Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
File: oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft (raw, json)
Hash identifier: 6dm3NvZWCjzKEHbVSm5peMcGrkiFVxFV6674TkC4o24=
Subject key identifier: DB:9A:30:6B:50:22:66:A8:6B:AA:67:96:34:86:2F:8F:42:08:7D:F3
Authority key identifier: A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
Certificate issuer: /CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Certificate serial: 0198D54E014DF16B15ABFB9D5DAAB5FFFF3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
Manifest number: 0D36
Signing time: Sat 23 Aug 2025 05:01:55 +0000
Manifest this update: Sat 23 Aug 2025 05:01:55 +0000
Manifest next update: Sun 24 Aug 2025 05:01:55 +0000
Files and hashes: 1: oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl (hash: AW5QsuPKB4NZ/0xS5BTksiJiXi7+XlnAm2+UqXXQHC8=)
2: q9BWcMARtQ3_HrPyS7FBIEXNhsI.roa (hash: D3KwQaIiGET5pyY7n2Q5pJoywyLFE76xEx7j4PCoCfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:01:4d:f1:6b:15:ab:fb:9d:5d:aa:b5:ff:ff:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Validity
Not Before: Aug 23 05:01:55 2025 GMT
Not After : Aug 24 05:01:55 2025 GMT
Subject: CN=db9a306b502266a86baa679634862f8f42087df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:29:19:56:2e:a2:b2:05:e7:25:72:c7:15:
1d:11:91:b7:28:11:de:0e:4c:f8:d6:32:87:ee:13:
f1:96:54:42:fd:1d:69:9f:e5:cb:51:37:b6:d5:ea:
5e:cd:bd:ef:c9:ca:8f:19:e1:75:31:48:3e:76:05:
18:ab:7b:80:b8:67:3b:ef:73:34:8c:3d:cf:35:c6:
d4:0d:33:da:11:ab:3c:04:11:c1:29:b6:e7:25:3e:
3a:c7:2e:04:17:6e:ef:cd:38:61:12:43:af:6c:da:
da:81:48:a0:f4:36:91:6b:f9:51:74:ab:3f:63:2e:
25:9d:5a:0a:9a:f6:55:91:cd:a1:87:42:0c:9e:ac:
56:2d:42:1f:ac:c4:d0:97:50:66:76:03:f1:b6:2e:
c1:11:be:49:3a:43:38:81:de:f7:c5:6a:1d:9f:d5:
6d:1f:45:b6:b3:a4:d9:a6:a7:07:b3:76:01:a9:e5:
04:74:d1:f0:63:15:30:7b:ff:32:87:8a:fd:69:11:
6d:7d:2a:26:55:61:69:0a:dd:39:f1:91:53:81:5c:
f4:4d:8c:19:ff:1e:b6:27:2e:34:3b:7a:33:20:e2:
ec:4a:c1:74:fe:83:0a:66:cb:51:b4:c1:fc:37:01:
e9:2f:29:ba:17:b9:91:d5:70:e8:78:c8:ef:ba:2e:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9A:30:6B:50:22:66:A8:6B:AA:67:96:34:86:2F:8F:42:08:7D:F3
X509v3 Authority Key Identifier:
keyid:A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:86:ab:7d:86:e2:74:e6:ad:d7:25:d9:24:c4:6c:52:37:e7:
12:ac:4e:0a:21:ad:a1:f7:b2:a7:37:1e:d3:e6:18:59:5a:f9:
90:b8:20:62:d3:03:b5:24:48:95:be:3f:d1:1e:df:51:cf:8f:
5a:55:e5:36:5a:8d:72:f1:df:4e:2f:98:7d:1d:cf:4d:05:5f:
d1:0c:5d:df:e0:68:41:24:ae:31:62:40:1b:6d:db:2b:7e:50:
ae:a5:58:c6:ea:68:7a:16:63:d1:01:40:c4:3e:d0:95:de:ac:
ba:70:f6:f6:50:7d:3b:be:6a:ab:90:c8:f2:94:19:cd:f9:62:
2d:c9:28:63:c8:5b:f2:40:59:f7:96:b5:d5:80:12:a5:dd:70:
cb:50:71:00:7d:1e:b5:0b:64:85:94:86:b3:c5:92:be:c7:b3:
55:94:ae:3c:2d:d8:d3:3e:21:b1:26:45:8f:80:ea:42:f5:79:
a0:f8:65:4f:d1:16:b9:07:ca:cf:d0:15:1f:9c:11:64:8c:d4:
84:5e:f3:12:55:90:9a:55:6e:7e:8f:b6:d5:72:41:93:94:98:
45:65:44:e4:aa:5d:61:2e:be:3d:40:82:9c:6b:29:a5:39:ff:
f1:8b:bf:a2:9e:25:09:22:3a:09:63:41:1d:f5:26:1a:c5:62:
ce:ea:39:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTgFN8WsVq/udXaq1//86MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwN2RjYjZkYjlhNzVjMTAxN2ZlZTY3MmY3M2I5NjE3NzFi
NzdjYTEwHhcNMjUwODIzMDUwMTU1WhcNMjUwODI0MDUwMTU1WjAzMTEwLwYDVQQD
EyhkYjlhMzA2YjUwMjI2NmE4NmJhYTY3OTYzNDg2MmY4ZjQyMDg3ZGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8wpGVYuorIF5yVyxxUdEZG3KBHe
Dkz41jKH7hPxllRC/R1pn+XLUTe21epezb3vycqPGeF1MUg+dgUYq3uAuGc773M0
jD3PNcbUDTPaEas8BBHBKbbnJT46xy4EF27vzThhEkOvbNragUig9DaRa/lRdKs/
Yy4lnVoKmvZVkc2hh0IMnqxWLUIfrMTQl1BmdgPxti7BEb5JOkM4gd73xWodn9Vt
H0W2s6TZpqcHs3YBqeUEdNHwYxUwe/8yh4r9aRFtfSomVWFpCt058ZFTgVz0TYwZ
/x62Jy40O3ozIOLsSsF0/oMKZstRtMH8NwHpLym6F7mR1XDoeMjvui5PeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuaMGtQImaoa6pnljSGL49CCH3zMB8GA1UdIwQY
MBaAFKB9y225p1wQF/7mcvc7lhdxt3yhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0gzTGJibW5YQkFYX3VaeTl6dVdGM0czZktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zMDMxMDUtZTdjOC00YTQ0LWExODEt
Y2I0MGVlMDQ4ZGMwLzEvb0gzTGJibW5YQkFYX3VaeTl6dVdGM0czZktFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zMDMxMDUtZTdjOC00YTQ0LWExODEtY2I0MGVlMDQ4ZGMw
LzEvb0gzTGJibW5YQkFYX3VaeTl6dVdGM0czZktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4arfYbi
dOat1yXZJMRsUjfnEqxOCiGtofeypzce0+YYWVr5kLggYtMDtSRIlb4/0R7fUc+P
WlXlNlqNcvHfTi+YfR3PTQVf0Qxd3+BoQSSuMWJAG23bK35QrqVYxupoehZj0QFA
xD7Qld6sunD29lB9O75qq5DI8pQZzfliLckoY8hb8kBZ95a11YASpd1wy1BxAH0e
tQtkhZSGs8WSvsezVZSuPC3Y0z4hsSZFj4DqQvV5oPhlT9EWuQfKz9AVH5wRZIzU
hF7zElWQmlVufo+21XJBk5SYRWVE5KpdYS6+PUCCnGsppTn/8Yu/op4lCSI6CWNB
HfUmGsVizuo5Kg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:45 2025 by rpki-client