Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
File: x02iHagDioIFQrOvr76qqmZreyc.mft (raw, json)
Hash identifier: ofXcGUXgN6O57TpJklwVUcudDXjFwv5beyoSN0m18yQ=
Subject key identifier: 24:97:86:B5:95:52:0A:0F:26:A9:DA:49:EF:68:BC:7E:96:F2:DE:FA
Authority key identifier: C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
Certificate issuer: /CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Certificate serial: 0198D73ADCD83F4F07466EF747A65FB9B319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
Manifest number: 15DE
Signing time: Sat 23 Aug 2025 14:00:15 +0000
Manifest this update: Sat 23 Aug 2025 14:00:15 +0000
Manifest next update: Sun 24 Aug 2025 14:00:15 +0000
Files and hashes: 1: 2t0GWwoe7mmFS83bQQPX5JNcD34.roa (hash: hxRzouLeq4ys7uUoj+7mRAVC8MeKAFWBUYqAcz4n5d0=)
2: x02iHagDioIFQrOvr76qqmZreyc.crl (hash: 4HutHViMYh8TiBJwEOh0P+teIAlDv2jcKspgCJfP1Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:dc:d8:3f:4f:07:46:6e:f7:47:a6:5f:b9:b3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Validity
Not Before: Aug 23 14:00:15 2025 GMT
Not After : Aug 24 14:00:15 2025 GMT
Subject: CN=249786b595520a0f26a9da49ef68bc7e96f2defa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:56:b1:df:ac:7c:4f:a3:b0:86:9c:5c:7c:f6:
02:2a:84:8a:ba:86:b0:74:b7:6e:c6:16:03:88:f5:
b7:8b:a3:8d:06:97:75:37:36:62:1b:1a:a6:11:cc:
1b:85:a9:ac:70:fe:31:7c:3f:ca:25:52:82:49:e0:
2d:94:8f:1a:2e:6a:3f:b6:2a:86:01:46:6e:43:78:
da:cc:16:7b:35:c0:93:a0:fc:9f:39:ac:33:85:be:
c9:0d:9c:d7:2d:25:39:a4:3c:94:23:d5:01:1f:e5:
20:77:83:01:a7:9f:d0:14:05:00:6e:df:13:f7:20:
21:4c:5c:ba:30:a0:c1:da:96:10:ea:9d:aa:82:0f:
bd:a6:db:6c:f5:02:7a:ba:cf:40:c7:c2:ca:83:c4:
3d:df:ba:17:fa:cc:6f:81:0d:43:02:86:25:b6:b9:
29:4a:9a:26:89:67:9c:31:e6:5c:e6:a9:eb:e3:74:
1a:23:69:f3:50:4d:ef:e9:84:7b:6d:ab:e9:03:ed:
0e:9d:6d:a9:aa:9a:99:e2:4e:1d:ab:b7:5b:dd:2c:
f5:d9:52:67:3b:86:48:21:c4:dd:b2:7c:76:45:29:
92:1d:a4:11:1b:ef:e2:7e:6a:47:46:5b:a4:d2:e2:
7f:11:51:f9:4c:ba:53:e4:48:e2:b5:10:01:95:54:
b6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:97:86:B5:95:52:0A:0F:26:A9:DA:49:EF:68:BC:7E:96:F2:DE:FA
X509v3 Authority Key Identifier:
keyid:C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:86:35:59:55:c5:02:2f:5f:39:84:4a:48:7f:f3:43:ce:96:
d4:60:26:30:5e:0f:53:4a:bd:6c:3c:e4:a5:fe:6a:48:1a:c4:
89:17:21:ac:05:97:90:cd:1e:fa:db:f1:f9:d9:fd:a3:85:9b:
32:ad:0a:e5:9c:e5:1b:13:9d:f8:7d:e4:92:98:cd:40:df:2f:
f7:c4:b1:22:5d:3f:78:61:29:16:1c:b8:c9:c2:1c:1b:31:25:
6e:c0:64:38:0e:c7:c8:b3:34:c8:ec:a2:51:0d:e9:98:c2:6f:
77:40:e7:c5:37:e3:47:39:9d:09:47:b8:1f:21:b2:d9:95:46:
96:77:79:2b:2a:48:78:0f:bf:3d:29:f7:2b:d1:16:57:c2:77:
ea:15:5d:d6:8d:b3:98:73:38:f3:b9:fd:7f:dd:6c:9f:4a:bb:
ec:5c:83:88:65:74:b6:ce:73:c6:83:79:5d:39:16:dc:e7:50:
26:c8:60:6f:25:1a:1c:d3:63:70:b0:1f:ed:3f:47:b4:6c:3b:
c8:63:0a:6b:4d:da:b0:c7:6a:ff:79:03:e5:81:4a:af:c5:12:
37:14:d1:2c:ba:fb:ea:82:ae:aa:9c:cf:e2:51:46:78:1d:40:
4b:6c:ad:83:28:f9:be:12:39:8b:3e:d2:f8:0a:0f:d1:5e:51:
1c:77:4a:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXOtzYP08HRm73R6ZfubMZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NGRhMjFkYTgwMzhhODIwNTQyYjNhZmFmYmVhYWFhNjY2
YjdiMjcwHhcNMjUwODIzMTQwMDE1WhcNMjUwODI0MTQwMDE1WjAzMTEwLwYDVQQD
EygyNDk3ODZiNTk1NTIwYTBmMjZhOWRhNDllZjY4YmM3ZTk2ZjJkZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lax36x8T6OwhpxcfPYCKoSKuoaw
dLduxhYDiPW3i6ONBpd1NzZiGxqmEcwbhamscP4xfD/KJVKCSeAtlI8aLmo/tiqG
AUZuQ3jazBZ7NcCToPyfOawzhb7JDZzXLSU5pDyUI9UBH+Ugd4MBp5/QFAUAbt8T
9yAhTFy6MKDB2pYQ6p2qgg+9ptts9QJ6us9Ax8LKg8Q937oX+sxvgQ1DAoYltrkp
SpomiWecMeZc5qnr43QaI2nzUE3v6YR7bavpA+0OnW2pqpqZ4k4dq7db3Sz12VJn
O4ZIIcTdsnx2RSmSHaQRG+/ifmpHRluk0uJ/EVH5TLpT5EjitRABlVS28QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSXhrWVUgoPJqnaSe9ovH6W8t76MB8GA1UdIwQY
MBaAFMdNoh2oA4qCBUKzr6++qqpma3snMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDAyaUhhZ0Rpb0lGUXJPdnI3NnFxbVpyZXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Zjg0NDQtMmMzZC00NTkyLTk0NTgt
ODAxZDg5ZDczNjZkLzEveDAyaUhhZ0Rpb0lGUXJPdnI3NnFxbVpyZXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80Zjg0NDQtMmMzZC00NTkyLTk0NTgtODAxZDg5ZDczNjZk
LzEveDAyaUhhZ0Rpb0lGUXJPdnI3NnFxbVpyZXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4Y1WVXF
Ai9fOYRKSH/zQ86W1GAmMF4PU0q9bDzkpf5qSBrEiRchrAWXkM0e+tvx+dn9o4Wb
Mq0K5ZzlGxOd+H3kkpjNQN8v98SxIl0/eGEpFhy4ycIcGzElbsBkOA7HyLM0yOyi
UQ3pmMJvd0DnxTfjRzmdCUe4HyGy2ZVGlnd5KypIeA+/PSn3K9EWV8J36hVd1o2z
mHM487n9f91sn0q77FyDiGV0ts5zxoN5XTkW3OdQJshgbyUaHNNjcLAf7T9HtGw7
yGMKa03asMdq/3kD5YFKr8USNxTRLLr76oKuqpzP4lFGeB1AS2ytgyj5vhI5iz7S
+AoP0V5RHHdKeQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:22:08 2025 by rpki-client