Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
File: 0o9VSu1_jnFG6ctj9eMaXbHhupM.mft (raw, json)
Hash identifier: O+d/nZFJOZ2wJ0qWSfOFUObfNTtbEA9iVXGxe71Vfw4=
Subject key identifier: 43:11:01:C0:24:A1:9E:0B:7F:3B:18:E6:0B:BE:C7:B4:70:48:7D:A6
Authority key identifier: D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
Certificate issuer: /CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Certificate serial: 0198D5156C469AF56657B918DA5EF00DE23D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
Manifest number: 1643
Signing time: Sat 23 Aug 2025 04:00:07 +0000
Manifest this update: Sat 23 Aug 2025 04:00:07 +0000
Manifest next update: Sun 24 Aug 2025 04:00:07 +0000
Files and hashes: 1: 0o9VSu1_jnFG6ctj9eMaXbHhupM.crl (hash: dTI1VSXH4vdVBIZ88gWXeKrTAlPgpI1Nh8/pLcHEJBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:6c:46:9a:f5:66:57:b9:18:da:5e:f0:0d:e2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Validity
Not Before: Aug 23 04:00:07 2025 GMT
Not After : Aug 24 04:00:07 2025 GMT
Subject: CN=431101c024a19e0b7f3b18e60bbec7b470487da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:c0:96:1e:2e:10:40:45:48:c8:5b:d0:21:
3e:0d:9b:99:77:b7:72:29:29:3e:d2:ba:d7:69:59:
d4:52:2e:ae:67:06:df:d9:31:f5:39:97:26:ed:6d:
da:a7:5e:63:34:12:fb:25:55:1b:cd:2f:17:6a:94:
ca:83:fd:4b:ee:b9:c9:67:82:6e:29:f4:8e:5e:67:
66:fc:99:ed:da:c9:5b:03:55:23:42:36:da:71:ad:
91:b7:ba:b0:ea:7e:b6:d8:ca:23:95:2c:1d:ab:44:
32:f3:d1:26:43:1c:c9:41:6b:1e:13:6e:f5:aa:af:
ed:f2:29:a3:8e:e2:7b:0b:88:46:f6:4e:d2:f9:04:
77:b3:1f:4e:ec:2e:48:e5:d4:68:31:74:a1:c3:e4:
bf:79:5f:4b:62:87:89:c5:b6:a6:9d:67:f2:25:93:
39:8b:eb:9d:fd:06:9c:87:90:83:f9:e4:2e:5b:e3:
4f:3c:92:ff:59:70:23:09:44:06:2b:5d:cb:66:8f:
08:55:3b:85:56:9e:71:c9:4d:a0:fe:30:3e:65:32:
03:db:49:f3:53:44:8d:cd:6f:da:bb:14:37:74:89:
f3:f3:98:f8:c6:ef:a5:22:d9:fb:a2:6c:dd:b2:ea:
b5:25:23:27:4e:38:a9:e8:eb:ea:92:f5:75:f2:7f:
7c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:11:01:C0:24:A1:9E:0B:7F:3B:18:E6:0B:BE:C7:B4:70:48:7D:A6
X509v3 Authority Key Identifier:
keyid:D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:42:44:f1:f7:fb:71:10:50:f1:d1:02:ba:4f:ce:66:94:04:
39:a3:17:1e:64:bb:b6:9e:72:cf:b7:6e:f3:49:93:3b:55:cc:
d3:2b:c5:5a:9d:4a:d1:ea:b5:16:59:b6:1d:e7:2c:3c:eb:1b:
74:56:90:51:03:8f:09:1b:e5:a2:c9:fe:84:55:08:ca:92:32:
77:e0:29:3c:08:4f:81:2b:ea:59:c1:8d:f1:05:46:38:e6:42:
b0:3c:c6:01:62:58:5b:95:9b:3b:e9:d7:ac:9e:d7:fc:b9:ad:
29:b7:f7:18:84:b9:8f:ce:c8:9a:b7:16:be:d0:75:f7:78:c2:
ea:ad:73:53:5d:34:f4:b4:ea:15:e9:cc:2b:50:07:ad:90:12:
f8:ba:a6:76:ec:d6:db:68:a9:f9:49:a7:e3:b9:61:b0:04:5e:
9e:a3:2c:9e:8f:4d:0d:40:1c:16:0b:63:12:b2:67:85:6f:2c:
4f:44:b9:8a:1c:d9:de:41:be:77:ca:56:35:53:42:70:97:1b:
65:ed:3a:c0:92:fd:cc:23:83:51:fb:d1:ef:e2:56:27:ea:d6:
52:fa:8c:7c:e8:e1:b9:c0:e7:19:f5:52:2e:25:56:fa:2d:e4:
23:56:ff:1b:71:56:a7:d7:47:a2:ab:7b:27:62:0e:d6:82:a8:
92:dd:7f:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFWxGmvVmV7kY2l7wDeI9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOGY1NTRhZWQ3ZjhlNzE0NmU5Y2I2M2Y1ZTMxYTVkYjFl
MWJhOTMwHhcNMjUwODIzMDQwMDA3WhcNMjUwODI0MDQwMDA3WjAzMTEwLwYDVQQD
Eyg0MzExMDFjMDI0YTE5ZTBiN2YzYjE4ZTYwYmJlYzdiNDcwNDg3ZGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTPAlh4uEEBFSMhb0CE+DZuZd7dy
KSk+0rrXaVnUUi6uZwbf2TH1OZcm7W3ap15jNBL7JVUbzS8XapTKg/1L7rnJZ4Ju
KfSOXmdm/Jnt2slbA1UjQjbaca2Rt7qw6n622MojlSwdq0Qy89EmQxzJQWseE271
qq/t8imjjuJ7C4hG9k7S+QR3sx9O7C5I5dRoMXShw+S/eV9LYoeJxbamnWfyJZM5
i+ud/Qach5CD+eQuW+NPPJL/WXAjCUQGK13LZo8IVTuFVp5xyU2g/jA+ZTID20nz
U0SNzW/auxQ3dInz85j4xu+lItn7omzdsuq1JSMnTjip6OvqkvV18n98xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMRAcAkoZ4LfzsY5gu+x7RwSH2mMB8GA1UdIwQY
MBaAFNKPVUrtf45xRunLY/XjGl2x4bqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZjZiNGYtNzU5MC00ZDA1LTg1M2Mt
MTA2ZWQxNTkwMTI5LzEvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8zZjZiNGYtNzU5MC00ZDA1LTg1M2MtMTA2ZWQxNTkwMTI5
LzEvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF0JE8ff7
cRBQ8dECuk/OZpQEOaMXHmS7tp5yz7du80mTO1XM0yvFWp1K0eq1Flm2HecsPOsb
dFaQUQOPCRvlosn+hFUIypIyd+ApPAhPgSvqWcGN8QVGOOZCsDzGAWJYW5WbO+nX
rJ7X/LmtKbf3GIS5j87ImrcWvtB193jC6q1zU1009LTqFenMK1AHrZAS+LqmduzW
22ip+Umn47lhsARenqMsno9NDUAcFgtjErJnhW8sT0S5ihzZ3kG+d8pWNVNCcJcb
Ze06wJL9zCODUfvR7+JWJ+rWUvqMfOjhucDnGfVSLiVW+i3kI1b/G3FWp9dHoqt7
J2IO1oKokt1/+w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:00 2025 by rpki-client