Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
File: k0F7oKbrs_OxuCr3UPviioakGzU.mft (raw, json)
Hash identifier: pRD7FL8IOxaF1ZKmL2bD6RhlIcuRZM5RscM7UqSiiwQ=
Subject key identifier: 24:5D:F3:29:68:07:55:3D:3D:89:66:03:69:2C:A6:CD:B0:09:93:50
Authority key identifier: 93:41:7B:A0:A6:EB:B3:F3:B1:B8:2A:F7:50:FB:E2:8A:86:A4:1B:35
Certificate issuer: /CN=93417ba0a6ebb3f3b1b82af750fbe28a86a41b35
Certificate serial: 0198D472E59D39FAD465C70C6957F7319C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
Manifest number: 096A
Signing time: Sat 23 Aug 2025 01:02:36 +0000
Manifest this update: Sat 23 Aug 2025 01:02:36 +0000
Manifest next update: Sun 24 Aug 2025 01:02:36 +0000
Files and hashes: 1: k0F7oKbrs_OxuCr3UPviioakGzU.crl (hash: 6HMSuzOQD4bb5qT0yD/nOmxfqt/p4DDklJ7p5/FfBzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e5:9d:39:fa:d4:65:c7:0c:69:57:f7:31:9c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93417ba0a6ebb3f3b1b82af750fbe28a86a41b35
Validity
Not Before: Aug 23 01:02:36 2025 GMT
Not After : Aug 24 01:02:36 2025 GMT
Subject: CN=245df3296807553d3d896603692ca6cdb0099350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e9:f5:51:33:d4:3a:2e:03:0e:d7:82:fe:10:
36:f0:a2:62:55:d6:62:c4:1d:31:14:e7:4e:35:e6:
4b:fd:ce:50:3a:c0:ac:c5:cb:8f:30:9b:60:28:c6:
ff:53:f2:ec:4d:e2:a7:ec:dc:7d:29:25:40:42:d4:
06:63:fa:af:c4:3f:ae:63:51:69:b7:35:bc:ca:f0:
a9:9d:98:9e:1f:24:ab:ab:e2:e9:fb:7e:62:78:88:
5a:4f:a9:07:a0:e7:34:95:43:36:81:a3:8d:b3:26:
dc:25:c5:30:39:42:64:e3:78:32:de:7d:4b:fb:e2:
94:91:2e:15:5f:d0:c8:b8:05:3e:a4:90:92:61:8b:
72:94:94:46:9a:7e:e8:b6:d5:79:a0:da:54:ce:60:
0f:07:e8:ab:c5:6b:cd:0c:34:d2:93:1b:e3:0d:48:
72:ec:46:35:a4:ec:83:39:9b:dd:db:c6:32:63:be:
84:fa:99:60:66:5e:46:97:1a:3f:0e:3f:1d:4f:91:
41:76:69:ec:af:71:07:85:88:d0:42:fa:01:df:15:
df:ad:09:ce:3d:98:00:3d:6b:e4:90:58:03:e9:93:
28:c6:5b:5c:35:91:31:d8:f6:53:3f:eb:7a:30:9c:
c6:02:0c:a8:e5:7f:e4:da:c3:54:45:b4:5b:13:cc:
a3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5D:F3:29:68:07:55:3D:3D:89:66:03:69:2C:A6:CD:B0:09:93:50
X509v3 Authority Key Identifier:
keyid:93:41:7B:A0:A6:EB:B3:F3:B1:B8:2A:F7:50:FB:E2:8A:86:A4:1B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:55:15:5b:ba:a9:73:28:fc:ff:bf:40:3c:ad:f6:5c:15:57:
95:2a:ae:d9:2f:41:09:35:f1:85:3c:d6:24:f7:02:27:0b:aa:
