Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
File: oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft (raw, json)
Hash identifier: pQmuhHJtXa9geUr/dR3mm/uNWSOfsU2kBm9nl3cKGMc=
Subject key identifier: 9F:CB:3B:90:ED:79:A8:FF:6A:31:63:FF:EE:60:3F:9B:5C:C1:64:C1
Authority key identifier: A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
Certificate issuer: /CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Certificate serial: 0198D583CBD70D6ECCB1EA80DBA1D274C5CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
Manifest number: 1045
Signing time: Sat 23 Aug 2025 06:00:40 +0000
Manifest this update: Sat 23 Aug 2025 06:00:40 +0000
Manifest next update: Sun 24 Aug 2025 06:00:40 +0000
Files and hashes: 1: oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl (hash: gMBKW7MOKLWxbr+mVn2XKd0R6n115owDWqdqrvzbPq8=)
2: vIvVsHJ0xm9KWsOKo8t7mvzJhUY.roa (hash: A8A1HwLzG1pGgLrLpP5xuPgKXEc1TOEplW6JXucAwjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:cb:d7:0d:6e:cc:b1:ea:80:db:a1:d2:74:c5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Validity
Not Before: Aug 23 06:00:40 2025 GMT
Not After : Aug 24 06:00:40 2025 GMT
Subject: CN=9fcb3b90ed79a8ff6a3163ffee603f9b5cc164c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:49:bc:8d:fb:05:e1:08:ba:32:0f:f0:97:11:
73:47:48:1a:1e:00:6f:e4:1a:37:b0:94:4e:73:8d:
f7:f4:fa:bc:41:2a:81:a5:a6:90:2b:a1:95:e6:d9:
ea:fb:f9:25:d5:5c:2c:cf:54:c6:ea:82:13:41:50:
28:80:27:5d:bb:4d:3c:61:bb:c5:ce:75:f5:08:4e:
e4:d0:8d:9b:38:55:32:c0:e0:f2:84:7c:8d:39:de:
b3:69:30:a7:0c:22:db:f4:ad:73:05:eb:62:fd:95:
1d:d7:34:52:c0:ac:b4:7d:ef:29:a7:47:e1:c7:99:
b9:ab:56:3a:29:79:30:18:de:5a:81:01:4a:a0:63:
7a:c5:3c:f5:f4:f3:70:a0:8f:8c:3c:28:07:09:37:
7f:c9:91:3d:a2:51:3b:2d:13:72:eb:47:2c:43:77:
ec:c5:2b:cb:32:0e:38:d8:3b:16:03:78:e6:5c:9a:
96:f1:8f:ec:9a:f5:39:07:f8:7a:c4:73:05:c2:f8:
56:7b:c7:dd:d3:89:4e:5d:4d:7f:52:8b:f7:b6:1f:
a7:7d:f8:d0:05:f5:12:8d:04:96:43:91:58:1c:0c:
c0:6e:3d:2c:4f:b0:9f:40:81:8e:91:d1:af:4e:28:
19:05:73:52:81:de:11:78:29:9b:b9:12:5a:93:a1:
3a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CB:3B:90:ED:79:A8:FF:6A:31:63:FF:EE:60:3F:9B:5C:C1:64:C1
X509v3 Authority Key Identifier:
keyid:A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a6:20:68:7c:92:80:25:32:f1:0a:21:df:71:57:17:32:f5:
83:25:d9:f5:ec:67:4b:13:f6:77:40:52:99:29:6f:fb:aa:d2:
fc:da:6c:5c:44:09:74:08:f6:1e:7c:bb:d7:4a:20:c5:5c:c3:
fc:11:51:66:74:fd:b2:fc:ee:49:3f:24:5c:7a:e9:15:e4:e8:
72:47:ba:bd:40:38:d7:b4:44:7d:36:51:34:e3:6a:bc:5f:ee:
ab:2f:ea:ae:fb:5a:66:52:9b:e8:30:25:fe:ca:82:b7:91:0d:
3b:97:26:c6:97:e0:c5:17:f7:62:83:9a:22:6a:68:aa:9b:af:
58:4c:fc:d8:3f:d2:d8:78:a9:72:ec:41:d9:ef:13:ae:f5:5e:
3f:1f:23:af:8c:a4:8d:95:b3:b7:1d:6c:42:b0:08:28:12:0d:
94:17:73:31:d6:27:0e:32:71:7c:17:8c:af:26:ef:c2:8e:08:
e7:9b:4c:66:6b:ff:6d:15:76:d1:a0:90:ed:89:7c:57:0e:87:
ea:e9:20:79:52:a0:43:23:7b:54:48:7d:84:d3:80:12:99:07:
3f:37:40:e0:89:92:ec:d2:42:4b:48:a7:de:98:2b:c0:19:59:
b5:26:bb:cf:a2:f3:99:64:d9:a4:dc:e8:85:ca:15:fe:93:3e:
21:74:50:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg8vXDW7MseqA26HSdMXNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMzY4YTc0MWM3YWM2ODk2NWU5MGQ0ZTZjYjI2ODQ4ZWIz
Yjk5MmIwHhcNMjUwODIzMDYwMDQwWhcNMjUwODI0MDYwMDQwWjAzMTEwLwYDVQQD
Eyg5ZmNiM2I5MGVkNzlhOGZmNmEzMTYzZmZlZTYwM2Y5YjVjYzE2NGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUm8jfsF4Qi6Mg/wlxFzR0gaHgBv
5Bo3sJROc4339Pq8QSqBpaaQK6GV5tnq+/kl1Vwsz1TG6oITQVAogCddu008YbvF
znX1CE7k0I2bOFUywODyhHyNOd6zaTCnDCLb9K1zBeti/ZUd1zRSwKy0fe8pp0fh
x5m5q1Y6KXkwGN5agQFKoGN6xTz19PNwoI+MPCgHCTd/yZE9olE7LRNy60csQ3fs
xSvLMg442DsWA3jmXJqW8Y/smvU5B/h6xHMFwvhWe8fd04lOXU1/Uov3th+nffjQ
BfUSjQSWQ5FYHAzAbj0sT7CfQIGOkdGvTigZBXNSgd4ReCmbuRJak6E6ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/LO5Dteaj/ajFj/+5gP5tcwWTBMB8GA1UdIwQY
MBaAFKA2inQcesaJZekNTmyyaEjrO5krMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9hOWZlOTktYTUzNS00NGFiLWExYmIt
NWUzMGI4NmZkMWFiLzEvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9hOWZlOTktYTUzNS00NGFiLWExYmItNWUzMGI4NmZkMWFi
LzEvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaYgaHyS
gCUy8Qoh33FXFzL1gyXZ9exnSxP2d0BSmSlv+6rS/NpsXEQJdAj2Hny710ogxVzD
/BFRZnT9svzuST8kXHrpFeTocke6vUA417REfTZRNONqvF/uqy/qrvtaZlKb6DAl
/sqCt5ENO5cmxpfgxRf3YoOaImpoqpuvWEz82D/S2HipcuxB2e8TrvVePx8jr4yk
jZWztx1sQrAIKBINlBdzMdYnDjJxfBeMrybvwo4I55tMZmv/bRV20aCQ7Yl8Vw6H
6ukgeVKgQyN7VEh9hNOAEpkHPzdA4ImS7NJCS0in3pgrwBlZtSa7z6LzmWTZpNzo
hcoV/pM+IXRQdA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:54 2025 by rpki-client