Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
File: 0bS-sKan4ShKv0OFNIz0hhALn4A.mft (raw, json)
Hash identifier: HK9toKtPDeWHzC9KI0iPyTAho7JR/2O+nmg+xtGnKBc=
Subject key identifier: 1A:22:84:A8:E4:34:7A:ED:75:F8:D9:76:59:24:9A:D7:EB:DE:DC:12
Authority key identifier: D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
Certificate issuer: /CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Certificate serial: 0199239FC391EF5AF8EF036E218DB1E29DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
Manifest number: 0E72
Signing time: Sun 07 Sep 2025 10:01:36 +0000
Manifest this update: Sun 07 Sep 2025 10:01:36 +0000
Manifest next update: Mon 08 Sep 2025 10:01:36 +0000
Files and hashes: 1: 0bS-sKan4ShKv0OFNIz0hhALn4A.crl (hash: KaQxKQFfY431N2WEJMvMCbWFdPmqUoZbwBZcI4J79Cs=)
2: c4vhQn8zi1dmhfuFlEzS457ekqY.roa (hash: K0d7LR2NOcizL+J6fo8ZUFPUHzj1ReR3yGovArPpqzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:c3:91:ef:5a:f8:ef:03:6e:21:8d:b1:e2:9d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Validity
Not Before: Sep 7 10:01:36 2025 GMT
Not After : Sep 8 10:01:36 2025 GMT
Subject: CN=1a2284a8e4347aed75f8d97659249ad7ebdedc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:97:1b:d7:f1:c4:4e:e3:89:42:99:67:3b:
92:e0:f2:42:2f:91:e8:e2:e4:70:a2:0a:a4:c0:ef:
11:75:5c:96:80:82:fc:2c:0f:13:8a:9c:5e:fb:db:
42:17:91:63:a7:65:24:86:15:9b:ba:c6:f2:53:42:
66:97:1f:be:47:2c:2c:88:57:73:b5:b3:e4:35:c2:
90:f5:76:7c:dc:f4:e8:01:38:42:40:8f:5e:cf:47:
72:21:8c:c9:16:2c:65:cc:32:1e:ef:3b:30:94:bb:
f2:7b:20:27:45:fa:b0:63:ab:5e:ae:70:6b:f6:86:
ec:dc:6b:cd:5b:b5:bd:12:fc:4c:11:75:4d:af:88:
48:3b:08:7c:99:cd:ed:f5:4b:00:3d:66:a5:ee:64:
14:8d:13:6a:51:ff:e1:46:77:8d:b2:1f:6c:8e:e7:
9d:58:f4:bf:6e:4f:aa:fe:30:71:4f:65:82:00:31:
db:27:50:f8:8f:9f:9b:a5:68:a5:cc:aa:56:42:eb:
1d:63:86:85:7e:df:76:2f:d3:a8:e5:6a:a4:66:27:
28:d6:f7:a5:70:7a:b8:b8:e5:e8:29:dc:55:12:84:
1a:eb:af:f8:93:1b:4c:7e:ad:87:d2:98:79:ec:e9:
7b:bf:63:13:39:fb:a7:c9:06:49:3f:b7:12:65:a3:
1c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:22:84:A8:E4:34:7A:ED:75:F8:D9:76:59:24:9A:D7:EB:DE:DC:12
X509v3 Authority Key Identifier:
keyid:D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:74:51:3c:6a:d1:0a:8d:3e:7d:92:2a:16:b1:99:5d:55:e7:
b9:7c:39:79:e5:7e:f5:1f:70:73:3f:76:50:3b:e1:6f:7d:52:
