Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
File: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft (raw, json)
Hash identifier: 6od9wCPE1a4vnuEej1sFl/KFEr8jEJEpuYb+u5d55QI=
Subject key identifier: DA:24:98:4A:F5:A3:D9:44:36:2E:BB:FC:4A:0A:40:0C:69:51:97:D1
Authority key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
Certificate issuer: /CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Certificate serial: 0198D7059A8FFA3ED7353FF64D3A688F7C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
Manifest number: 02CF
Signing time: Sat 23 Aug 2025 13:02:05 +0000
Manifest this update: Sat 23 Aug 2025 13:02:05 +0000
Manifest next update: Sun 24 Aug 2025 13:02:05 +0000
Files and hashes: 1: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl (hash: qcSbntMkPMvh/4bajLAzAo5nntZl1xTfxUatMuiKoYc=)
2: vwZ3qyY8j7AihfGsWYtA6mwINxQ.roa (hash: VBbCuPYUO8ASQ+6MrnY57WOdr+3+R3PhClJszE/T/CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:9a:8f:fa:3e:d7:35:3f:f6:4d:3a:68:8f:7c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Validity
Not Before: Aug 23 13:02:05 2025 GMT
Not After : Aug 24 13:02:05 2025 GMT
Subject: CN=da24984af5a3d944362ebbfc4a0a400c695197d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:02:db:47:89:a1:96:b1:c1:6b:17:df:09:4d:
49:a1:a3:b2:f6:a3:c4:d9:f0:ed:e4:3e:50:0d:2d:
f7:f3:2e:d9:e3:e1:70:71:7f:9b:9e:db:df:ef:fd:
3c:7f:28:ec:08:fa:3f:0e:88:95:b2:7c:14:70:22:
fb:88:3f:ae:a6:b0:8c:63:a4:06:cc:48:da:bc:ee:
b9:b8:d9:97:8d:9e:48:3a:10:ac:08:e8:5f:47:fa:
02:5c:92:16:85:f2:bb:2d:61:af:67:26:c2:a9:bc:
f3:76:48:61:15:70:36:e5:f1:75:26:d2:b8:43:bd:
d8:b7:99:b5:51:30:23:84:76:d9:c0:7a:e5:46:38:
57:2b:97:d2:3c:58:2a:ca:5a:03:64:b8:7c:47:7d:
06:1e:9b:bb:0c:49:fb:d0:7c:3f:c9:3c:83:7c:d1:
80:99:d4:cf:5b:7c:62:2a:40:ae:37:34:87:c4:1a:
86:92:a7:22:cf:ba:42:58:74:0b:79:c2:9c:23:ec:
9b:6c:fd:80:1f:78:1e:2a:2e:46:c6:dc:29:91:f9:
c6:5b:24:95:41:b8:68:38:cf:5c:a3:f1:a3:5f:2f:
90:79:3e:2d:7e:bc:5a:40:d4:cc:c3:e8:a1:7b:29:
4f:0f:20:62:55:ff:63:e1:d3:01:e6:36:93:9c:00:
a2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:24:98:4A:F5:A3:D9:44:36:2E:BB:FC:4A:0A:40:0C:69:51:97:D1
X509v3 Authority Key Identifier:
keyid:D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ec:39:28:fc:fe:9e:7f:ff:8f:89:c6:37:46:8a:c0:29:e6:
29:c3:7b:51:d1:6c:3f:25:69:07:5f:56:d6:78:6a:24:87:af:
