Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
File: T0_oHzIxJo9848MUpJaoLMInfDs.mft (raw, json)
Hash identifier: 4vLvOl4wFnHTRuZDBGUzNLI51w5CL2GlQZ3EK5how/8=
Subject key identifier: 5C:3C:CC:E7:D8:2D:2B:41:1C:0E:E1:CD:B7:63:F1:5F:A5:23:B7:34
Authority key identifier: 4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
Certificate issuer: /CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Certificate serial: 019853E8BDF7B4AF3544078A58917D8B3284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
Manifest number: 137F
Signing time: Tue 29 Jul 2025 02:00:18 +0000
Manifest this update: Tue 29 Jul 2025 02:00:18 +0000
Manifest next update: Wed 30 Jul 2025 02:00:18 +0000
Files and hashes: 1: T0_oHzIxJo9848MUpJaoLMInfDs.crl (hash: rRBK/yspxY3XVmwQ+1Wx2ksQPrCd0ZqU5CyAluP1kJI=)
2: aeH9HJ9pJaNmWyF-L7DK5SJwZY4.roa (hash: ZymKLot+S0ODnNv/ycCiCzvG9PSmkpOXHHZ4MxN5d9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:bd:f7:b4:af:35:44:07:8a:58:91:7d:8b:32:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Validity
Not Before: Jul 29 02:00:18 2025 GMT
Not After : Jul 30 02:00:18 2025 GMT
Subject: CN=5c3ccce7d82d2b411c0ee1cdb763f15fa523b734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:4a:79:20:51:79:c6:04:78:5f:c0:2d:f8:
85:ba:ee:48:e6:7a:60:d9:24:33:10:21:71:39:a2:
d6:d0:e9:9b:d9:aa:ec:ae:ac:2c:7d:ee:43:e5:59:
14:c5:43:25:84:8a:43:d1:48:91:d7:a7:32:43:32:
08:0f:d7:00:74:c5:3a:6f:ad:72:f9:1d:8b:aa:61:
08:bf:a7:94:1b:88:a2:bb:12:e6:b2:88:c3:9f:e8:
d0:8e:0c:20:7d:ba:11:5b:4d:1e:e7:f3:b5:dc:5f:
33:a0:80:66:c5:ba:24:8c:15:f4:bd:a0:71:68:cb:
84:89:85:3b:a3:c2:70:a0:2e:e0:e1:4b:cd:9f:7d:
26:cd:b6:68:5f:b1:6e:97:14:a3:88:c9:f7:49:ec:
12:46:e9:10:0e:f2:b9:27:fd:6b:be:65:09:e9:10:
2f:da:87:24:16:d9:a1:41:9b:24:4d:1b:ed:4e:1c:
94:d0:3c:b0:42:b7:b7:93:c8:03:2d:6c:56:2c:48:
ad:7b:88:d5:95:26:6e:7b:a0:98:f6:37:71:62:64:
f0:a4:c6:fd:f3:7b:44:7a:ba:7a:21:62:56:74:e8:
a0:35:d2:a5:1d:fd:fa:96:78:90:8b:a7:b3:de:2f:
5a:55:47:b8:b0:e6:c8:b1:af:95:b2:e9:22:a0:92:
43:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3C:CC:E7:D8:2D:2B:41:1C:0E:E1:CD:B7:63:F1:5F:A5:23:B7:34
X509v3 Authority Key Identifier:
keyid:4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:12:71:bc:c8:5f:47:87:0f:d9:b9:de:6b:1d:79:93:a8:b5:
e6:59:49:c3:ff:87:55:a7:ab:da:17:21:ef:96:7f:d2:a6:bf:
