Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
File: Onb8XJAQtBEZymjca5lQul_3Mn4.mft (raw, json)
Hash identifier: VVZyXUufayq6ZZ2vAYxCHUMAXOnNeOlX6BFYJHAh+vw=
Subject key identifier: 19:05:EC:2C:40:B5:F1:C0:EF:27:D4:23:7D:D4:BE:DD:C4:41:FD:9E
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial: 0198D85032CB2B1FD338F6090DA06A605AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
Manifest number: 1027
Signing time: Sat 23 Aug 2025 19:03:11 +0000
Manifest this update: Sat 23 Aug 2025 19:03:11 +0000
Manifest next update: Sun 24 Aug 2025 19:03:11 +0000
Files and hashes: 1: Onb8XJAQtBEZymjca5lQul_3Mn4.crl (hash: UbPEszyQ6+1Dv/DgV57iO97bZVIPP1fBQgHsfgCKfJc=)
2: aLeS6kJNMMsXR_fWm4nfBJc0RbY.roa (hash: 2eZg5Esd5JZxUzRdKZEfMd9ilMWbL+Zmx8dFdFF5esA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:32:cb:2b:1f:d3:38:f6:09:0d:a0:6a:60:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Validity
Not Before: Aug 23 19:03:11 2025 GMT
Not After : Aug 24 19:03:11 2025 GMT
Subject: CN=1905ec2c40b5f1c0ef27d4237dd4beddc441fd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:77:d9:d3:17:c0:b3:04:b0:5a:86:10:0a:
f3:8f:d5:16:ca:2e:79:6c:c9:6c:83:8b:0f:a1:4f:
e7:c4:f2:17:e8:25:13:35:b2:20:77:2d:06:f8:58:
db:b3:01:12:1b:8b:bd:b9:b8:44:26:f4:fb:66:7d:
cd:df:a1:13:43:6c:f2:53:c7:cc:1b:b3:b9:57:74:
aa:18:87:93:db:80:70:ed:6d:35:1b:ac:90:d0:81:
49:e4:c2:59:11:0f:aa:3c:83:06:44:0f:11:2f:d3:
e1:86:80:14:17:3a:db:88:6c:e7:35:5a:fe:11:86:
9c:52:32:b1:3f:64:69:d5:9a:b1:ae:98:e4:fe:b5:
f2:94:a2:2d:12:f8:b8:4a:08:97:ca:d2:30:67:a2:
fd:6f:ba:80:d2:c0:2a:7c:16:56:34:ea:a7:98:13:
78:13:6a:fb:ba:1e:f5:2f:ab:ec:8a:de:22:6d:0c:
82:74:fb:f4:b0:91:66:6d:01:c1:c6:2f:79:11:df:
92:6c:85:fa:ed:7f:76:e1:c8:e5:1f:eb:7c:d1:f2:
72:16:4e:a7:0f:fd:bb:df:45:01:fc:32:00:dd:96:
5f:70:2b:d7:1f:4f:dc:84:0d:77:31:4a:10:af:c5:
15:48:25:1a:93:08:9f:bc:d5:cf:e1:ce:ad:69:8a:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:05:EC:2C:40:B5:F1:C0:EF:27:D4:23:7D:D4:BE:DD:C4:41:FD:9E
X509v3 Authority Key Identifier:
keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:59:91:f6:30:54:58:10:b8:af:ee:9d:12:45:85:a9:69:52:
02:2a:40:24:3d:1c:bf:08:44:ae:ab:ad:24:0f:33:d5:09:b6:
8d:2f:41:b3:60:33:0b:94:d9:40:35:48:82:7f:4d:2f:e9:dd:
dd:6b:7c:04:b0:42:9c:d9:d3:3b:d3:26:05:6c:12:d5:1d:11:
e9:3b:5e:2d:fa:ef:1e:60:66:cd:56:c2:b7:69:ba:b2:01:88:
f2:4d:b2:32:83:1b:4e:03:8f:8f:d0:3e:05:75:50:81:a2:fd:
a5:b9:6c:50:41:88:81:16:b7:a4:42:ef:c5:b0:87:08:82:e5:
13:09:e1:cf:1d:f9:85:af:7b:7a:57:7e:4e:86:f2:e2:ca:6e:
97:aa:21:93:7e:2f:e0:35:df:e5:b0:ff:ee:3f:68:00:ff:0a:
1e:fc:78:a8:3c:a4:f5:6d:b4:cf:99:2a:18:26:e6:84:9a:dc:
f8:b4:bf:da:37:12:88:15:fc:47:3e:52:50:f9:ad:43:b5:e4:
e6:f8:17:0c:2e:95:9c:5e:6b:87:c9:3a:a6:80:2d:b7:56:74:
5a:f5:cd:44:92:84:b1:cd:95:43:ad:ff:70:e3:20:a1:d7:57:
44:f9:5a:5d:f4:68:a0:9a:f1:80:c2:16:d8:cf:0c:2b:35:33:
9f:73:fe:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYUDLLKx/TOPYJDaBqYFrAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNzZmYzVjOTAxMGI0MTExOWNhNjhkYzZiOTk1MGJhNWZm
NzMyN2UwHhcNMjUwODIzMTkwMzExWhcNMjUwODI0MTkwMzExWjAzMTEwLwYDVQQD
EygxOTA1ZWMyYzQwYjVmMWMwZWYyN2Q0MjM3ZGQ0YmVkZGM0NDFmZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFZ32dMXwLMEsFqGEArzj9UWyi55
bMlsg4sPoU/nxPIX6CUTNbIgdy0G+FjbswESG4u9ubhEJvT7Zn3N36ETQ2zyU8fM
G7O5V3SqGIeT24Bw7W01G6yQ0IFJ5MJZEQ+qPIMGRA8RL9PhhoAUFzrbiGznNVr+
EYacUjKxP2Rp1Zqxrpjk/rXylKItEvi4SgiXytIwZ6L9b7qA0sAqfBZWNOqnmBN4
E2r7uh71L6vsit4ibQyCdPv0sJFmbQHBxi95Ed+SbIX67X924cjlH+t80fJyFk6n
D/2730UB/DIA3ZZfcCvXH0/chA13MUoQr8UVSCUakwifvNXP4c6taYrbyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkF7CxAtfHA7yfUI33Uvt3EQf2eMB8GA1UdIwQY
MBaAFDp2/FyQELQRGcpo3GuZULpf9zJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2Qt
YmRmYTdjNGY4YjBhLzEvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2QtYmRmYTdjNGY4YjBh
LzEvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlmR9jBU
WBC4r+6dEkWFqWlSAipAJD0cvwhErqutJA8z1Qm2jS9Bs2AzC5TZQDVIgn9NL+nd
3Wt8BLBCnNnTO9MmBWwS1R0R6TteLfrvHmBmzVbCt2m6sgGI8k2yMoMbTgOPj9A+
BXVQgaL9pblsUEGIgRa3pELvxbCHCILlEwnhzx35ha97eld+Toby4spul6ohk34v
4DXf5bD/7j9oAP8KHvx4qDyk9W20z5kqGCbmhJrc+LS/2jcSiBX8Rz5SUPmtQ7Xk
5vgXDC6VnF5rh8k6poAtt1Z0WvXNRJKEsc2VQ63/cOMgoddXRPlaXfRooJrxgMIW
2M8MKzUzn3P+GA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:49:23 2025 by rpki-client