Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
File: OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json)
Hash identifier: qlvlQdGTPm29+TgkjY1ykObR8NJ4JoO1TsAIs/hmstg=
Subject key identifier: B9:F4:20:DC:E0:E3:3F:AD:5F:8B:94:45:3A:21:8D:EC:FB:23:25:81
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 0198D515D09696E1AA134BD9A3B9611A0F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 04:00:33 +0000
Manifest this update: Sat 23 Aug 2025 04:00:33 +0000
Manifest next update: Sun 24 Aug 2025 04:00:33 +0000
Files and hashes: 1: Ao4f98uIFcgkhdxyPOpQgAuwN9w.roa (hash: ttNIa0Xruypw+Nr5sYx69ADzUxbcLDOTo777VDuXgok=)
2: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: HE7Ru0huIDXOm+6dmQKGrHVWe5ZA068DIMq9f7rPq6g=)
3: bf5JniBkyKbSSiSrUK6PpsjkA_o.roa (hash: G/EVvuIiKK3u39WnHajT6FKjkBStN9/ciaxEIQanbJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d0:96:96:e1:aa:13:4b:d9:a3:b9:61:1a:0f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Aug 23 04:00:33 2025 GMT
Not After : Aug 24 04:00:33 2025 GMT
Subject: CN=b9f420dce0e33fad5f8b94453a218decfb232581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:29:c7:56:ab:3f:b2:0c:a0:ea:ff:7c:12:
36:19:80:d7:4e:7d:84:4c:be:e4:f4:b1:29:72:0c:
77:2f:5a:8f:ef:8e:e4:4d:9c:c3:ad:91:fc:ce:30:
ec:da:07:b6:f4:ff:2e:6d:b9:c0:50:69:87:12:fc:
bd:1d:41:d9:10:8c:12:f8:db:77:eb:37:92:22:c4:
b8:55:e6:80:86:7d:2e:b2:d8:26:d3:34:19:f2:bd:
20:d1:24:2f:9c:d0:d4:02:aa:a8:21:76:5b:6f:fa:
4e:cf:f7:85:e3:27:41:4b:ab:2b:6b:ca:56:ce:af:
0c:0f:36:7c:95:06:f3:43:7f:13:f6:73:a5:21:4a:
cd:dd:fa:10:77:41:b5:da:44:47:64:50:ab:13:d4:
4a:1f:fa:ed:6f:9a:58:57:2d:fa:79:48:20:6b:ca:
ca:8e:03:25:6c:e5:07:ca:f0:c1:3f:54:37:47:71:
51:b7:1b:ec:3e:b1:cf:39:1a:56:dc:be:bc:83:57:
da:61:06:a9:76:b4:67:ce:ff:ce:8c:11:4a:03:c1:
89:7a:87:e7:c5:ad:53:d4:b1:7a:a8:02:56:cb:39:
19:ce:f6:bc:e2:6d:aa:7a:42:74:f7:1b:2c:de:e5:
fa:43:60:28:12:7f:99:ee:84:05:52:72:4e:e0:5b:
a1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F4:20:DC:E0:E3:3F:AD:5F:8B:94:45:3A:21:8D:EC:FB:23:25:81
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:aa:01:60:64:bf:8f:87:05:99:5f:f2:10:43:d9:c1:cc:dd:
a8:6b:c5:cf:ad:53:e1:94:d4:67:df:a9:01:ea:8c:9b:a7:22:
a4:06:89:5f:94:c9:8a:ee:6e:da:d1:83:b0:c2:ba:2f:a5:00:
de:46:c3:de:30:a9:b1:2d:e3:82:8b:08:81:de:c0:de:31:82:
13:a7:ac:9c:3e:1d:70:e2:7e:87:dc:6a:18:ad:c3:8d:6b:c2:
6d:8e:80:f1:b5:9c:ec:7c:cb:96:86:92:c9:59:c5:42:d4:e5:
0f:f9:0d:63:01:ba:19:93:88:99:8a:04:0a:34:ae:8f:20:61:
73:84:d5:bc:9f:cc:ed:ee:7f:51:e0:e5:39:53:dd:fd:ff:c3:
1d:9d:7d:bf:2c:67:c9:dd:74:36:15:ca:a7:21:f2:16:18:e2:
3b:d1:28:0d:c5:59:88:a9:64:68:b7:07:df:35:f0:3a:cf:7c:
3d:e1:48:d9:fc:27:5a:e8:39:8f:8a:09:ce:3c:96:78:e5:86:
05:ad:82:d6:4b:d1:18:9d:fa:56:41:c9:98:06:dd:40:05:47:
d8:fc:0b:50:6b:28:d4:da:ec:4d:ab:0d:ec:47:8f:a5:b0:7e:
4f:be:1d:96:97:1d:7f:13:0d:ac:3a:ac:12:8c:e2:1c:2a:2c:
c0:61:98:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFdCWluGqE0vZo7lhGg9XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZTdmNDdiYjliOTE2NTdlNTcyNmJmY2IyZGVmOGFhZDk3
M2UyNjgwHhcNMjUwODIzMDQwMDMzWhcNMjUwODI0MDQwMDMzWjAzMTEwLwYDVQQD
EyhiOWY0MjBkY2UwZTMzZmFkNWY4Yjk0NDUzYTIxOGRlY2ZiMjMyNTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxUpx1arP7IMoOr/fBI2GYDXTn2E
TL7k9LEpcgx3L1qP747kTZzDrZH8zjDs2ge29P8ubbnAUGmHEvy9HUHZEIwS+Nt3
6zeSIsS4VeaAhn0ustgm0zQZ8r0g0SQvnNDUAqqoIXZbb/pOz/eF4ydBS6sra8pW
zq8MDzZ8lQbzQ38T9nOlIUrN3foQd0G12kRHZFCrE9RKH/rtb5pYVy36eUgga8rK
jgMlbOUHyvDBP1Q3R3FRtxvsPrHPORpW3L68g1faYQapdrRnzv/OjBFKA8GJeofn
xa1T1LF6qAJWyzkZzva84m2qekJ09xss3uX6Q2AoEn+Z7oQFUnJO4FuhNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLn0INzg4z+tX4uURTohjez7IyWBMB8GA1UdIwQY
MBaAFDjn9Hu5uRZX5XJr/LLe+KrZc+JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQt
Njg2ZjBhMDYxNmNjLzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQtNjg2ZjBhMDYxNmNj
LzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoaoBYGS/
j4cFmV/yEEPZwczdqGvFz61T4ZTUZ9+pAeqMm6cipAaJX5TJiu5u2tGDsMK6L6UA
3kbD3jCpsS3jgosIgd7A3jGCE6esnD4dcOJ+h9xqGK3DjWvCbY6A8bWc7HzLloaS
yVnFQtTlD/kNYwG6GZOImYoECjSujyBhc4TVvJ/M7e5/UeDlOVPd/f/DHZ19vyxn
yd10NhXKpyHyFhjiO9EoDcVZiKlkaLcH3zXwOs98PeFI2fwnWug5j4oJzjyWeOWG
Ba2C1kvRGJ36VkHJmAbdQAVH2PwLUGso1NrsTasN7EePpbB+T74dlpcdfxMNrDqs
EoziHCoswGGYWA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:26 2025 by rpki-client