Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
File: 0KpKGno60j-q4q6un6YZTwISgSk.mft (raw, json)
Hash identifier: feObwBgRokA9plTVUpUQO7W4DRVl7OVE5pje97ncNTg=
Subject key identifier: 48:90:94:2E:91:07:F0:0D:0B:AB:25:F1:F1:91:7A:70:0D:F7:AA:59
Authority key identifier: D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
Certificate issuer: /CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Certificate serial: 01992DECE4AB293C72CA8DE38720A3AB89CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
Manifest number: 0293
Signing time: Tue 09 Sep 2025 10:02:03 +0000
Manifest this update: Tue 09 Sep 2025 10:02:03 +0000
Manifest next update: Wed 10 Sep 2025 10:02:03 +0000
Files and hashes: 1: 0KpKGno60j-q4q6un6YZTwISgSk.crl (hash: 12rFDVtSVewOvMkHKEUnnssAof3FAp7yMUvTGLfy8o4=)
2: 2mOIvyxqACEFmIkGDLPkH-bc67w.roa (hash: a5V4lxFeCQH7YtlBbiNtuF1rDDvq1OPE/o43ZTFdAYQ=)
3: BPcKYotNA4ZeZvm82W73v75zPQs.roa (hash: oHpWOGTj/PoKbHsHCYFs8uXPSnbHGEoV8KY7k9zJBk4=)
4: GkxGrjdz0A7AWmifnWDimQZWI38.roa (hash: tHXJR2KGAG4wHE8bdFOYoF9Jdtd+4jQD2aXhMHJzWK8=)
5: ief4j2bb-cAvwzzS1T0xB8OgxGk.roa (hash: cv2vWMrY2M65pVapU15+XFEE8tVsd4Na8PnjBxEQRuA=)
6: wkwsgzJc2eo9ng8QQ8kvMc3qjbc.roa (hash: +iuoTytPo6r5GmeijHeI4hmWR8iJmhnqPLAkE9k79sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 10:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:ec:e4:ab:29:3c:72:ca:8d:e3:87:20:a3:ab:89:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Validity
Not Before: Sep 9 10:02:03 2025 GMT
Not After : Sep 10 10:02:03 2025 GMT
Subject: CN=4890942e9107f00d0bab25f1f1917a700df7aa59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:6e:6d:d2:9c:91:2d:6f:73:c0:2b:41:59:
e3:82:6b:f1:c6:f9:2a:c3:34:d5:34:27:00:8c:22:
21:f6:7b:6a:17:94:01:ff:a7:c7:48:38:72:c7:96:
4c:7c:28:7d:cf:89:20:c1:f4:4b:f8:96:ea:c2:f2:
86:64:75:db:f8:8b:95:7e:2b:8b:68:13:80:38:15:
3b:2a:e8:0b:f8:2d:f4:4a:62:15:a6:88:8e:e1:0f:
5b:07:5b:12:43:36:79:5f:8f:b5:08:b6:93:bb:76:
90:b4:52:21:34:bb:93:42:a4:7e:2f:c5:d2:66:64:
89:1c:b2:06:d8:bf:b1:30:de:69:13:07:31:ef:33:
4e:92:a3:e7:6a:2e:52:9f:c8:c8:cc:3f:74:53:26:
6c:bb:6e:91:06:8b:3d:f5:25:72:ba:a3:e0:f2:43:
34:2a:e9:d8:f5:33:60:6c:9b:a8:8a:e6:4b:8c:b5:
5a:0b:f8:02:3a:b0:80:e0:bd:fc:4e:b8:d0:46:52:
57:ba:f4:71:f6:19:d0:94:44:bc:84:34:9b:56:f1:
56:d6:22:62:26:9b:74:41:6b:ec:57:c9:2c:89:b0:
f2:ca:5a:e3:eb:46:a7:71:4e:6c:4c:f5:0d:75:90:
19:a7:d0:3f:c6:0a:52:90:94:e4:fe:95:95:66:bc:
b0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:90:94:2E:91:07:F0:0D:0B:AB:25:F1:F1:91:7A:70:0D:F7:AA:59
