Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
File: O_zNSgBCLIZfUJO4W7howrswxGk.mft (raw, json)
Hash identifier: 5JqAVJaLK26ZN0b9EHxXwsopo5/fgUlmtMCFLRpYx0M=
Subject key identifier: D2:D8:B9:EC:50:E2:98:7D:21:AE:91:32:6C:3F:51:7D:C6:87:14:4E
Authority key identifier: 3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
Certificate issuer: /CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Certificate serial: 0198D705BAFE763284C4F2C8307E0CE965F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 13:02:13 +0000
Manifest this update: Sat 23 Aug 2025 13:02:13 +0000
Manifest next update: Sun 24 Aug 2025 13:02:13 +0000
Files and hashes: 1: 3U1ZWgNoASiRwWRzOTs9a26_aSI.roa (hash: rfiPEMHu4Dy2ke39aiCtx6HNVMRJPDS81QuXHyTH8CQ=)
2: O_zNSgBCLIZfUJO4W7howrswxGk.crl (hash: SB0T1Hd1y0Vk5N1bbUNRSByeyW7ALxHn1rEJTIHVOYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:ba:fe:76:32:84:c4:f2:c8:30:7e:0c:e9:65:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Validity
Not Before: Aug 23 13:02:13 2025 GMT
Not After : Aug 24 13:02:13 2025 GMT
Subject: CN=d2d8b9ec50e2987d21ae91326c3f517dc687144e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a0:08:ed:69:e3:fd:8e:5c:92:41:13:52:16:
d9:cc:d0:bf:c8:33:c6:ab:f3:c6:df:fa:fc:17:bb:
91:9f:7d:2d:f9:44:54:25:56:fd:26:a2:af:e5:ca:
80:2e:d1:37:f4:ce:1f:8c:2f:3c:47:81:3b:64:68:
68:9f:a1:2a:4e:a7:20:34:16:2f:73:2e:79:08:d7:
79:b9:07:c9:47:26:63:02:ef:c3:2e:bb:9a:9b:8f:
a9:3f:ea:0b:bf:ce:d6:e4:97:94:f5:c2:70:2b:d5:
61:e3:9c:66:50:a2:88:c6:b5:0d:e6:c3:b9:de:43:
05:23:ff:9c:83:9e:74:50:b8:9d:cc:f4:77:9c:d8:
f8:97:7d:d4:5f:d4:a1:94:b3:40:79:53:f4:6c:33:
0f:7d:b9:ff:ff:d4:e9:57:db:72:8e:da:f5:00:c5:
ae:48:f3:3c:e1:4d:f4:a0:8e:39:9d:e9:7e:94:4a:
43:94:fe:e4:3c:e0:0e:e2:84:12:64:66:fc:3e:22:
2a:e9:67:09:92:a3:0e:52:9f:64:d8:33:e4:3d:f1:
e0:2a:46:78:dd:03:40:3a:62:28:75:9e:15:1c:6d:
33:85:b4:f3:bb:78:1f:0f:4a:ac:9f:01:4f:23:ab:
70:41:66:06:03:e7:4f:f7:c0:a7:7d:a8:f3:b4:98:
69:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D8:B9:EC:50:E2:98:7D:21:AE:91:32:6C:3F:51:7D:C6:87:14:4E
X509v3 Authority Key Identifier:
keyid:3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7b:72:48:17:06:60:3a:b5:ea:10:6d:2b:9b:cc:e5:5e:95:
18:90:cb:e9:9b:1f:a6:af:8a:b0:a9:24:07:de:08:bb:fc:c2:
c7:e0:28:dc:47:b7:f3:76:25:03:76:44:7d:db:d7:0a:9f:b4:
f0:38:99:0c:4b:65:5a:d0:b0:b0:ad:3c:09:8f:ca:9e:f6:dc:
29:85:86:1b:67:2e:c8:57:de:e8:20:d2:e9:83:28:b0:4f:d3:
08:fb:5a:f7:cc:77:3d:c8:7a:5a:cb:9d:d9:0c:bf:6d:2d:2a:
5d:9b:61:64:b2:2a:8d:51:59:31:7b:f6:76:d3:28:f0:62:67:
74:3e:80:7d:ee:32:d6:91:63:06:ed:f5:5a:ef:3c:c2:a0:fb:
81:e9:f2:24:5d:90:60:66:67:63:b5:0d:e9:56:3c:f9:40:da:
18:e0:07:4c:4f:f3:67:b9:1b:f4:5e:13:8c:fb:37:b6:5f:af:
c8:75:62:d9:97:00:ca:9d:96:0e:27:fb:6f:55:e9:66:ae:ef:
a8:b2:d1:23:47:42:85:45:d7:a6:40:1f:af:a8:96:9b:7c:9a:
3d:70:32:60:a7:89:9b:15:3a:87:dd:39:8b:ac:17:1c:03:43:
b1:93:aa:4c:1a:00:a5:ee:e7:4b:9f:a8:1c:a9:90:39:34:36:
6d:8e:10:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBbr+djKExPLIMH4M6WXyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZmNjZDRhMDA0MjJjODY1ZjUwOTNiODViYjg2OGMyYmIz
MGM0NjkwHhcNMjUwODIzMTMwMjEzWhcNMjUwODI0MTMwMjEzWjAzMTEwLwYDVQQD
EyhkMmQ4YjllYzUwZTI5ODdkMjFhZTkxMzI2YzNmNTE3ZGM2ODcxNDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6AI7Wnj/Y5ckkETUhbZzNC/yDPG
q/PG3/r8F7uRn30t+URUJVb9JqKv5cqALtE39M4fjC88R4E7ZGhon6EqTqcgNBYv
cy55CNd5uQfJRyZjAu/DLruam4+pP+oLv87W5JeU9cJwK9Vh45xmUKKIxrUN5sO5
3kMFI/+cg550ULidzPR3nNj4l33UX9ShlLNAeVP0bDMPfbn//9TpV9tyjtr1AMWu
SPM84U30oI45nel+lEpDlP7kPOAO4oQSZGb8PiIq6WcJkqMOUp9k2DPkPfHgKkZ4
3QNAOmIodZ4VHG0zhbTzu3gfD0qsnwFPI6twQWYGA+dP98CnfajztJhpGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLYuexQ4ph9Ia6RMmw/UX3GhxROMB8GA1UdIwQY
MBaAFDv8zUoAQiyGX1CTuFu4aMK7MMRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT196TlNnQkNMSVpmVUpPNFc3aG93cnN3eEdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYTcwZjItYjdhYy00MzQ2LTlkMDgt
NjNhZTBiZmMxNjlmLzEvT196TlNnQkNMSVpmVUpPNFc3aG93cnN3eEdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9iYTcwZjItYjdhYy00MzQ2LTlkMDgtNjNhZTBiZmMxNjlm
LzEvT196TlNnQkNMSVpmVUpPNFc3aG93cnN3eEdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3tySBcG
YDq16hBtK5vM5V6VGJDL6Zsfpq+KsKkkB94Iu/zCx+Ao3Ee383YlA3ZEfdvXCp+0
8DiZDEtlWtCwsK08CY/KnvbcKYWGG2cuyFfe6CDS6YMosE/TCPta98x3Pch6Wsud
2Qy/bS0qXZthZLIqjVFZMXv2dtMo8GJndD6Afe4y1pFjBu31Wu88wqD7genyJF2Q
YGZnY7UN6VY8+UDaGOAHTE/zZ7kb9F4TjPs3tl+vyHVi2ZcAyp2WDif7b1XpZq7v
qLLRI0dChUXXpkAfr6iWm3yaPXAyYKeJmxU6h905i6wXHANDsZOqTBoApe7nS5+o
HKmQOTQ2bY4QqA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:31:05 2025 by rpki-client