Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
File: OXBHadCH2f6PeQplVctPvvzSTTg.mft (raw, json)
Hash identifier: t1cvdmCtcKHRPvvS+f+bSjCiXh9PBrm9O/1o8lqNx9A=
Subject key identifier: 1A:7A:40:92:C9:B2:02:84:ED:95:E5:CF:85:4E:5D:57:84:98:0A:7B
Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Certificate serial: 0198D54DD750525A5728384D8F44A79F2DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
Manifest number: 02FB
Signing time: Sat 23 Aug 2025 05:01:45 +0000
Manifest this update: Sat 23 Aug 2025 05:01:45 +0000
Manifest next update: Sun 24 Aug 2025 05:01:45 +0000
Files and hashes: 1: GvH_ld4kbG2WgWcG2cx_5y70SCI.roa (hash: aThEESBkBgawQBBj+8NWP1oT0rEWoC0jxTnO1rDLqhk=)
2: OXBHadCH2f6PeQplVctPvvzSTTg.crl (hash: KUsZ/RZ9FHzbGCbLDi9YypHI94+zAflvvU2brHiXk7k=)
3: qg4rCavoAEstd_gdiifZJ2l134s.roa (hash: zv8J2KuDAwQOB6a6izYV8dRbqPViGL374uqqVPG9O1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d7:50:52:5a:57:28:38:4d:8f:44:a7:9f:2d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Validity
Not Before: Aug 23 05:01:45 2025 GMT
Not After : Aug 24 05:01:45 2025 GMT
Subject: CN=1a7a4092c9b20284ed95e5cf854e5d5784980a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:17:25:cd:e7:74:7a:d6:8a:b1:13:fd:dc:
78:41:20:cb:4d:d8:2e:54:02:01:87:d6:e0:67:a0:
84:be:f5:5b:32:92:0b:e5:dc:ac:27:b6:b2:72:ad:
fc:5b:b1:98:ec:69:94:45:9f:71:9f:63:80:56:f1:
59:9b:10:87:99:4e:03:ce:d4:b8:23:08:50:c4:f8:
e1:ec:01:f7:53:af:6f:d9:c5:41:fa:d5:74:30:8f:
91:6f:ff:58:09:11:bc:9f:e5:09:16:74:eb:b0:fe:
bd:b3:f6:76:1c:7c:7a:8f:dc:a6:db:37:fd:e1:c8:
1a:4a:e1:e5:72:3d:ce:ad:49:29:e6:be:58:84:fa:
f8:44:e7:f9:77:c2:8a:ab:f8:ce:8c:1f:ba:5f:d9:
2d:58:e5:08:3e:cc:2a:90:a7:c0:63:c7:ef:1f:2a:
7a:44:fc:99:61:b3:6e:01:c3:e1:b3:5c:4f:cc:fc:
2f:43:52:39:c0:da:bc:f7:cb:ca:67:e8:28:14:2d:
58:80:42:f6:b9:49:9d:04:91:d3:38:eb:a3:ec:2c:
73:ef:63:08:4b:37:14:f4:5b:66:04:29:4e:0b:46:
e9:26:77:0f:41:e1:f8:8f:b2:51:86:d6:55:e1:b5:
fd:d9:af:e0:f5:75:57:f8:22:0e:bb:66:ec:af:47:
1f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7A:40:92:C9:B2:02:84:ED:95:E5:CF:85:4E:5D:57:84:98:0A:7B
X509v3 Authority Key Identifier:
keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b3:b4:23:b2:9e:99:c2:32:9f:a1:78:6d:b1:6a:a9:be:df:
14:02:1f:86:38:3a:6b:4d:9b:94:ae:f2:d6:58:c8:75:f4:6a:
04:2e:51:7f:49:12:bb:35:72:5e:24:da:16:f7:6d:86:5c:73:
78:ca:14:02:89:67:48:e4:eb:22:aa:00:ea:00:6d:d5:af:1d:
95:72:2e:53:08:05:d4:52:b0:0e:01:9d:3f:3c:14:0d:a1:63:
68:a4:c1:0b:0e:30:a9:50:0b:a6:8d:19:d1:6c:e0:86:22:aa:
48:22:aa:09:50:ab:6d:4a:95:89:fe:31:9c:a9:01:bc:4f:fa:
5a:80:12:bf:23:bd:db:dd:a6:41:c8:25:b7:73:81:20:0b:74:
a3:68:a1:d0:40:4f:b8:4b:e1:7e:8d:1e:56:47:21:1a:cb:9c:
7d:07:ef:d3:40:dd:5d:7a:9e:48:01:57:5f:75:6f:ec:d8:b2:
65:22:ab:7e:43:76:c1:96:ff:71:1e:ea:03:3a:1a:0c:bc:0d:
d2:57:ba:51:25:7a:98:29:41:0d:10:4b:5c:49:0a:75:5d:2b:
54:42:32:c1:8c:db:e2:84:1f:78:fd:aa:52:eb:28:e7:d9:11:
f9:72:e9:0f:75:6c:e1:d5:27:f9:6a:f5:46:da:d7:58:d9:de:
bb:52:bd:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTddQUlpXKDhNj0Snny2nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzA0NzY5ZDA4N2Q5ZmU4Zjc5MGE2NTU1Y2I0ZmJlZmNk
MjRkMzgwHhcNMjUwODIzMDUwMTQ1WhcNMjUwODI0MDUwMTQ1WjAzMTEwLwYDVQQD
EygxYTdhNDA5MmM5YjIwMjg0ZWQ5NWU1Y2Y4NTRlNWQ1Nzg0OTgwYTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdAXJc3ndHrWirET/dx4QSDLTdgu
VAIBh9bgZ6CEvvVbMpIL5dysJ7aycq38W7GY7GmURZ9xn2OAVvFZmxCHmU4DztS4
IwhQxPjh7AH3U69v2cVB+tV0MI+Rb/9YCRG8n+UJFnTrsP69s/Z2HHx6j9ym2zf9
4cgaSuHlcj3OrUkp5r5YhPr4ROf5d8KKq/jOjB+6X9ktWOUIPswqkKfAY8fvHyp6
RPyZYbNuAcPhs1xPzPwvQ1I5wNq898vKZ+goFC1YgEL2uUmdBJHTOOuj7Cxz72MI
SzcU9FtmBClOC0bpJncPQeH4j7JRhtZV4bX92a/g9XVX+CIOu2bsr0cfFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBp6QJLJsgKE7ZXlz4VOXVeEmAp7MB8GA1UdIwQY
MBaAFDlwR2nQh9n+j3kKZVXLT7780k04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjIt
ZTQ1MzUwNDE0ZGRmLzEvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjItZTQ1MzUwNDE0ZGRm
LzEvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLO0I7Ke
mcIyn6F4bbFqqb7fFAIfhjg6a02blK7y1ljIdfRqBC5Rf0kSuzVyXiTaFvdthlxz
eMoUAolnSOTrIqoA6gBt1a8dlXIuUwgF1FKwDgGdPzwUDaFjaKTBCw4wqVALpo0Z
0WzghiKqSCKqCVCrbUqVif4xnKkBvE/6WoASvyO9292mQcglt3OBIAt0o2ih0EBP
uEvhfo0eVkchGsucfQfv00DdXXqeSAFXX3Vv7NiyZSKrfkN2wZb/cR7qAzoaDLwN
0le6USV6mClBDRBLXEkKdV0rVEIywYzb4oQfeP2qUuso59kR+XLpD3Vs4dUn+Wr1
RtrXWNneu1K95g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:50 2025 by rpki-client