Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier: JAwuKlUbvkmOq4vYjiboamHq2QTYFFbfCauD0YkDk+A=
Subject key identifier: 6F:D3:C3:0E:45:60:3E:81:98:39:7C:A8:13:C7:36:B5:42:13:75:6F
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 01983DD071F54187C14DE450407155673B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number: 0189
Signing time: Thu 24 Jul 2025 19:02:07 +0000
Manifest this update: Thu 24 Jul 2025 19:02:07 +0000
Manifest next update: Fri 25 Jul 2025 19:02:07 +0000
Files and hashes: 1: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: mLLvKyKz+BALZdpjfb1SqkKHrX4M4JxcnJWaYmm6+LQ=)
2: MEk6COdLayDwspMkca7X6AtTbGc.roa (hash: LzuFK2lAnPM5ilB5mo7OmDeySV6Fxi80CkdMaYJoff4=)
3: ejchce-hV6tRVRay48MMQu7AoMY.roa (hash: lMIzybFQd6b9BY1auWIGvBebble5XxNM96EF4zsuItE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:d0:71:f5:41:87:c1:4d:e4:50:40:71:55:67:3b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: Jul 24 19:02:07 2025 GMT
Not After : Jul 25 19:02:07 2025 GMT
Subject: CN=6fd3c30e45603e8198397ca813c736b54213756f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:96:d8:65:73:eb:a7:dd:a4:be:86:6f:01:
a8:b8:99:ba:21:4c:1b:5a:cf:cf:3d:4d:ba:f4:90:
f7:67:1f:b6:1c:97:65:3a:ca:d5:78:be:89:c4:e2:
5e:6a:45:72:32:df:c4:b5:80:a6:aa:b5:3e:b9:a5:
9b:52:87:07:bd:88:88:3a:db:b8:78:57:6f:da:d5:
93:6f:56:c9:77:52:46:08:67:b0:f8:3c:6d:9d:43:
93:4c:74:b8:4c:6c:63:87:f8:d7:42:bd:df:94:26:
e5:5a:0e:09:35:32:cc:a0:ad:cd:ca:04:d2:65:74:
e6:89:a3:4f:e4:e3:d1:e9:0d:a2:c7:31:b4:be:03:
30:89:ae:f5:61:d6:3a:f2:90:33:bf:99:cf:4c:4f:
2d:7d:d1:55:05:81:57:06:2c:22:cc:23:b4:1f:b0:
35:2b:0a:1c:76:91:9e:da:cc:1b:d8:88:f2:02:b3:
b4:ac:28:05:5f:0f:22:a7:b7:24:4c:ec:d4:60:df:
40:b9:ff:83:27:6d:42:fc:1f:93:69:2e:f1:73:05:
9e:6f:07:a0:16:65:f6:37:56:9f:af:7a:1f:dd:f6:
1e:83:38:e0:81:ef:00:2d:96:cb:d0:13:6c:cf:34:
c3:76:92:08:44:9a:a8:ce:db:77:40:a9:97:89:ab:
5c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D3:C3:0E:45:60:3E:81:98:39:7C:A8:13:C7:36:B5:42:13:75:6F
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:75:60:8e:b7:ee:6f:5e:f8:79:cd:c1:9f:bb:29:6e:d6:d2:
e5:82:dc:c3:7a:40:1a:11:3b:58:83:ec:a8:15:14:b1:b5:57:
3b:cd:e6:b8:9c:cc:fd:74:7b:65:63:8f:26:6b:78:69:d9:58:
9f:c6:8d:68:74:4b:c6:68:f4:12:23:40:e7:8b:4d:ff:78:13:
