Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: Yg4DWyzb8P7Qu0+fafpTzuwhsFYmacFphE8jEkcRbmo=
Subject key identifier: D9:51:EE:FD:90:AE:D9:06:C6:29:2F:71:8E:41:8F:A3:F6:39:7E:12
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 01983957FFE34E24CA02C36F61476ABBF4C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 11B9
Signing time: Wed 23 Jul 2025 22:12:05 +0000
Manifest this update: Wed 23 Jul 2025 22:12:05 +0000
Manifest next update: Thu 24 Jul 2025 22:12:05 +0000
Files and hashes: 1: Vk-tGAmV5TZofFrkU8NsN6eg260.roa (hash: n+OnJ5MdOwQk0fYvXBBSZ9AYECq0X6y6UCleUqQHa9c=)
2: epViL3MVi9bWXcuzA24cAMVu98I.roa (hash: SrcEH3xgjkVSJRtnVeoxwKETukrMGUr8rXBzqe4u9C8=)
3: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: 1I2CPqpeHjmeUzfPZfNYs4YK1Ajg8CPxFOThHzLesAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 22:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:57:ff:e3:4e:24:ca:02:c3:6f:61:47:6a:bb:f4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Jul 23 22:12:05 2025 GMT
Not After : Jul 24 22:12:05 2025 GMT
Subject: CN=d951eefd90aed906c6292f718e418fa3f6397e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:45:21:4c:5f:2c:38:65:85:c3:ae:19:56:7d:
ea:26:34:06:05:57:b1:00:e5:ce:d8:c9:2f:47:52:
00:97:b9:50:e3:b6:98:b9:7e:db:ee:4d:c5:cd:7f:
73:2a:d2:67:22:2c:da:79:39:2c:4f:5a:23:85:c6:
b1:5c:b2:14:fc:5f:de:6e:7f:ff:ed:6a:93:b2:51:
3a:80:91:49:0b:99:1a:40:c4:d2:8c:9c:ad:7d:41:
ad:88:76:95:66:f0:c9:b8:08:9d:93:70:2d:bd:f0:
56:aa:b3:bc:e2:c8:ff:5a:7b:d7:e4:cd:83:16:12:
8c:a0:8a:af:33:d3:98:23:20:a1:fe:b3:9c:ff:d9:
fa:d2:84:25:fc:b3:9b:da:e8:33:83:b5:48:01:96:
34:38:9d:95:85:65:ae:4a:23:b1:89:87:c2:25:5e:
17:1c:40:89:db:8c:6b:93:56:9a:97:6b:1a:1e:48:
21:6d:21:3d:88:e4:52:64:b7:d7:d5:97:52:11:4e:
17:4a:3c:62:fa:0e:5c:5f:78:07:63:74:6b:92:af:
1b:21:d1:67:8b:36:a3:8c:95:34:aa:30:b4:1a:69:
6b:a6:c7:20:86:3b:26:b1:40:40:76:41:9b:da:64:
80:2b:f6:81:7a:10:00:c8:46:b4:e5:a2:07:f5:8c:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:51:EE:FD:90:AE:D9:06:C6:29:2F:71:8E:41:8F:A3:F6:39:7E:12
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:04:6a:43:ee:f1:48:40:01:05:7d:2b:76:1f:b1:6b:9b:e9:
56:bc:d0:f8:70:5f:50:be:9a:18:4c:86:8a:76:8d:c6:52:92:
02:76:16:2c:d1:c7:95:21:e9:fb:38:b0:1a:48:62:29:6c:1e:
f8:8d:ca:93:b4:24:f4:35:04:95:14:76:6b:0f:b1:c4:52:0b:
44:03:5d:46:5e:0a:08:96:60:dd:9a:d0:b4:59:b0:89:26:0d:
9c:52:49:b3:af:b8:c0:48:cb:56:19:df:08:57:df:0b:d4:e9:
a1:0d:6e:c4:75:fb:c8:58:e9:f2:bb:a0:76:a5:4f:cc:5d:89:
33:ff:8a:c3:b5:88:77:00:52:11:a4:79:b4:26:aa:7d:d6:15:
08:e2:56:9e:8e:98:7f:64:fa:18:a9:5a:cb:5c:74:6e:78:13:
6e:52:44:65:be:d1:6e:a2:1c:25:f8:d8:d9:55:87:83:a3:dc:
82:a0:35:40:60:ce:b5:6a:ef:0f:50:04:fb:f8:3f:2c:53:77:
00:d7:0a:83:48:af:58:67:6c:60:22:fd:9d:ea:e4:a6:99:32:
ce:b8:30:16:b1:69:83:d9:65:5d:0e:b8:61:2a:2a:5f:aa:b4:
d2:a3:2b:fc:92:6c:fe:25:28:8e:21:39:d4:a9:af:33:0e:67:
23:48:e1:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg5V//jTiTKAsNvYUdqu/TEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNGU0OTkyNDBjZWE1ODg1NDFhN2RjNzRmMzIxYzkxNDE3
NDRiYjYwHhcNMjUwNzIzMjIxMjA1WhcNMjUwNzI0MjIxMjA1WjAzMTEwLwYDVQQD
EyhkOTUxZWVmZDkwYWVkOTA2YzYyOTJmNzE4ZTQxOGZhM2Y2Mzk3ZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0UhTF8sOGWFw64ZVn3qJjQGBVex
AOXO2MkvR1IAl7lQ47aYuX7b7k3FzX9zKtJnIizaeTksT1ojhcaxXLIU/F/ebn//
7WqTslE6gJFJC5kaQMTSjJytfUGtiHaVZvDJuAidk3AtvfBWqrO84sj/WnvX5M2D
FhKMoIqvM9OYIyCh/rOc/9n60oQl/LOb2ugzg7VIAZY0OJ2VhWWuSiOxiYfCJV4X
HECJ24xrk1aal2saHkghbSE9iORSZLfX1ZdSEU4XSjxi+g5cX3gHY3Rrkq8bIdFn
izajjJU0qjC0GmlrpscghjsmsUBAdkGb2mSAK/aBehAAyEa05aIH9YxpXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlR7v2QrtkGxikvcY5Bj6P2OX4SMB8GA1UdIwQY
MBaAFKFOSZJAzqWIVBp9x08yHJFBdEu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1U1SmtrRE9wWWhVR24zSFR6SWNrVUYwUzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wODI4ZTctMWU1Ny00NzQ3LThlYTEt
MzZhODA4ZjNkMTRkLzEvb1U1SmtrRE9wWWhVR24zSFR6SWNrVUYwUzdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8wODI4ZTctMWU1Ny00NzQ3LThlYTEtMzZhODA4ZjNkMTRk
LzEvb1U1SmtrRE9wWWhVR24zSFR6SWNrVUYwUzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwRqQ+7x
SEABBX0rdh+xa5vpVrzQ+HBfUL6aGEyGinaNxlKSAnYWLNHHlSHp+ziwGkhiKWwe
+I3Kk7Qk9DUElRR2aw+xxFILRANdRl4KCJZg3ZrQtFmwiSYNnFJJs6+4wEjLVhnf
CFffC9TpoQ1uxHX7yFjp8rugdqVPzF2JM/+Kw7WIdwBSEaR5tCaqfdYVCOJWno6Y
f2T6GKlay1x0bngTblJEZb7RbqIcJfjY2VWHg6PcgqA1QGDOtWrvD1AE+/g/LFN3
ANcKg0ivWGdsYCL9nerkppkyzrgwFrFpg9llXQ64YSoqX6q00qMr/JJs/iUojiE5
1KmvMw5nI0jhKA==
-----END CERTIFICATE-----
Generated at Thu Jul 24 02:43:24 2025 by rpki-client