Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
File: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft (raw, json)
Hash identifier: B7pzZGNOuO+vNgvEevu6n/wxboyVSRCvkKXmsg7LbMo=
Subject key identifier: BB:D8:E0:EB:1A:60:A1:A6:71:6E:AE:15:E8:9F:0D:8D:BE:FB:84:00
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial: 0198D4E03973F7084B8A8C0CA4EA3F52D477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:02:01 +0000
Manifest this update: Sat 23 Aug 2025 03:02:01 +0000
Manifest next update: Sun 24 Aug 2025 03:02:01 +0000
Files and hashes: 1: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl (hash: EkYticNvKE4XrJ9fUf5Ysy4WLbwHPC4crx2I4++Yrzw=)
2: t9qHq5xTtnN-jj4rqq-G8Agb4fE.roa (hash: t+hLra7ztXXuOYQYYQngzFN6esJ5Nassa730bMic3dU=)
3: vLREmzKS7ARNQ8r2dAo92bSwFOE.roa (hash: I+ZNUqrukd4BTvdK3vQp+SBz+2MVzX88vJMJ1QUiiVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:39:73:f7:08:4b:8a:8c:0c:a4:ea:3f:52:d4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Validity
Not Before: Aug 23 03:02:01 2025 GMT
Not After : Aug 24 03:02:01 2025 GMT
Subject: CN=bbd8e0eb1a60a1a6716eae15e89f0d8dbefb8400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:5c:75:45:eb:27:3b:3c:20:ed:a2:cf:99:
50:18:00:cf:49:44:b2:1d:ac:98:c7:0b:05:b7:d2:
5f:c5:ed:a9:2a:f5:81:e8:a8:d4:45:fa:22:e7:53:
97:b0:43:6a:96:45:10:a9:a8:58:41:00:1a:d9:4a:
40:cd:8c:70:a8:a5:3a:fb:34:47:10:f3:9a:28:13:
fa:31:48:ac:f8:81:fb:30:ec:ce:dd:1b:8d:91:86:
35:44:3e:d1:15:00:1e:e1:bd:4d:be:ef:b2:ae:41:
99:68:08:25:0d:88:c5:ad:c9:0e:70:ff:12:13:08:
91:23:53:c4:92:27:c5:f0:6b:59:79:c1:cf:ba:a0:
b7:f0:64:54:8a:a5:f4:ac:bd:7f:83:2d:37:75:d5:
a5:99:a5:f3:26:dc:27:a7:a9:20:bf:79:6c:e2:b9:
fe:b7:07:cb:39:57:6c:0b:3e:40:89:bc:52:61:b8:
6b:27:25:f9:da:97:84:c7:70:3e:4b:fe:bc:ec:ce:
21:26:a8:b7:b9:ee:e7:5d:40:04:cb:ce:b8:11:af:
72:f0:71:dc:73:e4:a0:ca:2b:98:11:64:78:9b:b2:
70:bf:39:7c:0f:3d:a6:e2:a2:59:76:a0:bd:87:4c:
5d:de:97:16:a8:2d:08:88:b4:b9:d8:3a:b4:dc:de:
83:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D8:E0:EB:1A:60:A1:A6:71:6E:AE:15:E8:9F:0D:8D:BE:FB:84:00
X509v3 Authority Key Identifier:
keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:36:c3:1f:02:ce:9c:64:35:98:02:cb:a1:a7:18:c7:43:62:
d6:a9:18:aa:25:7a:d3:8e:e2:b9:79:50:29:80:b9:9c:c2:8c:
6c:54:bc:90:9c:ab:37:5c:b7:6b:a9:6f:b9:da:d6:24:2e:51:
c3:f4:6c:b5:f6:87:e6:d5:a3:47:c9:ac:d5:a2:e5:85:9f:46:
53:cc:2a:fa:81:cb:47:7e:a7:d0:17:7d:6c:ab:69:06:6c:84:
f1:39:60:b3:83:50:5b:d1:42:07:66:25:4d:c0:73:6f:6f:20:
86:e6:91:b8:35:56:36:00:68:d0:67:7e:11:7c:bf:ba:05:29:
e9:90:db:72:e1:ee:bf:17:07:56:83:9d:97:7e:2d:80:ba:e9:
15:7a:ad:4e:48:c2:5e:ae:29:09:6b:34:56:50:19:cc:97:ce:
af:f6:05:31:e9:87:d2:25:5d:dc:e8:e6:af:ed:83:36:04:96:
d1:0d:e4:a1:31:6e:3e:87:e3:f3:bf:99:a0:6f:65:59:fe:19:
1c:90:d5:23:e6:0a:25:26:ec:d4:fc:57:e3:e0:21:6f:d3:ef:
2a:9b:b9:0c:5c:83:a7:3b:c4:61:a1:3a:20:5a:b0:0a:d3:0d:
b3:db:c6:63:07:33:bc:7b:b2:33:1f:2e:90:d6:b8:99:5a:8b:
16:3a:ac:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4Dlz9whLiowMpOo/UtR3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMzA0MmQxMzdmYmIwM2JlYmE2NDIxZjMzYTg1MjViNTJh
ODhmN2EwHhcNMjUwODIzMDMwMjAxWhcNMjUwODI0MDMwMjAxWjAzMTEwLwYDVQQD
EyhiYmQ4ZTBlYjFhNjBhMWE2NzE2ZWFlMTVlODlmMGQ4ZGJlZmI4NDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvllcdUXrJzs8IO2iz5lQGADPSUSy
HayYxwsFt9Jfxe2pKvWB6KjURfoi51OXsENqlkUQqahYQQAa2UpAzYxwqKU6+zRH
EPOaKBP6MUis+IH7MOzO3RuNkYY1RD7RFQAe4b1Nvu+yrkGZaAglDYjFrckOcP8S
EwiRI1PEkifF8GtZecHPuqC38GRUiqX0rL1/gy03ddWlmaXzJtwnp6kgv3ls4rn+
twfLOVdsCz5AibxSYbhrJyX52peEx3A+S/687M4hJqi3ue7nXUAEy864Ea9y8HHc
c+SgyiuYEWR4m7Jwvzl8Dz2m4qJZdqC9h0xd3pcWqC0IiLS52Dq03N6DHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvY4OsaYKGmcW6uFeifDY2++4QAMB8GA1UdIwQY
MBaAFKEwQtE3+7A766ZCHzOoUltSqI96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9hZjQ0MDctZjk4ZS00OTk0LTlmOWUt
ZjZiNmMwNDkxNmExLzEvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9hZjQ0MDctZjk4ZS00OTk0LTlmOWUtZjZiNmMwNDkxNmEx
LzEvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTbDHwLO
nGQ1mALLoacYx0Ni1qkYqiV6047iuXlQKYC5nMKMbFS8kJyrN1y3a6lvudrWJC5R
w/RstfaH5tWjR8ms1aLlhZ9GU8wq+oHLR36n0Bd9bKtpBmyE8Tlgs4NQW9FCB2Yl
TcBzb28ghuaRuDVWNgBo0Gd+EXy/ugUp6ZDbcuHuvxcHVoOdl34tgLrpFXqtTkjC
Xq4pCWs0VlAZzJfOr/YFMemH0iVd3Ojmr+2DNgSW0Q3koTFuPofj87+ZoG9lWf4Z
HJDVI+YKJSbs1PxX4+Ahb9PvKpu5DFyDpzvEYaE6IFqwCtMNs9vGYwczvHuyMx8u
kNa4mVqLFjqsWQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:19 2025 by rpki-client