Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
File: O62c1QNPgVWPg9I47KQGMyvXuoU.mft (raw, json)
Hash identifier: 08Z6Z5EvD3skrjJmJnz6Qm7quKAb9YZzh7CM7lgfi/Y=
Subject key identifier: D1:F4:66:FE:5F:EE:0D:A0:C9:53:1B:CD:0E:8F:4A:EF:7D:C4:67:0C
Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Certificate issuer: /CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Certificate serial: 0198567C34B9DE7320E001A2A057005BD977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
Manifest number: 0849
Signing time: Tue 29 Jul 2025 14:00:36 +0000
Manifest this update: Tue 29 Jul 2025 14:00:36 +0000
Manifest next update: Wed 30 Jul 2025 14:00:36 +0000
Files and hashes: 1: 9v4uAwYJrvb2Yfzwn7vUGRJFfrA.roa (hash: Q7fvWDsdQ9HQh+wgSlc858kuPmBuOrnOtrTzOH5aOA4=)
2: I7dpcVjAHE5hGJn0EYmp-wUevik.roa (hash: eOwI5yLF5oxr8SKT6hK3RCMgVUO2F6SCJ9PKWEwThMs=)
3: O62c1QNPgVWPg9I47KQGMyvXuoU.crl (hash: xElxmF3TiA4ts9bGL9nTzVovnMcgxYNzjrDqyLX6ohU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:7c:34:b9:de:73:20:e0:01:a2:a0:57:00:5b:d9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Validity
Not Before: Jul 29 14:00:36 2025 GMT
Not After : Jul 30 14:00:36 2025 GMT
Subject: CN=d1f466fe5fee0da0c9531bcd0e8f4aef7dc4670c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:b6:be:04:14:e8:c1:e3:52:5b:7d:c7:25:
d4:6a:ca:17:82:8b:b0:f8:92:e5:c9:a7:a4:ae:36:
fd:ea:8f:cf:5a:f8:ad:b2:a2:cb:8e:ca:c0:ba:d4:
5c:5f:fd:65:c3:98:ac:4e:27:0c:3b:50:24:c2:cf:
28:04:67:c0:99:81:17:9a:e7:8e:fe:c8:b3:ff:4c:
b7:a8:a2:a0:cf:6e:43:ee:2b:cc:df:80:0c:8a:cd:
36:c5:57:80:74:e6:1c:3b:09:5f:3b:51:f9:a7:0f:
c6:43:06:19:55:32:cc:a0:f4:c8:fe:a2:8a:bd:24:
fc:e7:f1:c4:27:82:35:1b:0d:8b:3d:7f:7d:69:dc:
dd:09:3b:b9:c3:1a:9b:a2:6c:47:21:5c:9e:f1:7b:
3a:e1:29:51:45:4f:af:b8:e3:ac:98:8a:6c:52:10:
4d:b9:32:d9:03:c7:02:33:7c:60:50:c1:0c:a9:50:
fb:38:69:11:07:24:c7:6d:eb:9b:ab:4e:95:c1:da:
4f:39:07:a6:b0:58:ca:51:7b:76:2b:ff:20:b2:c3:
fe:5a:5b:4a:6f:b7:d0:20:48:d3:a5:58:3f:f0:2f:
25:23:d5:b7:f5:d1:c9:ca:af:04:5e:ea:99:49:58:
3f:13:fe:ee:3c:38:d9:3f:e9:d0:d8:d5:31:62:5b:
24:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F4:66:FE:5F:EE:0D:A0:C9:53:1B:CD:0E:8F:4A:EF:7D:C4:67:0C
X509v3 Authority Key Identifier:
keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e0:9f:0d:01:9c:95:29:4f:51:23:e3:7e:a7:91:d4:7c:df:
2a:21:45:69:ba:5c:98:ff:37:53:cd:92:34:bc:6c:2e:fb:7e:
