Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
File: oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json)
Hash identifier: o5JcEtP0i4q8kyR6Ngia47HlYsq0WJt7WzCSR6sS0QI=
Subject key identifier: E4:73:2D:DA:6B:3C:B6:D4:D2:50:97:6F:98:EC:B4:15:F6:E5:08:6F
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Certificate issuer: /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial: 0198D4E09D6B757474A01DDA09973C6D776E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 03:02:26 +0000
Manifest this update: Sat 23 Aug 2025 03:02:26 +0000
Manifest next update: Sun 24 Aug 2025 03:02:26 +0000
Files and hashes: 1: 4VXryZNlGszOvVCrHsnCqJ1trsE.roa (hash: k+VFLGrGtXyTFaFbYpVCIVsEOX3gC2kjUfFrAgtlCzk=)
2: EzrvXLF-MmLybEmZJ2eW2xEONHs.roa (hash: RF6Dl/sCu3vkVuvkH1yCtoGTVf/6WBZmKUrbuif2lko=)
3: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: EWc//fAHKldPQUReYNAdAvgK6MdJmVbMPL87xiaKkV8=)
4: ruIwqLknbql4jBEA51u8Ov6Q1Tk.roa (hash: Z0E5RF1yfzZZiEr9zy9z5xXvvb8+Wc07OPz1Qm4MGWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:9d:6b:75:74:74:a0:1d:da:09:97:3c:6d:77:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Validity
Not Before: Aug 23 03:02:26 2025 GMT
Not After : Aug 24 03:02:26 2025 GMT
Subject: CN=e4732dda6b3cb6d4d250976f98ecb415f6e5086f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:85:e2:94:7e:8b:a7:52:06:4a:2c:9e:fb:
a4:1e:8d:9e:35:bb:81:79:4e:27:63:4a:53:76:90:
21:9c:5a:6c:85:8d:8d:60:e2:ec:d1:ce:45:11:63:
f9:c2:05:42:8e:12:ba:ce:e0:cd:0c:45:33:01:60:
82:ff:2e:4d:4c:7a:f9:3b:4e:cd:0e:ef:ae:14:25:
22:cf:e9:2d:58:6f:f6:f9:d9:08:ed:ed:5d:a8:94:
f4:60:b1:15:4e:93:56:d4:72:f4:53:1d:99:47:c1:
16:15:c9:e7:64:cd:19:03:9f:cd:ec:4e:96:6b:6c:
06:cd:3e:e4:61:d4:aa:db:d2:6f:03:64:aa:39:60:
20:cc:41:7d:3e:aa:24:aa:f8:c3:08:e1:b6:f3:b8:
ad:7b:b1:b3:a4:0d:59:7f:4c:40:28:0d:7f:dd:4d:
0c:f3:55:da:70:f8:7a:cf:03:8c:12:2d:63:f7:ef:
1f:d3:f8:8d:a5:9b:0b:25:f4:24:84:2e:14:9a:e7:
20:82:34:d0:0c:08:68:30:24:91:93:1b:38:a5:ee:
2f:e4:a2:fb:a7:06:f3:65:b8:7d:af:ba:be:d8:9a:
4a:b2:52:13:b9:fa:11:47:a6:64:93:0f:4c:11:3b:
5a:d4:c5:aa:53:15:d4:69:f6:71:4f:c1:d3:b4:2b:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:73:2D:DA:6B:3C:B6:D4:D2:50:97:6F:98:EC:B4:15:F6:E5:08:6F
X509v3 Authority Key Identifier:
keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5e:24:a4:bf:26:07:d6:96:ce:64:8f:4a:e2:27:d7:7d:9d:
d3:e6:9f:77:19:df:78:e8:29:a6:bd:66:2a:a4:40:ca:5a:15:
78:06:60:61:f0:11:e9:79:b3:f5:13:f2:fa:35:4b:0c:f7:b4:
2f:f6:89:45:40:c9:be:44:6b:9c:f9:71:1c:fa:a9:c8:11:cf:
e5:fc:ad:1c:7f:96:65:63:f9:a3:b6:94:25:49:81:4b:f4:e7:
9d:f3:c1:ff:c9:f3:72:e0:b7:cc:33:4f:84:5d:2b:eb:31:39:
0d:19:c3:f4:67:3a:78:55:c9:6d:d7:5a:63:c3:67:83:50:ec:
e4:3e:37:01:55:38:1d:80:16:00:c9:23:8d:59:ac:3e:c4:ef:
5a:87:75:ac:89:09:d5:3d:58:40:55:d7:bc:57:44:40:a7:2b:
31:ae:73:54:18:d3:ff:ae:20:2c:8d:49:56:e3:9d:fc:c1:31:
f6:22:3a:a8:51:d7:c5:a0:d9:ca:c3:11:b2:ed:0c:ac:57:3c:
15:11:d3:88:a3:c9:9e:0b:a9:86:d2:05:10:09:41:cd:b1:82:
8b:20:02:e7:7b:ac:df:4c:1d:be:86:7a:93:29:ad:c1:38:8c:
8b:02:2a:b5:fa:61:cd:83:bc:d6:2e:7b:20:c0:50:80:0e:b5:
24:1f:48:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4J1rdXR0oB3aCZc8bXduMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYTJkNjM3Y2IwYWNjZjg3MjFmNDNlMjY2Y2UyMTNmOGVk
ZGQyNmEwHhcNMjUwODIzMDMwMjI2WhcNMjUwODI0MDMwMjI2WjAzMTEwLwYDVQQD
EyhlNDczMmRkYTZiM2NiNmQ0ZDI1MDk3NmY5OGVjYjQxNWY2ZTUwODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwSF4pR+i6dSBkosnvukHo2eNbuB
eU4nY0pTdpAhnFpshY2NYOLs0c5FEWP5wgVCjhK6zuDNDEUzAWCC/y5NTHr5O07N
Du+uFCUiz+ktWG/2+dkI7e1dqJT0YLEVTpNW1HL0Ux2ZR8EWFcnnZM0ZA5/N7E6W
a2wGzT7kYdSq29JvA2SqOWAgzEF9PqokqvjDCOG287ite7GzpA1Zf0xAKA1/3U0M
81XacPh6zwOMEi1j9+8f0/iNpZsLJfQkhC4UmucggjTQDAhoMCSRkxs4pe4v5KL7
pwbzZbh9r7q+2JpKslITufoRR6Zkkw9METta1MWqUxXUafZxT8HTtCu6WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORzLdprPLbU0lCXb5jstBX25QhvMB8GA1UdIwQY
MBaAFKGi1jfLCsz4ch9D4mbOIT+O3dJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lZGJmNDQtMzczMi00NGZmLWE5NDQt
ZTIxOTc0YTI5NGJhLzEvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9lZGJmNDQtMzczMi00NGZmLWE5NDQtZTIxOTc0YTI5NGJh
LzEvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAll4kpL8m
B9aWzmSPSuIn132d0+afdxnfeOgppr1mKqRAyloVeAZgYfAR6Xmz9RPy+jVLDPe0
L/aJRUDJvkRrnPlxHPqpyBHP5fytHH+WZWP5o7aUJUmBS/TnnfPB/8nzcuC3zDNP
hF0r6zE5DRnD9Gc6eFXJbddaY8Nng1Ds5D43AVU4HYAWAMkjjVmsPsTvWod1rIkJ
1T1YQFXXvFdEQKcrMa5zVBjT/64gLI1JVuOd/MEx9iI6qFHXxaDZysMRsu0MrFc8
FRHTiKPJnguphtIFEAlBzbGCiyAC53us30wdvoZ6kymtwTiMiwIqtfphzYO81i57
IMBQgA61JB9IzA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:12 2025 by rpki-client