Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier: vCETCulv2A26yWt30Om6oLY4XTTLrjV/QmzPcfdKRrk=
Subject key identifier: 61:FF:2E:0C:00:3B:FD:BE:7F:82:58:D1:A7:B6:DF:8D:7A:2A:52:1E
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 0198D54DE12A220AB662999E14248CFABA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number: 1408
Signing time: Sat 23 Aug 2025 05:01:47 +0000
Manifest this update: Sat 23 Aug 2025 05:01:47 +0000
Manifest next update: Sun 24 Aug 2025 05:01:47 +0000
Files and hashes: 1: DczTrrLnDVPPLA9bSnvmxSynfMo.roa (hash: MShemdRXWsyNt1uZQs1+kFCI4xFOutzLz93AyRjtuLo=)
2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: ysqb+GiSZQ9QmduinEHZNvSb8n7RuUlJtCVEipvTxi8=)
3: c4gvx7z4uTdlMuQhlvQQIKAtTuA.roa (hash: /qFGvLOPcacTCYTbqRVu0f4DWWxHlkhfiQJHtYVDsoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e1:2a:22:0a:b6:62:99:9e:14:24:8c:fa:ba:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Aug 23 05:01:47 2025 GMT
Not After : Aug 24 05:01:47 2025 GMT
Subject: CN=61ff2e0c003bfdbe7f8258d1a7b6df8d7a2a521e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:6b:19:8b:88:55:6d:ab:0f:0d:12:12:de:
6c:30:31:f6:3f:a8:b1:82:61:1f:32:39:7a:dd:f1:
3a:12:03:65:1d:51:63:3a:7b:9e:18:99:3a:29:d6:
26:87:14:b9:81:66:13:d9:4b:f4:ad:35:cd:dd:cd:
bd:c3:d1:0c:bd:3b:b7:0f:ba:cc:2d:7e:6a:6e:17:
f5:40:de:78:7b:1f:99:d4:2c:ae:6c:75:aa:6e:bd:
74:f5:7f:d8:73:49:f0:cf:0a:58:c1:ec:98:a9:36:
40:57:c0:c2:47:de:82:cc:f5:51:7c:3d:86:df:f7:
60:82:ce:16:62:7e:8c:71:58:c3:a1:ca:5a:a7:29:
75:5e:52:74:7e:82:f9:e4:b5:9f:60:92:ec:aa:06:
ed:5e:70:2e:c0:37:ae:e5:17:57:e2:17:6c:63:51:
cb:78:c5:07:3a:75:c9:bf:5c:27:20:ec:6a:55:74:
6b:47:8b:ab:53:14:ad:ac:18:2d:20:b2:f1:06:36:
15:95:e3:f0:fa:cc:6f:ad:3d:ef:ee:a1:53:d8:d1:
36:f0:7f:8b:a1:a4:81:26:38:61:c5:7a:c7:1b:eb:
2d:43:30:f9:d7:48:86:51:20:0f:de:e5:89:3a:9c:
e7:27:50:65:04:33:7d:03:4b:e8:08:ee:0a:ec:50:
7c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FF:2E:0C:00:3B:FD:BE:7F:82:58:D1:A7:B6:DF:8D:7A:2A:52:1E
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:67:e3:e2:68:f0:b4:8f:7a:8c:a0:19:31:e3:41:c7:71:f3:
ba:88:44:ab:b0:b8:02:61:ba:13:6d:84:6d:d5:02:5f:e3:50:
b6:f8:06:aa:c7:c3:cf:0b:d8:7a:5c:e2:9f:64:6e:c5:e4:3b:
ea:f9:bb:b4:3d:c5:e1:05:42:05:31:cb:dc:33:fb:80:79:f2:
67:27:d0:2c:c1:b4:be:a8:d9:5e:6d:a3:1e:5c:b2:b2:1d:0b:
d6:bb:27:07:ac:db:a3:36:53:7a:6c:8f:b8:d2:5f:1b:ab:ec:
ff:74:59:99:40:6c:ce:d6:e8:55:ff:f6:aa:7e:0b:72:04:c3:
5e:fc:96:c3:e6:ef:7f:71:b9:61:02:d9:49:5e:a9:65:21:77:
aa:27:2c:c6:38:71:3b:4e:d9:a5:5e:40:0c:17:7e:b0:d1:45:
68:75:01:22:c4:63:47:a4:05:31:d8:83:3b:16:b1:b3:58:43:
48:2a:d4:62:a4:e3:3b:68:3c:75:3d:24:fa:31:d1:43:ef:44:
6d:e9:53:49:fc:4a:a5:8e:b9:7b:a6:b6:58:d0:96:b4:e0:1f:
e3:a2:3b:22:33:65:12:9f:97:b7:bf:df:60:e2:11:b4:b7:e5:
28:43:92:d0:9c:d9:9d:be:54:20:0e:e6:8a:6e:e2:04:90:41:
79:c1:74:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTeEqIgq2YpmeFCSM+roBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWViOWU2OTJiYTllOTNkOGI5NWE2NDg4ZDVjODc1NjA5
ZDRhZWMwHhcNMjUwODIzMDUwMTQ3WhcNMjUwODI0MDUwMTQ3WjAzMTEwLwYDVQQD
Eyg2MWZmMmUwYzAwM2JmZGJlN2Y4MjU4ZDFhN2I2ZGY4ZDdhMmE1MjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDtrGYuIVW2rDw0SEt5sMDH2P6ix
gmEfMjl63fE6EgNlHVFjOnueGJk6KdYmhxS5gWYT2Uv0rTXN3c29w9EMvTu3D7rM
LX5qbhf1QN54ex+Z1CyubHWqbr109X/Yc0nwzwpYweyYqTZAV8DCR96CzPVRfD2G
3/dggs4WYn6McVjDocpapyl1XlJ0foL55LWfYJLsqgbtXnAuwDeu5RdX4hdsY1HL
eMUHOnXJv1wnIOxqVXRrR4urUxStrBgtILLxBjYVlePw+sxvrT3v7qFT2NE28H+L
oaSBJjhhxXrHG+stQzD510iGUSAP3uWJOpznJ1BlBDN9A0voCO4K7FB8awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGH/LgwAO/2+f4JY0ae23416KlIeMB8GA1UdIwQY
MBaAFDruueaSup6T2LlaZIjVyHVgnUrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zZTI1OWItYjZkYy00Y2Y0LWFjMTkt
NTAzM2Y4ZDc5YmU3LzEvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zZTI1OWItYjZkYy00Y2Y0LWFjMTktNTAzM2Y4ZDc5YmU3
LzEvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGfj4mjw
tI96jKAZMeNBx3HzuohEq7C4AmG6E22EbdUCX+NQtvgGqsfDzwvYelzin2RuxeQ7
6vm7tD3F4QVCBTHL3DP7gHnyZyfQLMG0vqjZXm2jHlyysh0L1rsnB6zbozZTemyP
uNJfG6vs/3RZmUBsztboVf/2qn4LcgTDXvyWw+bvf3G5YQLZSV6pZSF3qicsxjhx
O07ZpV5ADBd+sNFFaHUBIsRjR6QFMdiDOxaxs1hDSCrUYqTjO2g8dT0k+jHRQ+9E
belTSfxKpY65e6a2WNCWtOAf46I7IjNlEp+Xt7/fYOIRtLflKEOS0JzZnb5UIA7m
im7iBJBBecF0Fg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:37 2025 by rpki-client