Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
File: 0H3DXrzYjdDiqNs6WghlS8O-AmI.mft (raw, json)
Hash identifier: Fo5EpbnEMiYH+LJGPH0JtysCg82wVP/cmoBcTlkhkGk=
Subject key identifier: 92:36:EE:9E:76:8A:DB:11:4A:7A:4B:5D:BA:55:37:16:C8:9D:A3:3E
Authority key identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
Certificate issuer: /CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Certificate serial: 0198D404931ADA1AE711841ADA7F9DDDB104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
Manifest number: 1649
Signing time: Fri 22 Aug 2025 23:02:06 +0000
Manifest this update: Fri 22 Aug 2025 23:02:06 +0000
Manifest next update: Sat 23 Aug 2025 23:02:06 +0000
Files and hashes: 1: 0H3DXrzYjdDiqNs6WghlS8O-AmI.crl (hash: J+XGADxRjlJMqUzCcfCho6tyJlDavzC7QLhffRgDY80=)
2: UtfGmlfffX0cIYFRWQAmKmCxHBQ.roa (hash: eIoevFtzl4KgjvBzeT/oQJHdGPIhlQ4d3q4XFG6eYig=)
3: pkGGNBdhq4ZpQRqIZMsggNSolf0.roa (hash: y34zQyNQE6Dt9rgo+TKZCABmiXucQM6cXI6cZVCrI5E=)
4: qMKz0iOTV-AipsqG6OSykAqBmcw.roa (hash: evn2bcSDR90liMyPkIBPgdH2fICEje6rbDEpXsqQ5bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:93:1a:da:1a:e7:11:84:1a:da:7f:9d:dd:b1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Validity
Not Before: Aug 22 23:02:06 2025 GMT
Not After : Aug 23 23:02:06 2025 GMT
Subject: CN=9236ee9e768adb114a7a4b5dba553716c89da33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:84:cf:e9:b3:45:29:7d:32:28:6e:42:b7:
73:35:d5:d1:b7:72:29:98:5d:b2:2e:aa:8d:10:cb:
ac:ab:ef:42:5b:df:26:f5:15:4b:ec:c8:fc:b9:24:
55:d0:d3:8f:ac:8c:2f:08:ec:6f:61:3f:e7:41:9a:
52:ac:f6:5e:2f:13:bf:ec:db:2a:74:31:66:40:0e:
0c:93:90:40:c2:bd:ec:e3:c0:87:a6:f9:62:0e:6a:
5f:7d:8b:34:35:bc:fd:40:4a:ba:f5:89:3a:52:6c:
89:ba:85:b0:dc:a9:63:c9:bf:ff:17:9e:b9:78:f4:
06:24:60:83:35:ad:38:9a:ed:eb:b4:66:94:48:09:
4e:7f:02:fc:0c:8d:90:f1:ff:bd:f8:98:29:f1:91:
8a:c4:7c:e6:00:72:49:4c:bc:ea:76:c6:b4:10:60:
30:cf:ea:a2:16:5d:1a:bf:69:b9:1b:7e:dd:b1:17:
56:92:af:43:6c:f7:01:d6:ad:f7:98:4f:31:5e:61:
f5:80:04:59:76:8a:46:10:44:0b:38:07:80:a7:96:
48:33:84:58:d0:90:3d:56:8b:7c:bb:6e:65:9a:5e:
5f:ab:86:c1:8e:66:11:93:73:9d:8c:93:e4:ba:95:
2d:95:54:15:1e:12:8b:86:ab:32:b9:21:fe:79:3e:
71:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:36:EE:9E:76:8A:DB:11:4A:7A:4B:5D:BA:55:37:16:C8:9D:A3:3E
X509v3 Authority Key Identifier:
keyid:D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:46:b3:95:6b:4f:0d:76:8d:0a:0d:93:8e:51:40:5d:ff:71:
