Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
File: kOszbVYE1HuugXI4sNu0l3HiRyk.mft (raw, json)
Hash identifier: 3CGg5MlsCP8jdXiAH1HyQhVNDxjJMOiRG0zDu7LeDMQ=
Subject key identifier: 33:8A:4D:CB:C0:FD:D7:7C:74:1C:D2:E8:C5:25:FE:55:EF:49:C3:28
Authority key identifier: 90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
Certificate issuer: /CN=90eb336d5604d47bae817238b0dbb49771e24729
Certificate serial: 0199288EB58F42EFD6806DE8CC794F2541A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
Manifest number: 1675
Signing time: Mon 08 Sep 2025 09:01:05 +0000
Manifest this update: Mon 08 Sep 2025 09:01:05 +0000
Manifest next update: Tue 09 Sep 2025 09:01:05 +0000
Files and hashes: 1: kOszbVYE1HuugXI4sNu0l3HiRyk.crl (hash: xhoNQnUlkeOVhhUXZhfH/i7vVfZRkiylLaT2uszwyVM=)
2: nHFDaIILOdTjKywJ536u2NbijQ4.roa (hash: GZUS5OKqPLBVaLkWEyB2Ce3k2q8gf8Rj7vaTEKCevNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:8e:b5:8f:42:ef:d6:80:6d:e8:cc:79:4f:25:41:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90eb336d5604d47bae817238b0dbb49771e24729
Validity
Not Before: Sep 8 09:01:05 2025 GMT
Not After : Sep 9 09:01:05 2025 GMT
Subject: CN=338a4dcbc0fdd77c741cd2e8c525fe55ef49c328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:cb:2d:bd:a3:fc:a7:1e:c6:e4:ad:dc:24:
dc:e0:67:f8:ed:f1:1f:0c:47:1d:2b:85:d1:8d:f1:
2c:45:d9:78:17:5c:6b:06:7a:ae:60:ab:8b:39:55:
8e:2c:d5:94:a5:75:ac:a4:65:98:43:14:c6:ca:ca:
00:de:af:7e:6c:dc:f1:44:f3:02:4b:d0:68:c8:af:
fa:41:08:c5:a3:46:4a:d9:b3:cb:23:d0:0c:50:5f:
26:aa:8c:ae:07:3b:2f:fd:ae:c5:e9:34:00:f3:1a:
4f:3a:e0:72:55:6a:f1:87:88:c6:bb:b9:1f:38:46:
ad:bf:fd:dc:97:9a:12:18:2d:7f:43:e1:df:8e:b5:
75:73:e9:ae:f3:c8:4b:68:3d:9d:da:25:f8:b4:c4:
b9:ff:eb:4e:09:5f:ee:64:28:e5:ea:0f:03:b4:36:
16:51:d2:84:86:52:45:00:84:61:f5:62:dc:f5:03:
48:9f:33:15:69:bf:05:9c:04:db:00:fb:9b:5a:5d:
bc:7d:d4:84:73:8d:e1:04:79:e4:9b:33:bd:97:05:
12:d8:97:4c:06:c3:74:03:f8:a1:44:46:95:73:76:
63:4b:99:09:c0:b2:9f:a0:b6:fc:d9:b2:c9:6b:72:
85:f2:e9:9c:ee:5c:e4:8e:cf:5b:72:3a:c7:25:45:
85:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8A:4D:CB:C0:FD:D7:7C:74:1C:D2:E8:C5:25:FE:55:EF:49:C3:28
X509v3 Authority Key Identifier:
keyid:90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:06:0a:df:b4:5f:bc:e9:b8:d1:24:2b:73:c3:be:7a:f9:7e:
