Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
File: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft (raw, json)
Hash identifier: osDndRDoFx4W/SUeNPoRKDSD8Fbx+q17pwjeuaTihqY=
Subject key identifier: 2D:03:16:A1:94:AA:22:CF:26:1E:48:FE:82:2B:44:66:FF:21:1B:6D
Authority key identifier: B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
Certificate issuer: /CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Certificate serial: 0197C6F00E4C766C52C19409A04742DD597C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
Manifest number: 15BE
Signing time: Tue 01 Jul 2025 17:01:50 +0000
Manifest this update: Tue 01 Jul 2025 17:01:50 +0000
Manifest next update: Wed 02 Jul 2025 17:01:50 +0000
Files and hashes: 1: PA8CjloTPg-68N7OnvoYD-1oLhk.roa (hash: 4/Ym4G39HmXB13TW6+krF+Wwi7w8FIhxrF2UkWzgLLU=)
2: c26zPerzgVBHPu_vijyV_Oovrl4.roa (hash: Gk43PDLGRAfU27KozR+OSnOsvS5KnMxHT/HJnzP3YQ0=)
3: i_g5q7-hPStlEv1O5n0OZOzfR60.roa (hash: m3x1cS4XhcesKKNznb1VTlqwdh2lVHJU/PvB8L7dB+M=)
4: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl (hash: 5kHWA+RTDo2XTKvGJHFREVrbK8Wr50Dn6Q1rHmT5zg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:f0:0e:4c:76:6c:52:c1:94:09:a0:47:42:dd:59:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Validity
Not Before: Jul 1 17:01:50 2025 GMT
Not After : Jul 2 17:01:50 2025 GMT
Subject: CN=2d0316a194aa22cf261e48fe822b4466ff211b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:d7:c5:bd:81:e3:d0:f2:89:c8:ce:84:d9:
f8:98:36:60:97:5b:6b:41:c6:b0:1a:16:ab:fa:e3:
86:15:89:6a:94:88:96:9d:f8:4d:a6:7c:8e:7e:44:
c5:63:58:13:9d:35:be:d8:fb:96:34:a3:8c:83:af:
14:f5:c3:2e:93:d6:14:53:9e:c5:55:85:04:54:4e:
95:5e:40:9d:db:b6:79:b4:20:02:3b:44:6d:9a:c1:
8c:49:77:95:7d:c0:6f:cd:53:95:85:50:8c:94:6f:
ca:af:43:7e:a6:7a:ac:8a:2e:6d:ec:e2:fa:cb:92:
73:7c:6d:8f:dc:54:15:b7:d2:5b:e5:4c:87:fa:be:
c0:18:fc:d6:e8:a7:7f:c3:46:05:6e:12:7b:26:03:
28:8d:23:df:20:00:66:27:24:bd:1e:b6:1f:03:84:
ea:ca:bf:d9:a4:79:0a:42:b4:f6:06:5f:60:e1:f8:
06:bb:3c:b1:34:6b:7a:69:30:87:78:00:75:95:4f:
dc:77:a6:2f:b8:bb:91:b9:bd:90:38:2c:57:be:03:
7c:6e:5f:cd:62:6e:60:77:ad:65:ec:eb:a2:05:17:
e9:04:30:31:c2:c6:f7:dd:53:aa:bd:a1:cc:41:81:
1d:8d:f4:dd:54:f0:a0:c0:12:89:97:0d:83:44:4c:
ed:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:03:16:A1:94:AA:22:CF:26:1E:48:FE:82:2B:44:66:FF:21:1B:6D
X509v3 Authority Key Identifier:
