Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
File: r-o5b03jVdqNwHmh6IXgwzdezjI.mft (raw, json)
Hash identifier: QwI+4bMp8DL/CFnxJwGJWinu0nASE2V3QGqyK5DgC+g=
Subject key identifier: 41:92:84:85:84:1C:FD:41:63:CE:9F:68:BD:47:01:82:DE:8C:E6:6C
Authority key identifier: AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
Certificate issuer: /CN=afea396f4de355da8dc079a1e885e0c3375ece32
Certificate serial: 01984A09C313F3459B95D1D3F882A404FC4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 04:00:10 +0000
Manifest this update: Sun 27 Jul 2025 04:00:10 +0000
Manifest next update: Mon 28 Jul 2025 04:00:10 +0000
Files and hashes: 1: acvvT5q-PVeUjsCLlPVuoTE00po.roa (hash: MQoBLU//Irn0dEBmlINyAJ8ehIRD+2s0D9hVDHRZB5A=)
2: r-o5b03jVdqNwHmh6IXgwzdezjI.crl (hash: l52aMfDUJVMIgmJoO1HfLkaQzv1jmMOHmkAMLBDimDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:c3:13:f3:45:9b:95:d1:d3:f8:82:a4:04:fc:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afea396f4de355da8dc079a1e885e0c3375ece32
Validity
Not Before: Jul 27 04:00:10 2025 GMT
Not After : Jul 28 04:00:10 2025 GMT
Subject: CN=41928485841cfd4163ce9f68bd470182de8ce66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:40:e9:f2:00:d7:23:41:28:79:8c:c6:cf:
98:de:75:1c:fe:f4:dc:8b:52:07:43:8f:f8:16:e2:
1e:58:54:e6:06:c3:5e:6e:47:43:00:b9:75:86:a6:
68:63:10:15:6e:9e:bf:1d:1f:63:c9:2a:74:25:b3:
63:6c:f0:e3:f3:86:1e:92:2c:2b:92:51:76:3a:06:
c4:c8:88:d5:56:98:8b:9e:49:ee:70:21:e5:21:d0:
b7:49:c4:17:15:5b:78:84:65:b4:97:52:af:27:6f:
0c:3b:77:31:64:20:26:b9:25:4f:f9:d0:9f:09:da:
b3:2f:97:8d:18:92:fa:02:d1:3b:a7:21:eb:1c:37:
16:98:3b:e4:e4:23:24:b0:48:23:ef:06:d6:b5:8d:
9d:9e:ab:01:5d:9c:bd:c2:d6:86:70:16:54:dd:ac:
5a:a5:3a:7f:ad:c3:77:2e:7a:f7:fb:6d:34:65:6b:
4c:f1:3a:32:91:be:b0:ff:4b:46:7a:c2:b7:47:0d:
f6:ef:b3:9f:07:18:1d:d5:24:a2:a0:80:e0:4c:f5:
ed:66:df:75:8e:37:c3:94:88:7d:94:74:81:60:90:
97:f7:28:e0:b6:00:b9:59:6b:04:15:42:eb:73:5a:
23:bc:a8:53:86:1d:b8:47:7c:cb:6b:73:2f:75:d3:
41:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:92:84:85:84:1C:FD:41:63:CE:9F:68:BD:47:01:82:DE:8C:E6:6C
X509v3 Authority Key Identifier:
keyid:AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:dd:1f:12:8d:08:86:bc:ba:53:a4:d7:ab:ed:1c:ec:de:01:
e6:ca:69:9a:be:c0:e6:4c:0d:76:02:ff:a1:0e:9b:e7:4e:4f:
15:8c:cf:fd:8d:f6:66:8c:c6:42:5e:59:5c:5e:f9:53:77:ed:
f8:77:bc:46:3f:7f:d2:0a:93:a2:24:37:e3:2a:cc:ff:2e:71:
05:89:d4:b7:0f:41:63:45:61:a5:96:9a:32:b0:ff:65:6d:ba:
d7:93:5c:5a:6d:41:10:dd:68:e0:ce:2c:c8:6d:06:35:18:3b:
20:99:8e:ac:9f:3f:60:30:47:6a:a6:eb:f8:9f:5a:d2:4c:f3:
c7:bd:51:5d:59:c6:87:73:77:92:57:38:22:1d:a8:e3:5a:16:
38:57:14:e4:c3:06:df:f4:13:e2:da:79:61:d6:f6:6d:15:e1:
26:cb:f7:31:4c:36:09:39:4d:f7:f0:af:53:96:8b:d2:b7:8e:
78:aa:26:0a:25:eb:79:ae:0b:81:a2:54:79:2e:78:f1:89:e4:
6f:3b:b9:ee:63:56:17:0d:70:38:96:5e:a5:14:67:f7:c9:8b:
65:73:b7:31:f9:49:63:ce:04:41:6b:1c:30:d0:52:58:35:69:
9b:0c:39:02:ed:ea:c6:90:66:7c:fe:4b:1c:df:01:ea:b4:62:
5f:13:31:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCcMT80WbldHT+IKkBPxPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZWEzOTZmNGRlMzU1ZGE4ZGMwNzlhMWU4ODVlMGMzMzc1
ZWNlMzIwHhcNMjUwNzI3MDQwMDEwWhcNMjUwNzI4MDQwMDEwWjAzMTEwLwYDVQQD
Eyg0MTkyODQ4NTg0MWNmZDQxNjNjZTlmNjhiZDQ3MDE4MmRlOGNlNjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2VA6fIA1yNBKHmMxs+Y3nUc/vTc
i1IHQ4/4FuIeWFTmBsNebkdDALl1hqZoYxAVbp6/HR9jySp0JbNjbPDj84Yekiwr
klF2OgbEyIjVVpiLnknucCHlIdC3ScQXFVt4hGW0l1KvJ28MO3cxZCAmuSVP+dCf
CdqzL5eNGJL6AtE7pyHrHDcWmDvk5CMksEgj7wbWtY2dnqsBXZy9wtaGcBZU3axa
pTp/rcN3Lnr3+200ZWtM8Toykb6w/0tGesK3Rw3277OfBxgd1SSioIDgTPXtZt91
jjfDlIh9lHSBYJCX9yjgtgC5WWsEFULrc1ojvKhThh24R3zLa3MvddNB5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGShIWEHP1BY86faL1HAYLejOZsMB8GA1UdIwQY
MBaAFK/qOW9N41XajcB5oeiF4MM3Xs4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci1vNWIwM2pWZHFOd0htaDZJWGd3emRlempJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZTNmN2ItYzc4Zi00NjYzLWJmMWQt
ZjVkYmRmNzIyZjVkLzEvci1vNWIwM2pWZHFOd0htaDZJWGd3emRlempJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZTNmN2ItYzc4Zi00NjYzLWJmMWQtZjVkYmRmNzIyZjVk
LzEvci1vNWIwM2pWZHFOd0htaDZJWGd3emRlempJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ90fEo0I
hry6U6TXq+0c7N4B5sppmr7A5kwNdgL/oQ6b505PFYzP/Y32ZozGQl5ZXF75U3ft
+He8Rj9/0gqToiQ34yrM/y5xBYnUtw9BY0VhpZaaMrD/ZW2615NcWm1BEN1o4M4s
yG0GNRg7IJmOrJ8/YDBHaqbr+J9a0kzzx71RXVnGh3N3klc4Ih2o41oWOFcU5MMG
3/QT4tp5Ydb2bRXhJsv3MUw2CTlN9/CvU5aL0reOeKomCiXrea4LgaJUeS548Ynk
bzu57mNWFw1wOJZepRRn98mLZXO3MflJY84EQWscMNBSWDVpmww5Au3qxpBmfP5L
HN8B6rRiXxMxhg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:23 2025 by rpki-client