ad:b6:2e:0e:be:11:18:19:12:f3:4d:3e:2c:08:d8:d5:30:70:
b6:4a:24:2d:8f:95:5f:94:e9:ce:e2:39:9e:fd:07:d1:44:95:
9a:b6:89:80:04:ab:f5:cc:00:12:a8:1f:21:be:2f:4e:08:67:
9c:46:c7:37:64:1f:b7:03:91:10:95:2a:fc:ac:c5:60:00:e0:
30:cf:b2:94:e8:42:11:5e:87:43:cb:06:14:82:1c:17:b5:6b:
5d:78:4d:bd:19:30:3c:c3:49:6b:74:76:81:ed:fa:50:2b:38:
4e:10:5b:76:36:12:8f:df:05:9d:bc:93:e8:60:9b:83:ce:58:
e6:69:7f:02:fe:f4:d5:36:65:ca:69:fe:49:d4:4a:2e:7b:8a:
c1:91:e9:b3:e9:ef:a3:ba:9c:e1:87:45:5a:e7:92:7d:ea:6d:
f9:14:bc:45:bd:34:81:1b:23:e9:7f:9b:c0:8a:71:7c:ac:da:
ab:63:8a:ce
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZg90HH1QYfBTeRQQHFVZzsuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhOGNiOTQ2ZmU4NjAxYTBmZDJhMWIzZTQzODJiNmIxZGMw
NDRmNTcwHhcNMjUwNzI0MTkwMjA3WhcNMjUwNzI1MTkwMjA3WjAzMTEwLwYDVQQD
Eyg2ZmQzYzMwZTQ1NjAzZTgxOTgzOTdjYTgxM2M3MzZiNTQyMTM3NTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9eW2GVz66fdpL6GbwGouJm6IUwb
Ws/PPU269JD3Zx+2HJdlOsrVeL6JxOJeakVyMt/EtYCmqrU+uaWbUocHvYiIOtu4
eFdv2tWTb1bJd1JGCGew+DxtnUOTTHS4TGxjh/jXQr3flCblWg4JNTLMoK3NygTS
ZXTmiaNP5OPR6Q2ixzG0vgMwia71YdY68pAzv5nPTE8tfdFVBYFXBiwizCO0H7A1
KwocdpGe2swb2IjyArO0rCgFXw8ip7ckTOzUYN9Auf+DJ21C/B+TaS7xcwWebweg
FmX2N1afr3of3fYegzjgge8ALZbL0BNszzTDdpIIRJqoztt3QKmXiatcFQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFG/Tww5FYD6BmDl8qBPHNrVCE3VvMB8GA1UdIwQY
MBaAFPqMuUb+hgGg/SobPkOCtrHcBE9XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1veTVSdjZHQWFEOUtocy1RNEsyc2R3RVQxYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMGQyMjcwLTVjNmYtNDJjZi1hNTYw
LTk0YTZlZjAxZDA0Ny8xLzEtb3k1UnY2R0FhRDlLaHMtUTRLMnNkd0VUMWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMzLzBkMjI3MC01YzZmLTQyY2YtYTU2MC05NGE2ZWYwMWQw
NDcvMS8xLW95NVJ2NkdBYUQ5S2hzLVE0SzJzZHdFVDFjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXVg
jrfub174ec3Bn7spbtbS5YLcw3pAGhE7WIPsqBUUsbVXO83muJzM/XR7ZWOPJmt4
adlYn8aNaHRLxmj0EiNA54tN/3gTrbYuDr4RGBkS800+LAjY1TBwtkokLY+VX5Tp
zuI5nv0H0USVmraJgASr9cwAEqgfIb4vTghnnEbHN2QftwOREJUq/KzFYADgMM+y
lOhCEV6HQ8sGFIIcF7VrXXhNvRkwPMNJa3R2ge36UCs4ThBbdjYSj98FnbyT6GCb
g85Y5ml/Av701TZlymn+SdRKLnuKwZHps+nvo7qc4YdFWueSfept+RS8Rb00gRsj
6X+bwIpxfKzaq2OKzg==
-----END CERTIFICATE-----
Generated at Thu Jul 24 23:01:15 2025 by rpki-client