Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
File: 4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft (raw, json)
Hash identifier: PL5mWzQ4JAnGgltELsbX/77LbF505WhWSNnlMhPvypQ=
Subject key identifier: CD:0E:1C:CD:85:56:8C:05:6F:9B:EA:3E:22:F5:0E:69:F1:ED:9A:88
Authority key identifier: E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
Certificate issuer: /CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Certificate serial: 0198572104188C739EB8AE0024688A7CEF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
Manifest number: 0A23
Signing time: Tue 29 Jul 2025 17:00:38 +0000
Manifest this update: Tue 29 Jul 2025 17:00:38 +0000
Manifest next update: Wed 30 Jul 2025 17:00:38 +0000
Files and hashes: 1: 4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl (hash: Z//DHhJCAjm1S+BW4PwZompb8I1EQjLACN8POffrtzs=)
2: cK4llrkBdLlV4HeILjRyQ98esEM.roa (hash: MuU2BWlfRFj75k9zGngWfQu7w/ZtaYOQ1aHN3Tj8NDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:21:04:18:8c:73:9e:b8:ae:00:24:68:8a:7c:ef:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Validity
Not Before: Jul 29 17:00:38 2025 GMT
Not After : Jul 30 17:00:38 2025 GMT
Subject: CN=cd0e1ccd85568c056f9bea3e22f50e69f1ed9a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:0f:87:59:76:95:e1:1c:e8:5a:93:ac:58:
f4:de:ca:b2:64:50:de:f7:e2:9a:bc:bb:1c:05:2d:
db:cb:1c:7b:ea:42:24:54:d7:5a:9f:34:b1:99:dd:
91:d3:9c:16:42:cd:74:59:ba:18:c2:44:a8:08:de:
d2:2e:40:5f:ab:e5:4f:4d:a4:64:d5:d0:fb:45:f8:
6d:e4:69:ac:19:e9:ce:e0:6b:b9:3e:14:3f:ca:ac:
f4:90:69:fd:7a:42:32:72:60:e7:ce:9c:a8:53:2a:
c1:d3:37:83:18:ca:72:76:60:b8:c2:90:7e:aa:52:
42:b5:11:a5:e4:ef:cb:f3:e4:fe:79:87:e2:de:05:
cf:6b:e0:1d:65:3b:a6:4e:f9:d9:ec:8e:99:35:49:
6c:5b:b2:fc:5c:b3:be:51:9e:96:31:73:b0:de:ba:
76:4c:56:4b:24:d7:79:5e:03:e2:4f:50:00:3c:a9:
14:99:c8:fc:79:ba:96:ac:2b:87:06:47:ff:42:5b:
c4:7d:07:20:c0:28:03:cf:d9:c7:34:2f:81:a9:6e:
77:49:2f:87:c5:5d:05:b1:2a:e6:42:c2:f7:c9:2c:
cd:9e:03:b6:e6:65:97:f5:b5:d1:fb:63:fa:08:ed:
ff:e7:7f:d4:27:62:e9:8b:21:2e:bf:a6:e4:67:bd:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0E:1C:CD:85:56:8C:05:6F:9B:EA:3E:22:F5:0E:69:F1:ED:9A:88
X509v3 Authority Key Identifier:
keyid:E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7d:92:dc:13:7f:e7:0a:0f:98:cf:20:24:c4:2e:88:86:82:
96:e3:06:9d:bc:e1:c0:19:8d:da:70:5d:8f:39:a8:b4:b5:ce:
a5:b5:a2:64:c4:d9:64:58:06:e1:93:7b:19:4b:c9:5d:fb:b1:
3b:dc:5f:0a:83:1f:79:1b:be:1b:f7:3c:c4:c5:c5:ec:0d:54:
ab:d7:2f:cf:98:d1:fd:5c:75:38:05:13:a2:45:e0:5e:0b:fb:
e8:95:8d:c3:20:05:b9:fc:6e:75:3f:25:46:d2:38:d4:c1:86:
c5:0c:4a:c8:0b:4d:25:ab:20:67:5f:87:a5:81:7b:f5:46:59:
ac:2b:e2:59:42:45:d1:8a:52:ac:bc:63:fc:79:71:5d:57:da:
6a:65:d0:a1:65:0d:b4:24:37:7c:4c:8f:28:fd:c8:04:98:76:
7c:f4:46:52:57:e9:6b:03:c9:9e:28:a7:d8:d1:c0:f7:f8:6b:
0b:b2:dc:5c:94:cd:36:a5:80:cc:12:69:47:1b:86:f2:44:11:
e2:ed:3b:ba:8a:87:da:53:cc:78:db:6c:f3:b9:b1:7d:f2:00:
42:56:d3:04:b6:04:41:86:08:e7:bc:9c:3a:4e:13:4a:76:a1:
2f:e8:e2:cf:c7:5b:48:c9:06:f1:d1:b3:0f:16:e7:f7:47:9e:
39:a8:7c:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhXIQQYjHOeuK4AJGiKfO8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZTM5NzZkOWVjYjgzMDlhODE4MWZiZDAyNWNhNTJmZWYx
NjE5OTkwHhcNMjUwNzI5MTcwMDM4WhcNMjUwNzMwMTcwMDM4WjAzMTEwLwYDVQQD
EyhjZDBlMWNjZDg1NTY4YzA1NmY5YmVhM2UyMmY1MGU2OWYxZWQ5YTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMMPh1l2leEc6FqTrFj03sqyZFDe
9+KavLscBS3byxx76kIkVNdanzSxmd2R05wWQs10WboYwkSoCN7SLkBfq+VPTaRk
1dD7Rfht5GmsGenO4Gu5PhQ/yqz0kGn9ekIycmDnzpyoUyrB0zeDGMpydmC4wpB+
qlJCtRGl5O/L8+T+eYfi3gXPa+AdZTumTvnZ7I6ZNUlsW7L8XLO+UZ6WMXOw3rp2
TFZLJNd5XgPiT1AAPKkUmcj8ebqWrCuHBkf/QlvEfQcgwCgDz9nHNC+BqW53SS+H
xV0FsSrmQsL3ySzNngO25mWX9bXR+2P6CO3/53/UJ2LpiyEuv6bkZ72T7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0OHM2FVowFb5vqPiL1Dmnx7ZqIMB8GA1UdIwQY
MBaAFODjl22ey4MJqBgfvQJcpS/vFhmZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE9PWGJaN0xnd21vR0ItOUFseWxMLThXR1prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kNjEyYTMtNDYzMS00N2RlLTk0MGQt
OGJlMGQ5NzY4MmFiLzEvNE9PWGJaN0xnd21vR0ItOUFseWxMLThXR1prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9kNjEyYTMtNDYzMS00N2RlLTk0MGQtOGJlMGQ5NzY4MmFi
LzEvNE9PWGJaN0xnd21vR0ItOUFseWxMLThXR1prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIX2S3BN/
5woPmM8gJMQuiIaCluMGnbzhwBmN2nBdjzmotLXOpbWiZMTZZFgG4ZN7GUvJXfux
O9xfCoMfeRu+G/c8xMXF7A1Uq9cvz5jR/Vx1OAUTokXgXgv76JWNwyAFufxudT8l
RtI41MGGxQxKyAtNJasgZ1+HpYF79UZZrCviWUJF0YpSrLxj/HlxXVfaamXQoWUN
tCQ3fEyPKP3IBJh2fPRGUlfpawPJniin2NHA9/hrC7LcXJTNNqWAzBJpRxuG8kQR
4u07uoqH2lPMeNts87mxffIAQlbTBLYEQYYI57ycOk4TSnahL+jiz8dbSMkG8dGz
Dxbn90eeOah8fw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 19:03:09 2025 by rpki-client