Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
File: oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json)
Hash identifier: kBF6nQYOqhtdgQTqr/iASdOb+51y9E68+Fc4a65LUKk=
Subject key identifier: C9:92:1A:F0:23:B4:2F:4E:02:C8:37:8C:54:FD:60:C6:E2:B9:BC:40
Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
Certificate issuer: /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Certificate serial: 0198D4E09B36AC2418A9807D88C5F0514F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
Manifest number: 10F0
Signing time: Sat 23 Aug 2025 03:02:26 +0000
Manifest this update: Sat 23 Aug 2025 03:02:26 +0000
Manifest next update: Sun 24 Aug 2025 03:02:26 +0000
Files and hashes: 1: AItoBBXTr3JSVEunHoKYVScHBBA.roa (hash: bQ8pPRnSjhK+OHhk4/Jjzl0/46sUTmdeipylWtU4pOg=)
2: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: lhaKLutxUIf8rq/cxxQXm10x1ayA+52rE88l99fRuwY=)
3: ublcR1AG8bTtIDegIl4XF5yKZ2U.roa (hash: EReps1m4UdW66UXSYxPeRRxVic46xc68n57xt40fmWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:9b:36:ac:24:18:a9:80:7d:88:c5:f0:51:4f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Validity
Not Before: Aug 23 03:02:26 2025 GMT
Not After : Aug 24 03:02:26 2025 GMT
Subject: CN=c9921af023b42f4e02c8378c54fd60c6e2b9bc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e3:21:31:4c:21:4c:d4:42:99:f9:2e:03:fc:
cc:82:6d:da:76:db:7b:51:51:29:79:b1:22:c9:75:
f5:e7:fd:c6:c0:5f:44:ec:fa:8e:6c:6f:5b:91:92:
09:28:0b:54:45:94:3a:04:14:73:41:77:63:73:6a:
b3:5a:40:1d:b7:db:6c:86:d6:8b:b9:aa:bf:c0:23:
04:2a:30:c4:e2:76:2f:e3:8f:06:9d:22:b6:7c:6a:
b6:a6:62:48:00:54:f1:93:f2:04:b4:b2:ea:42:af:
a2:4f:ba:61:3c:de:98:eb:e4:74:3d:55:ae:3b:4a:
d5:21:6d:c5:eb:1f:83:4e:78:b9:56:40:eb:77:6d:
53:99:11:e3:0a:11:2b:d5:1f:43:db:49:34:28:e8:
2a:23:01:d7:8b:26:a0:88:d1:f8:11:1c:68:c3:9d:
57:ef:15:18:ec:32:e6:87:08:8c:bd:83:f6:4e:84:
cc:a6:4f:ef:d5:f6:25:34:68:14:2f:ef:0f:73:29:
d1:3a:73:af:1d:00:e0:1c:a6:b2:d6:be:37:74:68:
c2:b6:4e:af:b1:c0:4d:9b:fa:cd:3c:43:90:c2:71:
97:42:26:66:85:9a:9c:22:13:4d:7a:8f:09:05:7e:
4c:bc:76:02:b2:74:d8:d5:e0:a6:4b:db:92:12:a3:
a6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:92:1A:F0:23:B4:2F:4E:02:C8:37:8C:54:FD:60:C6:E2:B9:BC:40
X509v3 Authority Key Identifier:
keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:38:b1:5e:5c:d5:85:a0:10:b0:45:71:c4:28:0d:02:32:bb:
