Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: Xgm2Xk16dxoN5ndlJI67Kx95z7/I2YJen7JFxeJIwiI=
Subject key identifier: 33:63:8C:A3:D8:67:F5:83:20:B0:99:66:B8:73:D2:01:91:4C:4A:4F
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 0198499BFC777578D021DBA8EF0CBF1BB2AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 0330
Signing time: Sun 27 Jul 2025 02:00:16 +0000
Manifest this update: Sun 27 Jul 2025 02:00:16 +0000
Manifest next update: Mon 28 Jul 2025 02:00:16 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: dA0krnQqDt4WQJqYBHnuEt9ueAHrUzd449vAGU5FlLs=)
2: 3bcszB4ipjOyzxEmMRx3Cb2Frg8.roa (hash: VCt09RErcTdOo8fIexLlVqTQrbVLMl5U72RInG7+sVI=)
3: QT2bGKmHREGB3-sqEAhjlcIYXXI.roa (hash: lsIhMN9LkDQx5Xr58fqlkjIVmBAb+8AMBjPiPSb4cQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:fc:77:75:78:d0:21:db:a8:ef:0c:bf:1b:b2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Jul 27 02:00:16 2025 GMT
Not After : Jul 28 02:00:16 2025 GMT
Subject: CN=33638ca3d867f58320b09966b873d201914c4a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:30:98:ed:92:5e:e7:06:10:25:64:cd:ea:80:
75:9c:e4:a5:af:c8:66:f2:df:0a:30:2c:34:b4:89:
02:d3:22:9f:42:08:2c:b4:54:61:a6:d2:eb:39:57:
43:55:6c:3b:ca:f6:b8:b3:6a:a7:2c:a9:97:46:1d:
f2:c1:47:bc:4f:4b:31:ed:37:10:bb:55:3a:2d:b9:
32:e5:70:bb:24:ff:15:df:83:b4:4c:f9:df:f0:d2:
00:f0:93:00:3c:5f:ec:df:2f:27:3d:e0:25:be:e0:
5e:d5:79:d3:7c:6b:b0:d4:59:02:12:b4:04:ef:e4:
8e:a3:12:c8:69:ab:ea:16:1b:76:9b:8f:81:bf:4f:
8d:38:e8:db:cf:75:c6:99:97:0a:d3:60:52:5f:61:
88:5c:c5:ab:fa:de:63:d8:43:10:f9:11:6c:d4:3a:
8f:52:ea:a9:a3:1f:fb:69:a5:c7:71:bc:74:a8:e1:
41:2a:ff:69:80:fa:cf:fc:2d:37:1c:e3:21:65:2b:
eb:59:a3:e3:d1:3e:a0:d7:89:ee:96:78:8c:66:59:
81:91:37:a9:50:57:00:7d:2e:fc:61:dc:48:3f:27:
e7:d0:04:7b:d0:88:a3:32:b9:de:b2:8f:a4:a3:97:
d7:c2:ff:b5:cc:5a:17:59:9b:be:9f:b7:1f:00:1d:
86:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:63:8C:A3:D8:67:F5:83:20:B0:99:66:B8:73:D2:01:91:4C:4A:4F
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2f:8b:39:f1:da:1e:c6:13:94:3b:a6:4f:ff:d9:23:cd:6b:
5e:be:08:10:62:b9:a7:a7:a5:de:fd:2f:ad:16:43:36:65:f9:
4f:56:4a:1f:c4:7e:56:64:e7:00:56:a1:d5:bc:5d:3f:c5:82:
d4:9e:7e:ab:8c:ac:9f:84:14:43:b9:91:8b:f4:6e:3f:d6:78:
b1:f7:34:52:34:79:7d:31:a2:26:f4:69:dd:8f:a3:bf:68:e6:
f6:f0:09:00:ae:d0:cc:82:db:d4:aa:a4:39:1f:8c:07:71:b4:
a9:16:ca:59:90:86:3f:2c:7e:84:1a:07:b7:d3:f1:71:75:d2:
98:cf:7a:78:bf:1a:64:3a:04:70:bb:09:0d:e7:59:c1:27:f3:
57:1d:92:7a:75:6c:93:62:3d:55:83:6f:26:e9:29:2d:57:ad:
92:32:c9:49:1f:1b:01:d2:bd:92:6c:42:f0:8e:26:b7:74:93:
26:95:7f:c6:22:a3:02:46:19:39:cf:0f:16:87:3f:25:11:f7:
41:76:03:56:48:64:cf:54:cd:6d:c6:d5:be:ab:9c:67:b6:fb:
1d:32:91:da:6a:ff:1a:a8:ea:51:6b:40:5d:89:f1:12:ef:66:
81:08:de:c6:8a:1e:61:21:0f:0a:b8:79:84:2e:d9:ae:e0:50:
73:09:b6:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJm/x3dXjQIduo7wy/G7KtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMGIwOGU2MDc2NjhlMDYwNTAwODRlZTM3OTI4YTFjMGIw
MzU0OTIwHhcNMjUwNzI3MDIwMDE2WhcNMjUwNzI4MDIwMDE2WjAzMTEwLwYDVQQD
EygzMzYzOGNhM2Q4NjdmNTgzMjBiMDk5NjZiODczZDIwMTkxNGM0YTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jCY7ZJe5wYQJWTN6oB1nOSlr8hm
8t8KMCw0tIkC0yKfQggstFRhptLrOVdDVWw7yva4s2qnLKmXRh3ywUe8T0sx7TcQ
u1U6Lbky5XC7JP8V34O0TPnf8NIA8JMAPF/s3y8nPeAlvuBe1XnTfGuw1FkCErQE
7+SOoxLIaavqFht2m4+Bv0+NOOjbz3XGmZcK02BSX2GIXMWr+t5j2EMQ+RFs1DqP
Uuqpox/7aaXHcbx0qOFBKv9pgPrP/C03HOMhZSvrWaPj0T6g14nulniMZlmBkTep
UFcAfS78YdxIPyfn0AR70IijMrneso+ko5fXwv+1zFoXWZu+n7cfAB2GKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNjjKPYZ/WDILCZZrhz0gGRTEpPMB8GA1UdIwQY
MBaAFNILCOYHZo4GBQCE7jeSihwLA1SSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2Et
MDYyYzg4ODJiYTcxLzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2EtMDYyYzg4ODJiYTcx
LzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOC+LOfHa
HsYTlDumT//ZI81rXr4IEGK5p6el3v0vrRZDNmX5T1ZKH8R+VmTnAFah1bxdP8WC
1J5+q4ysn4QUQ7mRi/RuP9Z4sfc0UjR5fTGiJvRp3Y+jv2jm9vAJAK7QzILb1Kqk
OR+MB3G0qRbKWZCGPyx+hBoHt9PxcXXSmM96eL8aZDoEcLsJDedZwSfzVx2SenVs
k2I9VYNvJukpLVetkjLJSR8bAdK9kmxC8I4mt3STJpV/xiKjAkYZOc8PFoc/JRH3
QXYDVkhkz1TNbcbVvqucZ7b7HTKR2mr/GqjqUWtAXYnxEu9mgQjexooeYSEPCrh5
hC7ZruBQcwm2wQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:05:34 2025 by rpki-client