keyid:B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b5:14:9e:56:99:31:06:87:48:f9:8f:c1:60:eb:f4:42:1c:
6a:95:0d:e4:c6:f9:36:93:f4:45:15:26:56:db:3d:3a:d9:f1:
4e:d9:94:a4:5a:19:c6:31:26:45:10:8a:f3:b2:43:a7:a9:5f:
2b:6e:b5:9b:85:f9:b9:89:5e:53:cf:f6:80:26:14:3e:5d:af:
33:c4:b9:e6:71:a0:2b:78:45:e7:83:90:50:2a:d1:af:63:98:
a9:8f:b2:14:61:13:b4:0f:1b:fc:cc:f8:5f:0e:d9:cd:f0:45:
ed:eb:87:62:12:bf:03:dd:59:bf:68:75:04:31:d8:a1:32:df:
76:b7:21:70:a5:b9:af:ca:40:66:54:fc:a0:4f:4e:05:16:b6:
ee:03:d9:44:c8:62:72:10:05:03:38:65:23:9f:6e:99:73:5d:
85:da:a4:98:f2:88:16:d1:0c:3f:a2:9f:a3:68:f4:88:23:b7:
c5:7f:56:7e:38:ee:55:07:13:48:6e:23:1c:58:ad:f2:e6:c8:
2f:67:44:0f:72:9d:fb:b7:50:88:cc:a7:b3:ae:31:b7:c9:09:
86:45:a7:8e:04:bf:bc:b6:85:1b:b1:bf:1b:28:10:e9:59:30:
bc:bc:ea:87:4d:60:a7:64:7d:53:ce:46:75:9a:08:21:16:86:
4c:f0:58:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfG8A5MdmxSwZQJoEdC3Vl8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZTBmNzk4NDFjMDIxMGQ5NWI0ZWY1NmZmNjg0NDFjMmFh
OWZjMGYwHhcNMjUwNzAxMTcwMTUwWhcNMjUwNzAyMTcwMTUwWjAzMTEwLwYDVQQD
EygyZDAzMTZhMTk0YWEyMmNmMjYxZTQ4ZmU4MjJiNDQ2NmZmMjExYjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAfXxb2B49DyicjOhNn4mDZgl1tr
QcawGhar+uOGFYlqlIiWnfhNpnyOfkTFY1gTnTW+2PuWNKOMg68U9cMuk9YUU57F
VYUEVE6VXkCd27Z5tCACO0RtmsGMSXeVfcBvzVOVhVCMlG/Kr0N+pnqsii5t7OL6
y5JzfG2P3FQVt9Jb5UyH+r7AGPzW6Kd/w0YFbhJ7JgMojSPfIABmJyS9HrYfA4Tq
yr/ZpHkKQrT2Bl9g4fgGuzyxNGt6aTCHeAB1lU/cd6YvuLuRub2QOCxXvgN8bl/N
Ym5gd61l7OuiBRfpBDAxwsb33VOqvaHMQYEdjfTdVPCgwBKJlw2DREztBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0DFqGUqiLPJh5I/oIrRGb/IRttMB8GA1UdIwQY
MBaAFLjg95hBwCENlbTvVv9oRBwqqfwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jOWU3MDQtOTU4ZC00MTNmLThhY2Mt
NmVhM2NiZmQzYTg0LzEvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jOWU3MDQtOTU4ZC00MTNmLThhY2MtNmVhM2NiZmQzYTg0
LzEvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLUUnlaZ
MQaHSPmPwWDr9EIcapUN5Mb5NpP0RRUmVts9OtnxTtmUpFoZxjEmRRCK87JDp6lf
K261m4X5uYleU8/2gCYUPl2vM8S55nGgK3hF54OQUCrRr2OYqY+yFGETtA8b/Mz4
Xw7ZzfBF7euHYhK/A91Zv2h1BDHYoTLfdrchcKW5r8pAZlT8oE9OBRa27gPZRMhi
chAFAzhlI59umXNdhdqkmPKIFtEMP6Kfo2j0iCO3xX9WfjjuVQcTSG4jHFit8ubI
L2dED3Kd+7dQiMyns64xt8kJhkWnjgS/vLaFG7G/GygQ6VkwvLzqh01gp2R9U85G
dZoIIRaGTPBYow==
-----END CERTIFICATE-----
Generated at Tue Jul 1 22:48:13 2025 by rpki-client