Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
File: O8zbDbfPRmTsx9vdGAHIfODYR88.mft (raw, json)
Hash identifier: skBO+3p2U6KPqfQbFKJ23QN3dRfdVpeqkdHRRNlDAww=
Subject key identifier: C3:AA:40:A9:30:E9:BA:A4:DB:60:6E:54:E4:AF:1C:8F:AA:C6:F2:9B
Authority key identifier: 3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
Certificate issuer: /CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Certificate serial: 0198499C4806C78EEDBB026ADD43D3DCB214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
Manifest number: 0C98
Signing time: Sun 27 Jul 2025 02:00:35 +0000
Manifest this update: Sun 27 Jul 2025 02:00:35 +0000
Manifest next update: Mon 28 Jul 2025 02:00:35 +0000
Files and hashes: 1: O8zbDbfPRmTsx9vdGAHIfODYR88.crl (hash: scSofBeIT8CrH6/Th2LjAe1238Wdc5gk9ksRYULBUNs=)
2: Xmkl6LzftdXXTuFIy5y0gG04yrg.roa (hash: VpMbkZK9BvTFQ9VrZssWDiP6KBXBDS7UNKrt58XY9h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:48:06:c7:8e:ed:bb:02:6a:dd:43:d3:dc:b2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Validity
Not Before: Jul 27 02:00:35 2025 GMT
Not After : Jul 28 02:00:35 2025 GMT
Subject: CN=c3aa40a930e9baa4db606e54e4af1c8faac6f29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:9e:5f:e5:3f:2d:02:93:7b:c5:1a:e6:9e:
0b:2e:e8:39:fb:7c:36:d8:2b:8b:b7:63:ec:6f:35:
cc:14:47:50:e3:a5:62:f8:97:80:b1:8f:bc:a5:98:
9e:3e:7f:f0:cc:21:f0:bb:ad:1d:bf:82:69:47:56:
c7:ce:d7:63:5c:fb:30:12:d2:80:b1:70:54:46:dd:
a8:a7:aa:fd:30:e6:3f:27:18:fb:35:ba:02:05:b3:
69:56:db:ea:6b:6b:7a:1b:fc:f1:3e:a9:ba:7d:7b:
6c:df:71:61:0f:1b:1b:74:0a:16:ff:e5:dc:b5:db:
5d:c9:ae:5a:24:2b:35:16:69:4c:fa:df:fe:05:a1:
98:cd:53:cf:04:42:d7:89:af:6c:2e:82:05:af:4f:
28:ee:82:f6:e7:09:46:27:f9:ed:52:20:28:d1:4c:
ed:22:cc:81:43:3a:b8:10:fd:95:42:7a:de:6a:19:
19:ba:f3:34:53:2f:cb:68:3a:bf:66:f6:a6:2a:a2:
50:fb:fd:73:c0:0b:c8:e1:d6:c0:c7:da:aa:cc:3f:
a3:9b:f8:3d:28:bc:f0:82:2b:b9:39:56:79:b5:58:
e1:0e:81:de:b4:b3:a1:fd:4b:b1:b4:57:fa:df:02:
e9:eb:ca:5d:64:c1:c4:27:e7:2a:72:fc:6e:ea:cd:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AA:40:A9:30:E9:BA:A4:DB:60:6E:54:E4:AF:1C:8F:AA:C6:F2:9B
X509v3 Authority Key Identifier:
keyid:3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:06:c9:86:19:ce:c5:c2:6a:47:c4:a6:a7:ff:f3:85:c0:fc:
ae:55:37:d0:70:52:d1:d4:fe:23:d6:5f:b2:0d:60:6b:55:0b:
96:a8:df:6a:c3:98:3e:d8:44:25:ba:d9:0b:fb:77:46:1a:0b:
10:96:d9:6a:19:08:6a:cd:ac:b7:b2:71:8e:c2:56:b3:99:2c:
c6:f9:b8:34:b3:c9:fb:78:61:eb:68:17:99:68:20:58:a6:1e:
4a:bd:6b:e0:0e:e4:ad:90:33:15:8b:ca:0e:8e:ae:ef:b8:81:
58:0c:ae:9b:09:43:60:fc:e8:83:31:9a:da:48:31:7d:a8:06:
f1:26:fe:99:dd:61:1b:15:76:ad:12:25:d2:a8:d0:d3:4b:4f:
96:5b:db:90:e9:f1:01:f8:04:c6:a6:30:83:8b:88:cb:1e:e2:
ee:3e:3f:ac:cd:89:0f:44:27:fe:da:61:23:90:ee:c1:5d:2a:
9a:31:17:b1:a8:b6:15:5a:a7:59:62:02:cc:bc:b5:5b:76:56:
b9:70:b7:1d:0b:6f:c6:26:68:4a:12:c3:6f:b3:8f:2d:ab:2b:
b3:fb:2b:dd:18:7e:88:2d:86:6f:93:89:07:cc:2e:ed:e8:85:
18:4a:5e:ae:cd:e4:5e:41:cb:90:29:8b:d9:5d:f8:37:44:f7:
15:1e:10:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnEgGx47tuwJq3UPT3LIUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiY2NkYjBkYjdjZjQ2NjRlY2M3ZGJkZDE4MDFjODdjZTBk
ODQ3Y2YwHhcNMjUwNzI3MDIwMDM1WhcNMjUwNzI4MDIwMDM1WjAzMTEwLwYDVQQD
EyhjM2FhNDBhOTMwZTliYWE0ZGI2MDZlNTRlNGFmMWM4ZmFhYzZmMjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RSeX+U/LQKTe8Ua5p4LLug5+3w2
2CuLt2PsbzXMFEdQ46Vi+JeAsY+8pZiePn/wzCHwu60dv4JpR1bHztdjXPswEtKA
sXBURt2op6r9MOY/Jxj7NboCBbNpVtvqa2t6G/zxPqm6fXts33FhDxsbdAoW/+Xc
tdtdya5aJCs1FmlM+t/+BaGYzVPPBELXia9sLoIFr08o7oL25wlGJ/ntUiAo0Uzt
IsyBQzq4EP2VQnreahkZuvM0Uy/LaDq/ZvamKqJQ+/1zwAvI4dbAx9qqzD+jm/g9
KLzwgiu5OVZ5tVjhDoHetLOh/UuxtFf63wLp68pdZMHEJ+cqcvxu6s1e5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOqQKkw6bqk22BuVOSvHI+qxvKbMB8GA1UdIwQY
MBaAFDvM2w23z0Zk7Mfb3RgByHzg2EfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xY2NmODAtMDkyNS00MGUwLTg3MTQt
YzRkOWJlMTM3ZWVhLzEvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8xY2NmODAtMDkyNS00MGUwLTg3MTQtYzRkOWJlMTM3ZWVh
LzEvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAbJhhnO
xcJqR8Smp//zhcD8rlU30HBS0dT+I9Zfsg1ga1ULlqjfasOYPthEJbrZC/t3RhoL
EJbZahkIas2st7JxjsJWs5ksxvm4NLPJ+3hh62gXmWggWKYeSr1r4A7krZAzFYvK
Do6u77iBWAyumwlDYPzogzGa2kgxfagG8Sb+md1hGxV2rRIl0qjQ00tPllvbkOnx
AfgExqYwg4uIyx7i7j4/rM2JD0Qn/tphI5DuwV0qmjEXsai2FVqnWWICzLy1W3ZW
uXC3HQtvxiZoShLDb7OPLasrs/sr3Rh+iC2Gb5OJB8wu7eiFGEpers3kXkHLkCmL
2V34N0T3FR4QxQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:26:52 2025 by rpki-client