24:a2:e7:87:14:2e:5b:cb:61:52:de:1a:88:c3:6a:08:ee:65:
a8:42:43:fe:39:74:e3:b0:77:87:2f:cd:06:70:e5:e2:05:34:
e2:1c:bb:d1:97:7c:82:2f:47:f8:ad:e4:1f:8a:39:dd:43:13:
35:06:9d:ee:77:cc:d1:34:5f:92:90:5c:4a:e1:c0:77:48:6a:
a5:c9:24:e6:c1:50:af:2b:64:6f:0d:a4:a8:43:42:62:11:2d:
55:4f:2f:98:f8:03:e6:b9:5b:cf:b9:62:cb:a3:52:f4:a3:3b:
dd:56:05:66:28:64:a0:42:e0:fc:55:4d:6b:f9:0b:42:6b:4e:
80:2d:3a:e7:37:90:6f:4a:88:91:0a:73:9c:01:ee:ee:a6:f9:
74:76:98:7d:2c:80:77:44:4f:d5:f4:db:97:e5:f3:ef:c9:b8:
d2:73:1e:7a:50:1a:28:e1:83:3f:cd:95:ff:76:c0:75:22:3e:
a7:6f:95:a9:b6:25:91:9a:a2:da:89:19:46:e4:87:39:34:85:
22:27:47:bb:b4:62:50:be:a5:e3:6f:81:32:74:05:cb:78:0d:
a2:6c:8f:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcuWdOfrUZccMaVf3MZyIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNDE3YmEwYTZlYmIzZjNiMWI4MmFmNzUwZmJlMjhhODZh
NDFiMzUwHhcNMjUwODIzMDEwMjM2WhcNMjUwODI0MDEwMjM2WjAzMTEwLwYDVQQD
EygyNDVkZjMyOTY4MDc1NTNkM2Q4OTY2MDM2OTJjYTZjZGIwMDk5MzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoen1UTPUOi4DDteC/hA28KJiVdZi
xB0xFOdONeZL/c5QOsCsxcuPMJtgKMb/U/LsTeKn7Nx9KSVAQtQGY/qvxD+uY1Fp
tzW8yvCpnZieHySrq+Lp+35ieIhaT6kHoOc0lUM2gaONsybcJcUwOUJk43gy3n1L
++KUkS4VX9DIuAU+pJCSYYtylJRGmn7ottV5oNpUzmAPB+irxWvNDDTSkxvjDUhy
7EY1pOyDOZvd28YyY76E+plgZl5Glxo/Dj8dT5FBdmnsr3EHhYjQQvoB3xXfrQnO
PZgAPWvkkFgD6ZMoxltcNZEx2PZTP+t6MJzGAgyo5X/k2sNURbRbE8yjwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRd8yloB1U9PYlmA2ksps2wCZNQMB8GA1UdIwQY
MBaAFJNBe6Cm67Pzsbgq91D74oqGpBs1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazBGN29LYnJzX094dUNyM1VQdmlpb2FrR3pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xOGM5OTktYjczYS00MjE0LWEyMmMt
NzI4ZmQ2YmFiYWZmLzEvazBGN29LYnJzX094dUNyM1VQdmlpb2FrR3pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xOGM5OTktYjczYS00MjE0LWEyMmMtNzI4ZmQ2YmFiYWZm
LzEvazBGN29LYnJzX094dUNyM1VQdmlpb2FrR3pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVUVW7qp
cyj8/79APK32XBVXlSqu2S9BCTXxhTzWJPcCJwuqJKLnhxQuW8thUt4aiMNqCO5l
qEJD/jl047B3hy/NBnDl4gU04hy70Zd8gi9H+K3kH4o53UMTNQad7nfM0TRfkpBc
SuHAd0hqpckk5sFQrytkbw2kqENCYhEtVU8vmPgD5rlbz7liy6NS9KM73VYFZihk
oELg/FVNa/kLQmtOgC065zeQb0qIkQpznAHu7qb5dHaYfSyAd0RP1fTbl+Xz78m4
0nMeelAaKOGDP82V/3bAdSI+p2+VqbYlkZqi2okZRuSHOTSFIidHu7RiUL6l42+B
MnQFy3gNomyPog==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:03 2025 by rpki-client