Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
File: 0FWBRyuSqFqQyqHkfXIj14iuAUg.mft (raw, json)
Hash identifier: rE6aJETvlzrTPiL9t4CknTl2rgQJXk7FI0Py6VKYGrA=
Subject key identifier: 44:13:E3:9E:51:CE:B7:9C:20:A7:4E:45:13:43:C7:15:08:C4:FB:96
Authority key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
Certificate issuer: /CN=d05581472b92a85a90caa1e47d7223d788ae0148
Certificate serial: 0198D583E727A16E29A4A4DF7513969074C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
Manifest number: 015A
Signing time: Sat 23 Aug 2025 06:00:48 +0000
Manifest this update: Sat 23 Aug 2025 06:00:48 +0000
Manifest next update: Sun 24 Aug 2025 06:00:48 +0000
Files and hashes: 1: 0FWBRyuSqFqQyqHkfXIj14iuAUg.crl (hash: Tlm35uLO7RcgnOl9HNzfA309qKlHj9E7/7hp8cpaRJY=)
2: Tdi0Hj6bQsB2NE33pvFHyR4UnH4.roa (hash: QY4nN2KRRzSRBGH5wO5xXZyBIH3qA69otudacqD4SWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e7:27:a1:6e:29:a4:a4:df:75:13:96:90:74:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05581472b92a85a90caa1e47d7223d788ae0148
Validity
Not Before: Aug 23 06:00:48 2025 GMT
Not After : Aug 24 06:00:48 2025 GMT
Subject: CN=4413e39e51ceb79c20a74e451343c71508c4fb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:1e:56:89:dd:e3:52:a2:5d:ac:59:5c:3c:
74:73:95:84:4f:39:6e:2d:98:28:08:11:ac:89:92:
3d:60:c5:39:1d:15:64:33:35:9c:65:92:dc:da:e1:
65:97:61:89:bc:32:58:66:b8:b3:a7:eb:60:ab:45:
93:de:2f:91:11:11:33:cc:63:d1:aa:56:68:cd:06:
27:b9:72:1c:fb:f2:93:2d:ab:f9:a3:ce:01:21:86:
9f:e0:7d:69:cd:2b:e6:37:4e:ca:81:d7:ed:69:0e:
b6:00:dc:7a:c3:37:aa:f6:2f:70:6b:30:f2:d2:cd:
fa:de:2c:68:c3:69:db:a0:d4:e8:1b:b0:7c:dc:e0:
6a:88:66:57:8e:42:15:6a:7b:4a:e5:b1:8e:cc:94:
24:c0:fb:46:3c:17:cf:c6:e0:2f:e8:69:35:dd:a6:
81:00:7e:a5:14:2c:97:01:65:c5:65:6b:c2:43:d5:
de:08:52:f2:90:13:53:0d:77:1c:39:ec:d4:e7:5f:
27:3e:b2:0f:00:02:c5:34:c1:40:4d:30:ed:b8:96:
86:b8:6e:55:4c:bd:55:1c:a3:24:2b:78:f6:63:ec:
17:9e:5d:7a:45:69:1e:f3:13:46:79:51:73:42:b4:
9f:93:0f:d4:eb:11:9e:21:d0:29:34:2b:63:52:88:
24:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:13:E3:9E:51:CE:B7:9C:20:A7:4E:45:13:43:C7:15:08:C4:FB:96
X509v3 Authority Key Identifier:
keyid:D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:19:9c:ab:a2:a2:cc:40:d9:ed:34:e8:db:b5:20:b5:12:f0:
33:44:9f:30:48:7e:0e:86:2e:d5:09:bd:40:0b:24:8b:ad:2c:
b9:03:eb:6a:2f:7b:3a:2b:50:65:e3:f1:bf:f5:cc:ff:ca:9a:
77:5d:81:9e:99:21:86:c0:5b:19:22:e6:fb:35:3f:02:59:f4:
ae:7a:33:f0:b7:0e:06:21:e6:e5:eb:e4:b7:f9:a2:0d:9c:ab:
6a:02:b5:88:a0:f2:22:f8:e9:1b:a2:f8:bc:f6:d8:00:a5:0b:
fe:a7:47:7d:f9:47:98:f6:b6:1d:4c:b6:1b:0c:bb:fe:16:89:
69:9d:e8:14:47:53:d8:ca:a1:b8:80:b9:9d:b0:e4:b8:86:24:
4b:a4:a7:cd:24:b6:48:6c:d8:25:6f:aa:c1:39:64:50:87:12:
2d:c7:5c:70:39:f0:fb:ed:e1:1b:ee:e9:e2:7b:24:1e:f0:56:
ea:b6:52:a2:41:87:49:3f:01:22:ae:c5:57:e1:9b:21:8d:f0:
97:f6:74:eb:1c:da:65:39:ac:9d:0f:5a:aa:88:e1:4b:a4:51:
42:4b:6b:a7:8b:9c:6e:6a:a7:2f:5b:91:c0:9c:3d:84:24:91:
58:97:7c:d7:32:e8:14:90:2e:ce:41:d8:43:81:25:95:e0:33:
d9:cb:31:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg+cnoW4ppKTfdROWkHTJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNTU4MTQ3MmI5MmE4NWE5MGNhYTFlNDdkNzIyM2Q3ODhh
ZTAxNDgwHhcNMjUwODIzMDYwMDQ4WhcNMjUwODI0MDYwMDQ4WjAzMTEwLwYDVQQD
Eyg0NDEzZTM5ZTUxY2ViNzljMjBhNzRlNDUxMzQzYzcxNTA4YzRmYjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBYeVond41KiXaxZXDx0c5WETzlu
LZgoCBGsiZI9YMU5HRVkMzWcZZLc2uFll2GJvDJYZrizp+tgq0WT3i+REREzzGPR
qlZozQYnuXIc+/KTLav5o84BIYaf4H1pzSvmN07KgdftaQ62ANx6wzeq9i9wazDy
0s363ixow2nboNToG7B83OBqiGZXjkIVantK5bGOzJQkwPtGPBfPxuAv6Gk13aaB
AH6lFCyXAWXFZWvCQ9XeCFLykBNTDXccOezU518nPrIPAALFNMFATTDtuJaGuG5V
TL1VHKMkK3j2Y+wXnl16RWke8xNGeVFzQrSfkw/U6xGeIdApNCtjUogkWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQT455RzrecIKdORRNDxxUIxPuWMB8GA1UdIwQY
MBaAFNBVgUcrkqhakMqh5H1yI9eIrgFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hMDg3NDgtODYyMi00ZTg2LTgyZWYt
M2JkYWFjYjlkMDhkLzEvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9hMDg3NDgtODYyMi00ZTg2LTgyZWYtM2JkYWFjYjlkMDhk
LzEvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBmcq6Ki
zEDZ7TTo27UgtRLwM0SfMEh+DoYu1Qm9QAski60suQPrai97OitQZePxv/XM/8qa
d12BnpkhhsBbGSLm+zU/Aln0rnoz8LcOBiHm5evkt/miDZyragK1iKDyIvjpG6L4
vPbYAKUL/qdHfflHmPa2HUy2Gwy7/haJaZ3oFEdT2MqhuIC5nbDkuIYkS6SnzSS2
SGzYJW+qwTlkUIcSLcdccDnw++3hG+7p4nskHvBW6rZSokGHST8BIq7FV+GbIY3w
l/Z06xzaZTmsnQ9aqojhS6RRQktrp4ucbmqnL1uRwJw9hCSRWJd81zLoFJAuzkHY
Q4ElleAz2csxAQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:12 2025 by rpki-client