Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
File: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft (raw, json)
Hash identifier: 8YxEGjU4RB+8+y2kDbWkN9x7qf0i1Z4LSGa/GGYWac0=
Subject key identifier: 32:D0:CA:F8:EA:2A:53:58:76:19:E0:AF:CA:13:44:CA:71:03:3C:AC
Authority key identifier: 3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
Certificate issuer: /CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Certificate serial: 0198D4E0C68F3049F324054ECBDC4E6EF73A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 03:02:37 +0000
Manifest this update: Sat 23 Aug 2025 03:02:37 +0000
Manifest next update: Sun 24 Aug 2025 03:02:37 +0000
Files and hashes: 1: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl (hash: 2KvWdRaSXlXQN80iqA0QLjCNjC9dbR2no4GYu96j0I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:c6:8f:30:49:f3:24:05:4e:cb:dc:4e:6e:f7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Validity
Not Before: Aug 23 03:02:37 2025 GMT
Not After : Aug 24 03:02:37 2025 GMT
Subject: CN=32d0caf8ea2a53587619e0afca1344ca71033cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:65:8d:8c:8a:9b:ec:1d:65:95:b3:e4:d0:bc:
07:ff:fa:b5:02:88:e4:9d:d4:69:b4:5f:77:06:10:
b1:f7:98:1d:f1:b0:d1:87:4f:08:30:f7:62:ef:8f:
de:9d:76:87:8a:74:49:38:91:8e:04:aa:0d:29:70:
5d:c4:7e:34:31:04:28:6b:31:59:cd:07:99:87:ea:
f9:df:6a:f9:e7:7d:de:ed:5e:60:53:ba:9c:19:44:
da:90:96:2f:1d:f0:d2:b8:f2:a7:64:5c:6c:2e:e7:
42:ef:5d:2a:e8:a1:e8:88:3c:3c:af:bb:fe:0b:c5:
e9:4f:28:b7:53:1c:bc:58:c5:67:f8:08:44:b4:5d:
14:8e:60:ee:85:73:92:a0:47:55:5c:c5:90:2c:7e:
f7:68:62:26:68:03:e8:f2:75:63:07:c3:48:73:08:
2c:d2:1f:8e:af:a1:29:b9:df:76:9a:58:5b:c0:33:
cd:f2:9f:77:93:ab:26:97:e5:d3:38:1b:6d:d0:44:
9c:46:01:d2:11:fc:ca:ad:5b:2d:ef:85:9c:e1:4c:
6f:9f:aa:c5:af:18:01:5c:de:7b:e8:63:c8:a1:87:
a8:98:c4:45:07:1a:ce:29:fb:db:7c:3d:dc:32:69:
09:77:cb:6c:ed:51:ce:5f:f6:1d:09:b2:6f:e5:60:
92:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D0:CA:F8:EA:2A:53:58:76:19:E0:AF:CA:13:44:CA:71:03:3C:AC
X509v3 Authority Key Identifier:
keyid:3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:76:df:ed:2f:62:f9:82:e8:5c:d4:12:28:34:55:17:d7:77:
bf:b9:62:97:5a:fe:aa:84:66:4d:82:ca:e1:59:40:a8:0f:da:
eb:58:05:be:4d:8e:7d:89:15:2e:1b:1e:3d:bc:e0:21:64:03:
8c:2d:9d:2c:d9:94:4b:43:23:cc:20:40:9e:5f:5a:3e:b6:61:
28:c2:93:08:0a:6a:19:4b:45:b5:bb:6d:f5:34:1c:4d:4d:e0:
c6:95:66:20:2c:24:91:7e:63:04:a5:a7:f3:ed:51:40:ae:b5:
2d:b1:92:15:2e:64:fc:a2:88:11:56:e9:bd:69:13:ed:fb:34:
ba:0f:fd:78:8b:62:4c:74:26:f5:5e:fd:79:af:f2:3d:d0:33:
49:d2:03:64:71:26:65:c0:3f:8c:d2:33:a8:90:ca:6c:b7:e9:
68:27:d4:19:10:bd:6b:33:d3:d6:dd:7f:d1:f9:7e:c3:c5:e2:
2f:95:5b:99:00:e9:dc:6b:d4:20:60:44:b1:62:ff:47:b4:a1:
f2:2b:a7:8b:f9:9a:69:99:50:9b:1a:78:02:b6:b3:0f:eb:ee:
81:3a:c9:12:ea:39:1f:5c:94:9c:c0:bb:66:2f:df:e7:ba:a5:
7c:19:af:fe:86:dd:92:f3:07:98:5d:c4:11:f4:40:b7:13:71:
59:27:5e:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4MaPMEnzJAVOy9xObvc6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZGNkMThmMzM0Yzg3YTViNTdkZDc4N2VjMzI3NDM1NWY5
ZDU4OTQwHhcNMjUwODIzMDMwMjM3WhcNMjUwODI0MDMwMjM3WjAzMTEwLwYDVQQD
EygzMmQwY2FmOGVhMmE1MzU4NzYxOWUwYWZjYTEzNDRjYTcxMDMzY2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2WNjIqb7B1llbPk0LwH//q1Aojk
ndRptF93BhCx95gd8bDRh08IMPdi74/enXaHinRJOJGOBKoNKXBdxH40MQQoazFZ
zQeZh+r532r5533e7V5gU7qcGUTakJYvHfDSuPKnZFxsLudC710q6KHoiDw8r7v+
C8XpTyi3Uxy8WMVn+AhEtF0UjmDuhXOSoEdVXMWQLH73aGImaAPo8nVjB8NIcwgs
0h+Or6Epud92mlhbwDPN8p93k6sml+XTOBtt0EScRgHSEfzKrVst74Wc4Uxvn6rF
rxgBXN576GPIoYeomMRFBxrOKfvbfD3cMmkJd8ts7VHOX/YdCbJv5WCSNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLQyvjqKlNYdhngr8oTRMpxAzysMB8GA1UdIwQY
MBaAFDvc0Y8zTIeltX3Xh+wydDVfnViUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzl6Ump6Tk1oNlcxZmRlSDdESjBOVi1kV0pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kYjNhZDktMDFlZS00YTQ5LWI3ZWEt
NzljNDFhYzliNmY4LzEvTzl6Ump6Tk1oNlcxZmRlSDdESjBOVi1kV0pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kYjNhZDktMDFlZS00YTQ5LWI3ZWEtNzljNDFhYzliNmY4
LzEvTzl6Ump6Tk1oNlcxZmRlSDdESjBOVi1kV0pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3bf7S9i
+YLoXNQSKDRVF9d3v7lil1r+qoRmTYLK4VlAqA/a61gFvk2OfYkVLhsePbzgIWQD
jC2dLNmUS0MjzCBAnl9aPrZhKMKTCApqGUtFtbtt9TQcTU3gxpVmICwkkX5jBKWn
8+1RQK61LbGSFS5k/KKIEVbpvWkT7fs0ug/9eItiTHQm9V79ea/yPdAzSdIDZHEm
ZcA/jNIzqJDKbLfpaCfUGRC9azPT1t1/0fl+w8XiL5VbmQDp3GvUIGBEsWL/R7Sh
8iuni/maaZlQmxp4ArazD+vugTrJEuo5H1yUnMC7Zi/f57qlfBmv/obdkvMHmF3E
EfRAtxNxWSdeig==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:03 2025 by rpki-client