Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
File: OYhH9wo15xCETpu4omK-3bQLfMk.mft (raw, json)
Hash identifier: vjSzTVyWYPOe51hDDB0XD/gWWPzQRZBXt4UEKMsEj7w=
Subject key identifier: 51:5A:84:0A:C3:D6:9D:87:DD:FC:E7:13:BE:84:F9:FF:E7:B9:3A:EC
Authority key identifier: 39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
Certificate issuer: /CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Certificate serial: 0198D5BB9247578B374FEA797E5ABE18BE94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
Manifest number: 040D
Signing time: Sat 23 Aug 2025 07:01:36 +0000
Manifest this update: Sat 23 Aug 2025 07:01:36 +0000
Manifest next update: Sun 24 Aug 2025 07:01:36 +0000
Files and hashes: 1: AKsS4j3-VaOHBWSMj23g7vx6Zz4.roa (hash: U4YaSKjxHoIRGGCP7ydVCxsh9Cu5QYl71iaS4zOmA2c=)
2: OYhH9wo15xCETpu4omK-3bQLfMk.crl (hash: T6lM44HvHFscDWB6QS5sE57QVZp3MQ2ORtuM0uKuav8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:92:47:57:8b:37:4f:ea:79:7e:5a:be:18:be:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Validity
Not Before: Aug 23 07:01:36 2025 GMT
Not After : Aug 24 07:01:36 2025 GMT
Subject: CN=515a840ac3d69d87ddfce713be84f9ffe7b93aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:85:54:9a:42:b5:28:b7:7f:82:1c:5e:b8:
68:61:cd:93:19:a6:21:cc:3b:88:cc:b3:33:d4:87:
4a:0b:64:e4:48:6f:c4:00:86:96:c2:6f:a8:60:4f:
40:8d:59:69:e7:a7:42:ce:9b:fc:f9:e8:58:ff:64:
04:b5:b8:4b:b8:56:01:4d:ee:81:8b:0f:2c:31:88:
ff:69:10:83:fb:f8:c9:29:18:ba:5b:33:fa:8b:bb:
99:2a:9c:37:c7:73:9a:5e:dd:b1:ff:b7:d5:69:0b:
97:86:61:c6:ea:a8:a3:e7:8a:6b:df:78:ce:18:f3:
c6:f8:9f:fe:db:7d:cc:5d:64:3e:54:3c:2f:ce:18:
f9:f5:be:bc:85:5b:1f:c0:e0:ba:16:60:a8:09:af:
1a:b2:2f:b1:97:2a:85:92:50:90:ad:f9:8f:3b:52:
fa:5b:71:02:94:5b:ca:07:a2:73:5f:cb:3d:70:45:
2c:7b:b4:50:a6:b7:51:b3:6f:97:96:eb:07:8d:28:
de:c9:7f:94:0c:84:21:03:56:6a:39:c4:8f:f3:f5:
33:fe:7b:5e:3b:cc:03:97:be:51:98:ed:2e:cf:9f:
25:a6:34:95:2b:71:26:38:d2:a1:f4:34:42:9f:74:
84:24:39:12:4f:ae:15:58:ca:18:29:47:3c:30:0c:
fa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5A:84:0A:C3:D6:9D:87:DD:FC:E7:13:BE:84:F9:FF:E7:B9:3A:EC
X509v3 Authority Key Identifier:
keyid:39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:be:a5:1e:ba:4b:de:1e:f9:8a:dd:e7:cb:81:54:2f:f6:fa:
95:55:6d:7c:0b:6f:d3:a1:ad:c0:70:00:f1:81:59:f9:fc:a2:
c2:fb:5f:ca:4f:1f:eb:00:72:cd:5c:89:13:94:7d:4a:fe:65:
cb:4e:96:c6:27:e7:5d:51:9d:46:1c:61:32:b3:3e:bf:4d:06:
2a:a1:0f:11:42:2d:b1:50:13:fb:74:c7:93:11:d2:9d:01:9d:
3a:b8:2e:e5:6c:70:cf:67:88:b7:99:e0:69:cc:8f:80:7c:fc:
96:c6:9f:8e:eb:7e:d0:65:a0:86:ce:55:20:57:f7:51:a3:9e:
7c:5a:5c:b8:e4:a8:97:5e:8c:9c:e4:7f:b0:10:83:7f:fd:9c:
2b:7a:86:92:d1:89:cf:9c:d3:3e:37:8c:ff:9f:e2:95:2c:01:
74:cd:e6:0d:64:99:0d:d9:5d:f1:f9:e4:72:6e:7b:65:5b:a8:
91:f9:39:f9:84:15:d7:77:63:81:6e:74:1b:9a:02:aa:7c:2c:
d3:44:d4:33:37:99:10:cf:fb:a3:58:5a:07:85:49:27:ca:63:
62:89:d5:0a:2b:80:db:87:54:6b:44:2c:9c:18:03:0e:c0:3c:
41:e1:2f:c6:56:33:49:9e:80:d7:89:6d:9b:2a:7c:f3:b1:24:
0b:0f:83:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu5JHV4s3T+p5flq+GL6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ODg0N2Y3MGEzNWU3MTA4NDRlOWJiOGEyNjJiZWRkYjQw
YjdjYzkwHhcNMjUwODIzMDcwMTM2WhcNMjUwODI0MDcwMTM2WjAzMTEwLwYDVQQD
Eyg1MTVhODQwYWMzZDY5ZDg3ZGRmY2U3MTNiZTg0ZjlmZmU3YjkzYWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu+FVJpCtSi3f4IcXrhoYc2TGaYh
zDuIzLMz1IdKC2TkSG/EAIaWwm+oYE9AjVlp56dCzpv8+ehY/2QEtbhLuFYBTe6B
iw8sMYj/aRCD+/jJKRi6WzP6i7uZKpw3x3OaXt2x/7fVaQuXhmHG6qij54pr33jO
GPPG+J/+233MXWQ+VDwvzhj59b68hVsfwOC6FmCoCa8asi+xlyqFklCQrfmPO1L6
W3EClFvKB6JzX8s9cEUse7RQprdRs2+XlusHjSjeyX+UDIQhA1ZqOcSP8/Uz/nte
O8wDl75RmO0uz58lpjSVK3EmONKh9DRCn3SEJDkST64VWMoYKUc8MAz6dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFahArD1p2H3fznE76E+f/nuTrsMB8GA1UdIwQY
MBaAFDmIR/cKNecQhE6buKJivt20C3zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1loSDl3bzE1eENFVHB1NG9tSy0zYlFMZk1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9mYzc2NTctMDYzZS00YWY3LTg5ZTYt
ZjlmZWEzNGI2YjAxLzEvT1loSDl3bzE1eENFVHB1NG9tSy0zYlFMZk1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9mYzc2NTctMDYzZS00YWY3LTg5ZTYtZjlmZWEzNGI2YjAx
LzEvT1loSDl3bzE1eENFVHB1NG9tSy0zYlFMZk1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi76lHrpL
3h75it3ny4FUL/b6lVVtfAtv06GtwHAA8YFZ+fyiwvtfyk8f6wByzVyJE5R9Sv5l
y06WxifnXVGdRhxhMrM+v00GKqEPEUItsVAT+3THkxHSnQGdOrgu5Wxwz2eIt5ng
acyPgHz8lsafjut+0GWghs5VIFf3UaOefFpcuOSol16MnOR/sBCDf/2cK3qGktGJ
z5zTPjeM/5/ilSwBdM3mDWSZDdld8fnkcm57ZVuokfk5+YQV13djgW50G5oCqnws
00TUMzeZEM/7o1haB4VJJ8pjYonVCiuA24dUa0QsnBgDDsA8QeEvxlYzSZ6A14lt
myp887EkCw+DhQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:11 2025 by rpki-client