruLJyOsZy1sPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1VpR25PVkxuVHN2UGptdTRzbkk2eG5MV3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kZDAxODktNzk2OS00ZmQ1LTk3NDct
MjhiZGFiY2E3MGNiLzEvT1VpR25PVkxuVHN2UGptdTRzbkk2eG5MV3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kZDAxODktNzk2OS00ZmQ1LTk3NDctMjhiZGFiY2E3MGNi
LzEvT1VpR25PVkxuVHN2UGptdTRzbkk2eG5MV3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDUPrrIZ
I/PTYnnRjvuKIu7+uLHlAs2zrPpl0IxQnqSZJ0qxUDhtP6P3khdtjOPThXwhInMz
LfmO5IBQV4x29Cl4EPoTUMnCszmeJfJv6Zx9nKNtoBA2Uxyq1y3wPdwK2Pah6CFL
siYAhSMD+/76WGZdBZt24oSg91KKdLdY+yIGcvm4uXWvtaoArXTRoU2ZRO2otefN
ranYn5Sgi6Le2ZfNhN2adUPIcClNvUOF+xNwjT28mrbcaWcj4ExBNDOuhkhk+5ax
rmreO0aEMxUpiRS5UGzLYXnzjOr6XDwoDCW4ThnTTQfiCZUUIP2CqQpQPApq49uC
zwKDgCfXCiaYjg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:56 2025 by rpki-client