1c:b0:bc:86:fa:47:98:9b:41:72:20:31:60:99:e3:af:af:63:
99:13:79:04:79:d5:59:9a:c8:c0:4b:6a:db:52:f8:34:18:00:
ec:a4:18:67:2e:2d:da:b5:bb:cc:9f:bc:90:67:9d:ad:e8:00:
d6:7b:a2:2b:8f:58:42:0c:02:ce:42:5d:6a:8c:e6:39:3a:89:
e8:e3:90:47:c5:90:cb:0b:81:6e:83:c5:0e:e5:33:dd:80:dd:
51:a7:3e:49:b9:15:e4:60:f2:87:5a:dd:99:2d:c2:ab:50:d4:
36:36:dd:32:ab:b3:58:98:1e:3e:f8:8b:c5:4e:4b:90:8d:da:
89:7c:f0:3c:8e:ef:a3:f8:ad:32:7b:41:8e:28:b5:6c:39:27:
2a:67:ef:1b:3d:23:4d:af:36:91:ea:5b:ea:c4:4a:8f:88:f2:
73:33:f5:89:39:b1:8b:bd:a4:4b:d1:12:4d:61:db:9b:17:3a:
77:b0:37:a3:e5:80:ca:6e:04:b3:0a:2a:f8:99:79:6e:2f:ed:
15:38:30:ee:53:85:8f:c0:20:f0:5a:8f:d9:08:51:9f:68:7d:
9c:93:c9:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn8OR71r47wNuIY2x4p3UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYjRiZWIwYTZhN2UxMjg0YWJmNDM4NTM0OGNmNDg2MTAw
YjlmODAwHhcNMjUwOTA3MTAwMTM2WhcNMjUwOTA4MTAwMTM2WjAzMTEwLwYDVQQD
EygxYTIyODRhOGU0MzQ3YWVkNzVmOGQ5NzY1OTI0OWFkN2ViZGVkYzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsWXG9fxxE7jiUKZZzuS4PJCL5Ho
4uRwogqkwO8RdVyWgIL8LA8Tipxe+9tCF5Fjp2UkhhWbusbyU0Jmlx++RywsiFdz
tbPkNcKQ9XZ83PToAThCQI9ez0dyIYzJFixlzDIe7zswlLvyeyAnRfqwY6ternBr
9obs3GvNW7W9EvxMEXVNr4hIOwh8mc3t9UsAPWal7mQUjRNqUf/hRneNsh9sjued
WPS/bk+q/jBxT2WCADHbJ1D4j5+bpWilzKpWQusdY4aFft92L9Oo5WqkZico1vel
cHq4uOXoKdxVEoQa66/4kxtMfq2H0ph57Ol7v2MTOfunyQZJP7cSZaMccwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoihKjkNHrtdfjZdlkkmtfr3twSMB8GA1UdIwQY
MBaAFNG0vrCmp+EoSr9DhTSM9IYQC5+AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGJTLXNLYW40U2hLdjBPRk5JejBoaEFMbjRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mOGQ5OGQtMWZmZS00NjM5LWIzNzMt
OWJhMTE3MmE2OGMwLzEvMGJTLXNLYW40U2hLdjBPRk5JejBoaEFMbjRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9mOGQ5OGQtMWZmZS00NjM5LWIzNzMtOWJhMTE3MmE2OGMw
LzEvMGJTLXNLYW40U2hLdjBPRk5JejBoaEFMbjRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXRRPGrR
Co0+fZIqFrGZXVXnuXw5eeV+9R9wcz92UDvhb31SHLC8hvpHmJtBciAxYJnjr69j
mRN5BHnVWZrIwEtq21L4NBgA7KQYZy4t2rW7zJ+8kGedregA1nuiK49YQgwCzkJd
aozmOTqJ6OOQR8WQywuBboPFDuUz3YDdUac+SbkV5GDyh1rdmS3Cq1DUNjbdMquz
WJgePviLxU5LkI3aiXzwPI7vo/itMntBjii1bDknKmfvGz0jTa82kepb6sRKj4jy
czP1iTmxi72kS9ESTWHbmxc6d7A3o+WAym4Eswoq+Jl5bi/tFTgw7lOFj8Ag8FqP
2QhRn2h9nJPJLQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:15 2025 by rpki-client