Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json)
Hash identifier: yusH/Fms0JcnsNmkHJcU0wF8yBPxMU42KNU5QOhRB4E=
Subject key identifier: 48:77:ED:46:3E:A6:86:AB:3A:BA:A6:65:55:17:95:4D:F9:31:BC:FE
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 019845F63F6E96CCE10754E5069AAD240578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 09:00:22 +0000
Manifest this update: Sat 26 Jul 2025 09:00:22 +0000
Manifest next update: Sun 27 Jul 2025 09:00:22 +0000
Files and hashes: 1: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: nTnXYVXVvyGCySdle8xHrimsherf0SUrLciHrxuztM8=)
2: q9xJeN8PofnE74G9SyXfTH60ZME.roa (hash: yftwsdAWhtCdoWRv+jAeZvxiXWe//Rf4F2VF/Lbsjio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:3f:6e:96:cc:e1:07:54:e5:06:9a:ad:24:05:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Jul 26 09:00:22 2025 GMT
Not After : Jul 27 09:00:22 2025 GMT
Subject: CN=4877ed463ea686ab3abaa6655517954df931bcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cb:f6:15:69:1a:2a:6f:12:af:59:bf:3b:2a:
b1:97:fb:f2:a7:9b:25:d3:f9:cc:c6:00:b0:53:96:
90:ba:58:bf:08:aa:15:c1:03:4c:ca:6a:27:bb:b1:
b2:c9:0c:43:49:9c:03:d5:85:b3:2a:78:0e:19:76:
17:e1:a5:54:b7:b6:7d:4e:fd:de:0a:9d:78:44:d0:
fa:87:65:80:8d:b2:4c:c5:a4:11:57:05:b6:a3:89:
e3:dd:b3:5b:15:83:50:4c:3a:4c:5a:d6:2e:7d:cc:
63:81:1c:e9:db:b8:ba:56:d9:a6:78:9b:5f:58:ee:
4e:97:17:d7:bc:65:1d:84:e7:40:4a:75:42:7f:11:
77:34:53:b1:52:01:d1:e0:18:85:11:36:7f:60:e4:
77:0f:c0:10:b0:9f:13:d7:a8:25:27:69:7c:4c:39:
d7:12:ff:ef:34:37:78:a7:e9:1c:76:05:ff:05:e2:
6f:b5:b1:50:50:5b:fe:bb:79:24:51:2d:eb:da:ca:
09:16:e3:9f:13:e9:10:42:97:35:19:89:86:f8:ee:
9c:22:75:e1:b4:30:bc:28:eb:6e:de:94:34:4e:20:
c6:87:ce:7a:ed:71:3c:15:e4:5d:47:99:dd:01:a2:
ac:3c:c5:2f:6b:cf:0a:e1:34:59:ed:24:0c:3e:ab:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:77:ED:46:3E:A6:86:AB:3A:BA:A6:65:55:17:95:4D:F9:31:BC:FE
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:69:80:71:55:af:ea:4e:86:b3:88:4b:ef:bf:19:ba:7a:e6:
8b:39:0a:34:ca:f1:c9:3b:d7:ac:50:9b:cb:a4:96:54:31:3e:
6f:5c:3f:9e:d9:b9:0e:b7:61:d0:f2:ad:17:6a:58:6a:f4:25:
e1:2c:fa:fe:45:05:89:43:fd:b9:9a:af:08:f0:41:87:cc:66:
5b:48:ad:74:21:6e:fc:c5:e1:25:88:60:7e:a4:46:5b:b7:69:
65:9e:af:af:9b:51:eb:9b:a5:dc:e5:b0:a0:75:3b:e1:c0:55:
31:b2:dd:d4:ee:f2:4d:08:ea:2b:ea:2d:8d:96:96:bc:21:a5:
76:a7:65:49:0a:f7:a6:13:98:e5:8f:95:a1:27:9b:65:7f:7b:
51:26:5f:f6:e3:84:5d:a9:6e:7f:8b:b3:01:e8:79:1d:e8:c4:
35:90:c0:ec:51:da:be:d4:fe:26:c9:9d:7f:0c:a3:15:ff:7f:
9e:03:a2:14:eb:dc:11:a0:5b:8a:38:54:5b:22:12:7a:97:9f:
fb:c5:c3:50:60:e2:54:ea:c5:54:56:80:e4:f2:b3:62:2d:85:
c3:d4:fd:8d:1a:d6:b3:8c:5b:05:79:6b:b5:23:fb:fa:ec:10:
51:81:99:9e:56:aa:d2:a4:db:54:c5:f7:e2:5c:e9:18:b5:f7:
b0:36:bf:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhF9j9ulszhB1TlBpqtJAV4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZGUyY2Q1MjE1ZTkzYmZhMGNhNmRmOGIyYzFmNWVkMmM5
NGFmNzQwHhcNMjUwNzI2MDkwMDIyWhcNMjUwNzI3MDkwMDIyWjAzMTEwLwYDVQQD
Eyg0ODc3ZWQ0NjNlYTY4NmFiM2FiYWE2NjU1NTE3OTU0ZGY5MzFiY2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18v2FWkaKm8Sr1m/Oyqxl/vyp5sl
0/nMxgCwU5aQuli/CKoVwQNMymonu7GyyQxDSZwD1YWzKngOGXYX4aVUt7Z9Tv3e
Cp14RND6h2WAjbJMxaQRVwW2o4nj3bNbFYNQTDpMWtYufcxjgRzp27i6VtmmeJtf
WO5OlxfXvGUdhOdASnVCfxF3NFOxUgHR4BiFETZ/YOR3D8AQsJ8T16glJ2l8TDnX
Ev/vNDd4p+kcdgX/BeJvtbFQUFv+u3kkUS3r2soJFuOfE+kQQpc1GYmG+O6cInXh
tDC8KOtu3pQ0TiDGh8567XE8FeRdR5ndAaKsPMUva88K4TRZ7SQMPqtmXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEh37UY+poarOrqmZVUXlU35Mbz+MB8GA1UdIwQY
MBaAFDveLNUhXpO/oMpt+LLB9e0slK90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jNTNhM2UtZjkwZC00NzQyLTg0ZmIt
ZGIzMTlhMzFiZGY3LzEvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9jNTNhM2UtZjkwZC00NzQyLTg0ZmItZGIzMTlhMzFiZGY3
LzEvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmmAcVWv
6k6Gs4hL778ZunrmizkKNMrxyTvXrFCby6SWVDE+b1w/ntm5Drdh0PKtF2pYavQl
4Sz6/kUFiUP9uZqvCPBBh8xmW0itdCFu/MXhJYhgfqRGW7dpZZ6vr5tR65ul3OWw
oHU74cBVMbLd1O7yTQjqK+otjZaWvCGldqdlSQr3phOY5Y+VoSebZX97USZf9uOE
Xaluf4uzAeh5HejENZDA7FHavtT+JsmdfwyjFf9/ngOiFOvcEaBbijhUWyISepef
+8XDUGDiVOrFVFaA5PKzYi2Fw9T9jRrWs4xbBXlrtSP7+uwQUYGZnlaq0qTbVMX3
4lzpGLX3sDa/GQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:23:41 2025 by rpki-client