Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
File: O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft (raw, json)
Hash identifier: n5XVoH/4OIsCZy3hhdhWotssH0pmmJ/VNWY5CKw2aYc=
Subject key identifier: F9:19:B2:D7:5D:18:CF:E2:9F:15:D4:77:87:3A:C6:BB:E2:9D:4D:64
Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
Certificate issuer: /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Certificate serial: 0198D705E44A9802509B128E6D7D77558CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
Manifest number: 12CE
Signing time: Sat 23 Aug 2025 13:02:24 +0000
Manifest this update: Sat 23 Aug 2025 13:02:24 +0000
Manifest next update: Sun 24 Aug 2025 13:02:24 +0000
Files and hashes: 1: O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl (hash: +VLcbIQlfgyLR5c1ueU/076Zvw3wFqjcYMYf4ehOeoU=)
2: OcIpHvqAwT2M9dTBJHDbqY1xej4.roa (hash: gnCvl1Md/DWtZz5X5Y7WYVBP9HfFDhgD11ts2150gvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:e4:4a:98:02:50:9b:12:8e:6d:7d:77:55:8c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Validity
Not Before: Aug 23 13:02:24 2025 GMT
Not After : Aug 24 13:02:24 2025 GMT
Subject: CN=f919b2d75d18cfe29f15d477873ac6bbe29d4d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:2f:0e:4c:db:22:db:e8:0e:52:9c:63:82:
5f:6d:cb:86:f0:04:d0:aa:2c:1d:06:48:bf:1f:7a:
2d:a1:2b:24:85:85:6c:9d:00:2d:80:2d:f0:6d:60:
69:e2:9d:31:d4:02:a8:40:5c:87:aa:6d:95:53:23:
38:df:0b:02:e0:9e:fa:17:38:bd:ca:40:ec:63:8b:
c9:3b:0e:cf:51:4c:87:62:df:82:6c:cc:61:ec:54:
b3:54:43:1f:0c:de:17:31:b5:89:6a:98:98:9d:c3:
78:26:d0:1c:4c:b4:fd:e3:b5:12:cc:df:8e:0c:5b:
0a:9a:2f:57:8b:1b:e1:ec:cd:d6:c1:8c:fb:7f:87:
72:e0:0b:21:83:c0:61:66:92:31:eb:ed:3a:0f:f9:
17:9d:85:07:45:65:8e:3c:55:c7:07:96:db:44:43:
72:98:8f:e9:96:c9:b2:d7:2d:bb:60:f9:98:97:27:
04:78:5e:0f:79:7c:1e:16:b6:34:c6:8a:2c:c0:9a:
c5:8d:76:41:b4:54:d8:66:21:1f:96:c1:4f:a2:b5:
59:5a:2a:de:fb:49:16:3a:47:e0:3f:e4:00:2e:69:
cf:44:27:96:bf:fe:09:ed:ac:19:44:4b:51:f3:f6:
ec:43:fa:fc:f9:75:6c:6b:43:75:b6:a2:c5:3b:65:
01:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:19:B2:D7:5D:18:CF:E2:9F:15:D4:77:87:3A:C6:BB:E2:9D:4D:64
X509v3 Authority Key Identifier:
keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:36:16:35:7a:f4:b6:8b:ff:ac:31:36:77:cc:13:e1:4e:dd:
8b:b4:8d:84:03:bb:52:22:5d:9e:33:20:d7:bd:60:23:0e:76:
b6:c8:0a:42:28:be:46:f4:5c:bb:78:d2:31:bd:8f:ce:bf:6a:
6b:5f:f9:c0:f1:c0:b7:ee:94:5c:1f:af:25:57:89:5c:b5:0f:
bc:41:0a:36:50:9f:a4:5f:96:b8:b1:94:f2:57:35:df:f3:4e:
7f:37:45:04:3f:a4:d2:13:37:95:a1:24:09:22:56:04:50:0b:
74:9f:1a:e9:26:a1:a5:bc:80:26:d2:41:28:a5:0b:94:c1:5d:
34:0a:9f:cf:88:4c:38:ba:a9:e6:ef:9b:2f:e7:d5:fd:f9:71:
5c:f7:e4:eb:0e:db:ba:99:83:55:2b:99:1d:8e:6c:c3:c3:da:
53:4a:ab:24:e4:36:f4:03:2b:da:99:e7:f6:bb:67:d9:db:68:
3f:8b:35:72:13:3d:cc:c6:94:1e:1e:99:ff:75:48:7e:77:06:
e6:8d:79:25:a3:cf:69:c1:10:57:e9:b9:d2:64:79:b2:8b:ee:
eb:e0:9a:75:bb:ad:12:22:7c:5c:52:c8:02:33:20:72:8e:62:
52:00:1f:fa:4a:ec:d6:c8:4c:f9:79:9e:09:f2:31:d9:56:cb:
17:2f:80:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBeRKmAJQmxKObX13VYzyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZDlmYjU3ZjRiMGYyNTNmOWFmODU4MzAzZTZiNDZhNTI5
YzE5NGUwHhcNMjUwODIzMTMwMjI0WhcNMjUwODI0MTMwMjI0WjAzMTEwLwYDVQQD
EyhmOTE5YjJkNzVkMThjZmUyOWYxNWQ0Nzc4NzNhYzZiYmUyOWQ0ZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6AvDkzbItvoDlKcY4JfbcuG8ATQ
qiwdBki/H3otoSskhYVsnQAtgC3wbWBp4p0x1AKoQFyHqm2VUyM43wsC4J76Fzi9
ykDsY4vJOw7PUUyHYt+CbMxh7FSzVEMfDN4XMbWJapiYncN4JtAcTLT947USzN+O
DFsKmi9Xixvh7M3WwYz7f4dy4Ashg8BhZpIx6+06D/kXnYUHRWWOPFXHB5bbRENy
mI/plsmy1y27YPmYlycEeF4PeXweFrY0xooswJrFjXZBtFTYZiEflsFPorVZWire
+0kWOkfgP+QALmnPRCeWv/4J7awZREtR8/bsQ/r8+XVsa0N1tqLFO2UBqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkZstddGM/inxXUd4c6xrvinU1kMB8GA1UdIwQY
MBaAFDvZ+1f0sPJT+a+FgwPmtGpSnBlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzluN1ZfU3c4bFA1cjRXREEtYTBhbEtjR1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yMDRjZGYtZjZlNy00ODc0LTk4MDIt
NjUwZGQxMzhlNmEyLzEvTzluN1ZfU3c4bFA1cjRXREEtYTBhbEtjR1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8yMDRjZGYtZjZlNy00ODc0LTk4MDItNjUwZGQxMzhlNmEy
LzEvTzluN1ZfU3c4bFA1cjRXREEtYTBhbEtjR1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACzYWNXr0
tov/rDE2d8wT4U7di7SNhAO7UiJdnjMg171gIw52tsgKQii+RvRcu3jSMb2Pzr9q
a1/5wPHAt+6UXB+vJVeJXLUPvEEKNlCfpF+WuLGU8lc13/NOfzdFBD+k0hM3laEk
CSJWBFALdJ8a6SahpbyAJtJBKKULlMFdNAqfz4hMOLqp5u+bL+fV/flxXPfk6w7b
upmDVSuZHY5sw8PaU0qrJOQ29AMr2pnn9rtn2dtoP4s1chM9zMaUHh6Z/3VIfncG
5o15JaPPacEQV+m50mR5sovu6+CadbutEiJ8XFLIAjMgco5iUgAf+krs1shM+Xme
CfIx2VbLFy+AYQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:33:10 2025 by rpki-client