Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
File: 0YiojVldwu2ML5I5ZFxOjF5zfTE.mft (raw, json)
Hash identifier: aZ6tsPjyaZl05ltEVy9H5JsFQ3XOwh4x/EDUfC3ocUM=
Subject key identifier: 76:32:50:E6:32:05:70:7B:9F:83:DF:14:B4:4D:97:42:5D:1C:A3:5E
Authority key identifier: D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
Certificate issuer: /CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Certificate serial: 01990FAA8285E838973EDD8D2B6D71E5C83D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
Manifest number: 12AF
Signing time: Wed 03 Sep 2025 13:00:56 +0000
Manifest this update: Wed 03 Sep 2025 13:00:56 +0000
Manifest next update: Thu 04 Sep 2025 13:00:56 +0000
Files and hashes: 1: 0YiojVldwu2ML5I5ZFxOjF5zfTE.crl (hash: k5vFA3JMsc1/c6EM/mVWY6OZiPPB3dkml8/yM54VPqQ=)
2: iA-R6MvKiO2KGX3TDBYr9y6CrrY.roa (hash: 6ESf6+qQijHxJ/aR5LxiBT1mSFdRreQchWcCwlb/jhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:aa:82:85:e8:38:97:3e:dd:8d:2b:6d:71:e5:c8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Validity
Not Before: Sep 3 13:00:56 2025 GMT
Not After : Sep 4 13:00:56 2025 GMT
Subject: CN=763250e63205707b9f83df14b44d97425d1ca35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:d2:eb:c9:f7:a5:79:ed:98:d3:8e:53:96:
50:eb:c5:5e:16:ad:cb:cb:02:14:ee:c4:c7:50:dd:
29:6a:0d:aa:91:50:7a:c3:54:b5:07:47:ae:d2:5c:
37:18:c6:ef:a5:61:c3:40:1a:2c:09:2c:ff:e3:ce:
e9:4d:ce:34:72:40:dc:14:5b:4a:cb:75:c9:8f:2f:
60:a2:70:90:97:18:59:14:d2:7a:26:ce:dc:0c:85:
be:99:53:ff:70:a0:67:81:9d:cb:f7:2c:36:f2:17:
9a:a4:da:91:e1:7b:cb:1c:97:8a:04:8e:e8:28:62:
fa:55:d1:83:81:59:35:07:31:1d:a8:c0:2f:b6:ab:
cb:63:02:65:77:65:b3:5a:7e:95:2f:ee:20:7d:8d:
0e:27:cc:25:72:d9:89:2d:bb:bc:2b:89:65:81:48:
b8:c9:e7:ab:a4:6f:d5:83:f1:9c:5a:9c:17:1e:bb:
d0:85:8c:e2:20:71:ad:7c:8c:ff:3c:f8:62:80:db:
77:41:5f:13:2b:6a:d3:5d:ec:fa:1b:9e:88:78:9e:
c2:82:6c:4a:4b:8e:7b:7a:ea:6b:eb:e1:51:f6:ad:
f6:6b:8c:cb:27:71:57:1c:de:da:3a:e7:9d:34:ff:
69:c8:e6:96:96:88:78:d6:65:69:08:a1:8b:67:d7:
22:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:32:50:E6:32:05:70:7B:9F:83:DF:14:B4:4D:97:42:5D:1C:A3:5E
X509v3 Authority Key Identifier:
keyid:D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2b:f3:ff:55:b2:9c:b2:6f:eb:e5:c9:8e:7c:bd:13:20:f0:
a8:6c:4d:bb:41:51:7e:28:4f:4f:fa:ec:b5:79:44:1b:5e:e8:
5b:5b:1d:d9:96:12:50:1e:c1:03:06:de:31:73:2b:15:b0:ff:
80:f0:45:f9:a3:36:a6:ed:3f:cc:06:59:99:d0:76:64:eb:0a:
c7:af:fa:09:97:c7:c6:04:81:7d:26:5d:24:cc:67:e0:fe:80:
90:b5:2b:8d:83:42:06:d6:7e:9a:2c:e7:f7:83:a0:5c:76:9c:
7e:c5:0c:ce:76:59:1e:46:32:6a:c8:5a:91:d1:bf:a8:83:f9:
5a:04:f8:d4:c9:71:17:a5:51:d8:18:86:67:67:f1:89:7e:14:
d4:c9:ad:bf:40:33:93:13:cf:d9:f5:3d:e2:ba:e6:e7:4c:49:
fd:6f:5b:9f:e6:80:01:a5:5c:47:89:63:2d:24:47:36:62:c8:
18:51:88:81:9f:70:0e:25:5f:3b:c4:0b:41:90:01:6c:73:8a:
54:71:0e:ef:fb:df:d1:a0:ec:90:dc:79:9c:0d:a7:f5:9d:b8:
4c:e0:1b:e9:4c:b4:a3:eb:d4:e7:3f:ac:2f:a5:d0:6c:e3:90:
05:6c:00:68:a9:b0:62:dc:fe:b3:77:4c:1f:1f:03:95:14:12:
70:e6:d1:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkPqoKF6DiXPt2NK21x5cg9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxODhhODhkNTk1ZGMyZWQ4YzJmOTIzOTY0NWM0ZThjNWU3
MzdkMzEwHhcNMjUwOTAzMTMwMDU2WhcNMjUwOTA0MTMwMDU2WjAzMTEwLwYDVQQD
Eyg3NjMyNTBlNjMyMDU3MDdiOWY4M2RmMTRiNDRkOTc0MjVkMWNhMzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G7S68n3pXntmNOOU5ZQ68VeFq3L
ywIU7sTHUN0pag2qkVB6w1S1B0eu0lw3GMbvpWHDQBosCSz/487pTc40ckDcFFtK
y3XJjy9gonCQlxhZFNJ6Js7cDIW+mVP/cKBngZ3L9yw28heapNqR4XvLHJeKBI7o
KGL6VdGDgVk1BzEdqMAvtqvLYwJld2WzWn6VL+4gfY0OJ8wlctmJLbu8K4llgUi4
yeerpG/Vg/GcWpwXHrvQhYziIHGtfIz/PPhigNt3QV8TK2rTXez6G56IeJ7CgmxK
S457eupr6+FR9q32a4zLJ3FXHN7aOuedNP9pyOaWloh41mVpCKGLZ9ciBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYyUOYyBXB7n4PfFLRNl0JdHKNeMB8GA1UdIwQY
MBaAFNGIqI1ZXcLtjC+SOWRcToxec30xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlpb2pWbGR3dTJNTDVJNVpGeE9qRjV6ZlRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wY2VlMTktYWYwZi00ZTkzLTgwMTAt
ZDk1M2Y0ODU0NzU3LzEvMFlpb2pWbGR3dTJNTDVJNVpGeE9qRjV6ZlRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wY2VlMTktYWYwZi00ZTkzLTgwMTAtZDk1M2Y0ODU0NzU3
LzEvMFlpb2pWbGR3dTJNTDVJNVpGeE9qRjV6ZlRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCvz/1Wy
nLJv6+XJjny9EyDwqGxNu0FRfihPT/rstXlEG17oW1sd2ZYSUB7BAwbeMXMrFbD/
gPBF+aM2pu0/zAZZmdB2ZOsKx6/6CZfHxgSBfSZdJMxn4P6AkLUrjYNCBtZ+mizn
94OgXHacfsUMznZZHkYyashakdG/qIP5WgT41MlxF6VR2BiGZ2fxiX4U1Mmtv0Az
kxPP2fU94rrm50xJ/W9bn+aAAaVcR4ljLSRHNmLIGFGIgZ9wDiVfO8QLQZABbHOK
VHEO7/vf0aDskNx5nA2n9Z24TOAb6Uy0o+vU5z+sL6XQbOOQBWwAaKmwYtz+s3dM
Hx8DlRQScObRzg==
-----END CERTIFICATE-----
Generated at Wed Sep 3 22:31:40 2025 by rpki-client