c4:ff:6a:b7:39:3c:62:8b:5e:cd:8d:9f:54:ac:e5:0b:31:ab:
7b:b3:7f:79:f3:ac:b3:56:98:4e:39:e3:b8:8a:47:fb:3d:52:
26:71:86:85:87:9e:33:45:0d:24:2c:ae:df:11:3c:fa:91:60:
0b:90:e8:97:6d:80:c7:ba:1b:48:90:8f:13:cb:ca:cb:59:27:
ec:7d:2b:5b:17:1c:fd:d8:05:a3:63:06:cf:e0:5d:15:bc:f6:
c5:60:62:1b:e7:da:74:35:98:bc:8c:ff:f9:92:62:98:dd:41:
59:d0:8f:bb:22:cf:00:5e:2e:c5:9a:a9:fc:9c:50:d0:54:fa:
20:1d:e6:86:bf:f8:bd:ac:9c:33:a7:7b:23:a2:1b:06:10:46:
54:89:bd:80:43:86:ec:a1:82:96:80:3c:59:92:48:5e:46:36:
39:20:4d:a8:fb:77:ac:5e:ad:ed:ab:66:09:b3:a8:e3:c9:86:
4a:dc:40:5c:af:f2:26:79:13:8c:96:9a:31:49:0f:0d:27:aa:
b1:9f:4d:31:49:73:0f:70:8f:56:99:19:78:8f:d9:93:80:86:
f6:b6:0f:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBZqP+j7XNT/2TTpoj3yWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNDg1MGY4MDY5ZGY2MmRjNTE1NWMwMmVkMWU2MmJmNTFj
ZWRiYzgwHhcNMjUwODIzMTMwMjA1WhcNMjUwODI0MTMwMjA1WjAzMTEwLwYDVQQD
EyhkYTI0OTg0YWY1YTNkOTQ0MzYyZWJiZmM0YTBhNDAwYzY5NTE5N2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wLbR4mhlrHBaxffCU1JoaOy9qPE
2fDt5D5QDS338y7Z4+FwcX+bntvf7/08fyjsCPo/DoiVsnwUcCL7iD+uprCMY6QG
zEjavO65uNmXjZ5IOhCsCOhfR/oCXJIWhfK7LWGvZybCqbzzdkhhFXA25fF1JtK4
Q73Yt5m1UTAjhHbZwHrlRjhXK5fSPFgqyloDZLh8R30GHpu7DEn70Hw/yTyDfNGA
mdTPW3xiKkCuNzSHxBqGkqciz7pCWHQLecKcI+ybbP2AH3geKi5GxtwpkfnGWySV
QbhoOM9co/GjXy+QeT4tfrxaQNTMw+iheylPDyBiVf9j4dMB5jaTnACiVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNokmEr1o9lENi67/EoKQAxpUZfRMB8GA1UdIwQY
MBaAFNBIUPgGnfYtxRVcAu0eYr9RztvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEVoUS1BYWQ5aTNGRlZ3QzdSNWl2MUhPMjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMDk3ZDMtZDRiYS00MTMwLThlOTYt
YWQ5NWViZmFhYWUyLzEvMEVoUS1BYWQ5aTNGRlZ3QzdSNWl2MUhPMjhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kMDk3ZDMtZDRiYS00MTMwLThlOTYtYWQ5NWViZmFhYWUy
LzEvMEVoUS1BYWQ5aTNGRlZ3QzdSNWl2MUhPMjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuw5KPz+
nn//j4nGN0aKwCnmKcN7UdFsPyVpB19W1nhqJIevxP9qtzk8YotezY2fVKzlCzGr
e7N/efOss1aYTjnjuIpH+z1SJnGGhYeeM0UNJCyu3xE8+pFgC5Dol22Ax7obSJCP
E8vKy1kn7H0rWxcc/dgFo2MGz+BdFbz2xWBiG+fadDWYvIz/+ZJimN1BWdCPuyLP
AF4uxZqp/JxQ0FT6IB3mhr/4vaycM6d7I6IbBhBGVIm9gEOG7KGCloA8WZJIXkY2
OSBNqPt3rF6t7atmCbOo48mGStxAXK/yJnkTjJaaMUkPDSeqsZ9NMUlzD3CPVpkZ
eI/Zk4CG9rYPYA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:44:01 2025 by rpki-client