d6:63:0e:3d:75:39:9f:2a:d6:d4:87:06:c2:e6:ac:64:fe:ad:
93:fe:c2:49:ef:ac:4e:5e:06:ee:42:4b:6b:ee:46:ac:ff:3d:
83:ec:b5:fc:9c:bd:a2:c0:88:bd:d6:a0:80:b4:98:b1:04:69:
9e:fd:c7:58:be:ab:75:13:d4:0d:8d:0b:40:32:80:d2:a7:83:
5b:92:7c:18:41:06:5e:cf:f3:0a:79:6c:28:65:b2:eb:45:c9:
4c:29:5f:5b:09:cb:08:9b:10:50:4e:08:a5:74:54:25:11:22:
d1:23:6a:01:d9:5d:5d:a5:e4:8e:d6:ad:e0:f1:32:20:ac:08:
52:68:fb:61:85:98:90:2e:d1:ac:39:bb:a8:fe:50:7f:6d:28:
e4:b8:68:30:72:49:3b:a4:ed:bb:ff:2c:7d:de:b8:91:41:0d:
31:2a:43:5e:15:44:d1:00:17:c6:60:36:76:4e:38:de:ce:0e:
c4:a1:30:e4:03:9e:78:b7:1a:e2:17:06:36:2b:c5:c5:00:aa:
f7:db:ce:d0:08:1c:d4:28:b9:06:e8:c6:d5:1a:bd:e1:f6:0d:
56:08:c2:50:2e:2f:ec:8b:c9:1e:f6:fa:e8:f1:7d:e3:26:58:
36:68:64:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkojrWPQu/WgG3ozHlPJUGgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZWIzMzZkNTYwNGQ0N2JhZTgxNzIzOGIwZGJiNDk3NzFl
MjQ3MjkwHhcNMjUwOTA4MDkwMTA1WhcNMjUwOTA5MDkwMTA1WjAzMTEwLwYDVQQD
EygzMzhhNGRjYmMwZmRkNzdjNzQxY2QyZThjNTI1ZmU1NWVmNDljMzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs7LLb2j/KcexuSt3CTc4Gf47fEf
DEcdK4XRjfEsRdl4F1xrBnquYKuLOVWOLNWUpXWspGWYQxTGysoA3q9+bNzxRPMC
S9BoyK/6QQjFo0ZK2bPLI9AMUF8mqoyuBzsv/a7F6TQA8xpPOuByVWrxh4jGu7kf
OEatv/3cl5oSGC1/Q+HfjrV1c+mu88hLaD2d2iX4tMS5/+tOCV/uZCjl6g8DtDYW
UdKEhlJFAIRh9WLc9QNInzMVab8FnATbAPubWl28fdSEc43hBHnkmzO9lwUS2JdM
BsN0A/ihREaVc3ZjS5kJwLKfoLb82bLJa3KF8umc7lzkjs9bcjrHJUWF/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOKTcvA/dd8dBzS6MUl/lXvScMoMB8GA1UdIwQY
MBaAFJDrM21WBNR7roFyOLDbtJdx4kcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xZTdkMmUtMWE2Mi00NDIxLWI3MWIt
YjExOTI3NGFkNjU0LzEva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xZTdkMmUtMWE2Mi00NDIxLWI3MWItYjExOTI3NGFkNjU0
LzEva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAYK37Rf
vOm40SQrc8O+evl+1mMOPXU5nyrW1IcGwuasZP6tk/7CSe+sTl4G7kJLa+5GrP89
g+y1/Jy9osCIvdaggLSYsQRpnv3HWL6rdRPUDY0LQDKA0qeDW5J8GEEGXs/zCnls
KGWy60XJTClfWwnLCJsQUE4IpXRUJREi0SNqAdldXaXkjtat4PEyIKwIUmj7YYWY
kC7RrDm7qP5Qf20o5LhoMHJJO6Ttu/8sfd64kUENMSpDXhVE0QAXxmA2dk443s4O
xKEw5AOeeLca4hcGNivFxQCq99vO0Agc1Ci5BujG1Rq94fYNVgjCUC4v7IvJHvb6
6PF94yZYNmhkJg==
-----END CERTIFICATE-----
Generated at Mon Sep 8 16:14:07 2025 by rpki-client