Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
File: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft (raw, json)
Hash identifier: hEpHzcwW+JISWiCAFPEhkyapcK06fCbMCy9tz37L5Js=
Subject key identifier: 32:0A:DF:63:D1:30:55:04:8D:1E:84:61:E8:3D:F3:A2:5B:9C:EF:A6
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Certificate issuer: /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial: 0198D583AA011701BB0354FE5502560FC347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
Manifest number: 0535
Signing time: Sat 23 Aug 2025 06:00:32 +0000
Manifest this update: Sat 23 Aug 2025 06:00:32 +0000
Manifest next update: Sun 24 Aug 2025 06:00:32 +0000
Files and hashes: 1: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl (hash: OHahKzA7LNTYgKKl+pauUS6//a70AwfMooegIaYNyDU=)
2: cotZl6z9OJ-fauLOJe6XV8WAuTo.roa (hash: pFgMJLMj7SXSgI1OYpF9YOIHVLweh2wDrctvJeRJL4M=)
3: kchelfWvJ5H-ipXayPr2lYfELpU.roa (hash: 9NIJWgo1KUO6egMwGucTZhKbewDIQ9m/pLPQ1oGGlaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:aa:01:17:01:bb:03:54:fe:55:02:56:0f:c3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Validity
Not Before: Aug 23 06:00:32 2025 GMT
Not After : Aug 24 06:00:32 2025 GMT
Subject: CN=320adf63d13055048d1e8461e83df3a25b9cefa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:ed:e8:50:25:90:74:c6:ea:4a:90:a5:48:
9d:30:47:a9:cb:a4:b3:e1:a6:34:6d:6d:7a:af:76:
5c:85:1f:4a:cc:de:f5:23:39:56:34:ab:1e:17:7a:
fa:6b:a5:6b:02:0c:12:fc:11:fe:a1:9f:8d:92:7b:
54:1a:44:be:43:ae:af:cc:3e:3b:d7:e7:c5:5e:75:
0c:0a:1c:85:03:a9:6a:71:24:35:be:52:65:32:18:
37:9f:3d:ad:6b:4d:e8:2a:90:08:ab:72:ec:25:27:
19:dd:2f:98:99:a6:37:10:4c:37:80:73:72:8a:f8:
95:d3:6f:3e:24:f2:e1:57:13:48:e7:58:a3:95:bd:
fb:67:08:92:71:60:62:5c:09:95:5e:3c:58:b0:33:
f3:0b:7c:c9:6f:cd:00:2f:98:c5:91:13:89:8e:f2:
b7:ce:c1:c8:38:d9:c9:b9:e0:9b:ff:82:13:ac:4d:
d6:b8:84:cd:9b:17:6c:d4:84:ea:ab:40:5b:ce:c0:
52:72:5b:f2:cd:85:92:91:b1:92:75:d4:5d:df:34:
f9:14:e0:0b:18:a4:68:16:91:e7:24:b5:b2:d7:71:
5d:8c:1e:a5:a8:bd:7c:e5:9c:51:e9:42:7e:6e:dd:
17:03:f2:74:65:1a:d8:7e:e3:35:25:82:6e:74:31:
4d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0A:DF:63:D1:30:55:04:8D:1E:84:61:E8:3D:F3:A2:5B:9C:EF:A6
X509v3 Authority Key Identifier:
keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f1:10:3a:e6:bb:8d:c5:e1:53:59:f1:79:6e:f9:d9:f9:e4:
