Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
File: u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json)
Hash identifier: 6xr6kCjFuV0sHcvP2/0POUjWzdWpyFEQUaP4+jl+SKI=
Subject key identifier: 54:58:ED:73:25:2E:3C:A3:D2:20:95:FA:A5:D2:64:38:D1:D2:9E:22
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial: 0198D4A82D97BDDB1AE3D6AAD52B29EC8DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
Manifest number: 1368
Signing time: Sat 23 Aug 2025 02:00:48 +0000
Manifest this update: Sat 23 Aug 2025 02:00:48 +0000
Manifest next update: Sun 24 Aug 2025 02:00:48 +0000
Files and hashes: 1: b3ZtzLlxeNLOehH6AKtYdH5OpTQ.roa (hash: KgbQQ56PF7r41MO3Zy3vYzefbru0LRGx/vG1JD/z6f0=)
2: bW9q1xazXYiVEag1HYCLt--dBC0.roa (hash: wNhTvIanJ1l0YImMDQYRtPwse6zs1La1STbUdSSY9lE=)
3: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: jqsea423RoiFL+nmA1+6molAzwCmKVgU3kQTCUqAVMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:2d:97:bd:db:1a:e3:d6:aa:d5:2b:29:ec:8d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Validity
Not Before: Aug 23 02:00:48 2025 GMT
Not After : Aug 24 02:00:48 2025 GMT
Subject: CN=5458ed73252e3ca3d22095faa5d26438d1d29e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:10:46:6d:3f:66:d1:1d:41:c3:81:4e:1b:f3:
b7:41:62:cf:53:be:78:05:de:a2:dc:84:67:21:f7:
d0:d1:cb:ca:ab:dd:ac:db:c9:4f:a1:21:0c:75:83:
e0:29:6c:ce:7f:e0:4a:9e:5d:a6:5d:f0:13:92:e3:
ae:23:9f:e1:07:26:76:35:ca:5a:da:cd:ba:41:d4:
62:af:de:16:a7:70:5b:2a:6b:02:16:9f:48:29:9f:
fb:b7:83:dd:9c:ba:eb:7c:64:6d:35:d7:c0:99:79:
a4:5f:30:98:07:4d:e1:a1:d9:4d:11:58:51:0b:4c:
24:bc:ae:91:35:22:8c:b2:fa:ac:e7:0f:91:cf:ee:
ab:15:39:14:17:a3:01:77:b1:cf:39:1e:fe:52:4d:
bb:0d:da:2c:f7:eb:3d:25:1a:a1:77:12:2f:00:e9:
f4:1d:62:13:6a:d1:eb:42:33:1b:53:b1:b0:39:1a:
ff:36:3f:53:63:3b:e1:cc:a2:47:97:27:ae:69:28:
b8:5c:0b:ab:81:ee:a6:d5:c0:68:67:4a:93:1e:e1:
f8:b3:2d:ef:37:0d:8f:cb:9e:30:41:38:67:0d:c2:
fd:c3:32:b3:d0:d4:f0:b3:80:ef:a4:87:d8:35:c5:
43:c8:38:86:01:c6:0b:43:4b:27:d4:cc:33:c6:a8:
43:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:58:ED:73:25:2E:3C:A3:D2:20:95:FA:A5:D2:64:38:D1:D2:9E:22
X509v3 Authority Key Identifier:
keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d9:96:57:ab:39:c4:56:7a:53:e7:68:da:6b:2b:e3:60:a4:
d5:c1:88:59:79:d6:40:7d:3e:56:64:09:e9:fb:b8:54:67:f8:
95:f0:db:52:e7:05:5a:06:45:38:1d:5d:eb:36:f8:ae:61:49:
17:8a:54:7f:5e:0a:2b:4d:26:ac:3d:b1:2e:96:e5:7a:30:3d:
d3:27:db:ac:9a:43:10:da:2d:29:8b:72:3f:7f:30:1e:4c:17:
e0:8e:71:e9:f0:4f:c5:cd:5a:27:1f:8e:e3:12:eb:e8:24:24:
71:7f:c8:aa:33:ea:28:13:a4:94:3e:7a:c4:27:67:ba:eb:cf:
d0:0a:83:94:2a:3b:07:0c:68:12:dc:17:94:8b:6a:6d:f2:c5:
5f:15:85:e1:56:f2:c2:aa:51:1d:4a:69:1c:73:e1:77:7a:8f:
a8:f6:7a:4a:06:a0:01:85:90:1c:be:39:94:06:c7:99:dd:c5:
33:f5:ed:6a:5e:bd:5d:c8:9a:c3:aa:4b:11:2a:86:f4:a4:3e:
a1:1f:48:a2:8f:00:6c:b6:89:25:11:bd:d9:ec:c9:c3:22:f6:
56:83:8f:71:e3:ef:52:af:07:91:d3:0a:f4:9d:02:c5:50:d3:
09:0a:f5:d3:e9:0c:0a:4e:a2:2a:a1:fa:a7:73:3a:48:76:3f:
9b:45:fb:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqC2Xvdsa49aq1Ssp7I3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNGEwYWYxNTYzMzJkM2M3ZWNiNTg1ZmFlZTNhOTBkOWJm
MmEwOTYwHhcNMjUwODIzMDIwMDQ4WhcNMjUwODI0MDIwMDQ4WjAzMTEwLwYDVQQD
Eyg1NDU4ZWQ3MzI1MmUzY2EzZDIyMDk1ZmFhNWQyNjQzOGQxZDI5ZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hBGbT9m0R1Bw4FOG/O3QWLPU754
Bd6i3IRnIffQ0cvKq92s28lPoSEMdYPgKWzOf+BKnl2mXfATkuOuI5/hByZ2Ncpa
2s26QdRir94Wp3BbKmsCFp9IKZ/7t4PdnLrrfGRtNdfAmXmkXzCYB03hodlNEVhR
C0wkvK6RNSKMsvqs5w+Rz+6rFTkUF6MBd7HPOR7+Uk27Ddos9+s9JRqhdxIvAOn0
HWITatHrQjMbU7GwORr/Nj9TYzvhzKJHlyeuaSi4XAurge6m1cBoZ0qTHuH4sy3v
Nw2Py54wQThnDcL9wzKz0NTws4DvpIfYNcVDyDiGAcYLQ0sn1MwzxqhDNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRY7XMlLjyj0iCV+qXSZDjR0p4iMB8GA1UdIwQY
MBaAFLtKCvFWMy08fstYX67jqQ2b8qCWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYt
ZjIxMjY2NjcyNWI0LzEvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYtZjIxMjY2NjcyNWI0
LzEvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9mWV6s5
xFZ6U+do2msr42Ck1cGIWXnWQH0+VmQJ6fu4VGf4lfDbUucFWgZFOB1d6zb4rmFJ
F4pUf14KK00mrD2xLpblejA90yfbrJpDENotKYtyP38wHkwX4I5x6fBPxc1aJx+O
4xLr6CQkcX/IqjPqKBOklD56xCdnuuvP0AqDlCo7BwxoEtwXlItqbfLFXxWF4Vby
wqpRHUppHHPhd3qPqPZ6SgagAYWQHL45lAbHmd3FM/Xtal69Xciaw6pLESqG9KQ+
oR9Ioo8AbLaJJRG92ezJwyL2VoOPcePvUq8HkdMK9J0CxVDTCQr10+kMCk6iKqH6
p3M6SHY/m0X7kA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:48 2025 by rpki-client