Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
File: oJRwOdnwgKQn91JcXQZvbPYhNPM.mft (raw, json)
Hash identifier: vFDSZQYN5qJmNBjvGounmkfLHgvkVoCVh/opaT6iPGk=
Subject key identifier: 29:80:FD:03:07:81:D6:C5:74:8B:CC:D4:40:9B:8C:42:57:D9:37:61
Authority key identifier: A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3
Certificate issuer: /CN=a0947039d9f080a427f7525c5d066f6cf62134f3
Certificate serial: 0198D5F1249F0BC5B2E833EC1A73A3ADF555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
Manifest number: 07C4
Signing time: Sat 23 Aug 2025 08:00:07 +0000
Manifest this update: Sat 23 Aug 2025 08:00:07 +0000
Manifest next update: Sun 24 Aug 2025 08:00:07 +0000
Files and hashes: 1: 2CUF8fkBOk7BwaT2x7tRMW9KGPA.roa (hash: czarYHJez6qAV6nXVQK9tcHYXpAXKKAJjoacYgptlzg=)
2: oJRwOdnwgKQn91JcXQZvbPYhNPM.crl (hash: 89Iguxg+JqYx2SDN8fselO84rc3GHkB8LbixkLL9tWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:24:9f:0b:c5:b2:e8:33:ec:1a:73:a3:ad:f5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0947039d9f080a427f7525c5d066f6cf62134f3
Validity
Not Before: Aug 23 08:00:07 2025 GMT
Not After : Aug 24 08:00:07 2025 GMT
Subject: CN=2980fd030781d6c5748bccd4409b8c4257d93761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:31:c1:35:2e:94:39:41:e2:2e:bf:27:82:c3:
f7:84:50:6a:8c:30:7b:c3:18:bb:63:2b:01:0d:0b:
9b:eb:a5:2f:1c:c5:b8:84:5d:16:f0:25:59:c2:3b:
1e:95:5c:d3:6a:e1:f1:95:57:5d:e0:e4:c4:da:94:
d2:22:68:04:37:ab:2a:18:c4:30:3b:c4:53:09:a7:
eb:83:2e:c6:5c:45:ab:79:d2:bb:eb:e1:42:ce:eb:
1c:b4:23:dc:a0:f0:b2:9a:e2:9c:32:fa:96:af:a8:
e3:4f:58:91:0d:1d:db:24:4f:92:c5:e6:2e:8d:5d:
d8:cc:7b:cc:c9:d7:60:5a:fe:dc:a1:39:f5:5d:7e:
1d:1c:3d:6d:82:f5:ee:99:c9:e8:2d:42:72:de:d9:
81:da:0a:14:e8:2e:2b:3d:0a:bc:bf:7a:e8:9e:bb:
e0:14:58:0b:a1:6e:0b:28:50:6c:c9:65:ae:36:c0:
b9:0c:0b:2d:35:ee:ae:2e:46:69:2d:b9:a2:4d:2e:
d9:1b:0f:0e:58:50:21:0d:d4:14:4d:17:87:cd:bb:
ea:b8:7d:d5:36:41:3f:bc:1b:f7:b7:16:0a:94:a0:
53:bc:3b:4f:28:7f:d3:39:b2:ac:73:48:ce:6a:84:
e4:89:0a:d4:f9:1b:1c:97:29:8c:ea:6d:2a:ef:4a:
41:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:80:FD:03:07:81:D6:C5:74:8B:CC:D4:40:9B:8C:42:57:D9:37:61
X509v3 Authority Key Identifier:
keyid:A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f0:83:4f:69:72:95:47:16:77:88:f3:6c:97:78:90:42:54:
a5:77:3c:91:28:09:57:c0:d5:6c:97:f2:56:76:62:3a:77:f3:
