Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
File: 2OnkD_n7tigNo26XLyDTElAMGFw.mft (raw, json)
Hash identifier: seT8gjsrMXwltkcvwZqM2pHSIptPSWCm7EQZj3Z6I1g=
Subject key identifier: 71:6A:AF:4A:F9:72:F7:91:31:0F:9B:83:60:E3:03:7D:89:AF:ED:16
Authority key identifier: D8:E9:E4:0F:F9:FB:B6:28:0D:A3:6E:97:2F:20:D3:12:50:0C:18:5C
Certificate issuer: /CN=d8e9e40ff9fbb6280da36e972f20d312500c185c
Certificate serial: 01983E05B108058631870436E563D02B7092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2OnkD_n7tigNo26XLyDTElAMGFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
Manifest number: 12E3
Signing time: Thu 24 Jul 2025 20:00:17 +0000
Manifest this update: Thu 24 Jul 2025 20:00:17 +0000
Manifest next update: Fri 25 Jul 2025 20:00:17 +0000
Files and hashes: 1: 2OnkD_n7tigNo26XLyDTElAMGFw.crl (hash: Zd+xjVeuYpoHOPoZpPlDUwzu7kLsRiq+0G0R6WhMbek=)
2: h5ibvBXljsm0_9K-AnuxEpyWzoI.roa (hash: SvGB7aqcdXdN/Cdk0NHyr1xHsC5MuHnt2HID1mkRiq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2OnkD_n7tigNo26XLyDTElAMGFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:05:b1:08:05:86:31:87:04:36:e5:63:d0:2b:70:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8e9e40ff9fbb6280da36e972f20d312500c185c
Validity
Not Before: Jul 24 20:00:17 2025 GMT
Not After : Jul 25 20:00:17 2025 GMT
Subject: CN=716aaf4af972f791310f9b8360e3037d89afed16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ba:9c:8d:1b:55:58:42:8e:a1:ad:26:a8:d8:
6f:8a:49:12:7e:c2:6b:c8:1b:0e:d6:4e:f4:f0:85:
37:ee:3c:87:c2:be:d0:00:02:94:f7:5c:fc:72:e0:
04:d8:a9:a3:2c:aa:73:49:07:5d:9e:c5:62:5b:95:
70:c8:b1:4e:a0:c9:3d:46:63:37:86:c6:f5:d3:d0:
c1:02:01:fa:bd:0e:fc:58:3f:9b:2e:8d:e5:d2:0e:
10:48:54:62:79:08:f9:59:0a:26:1d:af:27:8e:55:
90:58:d9:bd:8b:87:47:d8:66:44:39:81:3d:72:06:
33:d1:66:f4:c9:5b:15:9a:78:fe:48:3d:11:16:64:
75:0a:81:2e:81:5d:62:61:7b:df:1d:d7:84:b1:4f:
c7:25:61:c7:6b:1e:af:b4:66:d4:24:87:6f:cc:52:
dc:5b:ad:a7:8c:16:6a:86:99:2a:ef:da:e6:77:8e:
ff:57:7a:44:50:db:6c:f2:93:d3:77:40:18:a2:dd:
35:aa:36:cd:41:28:b1:98:be:c3:4f:dc:5e:67:3e:
37:bf:e2:11:11:a1:e2:33:91:87:53:c6:a8:8d:c8:
1f:a4:13:9c:a6:6b:fe:2e:ca:c3:29:d3:26:e0:f8:
d9:80:a8:f8:ec:22:26:1a:60:a0:f7:19:21:cc:b6:
8b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6A:AF:4A:F9:72:F7:91:31:0F:9B:83:60:E3:03:7D:89:AF:ED:16
X509v3 Authority Key Identifier:
keyid:D8:E9:E4:0F:F9:FB:B6:28:0D:A3:6E:97:2F:20:D3:12:50:0C:18:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OnkD_n7tigNo26XLyDTElAMGFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:55:a9:4e:26:8e:48:23:3d:40:e9:42:53:f5:e3:41:74:3d:
19:fb:b0:da:97:2b:2e:b1:df:74:e5:55:04:27:3f:ad:d0:f1:
1c:8d:36:10:b6:31:78:d6:32:83:17:66:2a:6e:f5:b8:89:79:
fe:73:de:d2:ab:d9:31:03:07:cc:3e:de:df:e3:2d:77:15:75:
18:11:70:89:c4:10:b3:18:30:48:cc:fa:65:fd:50:a3:28:61:
68:60:a2:25:8a:66:53:38:ad:3d:7c:02:54:9a:4b:23:5d:fb:
bf:e1:ec:30:d7:89:28:83:fd:29:81:10:49:be:43:dd:a2:e6:
74:a6:d5:43:7f:66:f7:64:0b:9e:2a:b8:35:ac:70:f2:eb:90:
f9:cd:2a:49:ea:ae:9f:a6:ff:43:30:0d:fc:ce:db:76:34:1f:
81:72:54:00:56:3a:ab:0c:c3:7f:cd:ca:49:65:48:a2:c1:64:
ef:e2:d7:84:a2:80:fe:d9:9e:c8:0e:6b:4e:1b:38:38:29:8f:
e6:1f:ce:cd:f6:56:13:e3:8d:0c:8a:d3:71:04:6e:d5:24:59:
58:c9:6f:74:5b:96:98:32:ff:9a:ca:ae:1e:6d:70:59:11:71:
8e:ac:f3:3d:1b:7b:aa:06:f8:11:b1:c1:09:d5:59:cc:9b:eb:
a3:5d:8c:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg+BbEIBYYxhwQ25WPQK3CSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZTllNDBmZjlmYmI2MjgwZGEzNmU5NzJmMjBkMzEyNTAw
YzE4NWMwHhcNMjUwNzI0MjAwMDE3WhcNMjUwNzI1MjAwMDE3WjAzMTEwLwYDVQQD
Eyg3MTZhYWY0YWY5NzJmNzkxMzEwZjliODM2MGUzMDM3ZDg5YWZlZDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LqcjRtVWEKOoa0mqNhvikkSfsJr
yBsO1k708IU37jyHwr7QAAKU91z8cuAE2KmjLKpzSQddnsViW5VwyLFOoMk9RmM3
hsb109DBAgH6vQ78WD+bLo3l0g4QSFRieQj5WQomHa8njlWQWNm9i4dH2GZEOYE9
cgYz0Wb0yVsVmnj+SD0RFmR1CoEugV1iYXvfHdeEsU/HJWHHax6vtGbUJIdvzFLc
W62njBZqhpkq79rmd47/V3pEUNts8pPTd0AYot01qjbNQSixmL7DT9xeZz43v+IR
EaHiM5GHU8aojcgfpBOcpmv+LsrDKdMm4PjZgKj47CImGmCg9xkhzLaLyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFqr0r5cveRMQ+bg2DjA32Jr+0WMB8GA1UdIwQY
MBaAFNjp5A/5+7YoDaNuly8g0xJQDBhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk9ua0Rfbjd0aWdObzI2WEx5RFRFbEFNR0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84NzM4YjktMmQwYS00ZWY2LWFmYWQt
MWFlNTA2ZWExNzYwLzEvMk9ua0Rfbjd0aWdObzI2WEx5RFRFbEFNR0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS84NzM4YjktMmQwYS00ZWY2LWFmYWQtMWFlNTA2ZWExNzYw
LzEvMk9ua0Rfbjd0aWdObzI2WEx5RFRFbEFNR0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFWpTiaO
SCM9QOlCU/XjQXQ9Gfuw2pcrLrHfdOVVBCc/rdDxHI02ELYxeNYygxdmKm71uIl5
/nPe0qvZMQMHzD7e3+MtdxV1GBFwicQQsxgwSMz6Zf1QoyhhaGCiJYpmUzitPXwC
VJpLI137v+HsMNeJKIP9KYEQSb5D3aLmdKbVQ39m92QLniq4Naxw8uuQ+c0qSequ
n6b/QzAN/M7bdjQfgXJUAFY6qwzDf83KSWVIosFk7+LXhKKA/tmeyA5rThs4OCmP
5h/OzfZWE+ONDIrTcQRu1SRZWMlvdFuWmDL/msquHm1wWRFxjqzzPRt7qgb4EbHB
CdVZzJvro12Mpg==
-----END CERTIFICATE-----
Generated at Thu Jul 24 23:37:28 2025 by rpki-client