d4:79:70:db:2a:30:f7:f6:d6:9a:e1:db:eb:d4:32:b2:1b:75:
96:e0:f7:4b:bc:12:d3:3b:76:40:33:40:48:03:27:ea:80:e3:
36:16:a2:a1:2a:9f:69:8a:ab:ec:35:29:28:f7:06:f9:e3:ac:
50:39:3f:f0:d5:61:ea:1a:0f:4e:56:90:21:d9:6c:4d:36:40:
b3:b0:7b:7a:99:20:6b:22:48:59:a1:5b:1b:bd:c0:d3:91:46:
de:d0:a0:40:c5:85:65:4e:8e:84:a2:95:b3:b9:9d:37:43:1c:
a5:95:31:c5:e6:30:9c:23:89:03:05:20:dc:31:26:ca:de:49:
76:b9:65:e4:af:a6:68:61:a1:39:0f:4c:09:e1:d2:92:aa:e0:
40:71:a4:dd:b0:47:5d:6f:47:1d:1d:64:4c:69:09:6f:5a:fa:
82:14:8d:4c:c6:5e:9d:bf:6d:83:17:bf:2c:18:aa:ee:cb:5c:
b4:b3:41:76:8e:fb:7d:04:60:b2:af:08:42:23:92:08:93:25:
b0:f5:9f:ba:6b:a6:77:e2:fc:bf:03:61:44:7d:90:2d:6c:d4:
ac:3a:89:bf:2a:d2:79:36:d6:70:9f:77:97:36:c9:fb:d6:dc:
17:86:4a:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4Js2rCQYqYB9iMXwUU8aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZGJkNWQxZjg2ZGQ5ZGQ2NjYwNmExNGQzMWQ2NGNiMGVh
YWM4M2IwHhcNMjUwODIzMDMwMjI2WhcNMjUwODI0MDMwMjI2WjAzMTEwLwYDVQQD
EyhjOTkyMWFmMDIzYjQyZjRlMDJjODM3OGM1NGZkNjBjNmUyYjliYzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+MhMUwhTNRCmfkuA/zMgm3adtt7
UVEpebEiyXX15/3GwF9E7PqObG9bkZIJKAtURZQ6BBRzQXdjc2qzWkAdt9tshtaL
uaq/wCMEKjDE4nYv448GnSK2fGq2pmJIAFTxk/IEtLLqQq+iT7phPN6Y6+R0PVWu
O0rVIW3F6x+DTni5VkDrd21TmRHjChEr1R9D20k0KOgqIwHXiyagiNH4ERxow51X
7xUY7DLmhwiMvYP2ToTMpk/v1fYlNGgUL+8PcynROnOvHQDgHKay1r43dGjCtk6v
scBNm/rNPEOQwnGXQiZmhZqcIhNNeo8JBX5MvHYCsnTY1eCmS9uSEqOmmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmSGvAjtC9OAsg3jFT9YMbiubxAMB8GA1UdIwQY
MBaAFKDb1dH4bdndZmBqFNMdZMsOqsg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb052VjBmaHQyZDFtWUdvVTB4MWt5dzZxeURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xZDRjZmMtOGU1Yy00NTdjLTk2MjAt
MTM1YzkxZWMxOTllLzEvb052VjBmaHQyZDFtWUdvVTB4MWt5dzZxeURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xZDRjZmMtOGU1Yy00NTdjLTk2MjAtMTM1YzkxZWMxOTll
LzEvb052VjBmaHQyZDFtWUdvVTB4MWt5dzZxeURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTixXlzV
haAQsEVxxCgNAjK71Hlw2yow9/bWmuHb69Qysht1luD3S7wS0zt2QDNASAMn6oDj
NhaioSqfaYqr7DUpKPcG+eOsUDk/8NVh6hoPTlaQIdlsTTZAs7B7epkgayJIWaFb
G73A05FG3tCgQMWFZU6OhKKVs7mdN0McpZUxxeYwnCOJAwUg3DEmyt5Jdrll5K+m
aGGhOQ9MCeHSkqrgQHGk3bBHXW9HHR1kTGkJb1r6ghSNTMZenb9tgxe/LBiq7stc
tLNBdo77fQRgsq8IQiOSCJMlsPWfumumd+L8vwNhRH2QLWzUrDqJvyrSeTbWcJ93
lzbJ+9bcF4ZK2Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:10 2025 by rpki-client