Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
File: oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft (raw, json)
Hash identifier: kAXOyQNSRLBCmaCgxxUDKSSLsikahrX1gwEEBbWRvgs=
Subject key identifier: 41:4E:AB:8D:F6:72:23:87:BD:58:9E:59:CB:11:14:B3:2A:86:E4:77
Authority key identifier: A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8
Certificate issuer: /CN=a0937525577cb2af1b285c96431dbd600f57cbe8
Certificate serial: 0198D4E064A16E2139BECAA1366497B6353B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
Manifest number: 1295
Signing time: Sat 23 Aug 2025 03:02:12 +0000
Manifest this update: Sat 23 Aug 2025 03:02:12 +0000
Manifest next update: Sun 24 Aug 2025 03:02:12 +0000
Files and hashes: 1: cGnnbkiVLX_2V8eckMDBKTSh5es.roa (hash: 17Bbtx++8vEIOl6usyCHj+Kebb1Ac8VgiDnBmWVz9UM=)
2: oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl (hash: tGOejUDoDYfBSw7imp+ra+QQqy+qwRSoARi+ObNjHtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:64:a1:6e:21:39:be:ca:a1:36:64:97:b6:35:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0937525577cb2af1b285c96431dbd600f57cbe8
Validity
Not Before: Aug 23 03:02:12 2025 GMT
Not After : Aug 24 03:02:12 2025 GMT
Subject: CN=414eab8df6722387bd589e59cb1114b32a86e477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:ec:70:98:cf:4c:97:4b:a1:ae:c5:4e:20:
f3:8e:9d:de:f6:a4:39:d6:94:0b:6e:20:a4:6e:65:
35:17:2c:ba:79:6c:99:65:c0:c7:60:8c:3b:6b:7b:
23:1a:a5:59:e9:08:32:e1:f4:9b:c8:49:5b:8a:83:
00:00:c1:d8:78:78:f9:fd:72:a5:d5:33:a8:ff:5b:
0a:82:29:66:80:55:3f:41:e5:68:0e:11:ca:4a:84:
7e:51:c1:82:bb:36:07:1a:80:6a:df:78:3a:1f:96:
0c:07:da:72:70:bb:6a:44:03:4a:30:6b:cb:b8:8a:
5f:98:ee:f0:97:94:db:9f:c5:61:b7:9f:5d:fc:0b:
c6:27:a5:86:38:aa:be:9e:85:b7:a5:0a:8f:a5:f5:
aa:0e:4f:78:76:7b:71:23:6e:67:a5:65:78:ba:34:
2f:b2:81:9b:bf:0b:4e:6f:0d:29:ac:50:95:c7:be:
50:e8:c4:fd:48:8e:de:76:17:7e:93:fa:ad:b7:1d:
19:27:22:7e:9b:92:2c:72:62:94:4a:c5:fd:21:fb:
bf:99:a9:86:90:71:b5:88:af:48:e6:d7:50:fc:b7:
10:58:2e:10:04:df:50:da:ca:7c:5d:c6:00:26:bf:
71:6b:46:fb:3a:99:24:14:e4:1e:97:70:1f:bf:23:
42:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4E:AB:8D:F6:72:23:87:BD:58:9E:59:CB:11:14:B3:2A:86:E4:77
X509v3 Authority Key Identifier:
keyid:A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1c:78:67:cc:5f:fc:79:e8:a1:1a:84:13:bc:43:01:54:74:
9f:0a:7a:ae:44:83:e8:33:09:72:da:66:b3:ba:ab:ca:cf:57:
c9:d9:7e:64:28:c1:0f:8e:fe:6a:49:9a:a8:a2:c4:d9:c6:31:
4f:a8:27:f4:a2:a2:4f:af:8e:95:80:f7:d5:f5:13:d0:36:17:
a2:42:45:bc:4e:b4:b8:41:9e:3f:a2:39:ce:e4:35:11:c2:ae:
59:bf:73:94:4f:68:dd:16:bb:91:31:37:dd:e8:e9:a5:75:a4:
56:32:b8:e7:5c:f2:fb:dc:bf:c5:5f:ff:3b:9f:52:9f:92:18:
36:33:47:50:fc:88:72:f5:ac:19:9c:0f:0a:4a:21:a0:28:f2:
64:22:ab:0b:08:20:4d:ed:4c:cf:4a:ce:36:66:6c:43:38:d7:
6c:0e:19:ab:a8:22:f5:3e:f7:ce:ca:2f:10:92:29:15:8e:61:
64:bf:0b:65:33:92:7d:37:67:05:78:22:cb:1e:28:a4:39:37:
53:dd:89:55:ea:47:41:47:7d:eb:03:f5:10:a0:bd:f2:a8:a7:
ca:6e:72:46:19:bf:e8:bf:87:e2:9c:6c:a8:3c:02:fc:cd:57:
18:0a:44:f1:4d:61:60:74:68:58:00:40:27:e5:a1:25:d7:36:
9c:b6:a6:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4GShbiE5vsqhNmSXtjU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOTM3NTI1NTc3Y2IyYWYxYjI4NWM5NjQzMWRiZDYwMGY1
N2NiZTgwHhcNMjUwODIzMDMwMjEyWhcNMjUwODI0MDMwMjEyWjAzMTEwLwYDVQQD
Eyg0MTRlYWI4ZGY2NzIyMzg3YmQ1ODllNTljYjExMTRiMzJhODZlNDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcTscJjPTJdLoa7FTiDzjp3e9qQ5
1pQLbiCkbmU1Fyy6eWyZZcDHYIw7a3sjGqVZ6Qgy4fSbyElbioMAAMHYeHj5/XKl
1TOo/1sKgilmgFU/QeVoDhHKSoR+UcGCuzYHGoBq33g6H5YMB9pycLtqRANKMGvL
uIpfmO7wl5Tbn8Vht59d/AvGJ6WGOKq+noW3pQqPpfWqDk94dntxI25npWV4ujQv
soGbvwtObw0prFCVx75Q6MT9SI7edhd+k/qttx0ZJyJ+m5IscmKUSsX9Ifu/mamG
kHG1iK9I5tdQ/LcQWC4QBN9Q2sp8XcYAJr9xa0b7OpkkFOQel3AfvyNCVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFOq432ciOHvVieWcsRFLMqhuR3MB8GA1UdIwQY
MBaAFKCTdSVXfLKvGyhclkMdvWAPV8voMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0pOMUpWZDhzcThiS0Z5V1F4MjlZQTlYeS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kMjdkYTItMjc1NC00ZDdiLWFmOTAt
NmUwMmFmMGE0OTk0LzEvb0pOMUpWZDhzcThiS0Z5V1F4MjlZQTlYeS1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kMjdkYTItMjc1NC00ZDdiLWFmOTAtNmUwMmFmMGE0OTk0
LzEvb0pOMUpWZDhzcThiS0Z5V1F4MjlZQTlYeS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBx4Z8xf
/HnooRqEE7xDAVR0nwp6rkSD6DMJctpms7qrys9Xydl+ZCjBD47+akmaqKLE2cYx
T6gn9KKiT6+OlYD31fUT0DYXokJFvE60uEGeP6I5zuQ1EcKuWb9zlE9o3Ra7kTE3
3ejppXWkVjK451zy+9y/xV//O59Sn5IYNjNHUPyIcvWsGZwPCkohoCjyZCKrCwgg
Te1Mz0rONmZsQzjXbA4Zq6gi9T73zsovEJIpFY5hZL8LZTOSfTdnBXgiyx4opDk3
U92JVepHQUd96wP1EKC98qinym5yRhm/6L+H4pxsqDwC/M1XGApE8U1hYHRoWABA
J+WhJdc2nLamew==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:22 2025 by rpki-client