Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
File: 153OHAWhQ_3YWEdABMR_bzv_90k.mft (raw, json)
Hash identifier: TQjLPT0EZjDU7ZmPeXHIkQnZ3SfLVFRvBCiScD5Bwy4=
Subject key identifier: DD:F0:7D:DB:D8:DB:43:70:AA:21:9F:8A:1D:05:6C:E3:39:35:66:E9
Authority key identifier: D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
Certificate issuer: /CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Certificate serial: 0199FAD7B426270258CBACBC91372DC01362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
Manifest number: 0584
Signing time: Sun 19 Oct 2025 05:01:04 +0000
Manifest this update: Sun 19 Oct 2025 05:01:04 +0000
Manifest next update: Mon 20 Oct 2025 05:01:04 +0000
Files and hashes: 1: 153OHAWhQ_3YWEdABMR_bzv_90k.crl (hash: 9a1CAMgeOxIwXJvaLgwsas+owQMtVD1JhxygvJXJENs=)
2: QB5FpuPpmowESfKF6nGgHMXmFsg.roa (hash: 4U84FI9f905V3/Hwf++fcBDHdTLLsUUQSR6ku8lze+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:b4:26:27:02:58:cb:ac:bc:91:37:2d:c0:13:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Validity
Not Before: Oct 19 05:01:04 2025 GMT
Not After : Oct 20 05:01:04 2025 GMT
Subject: CN=ddf07ddbd8db4370aa219f8a1d056ce3393566e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:56:d4:41:22:4c:61:2b:df:3e:8d:1c:cb:
47:86:cf:60:0c:a8:29:12:07:27:b5:94:97:d1:5a:
b7:9c:22:ae:8f:20:7b:b3:1e:c5:95:3c:42:08:4b:
12:b7:4f:f5:5e:38:03:5c:e3:b2:d1:e3:9f:eb:38:
84:4e:c7:12:20:1a:4b:e2:47:3b:bd:d3:08:83:9d:
9f:8c:94:88:6b:65:b8:6a:32:c1:4e:64:ab:d6:77:
e7:46:e7:4c:2c:3d:8a:ec:66:d1:9f:20:a5:8c:22:
68:40:ef:db:7c:ec:70:4b:69:1a:a7:cb:34:93:80:
cc:a9:bd:98:19:53:d4:1a:4a:0d:bb:95:f3:fd:a4:
88:a3:a9:25:4a:8d:ba:58:50:cd:c0:cc:55:30:90:
66:53:c2:76:2f:43:a0:bb:5c:34:b4:9c:ea:3b:e2:
c3:7e:77:b6:82:6d:66:ee:cc:4a:65:8e:ca:80:8a:
c6:cf:14:c8:33:67:76:67:8e:b7:05:e9:d8:a1:1a:
64:2c:bf:7b:1d:3e:e1:99:28:7f:0f:67:58:a3:1e:
e6:1f:03:a9:be:83:74:46:ed:81:cf:61:01:e5:dc:
e4:a1:82:4a:59:9b:e0:43:1e:21:4b:9e:cb:25:e4:
64:bb:d7:d9:53:de:7e:97:4b:5e:0e:b4:0c:fa:06:
4c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F0:7D:DB:D8:DB:43:70:AA:21:9F:8A:1D:05:6C:E3:39:35:66:E9
X509v3 Authority Key Identifier:
keyid:D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:cb:c9:9f:82:9f:9e:28:e7:54:fe:ff:36:a6:b9:cd:51:43:
b1:a1:c0:a6:e4:b1:33:5a:d4:ae:d2:4d:92:83:0e:46:e1:c4:
9d:51:f8:a1:e4:59:91:e5:9a:e0:be:05:ab:56:51:0c:32:2a:
2b:2a:d9:aa:eb:58:da:fb:5d:c0:31:16:29:30:2d:ed:b9:dd:
38:38:65:0d:64:16:ac:83:81:b5:35:9a:ff:07:38:55:47:d4:
64:28:1f:a4:94:0b:86:f7:6e:af:60:b2:06:a3:e5:da:f0:0e:
cc:c9:f1:dd:ee:12:c1:77:e9:f6:42:bb:2f:09:cc:74:02:cb:
13:4d:e3:90:24:62:6b:25:13:da:a5:47:87:c7:95:6e:0f:14:
7e:0f:7d:29:d5:b8:b6:5f:dc:7c:3b:af:7d:95:fb:58:0f:70:
c7:83:26:31:b0:0a:0f:20:51:85:86:b6:b1:4e:11:0a:c4:85:
a7:8e:ca:7d:72:40:c8:3b:de:b0:0c:5d:df:71:f6:10:78:94:
bf:0a:fb:32:4c:02:64:a2:35:a7:4b:a0:93:57:95:38:b9:28:
91:7a:8b:d1:2a:84:1c:34:14:35:3b:db:49:53:27:d6:fd:33:
09:9c:2f:33:f8:d5:61:2e:9a:e6:0d:79:bc:20:c0:47:6d:b9:
c4:d4:4e:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn617QmJwJYy6y8kTctwBNiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWRjZTFjMDVhMTQzZmRkODU4NDc0MDA0YzQ3ZjZmM2Jm
ZmY3NDkwHhcNMjUxMDE5MDUwMTA0WhcNMjUxMDIwMDUwMTA0WjAzMTEwLwYDVQQD
EyhkZGYwN2RkYmQ4ZGI0MzcwYWEyMTlmOGExZDA1NmNlMzM5MzU2NmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukpW1EEiTGEr3z6NHMtHhs9gDKgp
EgcntZSX0Vq3nCKujyB7sx7FlTxCCEsSt0/1XjgDXOOy0eOf6ziETscSIBpL4kc7
vdMIg52fjJSIa2W4ajLBTmSr1nfnRudMLD2K7GbRnyCljCJoQO/bfOxwS2kap8s0
k4DMqb2YGVPUGkoNu5Xz/aSIo6klSo26WFDNwMxVMJBmU8J2L0Ogu1w0tJzqO+LD
fne2gm1m7sxKZY7KgIrGzxTIM2d2Z463BenYoRpkLL97HT7hmSh/D2dYox7mHwOp
voN0Ru2Bz2EB5dzkoYJKWZvgQx4hS57LJeRku9fZU95+l0teDrQM+gZMPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3wfdvY20NwqiGfih0FbOM5NWbpMB8GA1UdIwQY
MBaAFNedzhwFoUP92FhHQATEf287//dJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTUzT0hBV2hRXzNZV0VkQUJNUl9ienZfOTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zZjk5ZTQtOGRkNS00ZTVmLWJlYWEt
YTc1NjkyOWE4ZGM4LzEvMTUzT0hBV2hRXzNZV0VkQUJNUl9ienZfOTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zZjk5ZTQtOGRkNS00ZTVmLWJlYWEtYTc1NjkyOWE4ZGM4
LzEvMTUzT0hBV2hRXzNZV0VkQUJNUl9ienZfOTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAucvJn4Kf
nijnVP7/Nqa5zVFDsaHApuSxM1rUrtJNkoMORuHEnVH4oeRZkeWa4L4Fq1ZRDDIq
KyrZqutY2vtdwDEWKTAt7bndODhlDWQWrIOBtTWa/wc4VUfUZCgfpJQLhvdur2Cy
BqPl2vAOzMnx3e4SwXfp9kK7LwnMdALLE03jkCRiayUT2qVHh8eVbg8Ufg99KdW4
tl/cfDuvfZX7WA9wx4MmMbAKDyBRhYa2sU4RCsSFp47KfXJAyDvesAxd33H2EHiU
vwr7MkwCZKI1p0ugk1eVOLkokXqL0SqEHDQUNTvbSVMn1v0zCZwvM/jVYS6a5g15
vCDAR225xNRO3Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:19 2025 by rpki-client