Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json)
Hash identifier: ZL1vTcISPlJ9dC0hyGcFqE8XSrqUgycwFizs/uKLcRA=
Subject key identifier: CA:23:A5:EB:4C:69:B4:49:77:A1:03:C9:BD:4E:98:9B:4A:C3:CB:E2
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 0198D6CDA78F1FE15AF1E12601B1C9F03582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
Manifest number: 0DBD
Signing time: Sat 23 Aug 2025 12:00:58 +0000
Manifest this update: Sat 23 Aug 2025 12:00:58 +0000
Manifest next update: Sun 24 Aug 2025 12:00:58 +0000
Files and hashes: 1: 4EkSsDmoQioZqy5Nx3ZgwgNVKek.roa (hash: VGhbj0GwVploD/uygEp/n7MuApEtZ3hQmaUGbybY4XI=)
2: LXrqqPRInqT0YQQrkSiScVOv68s.roa (hash: RhWWbbeT6YQP2eTW6sSumZ2mUd9atkadmzcbsktp9d0=)
3: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: vqf0Sdg/TBj9ti4xM2JcawVOSY61zK8zX8F0ClfYZxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:a7:8f:1f:e1:5a:f1:e1:26:01:b1:c9:f0:35:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Aug 23 12:00:58 2025 GMT
Not After : Aug 24 12:00:58 2025 GMT
Subject: CN=ca23a5eb4c69b44977a103c9bd4e989b4ac3cbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:3f:2e:e6:0b:6f:4d:e5:5c:dc:67:28:dc:
a4:ab:6b:e9:29:52:57:c5:af:67:a4:2a:06:ad:92:
5e:95:6d:c8:cd:63:72:b1:50:b0:65:9f:1c:28:ee:
81:e5:bd:67:e2:cf:e8:83:4f:e5:56:13:29:18:89:
d2:3b:2c:52:fe:32:de:a5:2a:29:51:f5:01:68:df:
98:20:53:37:68:06:61:69:59:9a:22:8e:4a:91:bc:
f6:79:54:6e:3f:a7:16:2e:8e:c4:af:04:2b:bb:bd:
94:bd:2f:ad:8b:3e:83:d7:e4:bb:32:b2:a7:8a:3f:
d0:ee:6d:06:7d:df:82:12:91:07:d7:99:72:17:07:
4d:d3:e2:c2:b9:6a:bb:7c:f9:f2:3b:d6:be:f7:9c:
09:df:95:db:ec:e3:71:1c:38:c2:cf:82:12:ba:25:
b0:db:11:50:c5:ce:51:9e:f2:e4:f0:18:d1:f2:f5:
a2:70:96:ef:84:05:50:5f:4d:78:dc:76:3e:ff:b2:
17:da:fb:37:b4:63:48:14:f3:e2:c0:7c:d5:b6:5d:
b5:9b:4d:33:d7:44:69:a9:36:d1:16:b0:8c:57:58:
1f:07:65:46:c0:0e:67:bb:07:33:ce:3f:ea:45:30:
91:55:2d:77:9e:ad:5e:83:3f:37:9b:36:41:be:c6:
5a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:23:A5:EB:4C:69:B4:49:77:A1:03:C9:BD:4E:98:9B:4A:C3:CB:E2
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:1f:a8:2e:6c:1e:eb:23:87:c9:57:92:45:4f:2c:91:34:d7:
1c:d7:8f:f8:39:ae:f9:c3:34:b9:e7:a1:75:5f:52:01:59:9e:
84:7a:5b:b9:9a:66:5a:18:47:a6:42:bd:be:83:8f:81:27:c9:
ad:43:53:ce:50:79:83:50:9a:fb:70:6a:1b:9b:51:3d:3b:6c:
f2:27:3a:77:82:32:0c:bb:ff:0e:a2:35:9f:c3:c4:88:9a:5c:
29:97:e3:15:f7:a2:97:d4:0d:5e:80:91:58:c0:82:2e:91:dd:
6c:47:2f:37:b1:52:ce:c4:46:e7:02:a7:21:e1:e1:a0:d7:ba:
66:b1:68:3e:65:7f:7e:e9:f0:98:f2:28:4b:83:be:40:6e:f7:
92:c9:6d:79:6a:d3:b5:76:dc:0d:72:62:34:20:f3:d9:c0:c2:
38:9d:5b:62:3c:6a:4e:a9:72:f6:f8:34:ba:f8:6c:c8:5e:6e:
5b:73:b8:d8:27:92:32:6c:b2:92:8a:86:0a:c1:48:f6:db:04:
23:a9:5e:3f:4d:d0:cb:bb:9e:d3:36:72:c5:d8:d6:ea:2a:d2:
ad:2b:c1:55:0c:5a:4b:26:68:71:49:ec:c1:b8:54:6b:80:c1:
82:b6:59:2d:a8:df:0e:4c:72:fd:b7:90:37:a4:c1:ba:3f:76:
c1:2a:57:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzaePH+Fa8eEmAbHJ8DWCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNWEyMGE4NjkzOWM4ZGU4YWVkYzMwNTI0M2IwZmQ0YWQ4
NjU0ZDAwHhcNMjUwODIzMTIwMDU4WhcNMjUwODI0MTIwMDU4WjAzMTEwLwYDVQQD
EyhjYTIzYTVlYjRjNjliNDQ5NzdhMTAzYzliZDRlOTg5YjRhYzNjYmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh8/LuYLb03lXNxnKNykq2vpKVJX
xa9npCoGrZJelW3IzWNysVCwZZ8cKO6B5b1n4s/og0/lVhMpGInSOyxS/jLepSop
UfUBaN+YIFM3aAZhaVmaIo5Kkbz2eVRuP6cWLo7ErwQru72UvS+tiz6D1+S7MrKn
ij/Q7m0Gfd+CEpEH15lyFwdN0+LCuWq7fPnyO9a+95wJ35Xb7ONxHDjCz4ISuiWw
2xFQxc5RnvLk8BjR8vWicJbvhAVQX0143HY+/7IX2vs3tGNIFPPiwHzVtl21m00z
10RpqTbRFrCMV1gfB2VGwA5nuwczzj/qRTCRVS13nq1egz83mzZBvsZaVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMojpetMabRJd6EDyb1OmJtKw8viMB8GA1UdIwQY
MBaAFLNaIKhpOcjeiu3DBSQ7D9SthlTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAt
YTU0MjU4OTc5OWJjLzEvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAtYTU0MjU4OTc5OWJj
LzEvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwx+oLmwe
6yOHyVeSRU8skTTXHNeP+Dmu+cM0ueehdV9SAVmehHpbuZpmWhhHpkK9voOPgSfJ
rUNTzlB5g1Ca+3BqG5tRPTts8ic6d4IyDLv/DqI1n8PEiJpcKZfjFfeil9QNXoCR
WMCCLpHdbEcvN7FSzsRG5wKnIeHhoNe6ZrFoPmV/funwmPIoS4O+QG73kslteWrT
tXbcDXJiNCDz2cDCOJ1bYjxqTqly9vg0uvhsyF5uW3O42CeSMmyykoqGCsFI9tsE
I6leP03Qy7ue0zZyxdjW6irSrSvBVQxaSyZocUnswbhUa4DBgrZZLajfDkxy/beQ
N6TBuj92wSpX4A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:18 2025 by rpki-client