60:9f:6b:43:c8:47:4f:38:98:8a:ed:09:15:6e:d1:aa:ba:21:
76:a5:2f:1b:59:5a:34:5b:77:9e:27:4f:c5:d3:50:36:32:64:
38:fe:6e:02:0b:0f:ca:fc:13:9f:06:d6:ce:a6:f8:d6:68:af:
f4:98:26:1a:6a:2b:86:0a:cc:a2:25:38:eb:9d:2f:7c:3e:96:
b9:1f:5b:f9:fc:38:4c:7b:d8:d8:28:12:ee:35:3f:af:6a:cc:
7b:f4:0a:30:a2:d5:b7:84:00:b8:c1:62:b0:ea:bf:e6:99:8e:
e8:65:ad:79:38:eb:77:03:66:f4:85:06:da:cd:90:ac:44:45:
28:37:93:4f:77:39:e0:b2:41:1a:13:20:0b:18:5f:18:e3:ed:
9c:14:09:1c:25:7e:35:6e:a9:0b:c6:d6:0e:63:32:64:f4:d5:
9a:8a:d4:cd:bb:06:55:2a:e7:12:8a:e2:22:89:ab:8f:ae:14:
5a:29:0e:63:44:03:98:db:3c:8c:12:aa:4f:3a:55:7f:62:d8:
ef:74:7b:40:f5:e7:e2:19:d4:2a:05:a5:9f:c1:01:ed:32:f2:
28:4b:50:04:17:78:be:11:aa:58:13:43:3f:8d:ba:7b:74:a1:
50:90:52:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg6oBFwG7A1T+VQJWD8NHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZjUxOTY0ZWRlMTJiNGMwMzY3M2QyM2NkNDRjODM3NTMx
NWY0NWEwHhcNMjUwODIzMDYwMDMyWhcNMjUwODI0MDYwMDMyWjAzMTEwLwYDVQQD
EygzMjBhZGY2M2QxMzA1NTA0OGQxZTg0NjFlODNkZjNhMjViOWNlZmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5Pt6FAlkHTG6kqQpUidMEepy6Sz
4aY0bW16r3ZchR9KzN71IzlWNKseF3r6a6VrAgwS/BH+oZ+NkntUGkS+Q66vzD47
1+fFXnUMChyFA6lqcSQ1vlJlMhg3nz2ta03oKpAIq3LsJScZ3S+YmaY3EEw3gHNy
iviV028+JPLhVxNI51ijlb37ZwiScWBiXAmVXjxYsDPzC3zJb80AL5jFkROJjvK3
zsHIONnJueCb/4ITrE3WuITNmxds1ITqq0BbzsBSclvyzYWSkbGSddRd3zT5FOAL
GKRoFpHnJLWy13FdjB6lqL185ZxR6UJ+bt0XA/J0ZRrYfuM1JYJudDFNQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIK32PRMFUEjR6EYeg986JbnO+mMB8GA1UdIwQY
MBaAFNH1GWTt4StMA2c9I81EyDdTFfRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGZVWlpPM2hLMHdEWnowanpVVElOMU1WOUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9lYmJkZGEtOTU3MS00ZmY1LWI1NmUt
NzUyMjBkNTNhNTVjLzEvMGZVWlpPM2hLMHdEWnowanpVVElOMU1WOUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9lYmJkZGEtOTU3MS00ZmY1LWI1NmUtNzUyMjBkNTNhNTVj
LzEvMGZVWlpPM2hLMHdEWnowanpVVElOMU1WOUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/EQOua7
jcXhU1nxeW752fnkYJ9rQ8hHTziYiu0JFW7RqrohdqUvG1laNFt3nidPxdNQNjJk
OP5uAgsPyvwTnwbWzqb41miv9JgmGmorhgrMoiU4650vfD6WuR9b+fw4THvY2CgS
7jU/r2rMe/QKMKLVt4QAuMFisOq/5pmO6GWteTjrdwNm9IUG2s2QrERFKDeTT3c5
4LJBGhMgCxhfGOPtnBQJHCV+NW6pC8bWDmMyZPTVmorUzbsGVSrnEoriIomrj64U
WikOY0QDmNs8jBKqTzpVf2LY73R7QPXn4hnUKgWln8EB7TLyKEtQBBd4vhGqWBND
P426e3ShUJBS7g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:25 2025 by rpki-client