Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
File: 0OZTSNwTyFSZx3dNFWYUwSARirU.mft (raw, json)
Hash identifier: rugtFEc/HJo7VAOoaHs92Gy8gxZfxdxb0/ZRKusZnII=
Subject key identifier: C1:AD:E8:B3:BB:68:B9:3F:77:B2:11:C3:62:EF:9E:B4:D0:6E:E8:7E
Authority key identifier: D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
Certificate issuer: /CN=d0e65348dc13c85499c7774d156614c120118ab5
Certificate serial: 019847786B4C9B88692AFE3440493D9343E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
Manifest number: 1558
Signing time: Sat 26 Jul 2025 16:02:10 +0000
Manifest this update: Sat 26 Jul 2025 16:02:10 +0000
Manifest next update: Sun 27 Jul 2025 16:02:10 +0000
Files and hashes: 1: 0OZTSNwTyFSZx3dNFWYUwSARirU.crl (hash: R/e2XSCVk4OQXpCih5l72jC32J8MP8cBAuMpeYq8Bfs=)
2: I8hH4YeV3HM0yWrc52lfIOhYTt8.roa (hash: colmP8j9TQydvYGFc1+glmJgVJjDM5AxsV+6TerMW6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:6b:4c:9b:88:69:2a:fe:34:40:49:3d:93:43:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e65348dc13c85499c7774d156614c120118ab5
Validity
Not Before: Jul 26 16:02:10 2025 GMT
Not After : Jul 27 16:02:10 2025 GMT
Subject: CN=c1ade8b3bb68b93f77b211c362ef9eb4d06ee87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:d7:a5:11:e4:5f:a2:3d:4a:7d:3d:93:96:
46:a6:ad:e7:e5:b2:f0:b8:8e:3d:6d:be:77:56:7e:
94:15:0b:dc:6c:08:47:65:dc:3e:b0:df:ce:0c:86:
d8:1e:94:5e:2e:21:49:9d:35:24:f7:5c:b2:08:18:
38:e1:d1:d1:88:4b:be:1f:8f:0d:b4:71:ba:03:4d:
e0:e5:fc:95:60:18:17:41:89:a0:4c:a4:fc:4f:13:
ac:aa:12:29:67:fc:f6:b7:8e:bf:67:d4:4d:67:51:
1b:90:5d:f6:0e:6c:89:0c:84:c4:c9:ed:5a:3b:32:
84:a3:4e:84:a3:e8:a9:9b:4b:9a:64:f0:4b:eb:bf:
61:81:c4:61:32:9e:51:3b:bf:fb:aa:af:a5:8a:54:
26:84:39:c8:a6:f0:fd:35:b3:3c:b4:55:00:09:91:
76:b6:c3:d0:e6:9e:e3:24:da:c2:35:7d:79:b7:c1:
44:ee:d5:07:24:f4:87:f8:c7:2a:06:d1:31:ad:de:
ed:40:05:0f:1b:a1:bb:0b:3d:a7:1d:9d:ef:d9:3e:
48:90:49:4c:ff:8d:aa:ad:65:e5:7b:a4:1c:76:72:
8a:e0:98:de:d3:6d:26:e7:47:9b:92:74:a7:e0:2f:
ec:44:01:c6:0e:4b:21:a4:9d:44:31:a8:aa:52:10:
aa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AD:E8:B3:BB:68:B9:3F:77:B2:11:C3:62:EF:9E:B4:D0:6E:E8:7E
X509v3 Authority Key Identifier:
keyid:D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:42:f4:ba:5a:27:ba:2d:e2:cf:0a:87:ae:38:f8:de:b4:5a:
c7:c2:81:56:79:95:6f:46:47:70:0f:d9:a3:0e:2f:16:2d:ae:
da:1a:4a:19:9c:ef:09:73:3f:b6:fb:be:1a:45:43:1f:20:c3:
f6:af:fa:59:e6:f8:c0:83:f0:87:bf:0b:f5:2a:23:b9:3a:ac:
12:d0:e6:e9:57:48:e4:9a:7f:93:a2:e8:a1:94:46:14:c3:c2:
94:c9:94:47:2e:9c:82:9e:ed:30:5f:27:21:eb:0e:05:a5:fb:
ba:a0:7f:77:89:ab:c9:27:ef:0d:ae:c3:63:dc:2e:11:ad:d4:
15:6c:48:2c:3a:69:a8:d4:75:4b:f1:28:3f:31:bb:3b:cb:63:
e1:b0:3c:c1:90:5c:3e:36:1f:2a:53:6e:29:b9:78:ad:0d:36:
07:4d:7d:d9:30:88:82:81:87:d5:66:10:34:7d:df:7b:0e:e6:
9d:f5:d8:06:1a:03:2b:67:50:73:a2:1c:c7:2a:f6:cf:cd:fd:
5a:16:8e:24:9f:9b:f2:ba:45:46:6e:dc:e2:1d:b8:4f:5f:67:
33:a7:82:d5:cb:67:af:0d:2d:8d:60:ee:65:2e:02:85:22:ff:
ad:50:f2:33:83:37:f9:cc:22:8b:47:f5:a0:5d:71:d0:3a:98:
81:91:ed:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHeGtMm4hpKv40QEk9k0PkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZTY1MzQ4ZGMxM2M4NTQ5OWM3Nzc0ZDE1NjYxNGMxMjAx
MThhYjUwHhcNMjUwNzI2MTYwMjEwWhcNMjUwNzI3MTYwMjEwWjAzMTEwLwYDVQQD
EyhjMWFkZThiM2JiNjhiOTNmNzdiMjExYzM2MmVmOWViNGQwNmVlODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcPXpRHkX6I9Sn09k5ZGpq3n5bLw
uI49bb53Vn6UFQvcbAhHZdw+sN/ODIbYHpReLiFJnTUk91yyCBg44dHRiEu+H48N
tHG6A03g5fyVYBgXQYmgTKT8TxOsqhIpZ/z2t46/Z9RNZ1EbkF32DmyJDITEye1a
OzKEo06Eo+ipm0uaZPBL679hgcRhMp5RO7/7qq+lilQmhDnIpvD9NbM8tFUACZF2
tsPQ5p7jJNrCNX15t8FE7tUHJPSH+McqBtExrd7tQAUPG6G7Cz2nHZ3v2T5IkElM
/42qrWXle6QcdnKK4Jje020m50ebknSn4C/sRAHGDkshpJ1EMaiqUhCqdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGt6LO7aLk/d7IRw2LvnrTQbuh+MB8GA1UdIwQY
MBaAFNDmU0jcE8hUmcd3TRVmFMEgEYq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME9aVFNOd1R5RlNaeDNkTkZXWVV3U0FSaXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kN2E0YTctMDdlMi00OGFkLWJhNTYt
MGRiMGVjMWU5NDVjLzEvME9aVFNOd1R5RlNaeDNkTkZXWVV3U0FSaXJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9kN2E0YTctMDdlMi00OGFkLWJhNTYtMGRiMGVjMWU5NDVj
LzEvME9aVFNOd1R5RlNaeDNkTkZXWVV3U0FSaXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0L0ulon
ui3izwqHrjj43rRax8KBVnmVb0ZHcA/Zow4vFi2u2hpKGZzvCXM/tvu+GkVDHyDD
9q/6Web4wIPwh78L9SojuTqsEtDm6VdI5Jp/k6LooZRGFMPClMmURy6cgp7tMF8n
IesOBaX7uqB/d4mrySfvDa7DY9wuEa3UFWxILDppqNR1S/EoPzG7O8tj4bA8wZBc
PjYfKlNuKbl4rQ02B0192TCIgoGH1WYQNH3few7mnfXYBhoDK2dQc6Icxyr2z839
WhaOJJ+b8rpFRm7c4h24T19nM6eC1ctnrw0tjWDuZS4ChSL/rVDyM4M3+cwii0f1
oF1x0DqYgZHtug==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:28:03 2025 by rpki-client