66:16:63:eb:ac:4e:e5:e6:39:7c:ab:a0:89:2c:10:c5:21:5a:
a7:78:34:e9:92:d4:63:31:ec:9f:ca:03:1c:71:b1:c2:65:cc:
7f:21:90:f8:de:90:16:25:c2:d5:c6:f6:7f:43:e9:8d:36:f7:
b8:a9:a4:d5:cf:8e:b2:21:e9:17:e0:9e:87:c2:13:3e:a6:16:
08:02:e5:4c:17:78:a2:1d:27:c0:d5:b8:5a:e8:19:40:45:f3:
b1:03:88:9a:eb:95:e9:1b:87:f9:f8:5d:6e:2b:87:f4:c3:ac:
6e:f1:2c:53:97:b1:76:04:f3:9d:e0:d8:6f:0c:89:56:1c:31:
b3:12:38:eb:fd:b6:6f:a5:d9:f7:29:34:ec:26:46:dc:e0:69:
bd:b8:b8:bc:6a:5a:57:1a:e5:9d:b7:fd:af:6f:4e:d0:f9:ae:
d2:9c:9a:84:54:c4:e3:f4:c1:3d:6d:69:fc:41:c8:d8:01:c4:
0b:44:0d:c8:dd:47:1b:c7:86:a1:7c:4c:1f:79:c4:e4:87:5d:
26:bd:0d:fc:d8:cf:ec:cc:47:79:8c:5a:9d:24:e7:db:1f:44:
e5:20:81:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhWfDS53nMg4AGioFcAW9l3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYWQ5Y2Q1MDM0ZjgxNTU4ZjgzZDIzOGVjYTQwNjMzMmJk
N2JhODUwHhcNMjUwNzI5MTQwMDM2WhcNMjUwNzMwMTQwMDM2WjAzMTEwLwYDVQQD
EyhkMWY0NjZmZTVmZWUwZGEwYzk1MzFiY2QwZThmNGFlZjdkYzQ2NzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+K2vgQU6MHjUlt9xyXUasoXgouw
+JLlyaekrjb96o/PWvitsqLLjsrAutRcX/1lw5isTicMO1Akws8oBGfAmYEXmueO
/siz/0y3qKKgz25D7ivM34AMis02xVeAdOYcOwlfO1H5pw/GQwYZVTLMoPTI/qKK
vST85/HEJ4I1Gw2LPX99adzdCTu5wxqbomxHIVye8Xs64SlRRU+vuOOsmIpsUhBN
uTLZA8cCM3xgUMEMqVD7OGkRByTHbeubq06VwdpPOQemsFjKUXt2K/8gssP+WltK
b7fQIEjTpVg/8C8lI9W39dHJyq8EXuqZSVg/E/7uPDjZP+nQ2NUxYlskFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNH0Zv5f7g2gyVMbzQ6PSu99xGcMMB8GA1UdIwQY
MBaAFDutnNUDT4FVj4PSOOykBjMr17qFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzYyYzFRTlBnVldQZzlJNDdLUUdNeXZYdW9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80MTZiYzctY2U4Ny00MmI2LThjNjgt
NGJhNWYyMDZmNjVhLzEvTzYyYzFRTlBnVldQZzlJNDdLUUdNeXZYdW9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC80MTZiYzctY2U4Ny00MmI2LThjNjgtNGJhNWYyMDZmNjVh
LzEvTzYyYzFRTlBnVldQZzlJNDdLUUdNeXZYdW9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOCfDQGc
lSlPUSPjfqeR1HzfKiFFabpcmP83U82SNLxsLvt+ZhZj66xO5eY5fKugiSwQxSFa
p3g06ZLUYzHsn8oDHHGxwmXMfyGQ+N6QFiXC1cb2f0PpjTb3uKmk1c+OsiHpF+Ce
h8ITPqYWCALlTBd4oh0nwNW4WugZQEXzsQOImuuV6RuH+fhdbiuH9MOsbvEsU5ex
dgTzneDYbwyJVhwxsxI46/22b6XZ9yk07CZG3OBpvbi4vGpaVxrlnbf9r29O0Pmu
0pyahFTE4/TBPW1p/EHI2AHEC0QNyN1HG8eGoXxMH3nE5IddJr0N/NjP7MxHeYxa
nSTn2x9E5SCBNA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 19:00:51 2025 by rpki-client