Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
File: AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft (raw, json)
Hash identifier: qft/3ILPuhpht0OGObfUGrbAT+sC4JvYY+mJKPjW2WU=
Subject key identifier: 2C:A7:90:31:B8:C1:57:D9:76:4F:DA:C1:D3:37:EF:3F:AA:B3:7B:D6
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 0198D65FDC17CCDEA39377668D97C27E5923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
Manifest number: 1408
Signing time: Sat 23 Aug 2025 10:01:03 +0000
Manifest this update: Sat 23 Aug 2025 10:01:03 +0000
Manifest next update: Sun 24 Aug 2025 10:01:03 +0000
Files and hashes: 1: 05RxvRBbBF0K0L7oHhPtWLGcLm4.roa (hash: lHxh82AwcxG+P9d7k0EW3lrACdc9GnkC9jNymgDYTBo=)
2: 0b2d1c0eIhfqUzknxCXBbc29sBw.roa (hash: fTb/wFQGtnvJhJADby3asBVLbaL6u2JGK1hNUrDdfSE=)
3: AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl (hash: GK+7HUYSU+eZxrBwi9sN2xYQePKgrYKPd+FzAgZKQFs=)
4: HWBncZpe-QUdI-UjKtD3KOuOa6Q.roa (hash: aEH99KCRztr3umg4l/8dfloLoZWlqbFbSYPxZ1bxlgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:dc:17:cc:de:a3:93:77:66:8d:97:c2:7e:59:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Aug 23 10:01:03 2025 GMT
Not After : Aug 24 10:01:03 2025 GMT
Subject: CN=2ca79031b8c157d9764fdac1d337ef3faab37bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:d7:d2:97:c3:75:c7:0d:43:4f:5d:e1:63:
7f:4c:36:53:1f:31:0a:eb:4a:dc:4e:0d:c9:0a:ff:
62:9a:bc:55:40:b8:41:e4:9b:4f:42:2a:7a:01:51:
74:fa:97:46:e8:14:c3:3f:52:49:38:af:76:72:4c:
76:0a:b9:2c:4c:ca:e8:1f:19:79:dd:7a:c0:7d:26:
82:e9:69:0f:33:17:69:9a:da:3a:d2:93:80:5e:b4:
9d:db:06:54:46:9b:d2:f2:c4:57:56:fb:51:e2:de:
8f:4e:27:67:22:e5:6e:4a:f9:a6:bc:2c:5e:b0:f9:
c4:0c:6b:a7:af:7d:e1:67:7b:f9:ac:ef:0a:62:4d:
a5:2c:ad:86:35:da:44:cf:1e:3f:d7:b2:b1:78:5a:
be:c4:c6:98:74:94:af:05:25:1a:34:9d:39:ac:27:
bc:8c:29:df:e6:ea:2e:e7:47:80:9e:c8:e6:8b:27:
36:c2:c1:5c:57:1a:6e:41:b5:57:7b:45:85:65:bc:
fa:c4:14:96:04:14:20:4e:56:59:3d:ea:3e:d5:17:
7d:39:c4:86:f6:f2:a5:c1:29:92:93:a8:9b:1b:7d:
9e:ad:9f:23:a2:68:f0:76:68:38:0b:72:6d:46:6b:
55:b0:f3:15:da:05:81:2c:77:f5:2d:d8:2c:e7:92:
20:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A7:90:31:B8:C1:57:D9:76:4F:DA:C1:D3:37:EF:3F:AA:B3:7B:D6
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c6:4e:a6:d4:0d:99:20:31:18:bd:47:ba:ae:3f:a5:8d:9f:
76:17:e2:69:72:a1:25:d1:0c:87:63:78:64:89:59:01:d6:ac:
40:bc:1d:5a:1a:71:1f:26:c4:7b:5b:79:9c:57:4a:17:57:ed:
78:74:4b:d6:04:76:3a:52:6d:cc:6f:ab:5d:92:3c:e1:7b:d0:
ac:ca:0b:63:03:22:f3:24:51:d4:6e:4e:00:9c:10:30:9c:d8:
0a:07:fd:5a:85:a9:2f:8c:62:28:9f:da:62:39:8b:1f:57:65:
91:d7:b9:7e:8a:62:cf:ac:ef:d2:66:4b:20:9d:03:db:19:10:
fa:b3:c3:73:3c:49:f2:1a:95:df:5e:78:9f:b8:77:76:ca:07:
13:e6:c8:6c:8d:aa:12:03:bd:9a:46:f6:99:29:19:82:37:ce:
e3:c1:33:36:9c:f1:87:e3:da:21:04:2f:ed:63:95:23:e2:14:
fa:a4:bd:bd:7d:92:24:e6:02:9f:56:33:01:b5:b1:7e:50:e5:
88:c1:d5:50:ea:30:13:02:35:a5:18:14:84:24:5b:31:52:b0:
9c:b2:30:f7:16:13:08:e4:a7:d4:94:5d:2b:6c:18:32:11:31:
0f:3f:8b:98:ff:36:28:c0:5a:b3:e8:13:f4:44:7a:5c:42:99:
85:6b:22:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX9wXzN6jk3dmjZfCflkjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODNhOGM2OWEyNjMwY2Q4ZjZmYTcwYWYyYTUzZmUwMTlm
MmNjMDcwHhcNMjUwODIzMTAwMTAzWhcNMjUwODI0MTAwMTAzWjAzMTEwLwYDVQQD
EygyY2E3OTAzMWI4YzE1N2Q5NzY0ZmRhYzFkMzM3ZWYzZmFhYjM3YmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOvX0pfDdccNQ09d4WN/TDZTHzEK
60rcTg3JCv9imrxVQLhB5JtPQip6AVF0+pdG6BTDP1JJOK92ckx2CrksTMroHxl5
3XrAfSaC6WkPMxdpmto60pOAXrSd2wZURpvS8sRXVvtR4t6PTidnIuVuSvmmvCxe
sPnEDGunr33hZ3v5rO8KYk2lLK2GNdpEzx4/17KxeFq+xMaYdJSvBSUaNJ05rCe8
jCnf5uou50eAnsjmiyc2wsFcVxpuQbVXe0WFZbz6xBSWBBQgTlZZPeo+1Rd9OcSG
9vKlwSmSk6ibG32erZ8jomjwdmg4C3JtRmtVsPMV2gWBLHf1Ldgs55IgcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCynkDG4wVfZdk/awdM37z+qs3vWMB8GA1UdIwQY
MBaAFAKDqMaaJjDNj2+nCvKlP+AZ8swHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYzI0YWQtMjRiNC00Yzk4LWE2NTkt
NTkyYzBkY2RhZjc5LzEvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xYzI0YWQtMjRiNC00Yzk4LWE2NTktNTkyYzBkY2RhZjc5
LzEvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8ZOptQN
mSAxGL1Huq4/pY2fdhfiaXKhJdEMh2N4ZIlZAdasQLwdWhpxHybEe1t5nFdKF1ft
eHRL1gR2OlJtzG+rXZI84XvQrMoLYwMi8yRR1G5OAJwQMJzYCgf9WoWpL4xiKJ/a
YjmLH1dlkde5fopiz6zv0mZLIJ0D2xkQ+rPDczxJ8hqV3154n7h3dsoHE+bIbI2q
EgO9mkb2mSkZgjfO48EzNpzxh+PaIQQv7WOVI+IU+qS9vX2SJOYCn1YzAbWxflDl
iMHVUOowEwI1pRgUhCRbMVKwnLIw9xYTCOSn1JRdK2wYMhExDz+LmP82KMBas+gT
9ER6XEKZhWsing==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:34:05 2025 by rpki-client