Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
File: o6_ki_2taeNcg9MTDTWJfM_F788.mft (raw, json)
Hash identifier: gkKPCAWq/6GBdkON2IQpR9SY6OUcmNtDvH5rCtby2Xw=
Subject key identifier: A7:DE:DF:18:B0:98:41:DF:1A:F4:7E:0C:72:70:0C:E0:A9:EC:E9:D2
Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
Certificate issuer: /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Certificate serial: 0199221E46B953C186F0B8EAFF15923100F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 03:00:33 +0000
Manifest this update: Sun 07 Sep 2025 03:00:33 +0000
Manifest next update: Mon 08 Sep 2025 03:00:33 +0000
Files and hashes: 1: o6_ki_2taeNcg9MTDTWJfM_F788.crl (hash: aNZ2CdXBwrXuVQOme5pohGGYdTmrxCSw6a0ZPK9GovI=)
2: yJJQVGNjQhmrsnJJE0kyWxcJ5BQ.roa (hash: CX3qQ5t9dhBSwuFe9dR68/qAqasgLIYBBJFzVhxytCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:46:b9:53:c1:86:f0:b8:ea:ff:15:92:31:00:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Validity
Not Before: Sep 7 03:00:33 2025 GMT
Not After : Sep 8 03:00:33 2025 GMT
Subject: CN=a7dedf18b09841df1af47e0c72700ce0a9ece9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c7:8f:e2:b3:db:69:8e:27:e7:32:b2:9e:26:
d5:35:b3:fd:a9:80:1e:40:13:91:08:8b:4e:dc:0e:
44:42:c3:81:0a:d6:81:87:1e:ab:94:e1:32:84:50:
f6:6e:43:9a:46:fa:01:c8:22:96:49:24:30:a5:5d:
ed:89:2c:c0:59:b9:25:d9:e4:79:79:d0:3a:35:9d:
64:58:f5:99:58:82:a2:88:d3:4e:42:1f:2f:09:54:
f3:89:85:57:94:88:95:cd:30:c8:ed:45:05:57:94:
a4:59:38:e4:42:a5:3c:2b:0d:9d:97:6e:e6:cf:73:
0d:89:b6:66:ce:1e:e7:89:bc:cb:08:5b:88:b2:f5:
76:c5:6b:1f:0a:23:df:f2:8c:ae:34:0d:93:eb:54:
78:2b:d5:3e:dd:e5:13:eb:9c:18:72:28:11:95:7c:
b3:ac:b6:76:35:71:b6:80:00:ba:16:45:84:fd:69:
ce:b2:ab:ae:78:f8:07:78:10:0d:d3:f0:46:e6:2c:
b8:04:d1:d6:2e:1f:46:78:15:95:06:c7:2a:3d:97:
4d:1a:9d:7b:e3:4b:b1:f4:fc:4e:3d:77:22:67:eb:
57:46:d0:a0:6c:f0:04:c2:29:f2:20:85:9c:90:05:
1d:a5:03:19:8b:f6:c7:20:8d:20:91:a9:4a:80:a6:
f1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DE:DF:18:B0:98:41:DF:1A:F4:7E:0C:72:70:0C:E0:A9:EC:E9:D2
X509v3 Authority Key Identifier:
keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:29:ad:7d:e5:43:62:5a:e1:db:b5:90:1e:0d:e1:4d:ab:c4:
2a:cb:ab:8c:08:b4:5d:16:38:a8:3e:a0:b3:60:70:0e:dc:fc:
00:c6:04:5d:b6:c8:f5:a8:21:bc:9e:34:6b:24:99:68:ad:58:
be:3a:7b:eb:58:0f:44:64:60:00:26:78:28:12:ac:20:94:b0:
68:24:bd:f4:da:c0:21:00:2c:d4:64:7e:f0:f0:4e:f4:91:56:
bf:49:ca:4b:e4:c1:e9:53:de:9a:56:cc:36:da:b5:9a:67:ba:
07:a8:3d:87:a2:a4:df:45:33:13:ee:4c:ac:ce:8d:90:75:5d:
99:49:8d:df:81:24:a5:67:c1:3a:56:71:32:80:16:7e:d7:51:
3c:4e:53:90:60:34:69:21:7e:2a:44:09:aa:69:9a:70:2d:a4:
93:32:c3:f1:fe:29:83:64:05:88:13:b4:00:1b:ad:d2:94:42:
16:c8:54:d4:61:d4:20:5d:88:7b:93:96:77:80:cb:22:d4:5e:
3c:1f:a9:4b:13:f2:2a:f2:ce:f7:e7:fa:b9:90:e7:82:6a:b4:
d4:5e:56:13:b4:b4:4c:17:0c:bb:af:46:0b:77:a5:c1:df:8f:
31:e6:54:33:58:8b:b1:b2:67:64:ff:53:ea:3e:8c:0c:f1:85:
ee:f0:6e:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHka5U8GG8Ljq/xWSMQDwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYWZlNDhiZmRhZDY5ZTM1YzgzZDMxMzBkMzU4OTdjY2Zj
NWVmY2YwHhcNMjUwOTA3MDMwMDMzWhcNMjUwOTA4MDMwMDMzWjAzMTEwLwYDVQQD
EyhhN2RlZGYxOGIwOTg0MWRmMWFmNDdlMGM3MjcwMGNlMGE5ZWNlOWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48eP4rPbaY4n5zKynibVNbP9qYAe
QBORCItO3A5EQsOBCtaBhx6rlOEyhFD2bkOaRvoByCKWSSQwpV3tiSzAWbkl2eR5
edA6NZ1kWPWZWIKiiNNOQh8vCVTziYVXlIiVzTDI7UUFV5SkWTjkQqU8Kw2dl27m
z3MNibZmzh7nibzLCFuIsvV2xWsfCiPf8oyuNA2T61R4K9U+3eUT65wYcigRlXyz
rLZ2NXG2gAC6FkWE/WnOsquuePgHeBAN0/BG5iy4BNHWLh9GeBWVBscqPZdNGp17
40ux9PxOPXciZ+tXRtCgbPAEwinyIIWckAUdpQMZi/bHII0gkalKgKbxowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfe3xiwmEHfGvR+DHJwDOCp7OnSMB8GA1UdIwQY
MBaAFKOv5Iv9rWnjXIPTEw01iXzPxe/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84ZGFkMWEtZjJjZS00OTM5LThiMGYt
MmZjMTZkMmMwMDE2LzEvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84ZGFkMWEtZjJjZS00OTM5LThiMGYtMmZjMTZkMmMwMDE2
LzEvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANymtfeVD
Ylrh27WQHg3hTavEKsurjAi0XRY4qD6gs2BwDtz8AMYEXbbI9aghvJ40aySZaK1Y
vjp761gPRGRgACZ4KBKsIJSwaCS99NrAIQAs1GR+8PBO9JFWv0nKS+TB6VPemlbM
Ntq1mme6B6g9h6Kk30UzE+5MrM6NkHVdmUmN34EkpWfBOlZxMoAWftdRPE5TkGA0
aSF+KkQJqmmacC2kkzLD8f4pg2QFiBO0ABut0pRCFshU1GHUIF2Ie5OWd4DLItRe
PB+pSxPyKvLO9+f6uZDngmq01F5WE7S0TBcMu69GC3elwd+PMeZUM1iLsbJnZP9T
6j6MDPGF7vBujA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:56 2025 by rpki-client