Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File: C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier: 5kHHVDys5kRWYvA2Fsdq04akq+pl6+fDXzczuCZoHXg=
Subject key identifier: 1C:B7:EF:48:37:54:3F:71:87:17:73:5C:A5:71:DE:EB:A5:D4:20:0A
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 0198380403037173343D02C934191D32B967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number: 1309
Signing time: Wed 23 Jul 2025 16:00:43 +0000
Manifest this update: Wed 23 Jul 2025 16:00:43 +0000
Manifest next update: Thu 24 Jul 2025 16:00:43 +0000
Files and hashes: 1: 1tUtdPntOZo4oZY0gj-5-iL3XLM.roa (hash: qzUzuRDUtz2FZx8A/P+rSyUpdTrCQoQOZBqqm3OS2Vc=)
2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: pg0Sm+sARnpG2OReYDzYlATB+WzjQ8jk9HFmQNIRfKQ=)
3: r0fYtM8vJLJuud_1zoCTV08hICU.roa (hash: N3MrpQwzFuxLwGpoLCDJQ7HCyHzM8rSnUBKZzdYMHOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:04:03:03:71:73:34:3d:02:c9:34:19:1d:32:b9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Jul 23 16:00:43 2025 GMT
Not After : Jul 24 16:00:43 2025 GMT
Subject: CN=1cb7ef4837543f718717735ca571deeba5d4200a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:08:62:e4:6d:2e:c8:f3:77:ae:65:6c:c6:42:
b1:cf:fe:22:3c:c8:32:82:15:f1:dc:ba:16:44:d9:
ff:b7:fb:fb:3b:45:34:70:06:a8:f9:01:75:49:08:
9f:62:22:c0:0f:08:c1:61:ec:cc:87:fd:69:87:64:
a2:6b:9d:70:db:93:6d:02:74:15:1a:bb:cf:5a:61:
85:83:e3:27:58:37:83:d6:fe:c5:d2:76:b5:84:4b:
72:a5:76:6c:1c:12:2b:1e:21:5d:48:41:b9:18:4e:
51:7d:99:c4:50:73:2a:23:94:97:3e:08:ba:a0:86:
a5:a5:5b:29:48:af:b6:87:ab:f0:2d:46:20:2f:ec:
41:8f:b5:81:52:23:94:54:b1:4c:d1:db:1e:c9:c9:
a3:d8:68:52:30:5a:84:3b:2a:f4:fa:74:58:9c:27:
7e:d6:50:ea:ee:23:a4:85:d0:80:0e:4e:29:50:4d:
be:d5:fc:86:aa:74:f2:2a:56:2e:05:62:b8:80:c3:
ac:67:f8:35:dc:76:3a:98:25:b6:b8:cb:7a:7a:02:
07:92:a7:15:5a:72:9c:f6:e4:98:86:96:35:a6:6c:
07:6a:7a:a9:b5:81:9a:8a:34:f7:81:f9:b9:be:84:
00:b3:63:78:ff:59:a8:5a:71:49:7d:d6:f7:36:06:
eb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B7:EF:48:37:54:3F:71:87:17:73:5C:A5:71:DE:EB:A5:D4:20:0A
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fc:70:cd:a3:70:de:fa:83:1b:d3:e8:be:83:43:2b:ce:03:
8e:a0:80:3f:45:68:b2:3b:12:8a:00:0e:7c:a1:53:04:6d:0d:
e8:5c:8f:6f:84:8c:d7:09:fc:40:0e:75:e7:a1:8e:b2:c4:a0:
7b:a4:8b:9e:ff:02:64:3f:de:67:1f:36:89:c3:18:87:ce:53:
0d:ee:9a:1c:60:3a:90:2f:6a:71:c1:69:97:90:2d:9e:19:5c:
ff:4a:99:09:ee:2b:66:d0:e0:af:93:89:03:a0:7a:a3:9d:7f:
01:54:36:00:48:57:4b:e4:7c:3f:dd:30:1c:fb:15:64:18:e7:
82:63:ca:61:9a:80:6b:39:5d:0e:30:54:af:86:2e:17:60:c3:
66:a0:21:71:78:49:26:8a:3d:cf:05:95:bc:99:16:51:0a:6a:
6b:3e:79:90:e9:9e:8d:fd:b2:cb:83:ea:bf:28:81:75:12:28:
0e:0e:f8:ad:03:9d:69:34:e7:0b:5f:3f:fc:a4:ff:dc:05:4f:
9b:e0:2f:5c:d7:ef:92:15:77:7f:f0:9d:c7:5d:8b:da:ac:e8:
3f:81:9a:72:d6:61:1a:52:54:a2:11:1c:bc:72:c6:74:67:f0:
51:6d:b3:9f:cf:88:71:ca:0c:71:11:62:07:18:0f:dc:25:8e:
30:b1:55:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg4BAMDcXM0PQLJNBkdMrlnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZDRhZDk1ZjE3ZjM5NzIwN2EzZmMwZDE4NmYyOTEzZGYz
OGViOTMwHhcNMjUwNzIzMTYwMDQzWhcNMjUwNzI0MTYwMDQzWjAzMTEwLwYDVQQD
EygxY2I3ZWY0ODM3NTQzZjcxODcxNzczNWNhNTcxZGVlYmE1ZDQyMDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwhi5G0uyPN3rmVsxkKxz/4iPMgy
ghXx3LoWRNn/t/v7O0U0cAao+QF1SQifYiLADwjBYezMh/1ph2Sia51w25NtAnQV
GrvPWmGFg+MnWDeD1v7F0na1hEtypXZsHBIrHiFdSEG5GE5RfZnEUHMqI5SXPgi6
oIalpVspSK+2h6vwLUYgL+xBj7WBUiOUVLFM0dseycmj2GhSMFqEOyr0+nRYnCd+
1lDq7iOkhdCADk4pUE2+1fyGqnTyKlYuBWK4gMOsZ/g13HY6mCW2uMt6egIHkqcV
WnKc9uSYhpY1pmwHanqptYGaijT3gfm5voQAs2N4/1moWnFJfdb3NgbrsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBy370g3VD9xhxdzXKVx3uul1CAKMB8GA1UdIwQY
MBaAFAvUrZXxfzlyB6P8DRhvKRPfOOuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83NmQwODItYWMzMi00NzM4LTk5ZTYt
YjJmNjA4NjM2OGM3LzEvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83NmQwODItYWMzMi00NzM4LTk5ZTYtYjJmNjA4NjM2OGM3
LzEvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfxwzaNw
3vqDG9PovoNDK84DjqCAP0VosjsSigAOfKFTBG0N6FyPb4SM1wn8QA5156GOssSg
e6SLnv8CZD/eZx82icMYh85TDe6aHGA6kC9qccFpl5Atnhlc/0qZCe4rZtDgr5OJ
A6B6o51/AVQ2AEhXS+R8P90wHPsVZBjngmPKYZqAazldDjBUr4YuF2DDZqAhcXhJ
Joo9zwWVvJkWUQpqaz55kOmejf2yy4PqvyiBdRIoDg74rQOdaTTnC18//KT/3AVP
m+AvXNfvkhV3f/Cdx12L2qzoP4GactZhGlJUohEcvHLGdGfwUW2zn8+IccoMcRFi
BxgP3CWOMLFVSw==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:51:02 2025 by rpki-client