Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: 3cx2H69A873UdBV+xgS6KMzmDDtwv9HB/b3ZwDUZrlI=
Subject key identifier: 91:8F:7F:F2:2C:01:40:91:E2:6B:B3:79:33:21:2D:CD:05:BD:E3:56
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 0198D54E152B525D9EFBEAB7C9E4A6FBDF66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 05:02:00 +0000
Manifest this update: Sat 23 Aug 2025 05:02:00 +0000
Manifest next update: Sun 24 Aug 2025 05:02:00 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: aB4WFG12LZAlVQdp3HYXS+P8sStFg5ESnXjq8Qm0Uaw=)
2: MdxC1FpXyou6qJ-H7tes_6P5FSc.roa (hash: ZUSlUkca9mxVmO+TnlseEQ+rjBytm8k8h+/zCW79zek=)
3: u73MqPatc0TpxI-ub7E_BjZdR0A.roa (hash: Va28jPu1gwk8ly85dp8PE1WNkUFlIH8BlQN3xkzDe74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:15:2b:52:5d:9e:fb:ea:b7:c9:e4:a6:fb:df:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Aug 23 05:02:00 2025 GMT
Not After : Aug 24 05:02:00 2025 GMT
Subject: CN=918f7ff22c014091e26bb37933212dcd05bde356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:28:c0:c8:ad:de:44:0a:82:4b:c1:95:b5:2c:
59:ed:98:c0:e3:9f:2d:42:ac:16:32:87:0f:0a:98:
2b:d6:40:a7:52:9d:d3:b4:02:e3:81:63:91:53:34:
62:04:6e:3d:80:63:0c:0d:57:36:bd:c0:3c:8d:b3:
ae:4f:49:9d:96:67:ac:4a:f4:4f:bd:a1:7f:d2:7f:
bd:2e:9b:76:0c:ef:62:3c:33:b8:6f:26:30:83:ad:
cf:bf:61:b9:ff:2a:74:a6:4b:eb:91:c4:f7:e7:07:
51:fe:8a:9a:b5:22:a9:7b:39:d4:40:e7:ca:92:f4:
4a:ec:10:7d:7b:37:f8:37:d9:66:33:d5:53:a9:76:
12:6c:9c:db:a3:10:fc:e2:49:e5:1a:ab:91:63:5d:
e7:a1:7d:b0:f4:1f:19:1c:dd:c5:05:44:28:48:e3:
42:0e:70:7b:86:49:fc:19:5c:31:01:cc:b5:76:b8:
05:54:30:31:d7:2a:32:af:68:ad:b8:80:4b:87:09:
d4:ee:4a:14:45:a7:c0:4a:69:41:2b:33:5a:51:92:
79:88:41:6f:60:1e:de:37:16:19:74:af:7e:a6:c8:
29:53:32:18:38:45:56:f2:27:fc:f0:09:4b:36:5f:
d5:48:8d:f2:bb:7a:42:09:f5:fa:d6:01:d7:82:08:
c0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8F:7F:F2:2C:01:40:91:E2:6B:B3:79:33:21:2D:CD:05:BD:E3:56
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:30:69:ed:8a:64:b0:20:27:93:a7:f8:57:79:84:bf:23:2f:
3b:fd:30:c1:1f:6c:55:5c:18:b0:e7:d3:08:ac:e5:f7:0c:c1:
5e:4f:8b:cf:15:93:a0:1d:5b:8d:12:9f:e2:8a:63:e9:5d:b0:
62:01:d9:97:d0:02:8e:e1:ac:5d:f8:07:8f:2d:53:ef:3d:a7:
68:25:8b:ab:82:47:0f:db:e2:95:0d:4e:2f:e8:4c:12:34:f1:
e8:ed:3f:b5:8c:d6:7e:25:f2:0b:dd:ea:62:62:a6:4e:34:80:
3a:56:1d:aa:ca:35:52:f8:d9:13:a4:db:50:07:60:50:49:00:
55:48:1a:48:ad:70:3e:19:a3:40:84:4b:d0:8d:6a:e1:ce:e2:
b7:a9:f3:c4:15:a3:be:87:e0:1b:f7:3d:ef:36:f9:f4:af:3d:
93:f7:dd:90:a5:9f:c2:45:59:68:21:69:3c:2f:b6:70:4f:84:
a6:34:5d:32:9a:13:30:cf:87:3b:96:a7:bc:34:56:84:44:57:
82:2b:01:05:27:17:9f:93:ab:8d:ea:3c:3c:d3:43:bc:d4:ff:
84:ab:d2:0c:78:62:cb:60:42:9a:82:7e:58:13:78:8d:d2:a9:
1f:55:42:26:7f:76:c4:50:8c:08:00:e1:4a:56:21:a0:f5:82:
ad:3e:ba:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVThUrUl2e++q3yeSm+99mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzcwODA5OWY3YTIwNTU2NGI1ZjhlMDVkMjE3YmQyZmFl
NGRlODgwHhcNMjUwODIzMDUwMjAwWhcNMjUwODI0MDUwMjAwWjAzMTEwLwYDVQQD
Eyg5MThmN2ZmMjJjMDE0MDkxZTI2YmIzNzkzMzIxMmRjZDA1YmRlMzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyjAyK3eRAqCS8GVtSxZ7ZjA458t
QqwWMocPCpgr1kCnUp3TtALjgWORUzRiBG49gGMMDVc2vcA8jbOuT0mdlmesSvRP
vaF/0n+9Lpt2DO9iPDO4byYwg63Pv2G5/yp0pkvrkcT35wdR/oqatSKpeznUQOfK
kvRK7BB9ezf4N9lmM9VTqXYSbJzboxD84knlGquRY13noX2w9B8ZHN3FBUQoSONC
DnB7hkn8GVwxAcy1drgFVDAx1yoyr2ituIBLhwnU7koURafASmlBKzNaUZJ5iEFv
YB7eNxYZdK9+psgpUzIYOEVW8if88AlLNl/VSI3yu3pCCfX61gHXggjAtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGPf/IsAUCR4muzeTMhLc0FveNWMB8GA1UdIwQY
MBaAFNI3CAmfeiBVZLX44F0he9L65N6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMWI1YWYtYjc3Ny00YjU5LWE1YjIt
NWU5N2Y0YTUxMmU1LzEvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8wMWI1YWYtYjc3Ny00YjU5LWE1YjItNWU5N2Y0YTUxMmU1
LzEvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTBp7Ypk
sCAnk6f4V3mEvyMvO/0wwR9sVVwYsOfTCKzl9wzBXk+LzxWToB1bjRKf4opj6V2w
YgHZl9ACjuGsXfgHjy1T7z2naCWLq4JHD9vilQ1OL+hMEjTx6O0/tYzWfiXyC93q
YmKmTjSAOlYdqso1UvjZE6TbUAdgUEkAVUgaSK1wPhmjQIRL0I1q4c7it6nzxBWj
vofgG/c97zb59K89k/fdkKWfwkVZaCFpPC+2cE+EpjRdMpoTMM+HO5anvDRWhERX
gisBBScXn5Orjeo8PNNDvNT/hKvSDHhiy2BCmoJ+WBN4jdKpH1VCJn92xFCMCADh
SlYhoPWCrT66WQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:53 2025 by rpki-client