Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
File: OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft (raw, json)
Hash identifier: z3NbGSzl3y9zr4EN3meXo47rj5yA1XIskEOSYPl89ZQ=
Subject key identifier: 35:82:E6:36:5F:6A:FC:9C:99:33:DE:1F:BC:8B:EB:48:A2:14:94:37
Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582
Certificate serial: 0198D472D694F65552A6A1478830CBF71BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
Manifest number: 0CDF
Signing time: Sat 23 Aug 2025 01:02:32 +0000
Manifest this update: Sat 23 Aug 2025 01:02:32 +0000
Manifest next update: Sun 24 Aug 2025 01:02:32 +0000
Files and hashes: 1: Gn-kDrXRDHHv43q56kRDHjj8q1w.roa (hash: Tu0d5Ny8jllovtj2b3OGyqwDSE7dzSUuYk4aE5120L8=)
2: OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl (hash: 6YmwPqTRMUb8P8OVXmdgeu5tf2G7QG/CgwwGyIYp1vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:d6:94:f6:55:52:a6:a1:47:88:30:cb:f7:1b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389755423f832a528c93136110f0fe4b10453582
Validity
Not Before: Aug 23 01:02:32 2025 GMT
Not After : Aug 24 01:02:32 2025 GMT
Subject: CN=3582e6365f6afc9c9933de1fbc8beb48a2149437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:69:05:7c:24:61:8a:1a:e5:35:49:e5:fe:
a2:88:ea:b8:2b:f8:e6:35:65:45:cc:12:37:7a:e7:
42:5f:4d:25:c8:00:08:2f:d2:1f:34:69:4d:c7:3c:
a8:79:a1:74:7e:29:f8:b8:f8:cd:2e:95:ae:40:13:
51:1e:05:38:e6:a8:3b:da:cf:ce:d6:d1:c6:33:77:
4b:70:f2:38:e2:96:39:e7:0d:49:12:b2:c4:6c:57:
90:04:a4:f2:e6:99:90:82:28:f9:72:9a:ab:dc:c0:
29:15:bc:d1:3e:f3:79:08:64:68:b3:67:05:15:20:
fc:d3:0b:51:bb:32:61:8d:c4:a9:f4:ba:6d:2d:47:
a0:15:6c:20:6a:04:e7:07:36:da:fb:8a:9e:23:29:
5b:4a:7f:65:8a:ce:e5:e4:80:a3:b4:44:81:58:f4:
b5:d9:c3:29:4b:b9:fc:f6:9c:9f:94:96:27:a7:3c:
a0:af:78:39:e8:ef:bf:23:49:d2:36:16:0a:ae:e5:
d6:38:de:b2:6c:d2:bb:40:fb:c1:67:a9:0e:48:36:
a5:01:18:74:f6:52:40:9e:1b:a1:71:72:75:28:df:
38:69:4c:17:59:ca:cb:a8:9c:3c:6e:ef:9b:e9:71:
34:23:f7:a3:1e:15:68:fe:9b:e3:54:fd:97:a3:39:
b8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:82:E6:36:5F:6A:FC:9C:99:33:DE:1F:BC:8B:EB:48:A2:14:94:37
X509v3 Authority Key Identifier:
keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f4:1f:c2:68:f8:f0:95:e3:8a:94:9a:78:29:57:2c:11:8c:
be:b3:bb:ee:71:c1:9e:55:e6:ff:e5:e3:36:d0:ed:3a:40:2c:
15:46:e7:a0:92:e4:56:30:62:c9:9d:04:5e:5b:16:a4:c5:84:
03:af:51:63:6c:f6:96:dc:9e:ec:7d:af:36:17:c0:de:1d:88:
29:e3:c5:52:bd:d7:9e:61:07:a1:d3:83:e9:7f:d1:b0:20:ac:
3e:eb:62:f4:3c:d2:1d:0d:34:6c:cb:f8:40:77:1f:e7:85:2e:
e2:6b:61:bf:38:5d:41:99:d5:cb:21:43:57:65:ed:bb:c3:25:
2b:4c:55:cf:3b:e2:36:c7:a1:c6:b2:6f:c3:93:a1:d7:d5:96:
c2:34:1b:33:d1:33:06:ac:af:a5:6d:c6:03:3b:b3:1b:68:61:
1b:88:e1:73:43:9c:c3:84:53:1d:85:01:b2:30:ac:ed:84:d5:
ae:f2:2a:45:5b:42:57:2f:56:81:ee:97:26:d8:37:9f:27:67:
eb:e3:c4:f1:25:8c:6d:9e:b3:ec:9a:af:83:b6:5e:7c:ff:0a:
12:83:99:2e:45:d1:2d:f7:9a:80:28:7b:33:7c:6d:8a:7b:38:
a3:c8:99:49:a8:30:8a:51:74:44:de:82:0a:58:9c:68:da:e8:
c3:b1:15:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUctaU9lVSpqFHiDDL9xujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OTc1NTQyM2Y4MzJhNTI4YzkzMTM2MTEwZjBmZTRiMTA0
NTM1ODIwHhcNMjUwODIzMDEwMjMyWhcNMjUwODI0MDEwMjMyWjAzMTEwLwYDVQQD
EygzNTgyZTYzNjVmNmFmYzljOTkzM2RlMWZiYzhiZWI0OGEyMTQ5NDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx1pBXwkYYoa5TVJ5f6iiOq4K/jm
NWVFzBI3eudCX00lyAAIL9IfNGlNxzyoeaF0fin4uPjNLpWuQBNRHgU45qg72s/O
1tHGM3dLcPI44pY55w1JErLEbFeQBKTy5pmQgij5cpqr3MApFbzRPvN5CGRos2cF
FSD80wtRuzJhjcSp9LptLUegFWwgagTnBzba+4qeIylbSn9lis7l5ICjtESBWPS1
2cMpS7n89pyflJYnpzygr3g56O+/I0nSNhYKruXWON6ybNK7QPvBZ6kOSDalARh0
9lJAnhuhcXJ1KN84aUwXWcrLqJw8bu+b6XE0I/ejHhVo/pvjVP2Xozm4qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWC5jZfavycmTPeH7yL60iiFJQ3MB8GA1UdIwQY
MBaAFDiXVUI/gypSjJMTYRDw/ksQRTWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0pkVlFqLURLbEtNa3hOaEVQRC1TeEJGTllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9kOWI1OTYtNjAxZS00NDI2LWE0Mjgt
NDY5NTdiZDg4NjBkLzEvT0pkVlFqLURLbEtNa3hOaEVQRC1TeEJGTllJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9kOWI1OTYtNjAxZS00NDI2LWE0MjgtNDY5NTdiZDg4NjBk
LzEvT0pkVlFqLURLbEtNa3hOaEVQRC1TeEJGTllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvQfwmj4
8JXjipSaeClXLBGMvrO77nHBnlXm/+XjNtDtOkAsFUbnoJLkVjBiyZ0EXlsWpMWE
A69RY2z2ltye7H2vNhfA3h2IKePFUr3XnmEHodOD6X/RsCCsPuti9DzSHQ00bMv4
QHcf54Uu4mthvzhdQZnVyyFDV2Xtu8MlK0xVzzviNsehxrJvw5Oh19WWwjQbM9Ez
BqyvpW3GAzuzG2hhG4jhc0Ocw4RTHYUBsjCs7YTVrvIqRVtCVy9Wge6XJtg3nydn
6+PE8SWMbZ6z7Jqvg7ZefP8KEoOZLkXRLfeagCh7M3xtins4o8iZSagwilF0RN6C
ClicaNrow7EVJA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:50 2025 by rpki-client