8c:d9:ce:b8:e8:71:4a:68:a2:ad:7d:8f:55:4f:0d:e5:9f:bc:
57:cc:4e:c1:15:ee:ec:97:49:e3:36:1e:97:7c:fa:cb:8c:2d:
e1:21:4d:0e:49:d1:1f:d0:2d:c5:8d:fd:54:1f:6a:65:25:b3:
f2:76:88:24:d4:f4:5a:b6:ff:9d:9e:22:51:e0:2c:3d:ff:78:
d3:26:bb:a1:b3:2d:25:17:8d:c8:61:69:9c:c9:e2:8c:89:1e:
b0:0c:a5:8e:51:70:93:05:f1:c8:32:a6:f4:cc:d8:ff:f9:88:
fe:04:89:13:96:38:22:d5:bd:6a:49:13:92:a4:19:10:76:23:
fe:28:bc:49:01:b3:4b:94:ff:e5:16:f0:93:0d:a5:55:03:68:
3f:f1:8c:6b:ae:01:d8:0f:52:b4:cc:02:b2:f3:f6:71:7a:40:
a4:b6:00:ec:c8:0b:bd:57:b0:f8:bb:66:74:6f:73:f1:ec:9d:
1a:38:a9:c5:ac:22:c2:9a:39:cc:fa:e9:1b:81:5c:bf:74:f5:
95:8f:8b:e5:91:f5:5f:b3:58:0b:54:a4:dd:4f:dd:ed:20:97:
10:1e:de:a9:7d:88:33:e0:80:0b:20:93:2c:fa:95:92:d5:dd:
6a:55:dc:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBJMa2hrnEYQa2n+d3bEEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwN2RjMzVlYmNkODhkZDBlMmE4ZGIzYTVhMDg2NTRiYzNi
ZTAyNjIwHhcNMjUwODIyMjMwMjA2WhcNMjUwODIzMjMwMjA2WjAzMTEwLwYDVQQD
Eyg5MjM2ZWU5ZTc2OGFkYjExNGE3YTRiNWRiYTU1MzcxNmM4OWRhMzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNOEz+mzRSl9MihuQrdzNdXRt3Ip
mF2yLqqNEMusq+9CW98m9RVL7Mj8uSRV0NOPrIwvCOxvYT/nQZpSrPZeLxO/7Nsq
dDFmQA4Mk5BAwr3s48CHpvliDmpffYs0Nbz9QEq69Yk6UmyJuoWw3Kljyb//F565
ePQGJGCDNa04mu3rtGaUSAlOfwL8DI2Q8f+9+Jgp8ZGKxHzmAHJJTLzqdsa0EGAw
z+qiFl0av2m5G37dsRdWkq9DbPcB1q33mE8xXmH1gARZdopGEEQLOAeAp5ZIM4RY
0JA9Vot8u25lml5fq4bBjmYRk3OdjJPkupUtlVQVHhKLhqsyuSH+eT5xUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJI27p52itsRSnpLXbpVNxbInaM+MB8GA1UdIwQY
MBaAFNB9w1682I3Q4qjbOloIZUvDvgJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEgzRFhyellqZERpcU5zNldnaGxTOE8tQW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8xYzcxOGQtZTdhMC00MGFjLWExODEt
Y2JhYTQyYTYyNzI3LzEvMEgzRFhyellqZERpcU5zNldnaGxTOE8tQW1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8xYzcxOGQtZTdhMC00MGFjLWExODEtY2JhYTQyYTYyNzI3
LzEvMEgzRFhyellqZERpcU5zNldnaGxTOE8tQW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUazlWtP
DXaNCg2TjlFAXf9xjNnOuOhxSmiirX2PVU8N5Z+8V8xOwRXu7JdJ4zYel3z6y4wt
4SFNDknRH9AtxY39VB9qZSWz8naIJNT0Wrb/nZ4iUeAsPf940ya7obMtJReNyGFp
nMnijIkesAyljlFwkwXxyDKm9MzY//mI/gSJE5Y4ItW9akkTkqQZEHYj/ii8SQGz
S5T/5Rbwkw2lVQNoP/GMa64B2A9StMwCsvP2cXpApLYA7MgLvVew+LtmdG9z8eyd
Gjipxawiwpo5zPrpG4Fcv3T1lY+L5ZH1X7NYC1Sk3U/d7SCXEB7eqX2IM+CACyCT
LPqVktXdalXcZw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:23 2025 by rpki-client