Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
File: 0VoQmMXIU1yXWPEo2KCC33z4UQs.mft (raw, json)
Hash identifier: BrKDg7olfByxngwr264ioiQbFZKoMZPHXIJVDiooZpA=
Subject key identifier: C7:8D:23:C5:4D:B3:BB:D8:AE:F3:56:1F:FD:1F:48:70:83:06:A0:D1
Authority key identifier: D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B
Certificate issuer: /CN=d15a1098c5c8535c9758f128d8a082df7cf8510b
Certificate serial: 0199239FB8E7B8CB91B14C959F6C9408459C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
Manifest number: 092A
Signing time: Sun 07 Sep 2025 10:01:33 +0000
Manifest this update: Sun 07 Sep 2025 10:01:33 +0000
Manifest next update: Mon 08 Sep 2025 10:01:33 +0000
Files and hashes: 1: 0VoQmMXIU1yXWPEo2KCC33z4UQs.crl (hash: DhF5AksH3BeP+EgsXQOhfEq6jICnUO2MELaf5EdLQ6w=)
2: 7KXXDbOmDOJ4LQN1JyFA-k-Tm80.roa (hash: FyGaqVFk+vnx+I1kj3NwUg/UfIFUtqEhpx9/rpeS44U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:b8:e7:b8:cb:91:b1:4c:95:9f:6c:94:08:45:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d15a1098c5c8535c9758f128d8a082df7cf8510b
Validity
Not Before: Sep 7 10:01:33 2025 GMT
Not After : Sep 8 10:01:33 2025 GMT
Subject: CN=c78d23c54db3bbd8aef3561ffd1f48708306a0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:c2:82:65:f7:81:47:83:49:fc:27:08:78:
e9:45:1a:c7:2a:ba:9a:80:21:18:85:7a:28:3d:3f:
d0:e6:29:24:91:55:98:f3:ff:fe:8f:94:05:d1:e3:
e7:50:82:20:69:e1:67:8e:05:28:3f:5c:b3:7a:b8:
17:f8:96:7d:fe:29:96:05:e3:93:aa:1d:b4:62:53:
a7:55:d4:d4:3a:8e:44:6a:29:e5:b5:c0:de:dd:84:
0d:07:96:e4:6d:05:9e:30:af:cb:44:09:ac:d0:b7:
bd:43:b4:c1:8e:dd:a7:44:73:63:09:36:9d:96:b5:
3a:f0:14:27:f3:66:31:98:ed:e7:a9:19:ae:6a:a1:
d3:a7:ea:65:96:89:ee:11:2e:ca:60:75:7c:65:64:
ae:2e:58:ff:52:33:cc:9d:05:44:d7:c6:8f:f9:b8:
45:2a:40:2a:eb:e5:45:c4:72:6f:33:ef:50:80:6b:
28:6d:81:46:28:05:86:e7:cc:e6:68:f0:9c:bc:be:
6b:bd:17:d6:c0:2b:77:2d:55:9e:f3:33:9e:ec:0e:
d2:82:62:51:73:95:89:cd:a4:81:b2:2e:ef:b6:09:
e9:96:ee:cf:bb:99:51:b0:38:af:37:36:69:d0:05:
dc:13:ff:2a:8a:b3:89:cd:e9:ad:ba:36:29:c6:3d:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8D:23:C5:4D:B3:BB:D8:AE:F3:56:1F:FD:1F:48:70:83:06:A0:D1
X509v3 Authority Key Identifier:
keyid:D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:47:75:ab:78:09:9a:8a:55:eb:f6:b6:20:d9:ec:9e:8a:c4:
48:cf:9d:f7:ca:e0:c3:be:65:44:23:8c:10:93:76:46:d9:20:
d8:9b:22:9d:ac:eb:4b:38:49:d3:1f:5c:d9:cd:38:03:62:c5:
09:a3:15:49:3d:f5:9d:d6:72:d3:9f:9a:53:ed:f2:28:e3:f3:
33:ad:ab:ae:00:2a:68:55:c6:76:2d:25:a6:36:73:8c:6c:54:
b5:f1:08:23:c4:23:7e:f0:5b:d2:e5:97:46:22:e8:fa:40:e4:
8f:03:23:bd:31:0c:00:96:1e:35:50:5e:0f:38:77:18:07:a4:
5b:c7:46:bc:f6:d5:9b:ac:9d:d5:f8:3b:be:43:9f:0c:2e:0b:
63:a3:1d:b8:82:36:e0:8f:fd:e4:2d:be:d9:26:8d:fa:52:29:
d3:35:23:1a:c3:9a:ae:8a:38:47:a4:08:b9:d6:fd:bd:9e:1c:
d0:7c:c3:45:69:58:a7:b4:ad:77:6e:79:c4:07:d6:ab:68:43:
79:f8:db:df:14:a9:f8:24:6c:66:3c:46:5a:ff:89:10:0b:36:
83:0f:ce:cb:0c:5b:c4:ea:0b:3c:0a:55:08:78:b8:0c:50:6c:
c9:01:95:9a:08:7f:ec:a7:01:f9:84:66:07:84:25:de:d8:41:
1e:a6:14:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn7jnuMuRsUyVn2yUCEWcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNWExMDk4YzVjODUzNWM5NzU4ZjEyOGQ4YTA4MmRmN2Nm
ODUxMGIwHhcNMjUwOTA3MTAwMTMzWhcNMjUwOTA4MTAwMTMzWjAzMTEwLwYDVQQD
EyhjNzhkMjNjNTRkYjNiYmQ4YWVmMzU2MWZmZDFmNDg3MDgzMDZhMGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdrCgmX3gUeDSfwnCHjpRRrHKrqa
gCEYhXooPT/Q5ikkkVWY8//+j5QF0ePnUIIgaeFnjgUoP1yzergX+JZ9/imWBeOT
qh20YlOnVdTUOo5EainltcDe3YQNB5bkbQWeMK/LRAms0Le9Q7TBjt2nRHNjCTad
lrU68BQn82YxmO3nqRmuaqHTp+pllonuES7KYHV8ZWSuLlj/UjPMnQVE18aP+bhF
KkAq6+VFxHJvM+9QgGsobYFGKAWG58zmaPCcvL5rvRfWwCt3LVWe8zOe7A7SgmJR
c5WJzaSBsi7vtgnplu7Pu5lRsDivNzZp0AXcE/8qirOJzemtujYpxj0MgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeNI8VNs7vYrvNWH/0fSHCDBqDRMB8GA1UdIwQY
MBaAFNFaEJjFyFNcl1jxKNiggt98+FELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFZvUW1NWElVMXlYV1BFbzJLQ0MzM3o0VVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YzQwMjEtMGI2Ny00NDg1LWI4MjMt
MGJkZGM4MDcxMWFlLzEvMFZvUW1NWElVMXlYV1BFbzJLQ0MzM3o0VVFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82YzQwMjEtMGI2Ny00NDg1LWI4MjMtMGJkZGM4MDcxMWFl
LzEvMFZvUW1NWElVMXlYV1BFbzJLQ0MzM3o0VVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsEd1q3gJ
mopV6/a2INnsnorESM+d98rgw75lRCOMEJN2Rtkg2JsinazrSzhJ0x9c2c04A2LF
CaMVST31ndZy05+aU+3yKOPzM62rrgAqaFXGdi0lpjZzjGxUtfEII8QjfvBb0uWX
RiLo+kDkjwMjvTEMAJYeNVBeDzh3GAekW8dGvPbVm6yd1fg7vkOfDC4LY6MduII2
4I/95C2+2SaN+lIp0zUjGsOaroo4R6QIudb9vZ4c0HzDRWlYp7Std255xAfWq2hD
efjb3xSp+CRsZjxGWv+JEAs2gw/OywxbxOoLPApVCHi4DFBsyQGVmgh/7KcB+YRm
B4Ql3thBHqYUeg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:16 2025 by rpki-client