Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
File: 0eAT7IpcVt8kGpslY9ER-OVDv5E.mft (raw, json)
Hash identifier: kAGlTDransWXFgLWH9Hz8G6ty6lAyEWvz7EISFShRo4=
Subject key identifier: E9:F9:F5:22:84:C5:CB:78:17:1E:92:C3:80:15:F9:DA:7D:5A:64:6D
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 0198D7A9145EBC99DE8EEC3CC6D074561DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
Manifest number: 1664
Signing time: Sat 23 Aug 2025 16:00:38 +0000
Manifest this update: Sat 23 Aug 2025 16:00:38 +0000
Manifest next update: Sun 24 Aug 2025 16:00:38 +0000
Files and hashes: 1: 0eAT7IpcVt8kGpslY9ER-OVDv5E.crl (hash: BJCHLl1WIB52FLkH7aowB9QGSCC9SH45HVi1hS4j27s=)
2: IbNwOiJ1le6Y53Nfy_nDXLnu_e8.roa (hash: WT+RMze0r66BHerB43Jku9h5V4DbQETjQUbfL1+hc8o=)
3: PE9TZdJ8-Lln6kf9d9axXJAbp-c.roa (hash: L+Px9nqboU0pthFP3MQiGwoS0A274PGNuMWfIopTQcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:14:5e:bc:99:de:8e:ec:3c:c6:d0:74:56:1d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Aug 23 16:00:38 2025 GMT
Not After : Aug 24 16:00:38 2025 GMT
Subject: CN=e9f9f52284c5cb78171e92c38015f9da7d5a646d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:99:6f:f6:3e:44:52:4c:35:91:e7:74:8d:
47:97:54:12:2a:bd:51:40:73:fc:4f:1f:5c:14:9e:
de:72:5c:e2:58:9f:94:6a:2d:89:8e:22:84:93:48:
b7:42:0b:6f:0a:b4:da:d6:db:ea:6a:5a:b4:f9:84:
d0:90:8a:f7:89:0d:75:ed:aa:4f:d4:ed:e5:f8:06:
6b:09:98:de:4e:7a:e3:2a:cc:6d:a3:e7:a0:b2:8c:
9e:98:0c:58:e7:7b:82:8c:0b:fb:0f:60:0f:7a:e3:
ab:ab:58:4f:21:75:1a:4f:25:de:4e:10:b4:e5:3e:
97:d4:2e:af:30:49:4c:0c:a0:50:53:46:f1:43:cf:
fb:85:8c:4d:a1:28:25:60:2a:37:84:a0:96:10:85:
12:0a:72:7d:91:93:35:aa:8d:e9:91:bc:70:59:df:
c5:79:6a:af:7a:be:87:54:d9:6e:e8:28:20:cd:2b:
b6:1c:3a:f1:26:ed:a1:5f:6a:ce:77:1b:08:d9:d8:
a9:df:e4:07:e9:c6:8a:34:04:1f:c2:a1:0f:60:1c:
fe:55:4e:6a:87:c6:5e:16:9a:ff:d5:f1:c8:80:8d:
8f:d9:2c:e7:58:d3:35:12:ac:26:96:97:2e:a5:7f:
b5:c6:62:99:16:60:96:11:f5:33:69:e9:9b:82:c8:
be:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F9:F5:22:84:C5:CB:78:17:1E:92:C3:80:15:F9:DA:7D:5A:64:6D
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e9:d6:b2:f4:83:f0:90:da:4d:4c:39:7c:8e:03:26:c8:49:
10:78:2b:e7:5a:d5:57:75:e3:22:81:24:20:a7:ac:9e:a3:42:
38:39:c7:01:26:b3:a1:8f:80:21:6b:48:b3:21:cb:09:1e:12:
d9:7b:a9:17:47:a7:ef:47:c6:02:07:28:ec:c1:81:85:35:09:
ed:59:e2:7f:74:0a:f7:c7:2d:cc:62:fb:b9:ae:2b:58:cf:87:
67:f0:b6:aa:30:e4:3f:06:2b:af:08:1f:1f:4c:34:8d:b0:a7:
ed:c6:27:5e:c5:38:b6:7d:90:97:42:b9:b0:f9:6a:b0:50:7b:
88:53:e9:e8:fd:81:71:0a:fe:3b:bf:4a:7b:9c:0d:88:f8:5d:
8d:b2:61:1b:31:31:1c:c0:57:06:6e:03:9f:ba:d5:d3:6e:68:
36:e4:4b:6a:4d:db:7d:b4:ab:84:28:6a:98:60:83:68:d4:8a:
cd:fc:8b:c4:c5:b4:41:f6:cc:e8:92:b0:c6:49:f3:e1:91:fb:
7b:b6:ec:be:91:f1:44:7c:fa:5e:27:7c:a3:10:07:ec:a4:b0:
0b:0e:34:89:d6:c6:cf:ff:fc:60:e5:37:c7:c7:ed:42:b8:7c:
c0:0a:73:76:71:f5:20:cb:d7:c1:b0:29:21:87:17:ed:ba:8f:
3c:08:f6:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqRRevJnejuw8xtB0Vh37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZTAxM2VjOGE1YzU2ZGYyNDFhOWIyNTYzZDExMWY4ZTU0
M2JmOTEwHhcNMjUwODIzMTYwMDM4WhcNMjUwODI0MTYwMDM4WjAzMTEwLwYDVQQD
EyhlOWY5ZjUyMjg0YzVjYjc4MTcxZTkyYzM4MDE1ZjlkYTdkNWE2NDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmaZb/Y+RFJMNZHndI1Hl1QSKr1R
QHP8Tx9cFJ7eclziWJ+Uai2JjiKEk0i3QgtvCrTa1tvqalq0+YTQkIr3iQ117apP
1O3l+AZrCZjeTnrjKsxto+egsoyemAxY53uCjAv7D2APeuOrq1hPIXUaTyXeThC0
5T6X1C6vMElMDKBQU0bxQ8/7hYxNoSglYCo3hKCWEIUSCnJ9kZM1qo3pkbxwWd/F
eWqver6HVNlu6CggzSu2HDrxJu2hX2rOdxsI2dip3+QH6caKNAQfwqEPYBz+VU5q
h8ZeFpr/1fHIgI2P2SznWNM1EqwmlpcupX+1xmKZFmCWEfUzaembgsi+XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOn59SKExct4Fx6Sw4AV+dp9WmRtMB8GA1UdIwQY
MBaAFNHgE+yKXFbfJBqbJWPREfjlQ7+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQt
NDQwNTI4YzFlNDllLzEvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQtNDQwNTI4YzFlNDll
LzEvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+nWsvSD
8JDaTUw5fI4DJshJEHgr51rVV3XjIoEkIKesnqNCODnHASazoY+AIWtIsyHLCR4S
2XupF0en70fGAgco7MGBhTUJ7Vnif3QK98ctzGL7ua4rWM+HZ/C2qjDkPwYrrwgf
H0w0jbCn7cYnXsU4tn2Ql0K5sPlqsFB7iFPp6P2BcQr+O79Ke5wNiPhdjbJhGzEx
HMBXBm4Dn7rV025oNuRLak3bfbSrhChqmGCDaNSKzfyLxMW0QfbM6JKwxknz4ZH7
e7bsvpHxRHz6Xid8oxAH7KSwCw40idbGz//8YOU3x8ftQrh8wApzdnH1IMvXwbAp
IYcX7bqPPAj2LA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:54 2025 by rpki-client