6d:4b:f0:22:fe:42:73:60:ed:b1:2e:c4:9f:2b:2b:17:41:49:
f9:88:9f:47:9e:ef:53:ef:c5:c0:f1:71:51:c3:08:a4:d9:6c:
a2:63:2d:c9:7f:2a:4f:19:28:38:a9:b3:b8:58:40:e0:54:05:
0d:a7:fe:8e:c2:27:4c:6d:d0:17:be:82:0d:d9:76:9b:61:11:
78:ab:66:da:9e:00:23:8d:b7:25:c4:82:3d:ca:18:cc:0a:7d:
07:d0:39:2d:b0:aa:5b:23:f8:79:f4:fb:c4:c9:aa:4d:73:74:
a7:56:87:73:e9:b7:c1:e9:8c:04:23:10:fe:1f:1c:d4:28:3b:
71:bc:f3:3f:f0:34:d5:03:2c:bf:dc:2a:10:da:e3:2f:78:a9:
3c:da:a9:1a:a3:bd:c1:b1:09:5e:8c:11:21:4b:69:ef:bc:cb:
f8:f5:d5:9b:29:49:92:95:38:d9:73:8e:bb:80:1e:71:68:5c:
bf:9a:22:86:63:27:0a:6b:91:32:2d:84:d7:90:b4:56:3a:01:
58:19:51:73:d4:95:96:bb:56:15:ad:9e:3b:f2:97:8d:8e:9b:
38:06:af:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8SSfC8Wy6DPsGnOjrfVVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOTQ3MDM5ZDlmMDgwYTQyN2Y3NTI1YzVkMDY2ZjZjZjYy
MTM0ZjMwHhcNMjUwODIzMDgwMDA3WhcNMjUwODI0MDgwMDA3WjAzMTEwLwYDVQQD
EygyOTgwZmQwMzA3ODFkNmM1NzQ4YmNjZDQ0MDliOGM0MjU3ZDkzNzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zHBNS6UOUHiLr8ngsP3hFBqjDB7
wxi7YysBDQub66UvHMW4hF0W8CVZwjselVzTauHxlVdd4OTE2pTSImgEN6sqGMQw
O8RTCafrgy7GXEWredK76+FCzusctCPcoPCymuKcMvqWr6jjT1iRDR3bJE+SxeYu
jV3YzHvMyddgWv7coTn1XX4dHD1tgvXumcnoLUJy3tmB2goU6C4rPQq8v3ronrvg
FFgLoW4LKFBsyWWuNsC5DAstNe6uLkZpLbmiTS7ZGw8OWFAhDdQUTReHzbvquH3V
NkE/vBv3txYKlKBTvDtPKH/TObKsc0jOaoTkiQrU+RsclymM6m0q70pB1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmA/QMHgdbFdIvM1ECbjEJX2TdhMB8GA1UdIwQY
MBaAFKCUcDnZ8ICkJ/dSXF0Gb2z2ITTzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0pSd09kbndnS1FuOTFKY1hRWnZiUFloTlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lM2I5MjEtYTc2Yi00MWYwLWIyNDQt
YzhiM2FjMGJlZmNiLzEvb0pSd09kbndnS1FuOTFKY1hRWnZiUFloTlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9lM2I5MjEtYTc2Yi00MWYwLWIyNDQtYzhiM2FjMGJlZmNi
LzEvb0pSd09kbndnS1FuOTFKY1hRWnZiUFloTlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPCDT2ly
lUcWd4jzbJd4kEJUpXc8kSgJV8DVbJfyVnZiOnfzbUvwIv5Cc2DtsS7EnysrF0FJ
+YifR57vU+/FwPFxUcMIpNlsomMtyX8qTxkoOKmzuFhA4FQFDaf+jsInTG3QF76C
Ddl2m2EReKtm2p4AI423JcSCPcoYzAp9B9A5LbCqWyP4efT7xMmqTXN0p1aHc+m3
wemMBCMQ/h8c1Cg7cbzzP/A01QMsv9wqENrjL3ipPNqpGqO9wbEJXowRIUtp77zL
+PXVmylJkpU42XOOu4AecWhcv5oihmMnCmuRMi2E15C0VjoBWBlRc9SVlrtWFa2e
O/KXjY6bOAav0w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:15 2025 by rpki-client