Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
File: 1OTgFewB2mrn2EkW_RrUyqkE3E4.mft (raw, json)
Hash identifier: C92i5kES0+1Fr+wkx4ke+HX971VdiLNQDOsf/MlkKGU=
Subject key identifier: F9:4E:F9:15:82:BD:57:A8:BD:93:D2:0E:62:CD:1A:0C:D5:E3:EF:47
Authority key identifier: D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
Certificate issuer: /CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Certificate serial: 019922FA93BBE3BC5A970A6ADBE33AD674F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
Manifest number: 0D41
Signing time: Sun 07 Sep 2025 07:01:11 +0000
Manifest this update: Sun 07 Sep 2025 07:01:11 +0000
Manifest next update: Mon 08 Sep 2025 07:01:11 +0000
Files and hashes: 1: 1OTgFewB2mrn2EkW_RrUyqkE3E4.crl (hash: 57xsiZbEv7ECYCftyhfX2q9a4G9uDY+wzsk9fjPUPNk=)
2: Cg7qlLFT5Tw2Rj89YI6LNGMAVC8.roa (hash: RUt6pQHc+8RuyWicYb+I1y3SWfel5InfTPhk0ybD+Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:93:bb:e3:bc:5a:97:0a:6a:db:e3:3a:d6:74:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Validity
Not Before: Sep 7 07:01:11 2025 GMT
Not After : Sep 8 07:01:11 2025 GMT
Subject: CN=f94ef91582bd57a8bd93d20e62cd1a0cd5e3ef47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:30:2a:54:68:6f:1c:30:0e:bd:97:72:ac:b5:
ef:e1:18:55:33:aa:e0:9e:41:50:31:e3:0a:2d:07:
cb:b6:57:d6:3c:87:7d:a3:2d:e3:f8:58:8e:19:5a:
f2:bc:8e:ff:93:58:f1:60:03:31:22:bb:54:48:7d:
af:b5:6b:70:33:17:6f:35:6d:77:0c:7c:0d:9a:a3:
4a:e5:d9:7a:55:9d:ab:8b:8a:96:4f:9f:29:d8:87:
07:63:9f:97:3b:8d:cb:97:97:30:7e:be:bd:c3:e1:
e7:e8:72:75:c6:f1:d4:ea:12:17:e5:f8:ce:d2:cc:
79:05:94:df:9e:8d:c6:dd:7a:9d:ae:80:9c:68:4d:
b4:db:bb:f0:72:1c:3c:32:24:b2:52:b9:05:93:6b:
72:a6:1a:81:6f:a4:4e:b5:c3:55:1d:b4:2c:dd:2f:
18:aa:bd:64:8f:1e:fd:47:32:97:c2:df:6a:5e:4e:
76:86:ad:a3:5f:77:19:a1:ef:f3:88:d4:50:78:0d:
a3:6c:a1:6c:31:01:f6:2c:5f:61:95:1e:f8:b1:8b:
f1:cc:5e:6a:69:4f:c1:fe:15:cf:00:9c:5c:8e:b9:
08:d3:fc:30:54:2c:39:24:0b:38:c0:a0:ae:c8:dc:
06:02:cc:9d:06:2b:9a:28:d1:b8:6d:e6:60:47:a0:
99:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4E:F9:15:82:BD:57:A8:BD:93:D2:0E:62:CD:1A:0C:D5:E3:EF:47
X509v3 Authority Key Identifier:
keyid:D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:69:a7:c1:71:8e:48:34:95:67:60:bf:03:f1:69:a8:60:14:
91:6c:cd:09:d9:51:6f:79:e7:7e:62:9d:40:f9:0d:ef:f3:c0:
58:b4:8a:2d:fe:5d:b4:66:ad:4c:2d:db:68:a6:79:47:6c:a4:
3b:36:87:5f:f9:0a:bd:c5:35:5a:a6:04:36:2d:94:81:9a:61:
e1:61:0c:8d:05:15:28:47:c9:21:d6:1f:55:28:7c:3f:c1:a0:
29:73:a8:53:f2:05:91:f9:dc:a7:88:f1:ea:c5:3e:9b:bc:0a:
2c:e4:6f:c3:26:25:6d:2d:3f:f5:1c:ff:a1:0a:bc:ba:f2:8d:
7b:ad:26:bf:38:f7:62:9a:7e:7b:b6:06:57:ba:af:81:42:c0:
a4:6d:3f:fb:a8:cb:a5:0d:78:b9:de:9c:65:2e:99:12:68:98:
12:41:dd:b4:c9:9e:cb:87:c3:b6:1d:55:46:c8:b9:29:39:f3:
7a:16:02:2e:ad:d3:15:43:72:76:1b:fb:20:58:7f:3a:40:f8:
9c:f0:5e:af:5a:c3:0b:f3:b6:4c:e2:e9:8a:aa:c4:37:85:52:
02:33:32:f7:70:3a:c8:ee:66:5b:dd:7d:d1:1b:b8:56:73:e7:
49:fa:0c:e7:b6:f3:87:1a:47:5d:c3:99:de:eb:1c:ef:c5:b6:
76:c5:f4:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+pO747xalwpq2+M61nTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZTRlMDE1ZWMwMWRhNmFlN2Q4NDkxNmZkMWFkNGNhYTkw
NGRjNGUwHhcNMjUwOTA3MDcwMTExWhcNMjUwOTA4MDcwMTExWjAzMTEwLwYDVQQD
EyhmOTRlZjkxNTgyYmQ1N2E4YmQ5M2QyMGU2MmNkMWEwY2Q1ZTNlZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TAqVGhvHDAOvZdyrLXv4RhVM6rg
nkFQMeMKLQfLtlfWPId9oy3j+FiOGVryvI7/k1jxYAMxIrtUSH2vtWtwMxdvNW13
DHwNmqNK5dl6VZ2ri4qWT58p2IcHY5+XO43Ll5cwfr69w+Hn6HJ1xvHU6hIX5fjO
0sx5BZTfno3G3XqdroCcaE2027vwchw8MiSyUrkFk2typhqBb6ROtcNVHbQs3S8Y
qr1kjx79RzKXwt9qXk52hq2jX3cZoe/ziNRQeA2jbKFsMQH2LF9hlR74sYvxzF5q
aU/B/hXPAJxcjrkI0/wwVCw5JAs4wKCuyNwGAsydBiuaKNG4beZgR6CZhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlO+RWCvVeovZPSDmLNGgzV4+9HMB8GA1UdIwQY
MBaAFNTk4BXsAdpq59hJFv0a1MqpBNxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU9UZ0Zld0IybXJuMkVrV19SclV5cWtFM0U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iZGQ4N2MtYTZkOS00YmMyLTlkODct
MGE4MTJiYjE4ZjM1LzEvMU9UZ0Zld0IybXJuMkVrV19SclV5cWtFM0U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9iZGQ4N2MtYTZkOS00YmMyLTlkODctMGE4MTJiYjE4ZjM1
LzEvMU9UZ0Zld0IybXJuMkVrV19SclV5cWtFM0U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWmnwXGO
SDSVZ2C/A/FpqGAUkWzNCdlRb3nnfmKdQPkN7/PAWLSKLf5dtGatTC3baKZ5R2yk
OzaHX/kKvcU1WqYENi2UgZph4WEMjQUVKEfJIdYfVSh8P8GgKXOoU/IFkfncp4jx
6sU+m7wKLORvwyYlbS0/9Rz/oQq8uvKNe60mvzj3Ypp+e7YGV7qvgULApG0/+6jL
pQ14ud6cZS6ZEmiYEkHdtMmey4fDth1VRsi5KTnzehYCLq3TFUNydhv7IFh/OkD4
nPBer1rDC/O2TOLpiqrEN4VSAjMy93A6yO5mW9190Ru4VnPnSfoM57bzhxpHXcOZ
3usc78W2dsX0TQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:57 2025 by rpki-client