X509v3 Authority Key Identifier:
keyid:D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b9:49:68:ab:0d:2e:04:72:0c:7d:07:9c:8e:7c:af:aa:53:
ab:a0:75:05:44:0a:cb:02:7a:68:60:74:2b:3f:5e:2b:a5:52:
71:5e:7d:86:73:4f:8e:15:79:7f:6a:07:06:29:77:83:88:84:
dd:c7:71:b4:95:4a:74:19:33:c1:d1:0f:69:dd:7a:48:65:55:
bf:24:26:f2:ec:55:36:31:a6:45:ca:bd:7a:c8:ad:78:be:5c:
73:1f:3e:64:36:e4:ff:0e:c6:ef:13:2c:54:3d:bb:2f:c9:1b:
de:17:93:e9:2b:c4:a9:41:13:1b:1c:5a:c4:53:08:ce:3f:7f:
9d:38:be:a7:36:a1:02:b3:6e:ea:ad:59:e0:0f:b3:d1:bf:df:
a9:1f:6f:31:a3:c3:85:1f:58:25:b7:e5:a5:f9:79:51:50:65:
0f:6f:a4:77:d8:31:14:8e:2c:13:49:22:b3:5e:fc:4c:f6:c1:
df:a8:f5:e5:24:b1:9f:3f:93:b1:03:b8:c1:18:9b:68:e8:85:
b4:89:aa:9c:59:05:ab:39:a9:d0:74:01:76:ed:b1:e8:7b:31:
89:b6:c1:34:f0:a6:98:1d:14:bb:0d:d0:9e:61:d8:05:6f:0c:
6c:35:9e:90:7d:3f:39:7b:9e:c2:0a:5c:51:98:10:36:51:e2:
e4:cc:1c:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkt7OSrKTxyyo3jhyCjq4nNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYWE0YTFhN2EzYWQyM2ZhYWUyYWVhZTlmYTYxOTRmMDIx
MjgxMjkwHhcNMjUwOTA5MTAwMjAzWhcNMjUwOTEwMTAwMjAzWjAzMTEwLwYDVQQD
Eyg0ODkwOTQyZTkxMDdmMDBkMGJhYjI1ZjFmMTkxN2E3MDBkZjdhYTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OZubdKckS1vc8ArQVnjgmvxxvkq
wzTVNCcAjCIh9ntqF5QB/6fHSDhyx5ZMfCh9z4kgwfRL+JbqwvKGZHXb+IuVfiuL
aBOAOBU7KugL+C30SmIVpoiO4Q9bB1sSQzZ5X4+1CLaTu3aQtFIhNLuTQqR+L8XS
ZmSJHLIG2L+xMN5pEwcx7zNOkqPnai5Sn8jIzD90UyZsu26RBos99SVyuqPg8kM0
KunY9TNgbJuoiuZLjLVaC/gCOrCA4L38TrjQRlJXuvRx9hnQlES8hDSbVvFW1iJi
Jpt0QWvsV8ksibDyylrj60ancU5sTPUNdZAZp9A/xgpSkJTk/pWVZrywPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiQlC6RB/ANC6sl8fGRenAN96pZMB8GA1UdIwQY
MBaAFNCqShp6OtI/quKurp+mGU8CEoEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEtwS0dubzYwai1xNHE2dW42WVpUd0lTZ1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83NjU1NmUtYTFkOC00ZTBhLTg0Njgt
MjIxNGYxOGViMzI5LzEvMEtwS0dubzYwai1xNHE2dW42WVpUd0lTZ1NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS83NjU1NmUtYTFkOC00ZTBhLTg0NjgtMjIxNGYxOGViMzI5
LzEvMEtwS0dubzYwai1xNHE2dW42WVpUd0lTZ1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrlJaKsN
LgRyDH0HnI58r6pTq6B1BUQKywJ6aGB0Kz9eK6VScV59hnNPjhV5f2oHBil3g4iE
3cdxtJVKdBkzwdEPad16SGVVvyQm8uxVNjGmRcq9esiteL5ccx8+ZDbk/w7G7xMs
VD27L8kb3heT6SvEqUETGxxaxFMIzj9/nTi+pzahArNu6q1Z4A+z0b/fqR9vMaPD
hR9YJbflpfl5UVBlD2+kd9gxFI4sE0kis178TPbB36j15SSxnz+TsQO4wRibaOiF
tImqnFkFqzmp0HQBdu2x6HsxibbBNPCmmB0Uuw3QnmHYBW8MbDWekH0/OXuewgpc
UZgQNlHi5MwcOA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 18:24:37 2025 by rpki-client