Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
File: oR8gWXnS-96VdWpGoPJznXgW1Fk.mft (raw, json)
Hash identifier: +bZiJSX+Qd+eTJumMVtmak2UKneWbE1DPIEuu1eTnLU=
Subject key identifier: E6:53:39:8B:B5:46:3A:E9:97:0A:73:08:BB:FA:4D:BE:F3:B0:57:E8
Authority key identifier: A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
Certificate issuer: /CN=a11f205979d2fbde95756a46a0f2739d7816d459
Certificate serial: 01992331730AF73EDF005CFBCFEA561C1AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 08:01:07 +0000
Manifest this update: Sun 07 Sep 2025 08:01:07 +0000
Manifest next update: Mon 08 Sep 2025 08:01:07 +0000
Files and hashes: 1: 6vbfFj5TD4fDaSTru2yjQXF2OFk.roa (hash: oXfLAfaVHKOErMTF1H2nSkxbh4csWsQNcGxt19vZDpM=)
2: oR8gWXnS-96VdWpGoPJznXgW1Fk.crl (hash: TYK1NTf/Fy3d9ICdJ7xgIxAtwtI7bLsa+qjLVJD+z0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:73:0a:f7:3e:df:00:5c:fb:cf:ea:56:1c:1a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11f205979d2fbde95756a46a0f2739d7816d459
Validity
Not Before: Sep 7 08:01:07 2025 GMT
Not After : Sep 8 08:01:07 2025 GMT
Subject: CN=e653398bb5463ae9970a7308bbfa4dbef3b057e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:b9:a7:1d:06:2b:f7:ab:f6:68:8b:bd:27:
a4:a9:47:8b:21:fd:20:f6:41:75:d8:0a:2e:9e:a2:
e9:03:ab:8d:a6:15:c6:94:4e:6d:6e:d3:5f:c7:dc:
6e:06:b4:2a:b0:1d:cd:5a:8f:a0:8d:9b:bf:96:de:
24:6a:e4:f0:f9:a0:7e:22:a4:e9:e5:30:5f:03:96:
45:ce:8f:6a:5f:21:12:ed:1a:5f:06:12:39:f1:ac:
a1:29:0b:d6:a5:1c:48:bf:80:0f:d6:58:af:59:63:
ad:0e:de:2c:83:94:88:b6:22:a1:14:af:f2:0e:36:
90:4b:99:cf:3a:d7:db:4d:b5:84:f8:69:e6:01:86:
83:5c:63:cc:61:33:0b:ce:1f:36:68:4f:a1:89:b3:
e2:27:08:de:eb:c8:4b:16:2b:66:48:91:01:30:95:
5b:16:db:fa:91:88:11:8c:f3:5c:10:d8:c9:26:10:
f0:11:2a:9c:95:61:96:31:22:0a:99:49:37:81:3c:
48:76:ba:df:b3:4b:80:bd:f3:45:6d:34:48:e2:f4:
ac:db:c1:c6:c2:01:21:00:f9:93:67:a9:6e:11:5d:
3f:58:b9:5d:5d:ca:ec:d9:e6:1e:8d:08:9d:c5:de:
71:9d:5e:28:67:07:5a:98:22:7b:20:8b:58:b1:41:
d0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:53:39:8B:B5:46:3A:E9:97:0A:73:08:BB:FA:4D:BE:F3:B0:57:E8
X509v3 Authority Key Identifier:
keyid:A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d5:78:d0:ec:59:b0:db:fa:b9:3d:23:3e:d1:33:0e:c8:2f:
04:1d:1c:54:e5:cc:d9:7b:4f:e8:e0:30:03:fe:a8:51:97:4c:
29:64:83:2e:f5:95:23:6d:22:7c:1a:6d:9b:48:f0:28:7e:5c:
dc:4c:92:9b:3b:dc:3a:74:ac:70:07:9b:fd:29:c4:b6:82:80:
d1:8b:45:79:d2:22:91:9a:e5:03:e5:86:cb:71:0d:6f:54:4e:
7f:ce:71:47:25:24:7b:a9:17:8b:84:fa:be:06:b5:2e:3d:38:
74:5b:aa:7e:49:5f:e7:f0:24:63:4e:51:1d:0b:08:ef:a7:cc:
71:b2:3d:0e:e7:a4:72:60:5d:29:8c:15:ac:95:e8:17:f3:3e:
8c:bd:15:12:29:92:4c:b4:f8:f8:1e:cd:97:2e:5e:5b:42:9f:
73:a9:7f:db:6f:1c:c9:70:23:bb:1d:06:0f:16:61:f3:69:46:
31:7b:29:17:87:b7:19:fb:b5:d3:bb:bb:33:8e:b1:fc:4a:c3:
9d:61:5f:52:87:b4:96:5f:f8:13:e1:a1:30:a6:bf:0a:24:e1:
9a:e3:50:92:22:f6:1b:1d:9f:2b:4e:a3:0b:32:5c:9a:7a:34:
00:e7:ff:e1:47:61:ea:d7:2e:04:7d:31:e1:9c:3e:cd:80:8f:
ec:ab:14:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMXMK9z7fAFz7z+pWHBqxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMWYyMDU5NzlkMmZiZGU5NTc1NmE0NmEwZjI3MzlkNzgx
NmQ0NTkwHhcNMjUwOTA3MDgwMTA3WhcNMjUwOTA4MDgwMTA3WjAzMTEwLwYDVQQD
EyhlNjUzMzk4YmI1NDYzYWU5OTcwYTczMDhiYmZhNGRiZWYzYjA1N2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtia5px0GK/er9miLvSekqUeLIf0g
9kF12AounqLpA6uNphXGlE5tbtNfx9xuBrQqsB3NWo+gjZu/lt4kauTw+aB+IqTp
5TBfA5ZFzo9qXyES7RpfBhI58ayhKQvWpRxIv4AP1livWWOtDt4sg5SItiKhFK/y
DjaQS5nPOtfbTbWE+GnmAYaDXGPMYTMLzh82aE+hibPiJwje68hLFitmSJEBMJVb
Ftv6kYgRjPNcENjJJhDwESqclWGWMSIKmUk3gTxIdrrfs0uAvfNFbTRI4vSs28HG
wgEhAPmTZ6luEV0/WLldXcrs2eYejQidxd5xnV4oZwdamCJ7IItYsUHQ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZTOYu1RjrplwpzCLv6Tb7zsFfoMB8GA1UdIwQY
MBaAFKEfIFl50vvelXVqRqDyc514FtRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1I4Z1dYblMtOTZWZFdwR29QSnpuWGdXMUZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xOWYyMjktYTkwZi00MmM0LTk4MGIt
MTU1MGYyYWM4N2IzLzEvb1I4Z1dYblMtOTZWZFdwR29QSnpuWGdXMUZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xOWYyMjktYTkwZi00MmM0LTk4MGItMTU1MGYyYWM4N2Iz
LzEvb1I4Z1dYblMtOTZWZFdwR29QSnpuWGdXMUZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNV40OxZ
sNv6uT0jPtEzDsgvBB0cVOXM2XtP6OAwA/6oUZdMKWSDLvWVI20ifBptm0jwKH5c
3EySmzvcOnSscAeb/SnEtoKA0YtFedIikZrlA+WGy3ENb1ROf85xRyUke6kXi4T6
vga1Lj04dFuqfklf5/AkY05RHQsI76fMcbI9DuekcmBdKYwVrJXoF/M+jL0VEimS
TLT4+B7Nly5eW0Kfc6l/228cyXAjux0GDxZh82lGMXspF4e3Gfu107u7M46x/ErD
nWFfUoe0ll/4E+GhMKa/CiThmuNQkiL2Gx2fK06jCzJcmno0AOf/4Udh6tcuBH0x
4Zw+zYCP7KsU5A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:44 2025 by rpki-client