4d:1e:cd:cd:29:0e:6f:1e:8b:2c:7c:e3:e1:d0:ba:bf:f2:10:
b9:f0:44:f7:15:4e:4a:f5:9f:c5:c7:62:5c:e9:bd:56:82:44:
c2:1a:82:70:78:e2:37:73:2f:36:01:ab:b1:c8:ee:6e:83:ee:
b6:2e:fd:a7:30:94:7a:11:e7:1a:6f:fb:14:99:6c:d5:48:6a:
28:3c:75:58:2c:9d:ac:23:76:c4:af:80:88:74:1b:ce:19:f2:
fd:5a:a0:91:04:f3:5d:af:e0:f7:42:d4:81:10:f7:f3:22:11:
9a:bf:2e:b9:d7:a3:04:e9:9e:51:b6:04:8b:76:93:67:c7:49:
01:96:92:21:03:f1:8f:45:26:09:03:48:1f:d0:53:1c:9f:cc:
b8:02:49:d1:ba:c8:b2:52:94:cd:d1:12:e3:3a:a0:c3:bf:b5:
57:b4:5a:c3:d8:c4:fd:28:ad:33:e7:2b:dd:f9:57:38:6b:af:
a0:cc:94:ea:2f:58:40:71:ae:be:3e:a3:7b:f5:82:be:4c:2d:
80:7c:cf:af:a9:7b:62:1a:77:a0:7b:bf:e5:15:9f:5b:19:9e:
1f:d1:b1:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhT6L33tK81RAeKWJF9izKEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNGZlODFmMzIzMTI2OGY3Y2UzYzMxNGE0OTZhODJjYzIy
NzdjM2IwHhcNMjUwNzI5MDIwMDE4WhcNMjUwNzMwMDIwMDE4WjAzMTEwLwYDVQQD
Eyg1YzNjY2NlN2Q4MmQyYjQxMWMwZWUxY2RiNzYzZjE1ZmE1MjNiNzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqZKeSBRecYEeF/ALfiFuu5I5npg
2SQzECFxOaLW0Omb2arsrqwsfe5D5VkUxUMlhIpD0UiR16cyQzIID9cAdMU6b61y
+R2LqmEIv6eUG4iiuxLmsojDn+jQjgwgfboRW00e5/O13F8zoIBmxbokjBX0vaBx
aMuEiYU7o8JwoC7g4UvNn30mzbZoX7FulxSjiMn3SewSRukQDvK5J/1rvmUJ6RAv
2ockFtmhQZskTRvtThyU0DywQre3k8gDLWxWLEite4jVlSZue6CY9jdxYmTwpMb9
83tEerp6IWJWdOigNdKlHf36lniQi6ez3i9aVUe4sObIsa+VsukioJJDWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFw8zOfYLStBHA7hzbdj8V+lI7c0MB8GA1UdIwQY
MBaAFE9P6B8yMSaPfOPDFKSWqCzCJ3w7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDBfb0h6SXhKbzk4NDhNVXBKYW9MTUluZkRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84OTQ2MGMtMTMyZi00YzkxLWJkODEt
Y2ZjMGZjYmE4M2EyLzEvVDBfb0h6SXhKbzk4NDhNVXBKYW9MTUluZkRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC84OTQ2MGMtMTMyZi00YzkxLWJkODEtY2ZjMGZjYmE4M2Ey
LzEvVDBfb0h6SXhKbzk4NDhNVXBKYW9MTUluZkRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBJxvMhf
R4cP2bneax15k6i15llJw/+HVaer2hch75Z/0qa/TR7NzSkObx6LLHzj4dC6v/IQ
ufBE9xVOSvWfxcdiXOm9VoJEwhqCcHjiN3MvNgGrscjuboPuti79pzCUehHnGm/7
FJls1UhqKDx1WCydrCN2xK+AiHQbzhny/VqgkQTzXa/g90LUgRD38yIRmr8uudej
BOmeUbYEi3aTZ8dJAZaSIQPxj0UmCQNIH9BTHJ/MuAJJ0brIslKUzdES4zqgw7+1
V7Raw9jE/SitM+cr3flXOGuvoMyU6i9YQHGuvj6je/WCvkwtgHzPr6l7Yhp3oHu/
5RWfWxmeH9Gx1g==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:02:59 2025 by rpki-client