Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
File: O5WuuspzMW3EaAyAi3k-aglWXxs.mft (raw, json)
Hash identifier: vTdSHIkeKD/g45375wM9m9uRLL6/11Zv7nHBJ+r259w=
Subject key identifier: CC:BD:2E:2D:93:D9:C7:8C:5E:21:78:2C:BF:D4:8F:51:E5:6B:33:15
Authority key identifier: 3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
Certificate issuer: /CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Certificate serial: 0198D5F1D5B79EF903A45627F0280B150A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
Manifest number: 04A0
Signing time: Sat 23 Aug 2025 08:00:52 +0000
Manifest this update: Sat 23 Aug 2025 08:00:52 +0000
Manifest next update: Sun 24 Aug 2025 08:00:52 +0000
Files and hashes: 1: O5WuuspzMW3EaAyAi3k-aglWXxs.crl (hash: 566F3brnE7rw65Ka5ndqDki0LstAmWwSRhuflQ82rVA=)
2: tsimjRApcLdxNhZEKgAs63IqA5I.roa (hash: HrZUtgrX3ioBRBNFpZduF4ySYEUBH1QJ3tZ4kshDhvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d5:b7:9e:f9:03:a4:56:27:f0:28:0b:15:0a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Validity
Not Before: Aug 23 08:00:52 2025 GMT
Not After : Aug 24 08:00:52 2025 GMT
Subject: CN=ccbd2e2d93d9c78c5e21782cbfd48f51e56b3315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:8c:e9:df:cc:67:36:93:00:3c:a1:ce:f3:
2f:f7:74:6f:0f:fe:82:28:96:a6:0d:ec:98:76:ca:
72:73:10:19:ce:bc:69:02:dc:22:29:eb:ca:7a:5c:
93:ff:de:b4:94:dd:73:80:3d:d7:81:20:7a:8e:89:
09:1b:4c:f0:74:78:94:44:f8:11:fd:34:35:ba:16:
ac:f9:9d:53:63:07:56:9c:14:b3:4b:c8:ec:27:f1:
a2:5b:e7:65:11:48:8e:00:31:9b:36:32:0a:6d:a2:
4a:98:8e:aa:df:8f:38:1c:58:e9:b9:bb:ca:bb:c9:
7b:1a:72:89:45:cd:8f:7a:bf:0b:2a:17:a9:8e:92:
bc:1c:7e:2b:f6:04:99:a7:6f:64:d1:5c:db:34:d4:
a0:06:df:d5:6f:ad:59:67:cc:3a:d0:0f:42:7e:27:
d0:92:5c:d3:02:e7:bd:e0:ab:18:b4:bb:a3:ad:95:
f6:a0:56:72:ce:3a:5b:a6:d5:38:3f:47:f8:53:16:
98:b3:e9:0d:25:4c:26:f4:63:4d:c5:2d:0c:0a:0a:
14:26:f6:96:57:0b:e0:70:42:01:13:a0:0d:62:a7:
97:ba:da:f4:25:46:41:00:27:39:4b:8a:5a:0c:91:
43:80:bf:67:44:4e:b1:70:3e:44:23:4b:97:65:91:
af:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BD:2E:2D:93:D9:C7:8C:5E:21:78:2C:BF:D4:8F:51:E5:6B:33:15
X509v3 Authority Key Identifier:
keyid:3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c5:94:94:b6:b7:2c:6e:ce:0f:5d:a5:ec:49:ca:5c:1a:c2:
94:92:36:b1:d3:87:7d:4a:86:f6:a4:39:ee:c2:05:1b:4f:d2:
78:b3:36:1a:bf:4e:7b:c2:d4:08:18:e0:a3:c5:50:fb:86:35:
b7:14:91:de:d0:32:cc:1d:62:df:be:6d:5a:49:bf:82:7e:9e:
f3:4b:6c:84:9e:12:4f:23:85:6c:9a:b2:2d:68:8f:77:26:07:
91:da:6b:9d:37:2a:71:7d:78:96:07:98:a2:0c:b9:12:df:93:
f0:35:96:45:9c:f5:bc:e6:e4:71:a2:83:d4:06:d8:02:95:ab:
79:c9:8f:72:e5:02:da:46:0d:10:e4:bc:1d:2a:62:14:8d:56:
6a:4e:b3:41:d3:a0:e6:e2:c0:0d:07:65:4d:75:71:7b:02:91:
dd:52:27:3d:de:70:cb:fb:ca:98:07:4f:22:63:0c:2d:5c:6f:
71:61:9e:84:a5:4d:39:65:27:9a:0b:41:1f:5a:82:9a:6f:fe:
8b:3c:31:e1:74:79:51:fb:ca:eb:01:26:2a:f7:81:52:36:1a:
48:4a:75:29:4e:b4:4e:f3:61:13:31:73:f0:f3:c4:9f:3f:bf:
85:91:0e:9e:f3:ac:a5:78:8a:ae:c8:b6:d7:63:c6:80:b9:e0:
8a:ba:a7:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8dW3nvkDpFYn8CgLFQp3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOTVhZWJhY2E3MzMxNmRjNDY4MGM4MDhiNzkzZTZhMDk1
NjVmMWIwHhcNMjUwODIzMDgwMDUyWhcNMjUwODI0MDgwMDUyWjAzMTEwLwYDVQQD
EyhjY2JkMmUyZDkzZDljNzhjNWUyMTc4MmNiZmQ0OGY1MWU1NmIzMzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnSM6d/MZzaTADyhzvMv93RvD/6C
KJamDeyYdspycxAZzrxpAtwiKevKelyT/960lN1zgD3XgSB6jokJG0zwdHiURPgR
/TQ1uhas+Z1TYwdWnBSzS8jsJ/GiW+dlEUiOADGbNjIKbaJKmI6q3484HFjpubvK
u8l7GnKJRc2Per8LKhepjpK8HH4r9gSZp29k0VzbNNSgBt/Vb61ZZ8w60A9CfifQ
klzTAue94KsYtLujrZX2oFZyzjpbptU4P0f4UxaYs+kNJUwm9GNNxS0MCgoUJvaW
VwvgcEIBE6ANYqeXutr0JUZBACc5S4paDJFDgL9nRE6xcD5EI0uXZZGvtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMy9Li2T2ceMXiF4LL/Uj1HlazMVMB8GA1UdIwQY
MBaAFDuVrrrKczFtxGgMgIt5PmoJVl8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzVXdXVzcHpNVzNFYUF5QWkzay1hZ2xXWHhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9hYjNmMzYtNzg1MC00MjY2LWI2N2Et
MDIzY2MxZmMxOTEwLzEvTzVXdXVzcHpNVzNFYUF5QWkzay1hZ2xXWHhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9hYjNmMzYtNzg1MC00MjY2LWI2N2EtMDIzY2MxZmMxOTEw
LzEvTzVXdXVzcHpNVzNFYUF5QWkzay1hZ2xXWHhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcWUlLa3
LG7OD12l7EnKXBrClJI2sdOHfUqG9qQ57sIFG0/SeLM2Gr9Oe8LUCBjgo8VQ+4Y1
txSR3tAyzB1i375tWkm/gn6e80tshJ4STyOFbJqyLWiPdyYHkdprnTcqcX14lgeY
ogy5Et+T8DWWRZz1vObkcaKD1AbYApWrecmPcuUC2kYNEOS8HSpiFI1Wak6zQdOg
5uLADQdlTXVxewKR3VInPd5wy/vKmAdPImMMLVxvcWGehKVNOWUnmgtBH1qCmm/+
izwx4XR5UfvK6wEmKveBUjYaSEp1KU60TvNhEzFz8PPEnz+/hZEOnvOspXiKrsi2
12PGgLngirqnfw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:46:31 2025 by rpki-client