Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: S8yh2q53RtAfMDqjWDucUgfFvI8IBCnCiftX/VO5l90=
Subject key identifier: 73:26:43:4A:A7:9D:EF:50:15:C1:CE:A4:3D:49:D6:29:A4:FE:18:5B
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 019922558B2CBCC0CB1EF6A00ADE60030BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 04:00:55 +0000
Manifest this update: Sun 07 Sep 2025 04:00:55 +0000
Manifest next update: Mon 08 Sep 2025 04:00:55 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: qq0fDLc+GLL+Xvam/mSGMfPefIS4WdKERJU4p0lQVRk=)
2: rcxI4e2J8wRM11pjAJVw2X1CP4Q.roa (hash: dOutEmsom2VI++bJk5JwwVxqjGBRuIpfu9it/0+MYW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:8b:2c:bc:c0:cb:1e:f6:a0:0a:de:60:03:0b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: Sep 7 04:00:55 2025 GMT
Not After : Sep 8 04:00:55 2025 GMT
Subject: CN=7326434aa79def5015c1cea43d49d629a4fe185b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:13:d0:44:ff:14:28:22:6d:6b:38:00:0b:
8b:5b:7b:7f:ff:e9:ee:e8:79:51:34:a6:40:37:ae:
bb:bd:e2:b8:ac:97:2b:4b:27:3b:e9:ae:1a:08:c8:
bb:c3:e5:1c:2e:48:04:8e:f6:5f:9d:b9:cd:6f:e7:
21:61:9c:17:7a:d3:e1:d3:cc:ab:ba:f3:7b:0d:3a:
8c:00:fa:6c:81:b3:d8:f3:16:9d:29:d0:9d:11:61:
2d:b9:3a:f7:c3:f0:a1:61:58:7f:40:d2:09:79:eb:
ce:eb:93:9e:54:e7:d8:90:6d:2f:68:2e:62:5d:18:
d1:72:c9:8c:7a:44:c9:fa:b8:20:08:7c:e5:fe:3d:
d5:db:7e:64:a3:3c:43:12:9e:c9:d3:19:40:01:58:
82:81:3b:3f:71:87:30:89:7c:93:32:15:44:d5:ba:
03:0f:58:5b:65:5d:bb:b9:ab:65:01:c6:f8:48:21:
0b:fe:70:f0:10:34:dd:bb:9d:78:c9:2a:10:15:51:
67:98:91:da:de:b4:19:6d:04:26:04:6c:07:23:83:
c4:1c:58:a6:90:9a:0b:83:a4:d4:35:20:c7:a0:64:
db:9b:43:cc:7b:db:d6:3d:b8:48:ce:bd:15:d6:01:
a3:93:16:a4:af:8a:63:56:58:51:fd:44:e9:38:48:
06:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:26:43:4A:A7:9D:EF:50:15:C1:CE:A4:3D:49:D6:29:A4:FE:18:5B
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:84:0c:21:40:97:3c:69:47:47:04:5a:16:88:14:46:cb:93:
fc:4d:fd:bd:1d:83:be:80:13:92:15:8d:bf:71:31:e4:91:b7:
02:4a:d8:11:bb:b4:1a:26:93:c8:87:f9:2c:3b:e6:79:84:9b:
13:c4:f5:ff:1f:a2:5c:1b:eb:95:8e:97:12:7f:53:cd:d1:79:
6d:1f:1b:b1:53:41:c3:f1:ce:a4:90:8d:85:60:06:12:55:3b:
c2:12:1a:66:5e:84:83:b4:18:83:f1:87:8b:14:6c:8e:a9:69:
e7:49:5b:65:19:27:8d:84:3d:3a:32:a3:3c:37:c2:da:4c:84:
11:c6:d8:48:f0:f1:aa:d5:0f:63:1e:c1:3d:fc:8e:79:a1:5e:
c2:ac:58:24:6b:4b:d7:0c:66:f4:50:87:dc:c6:83:74:3d:dc:
f3:bd:bc:91:13:1c:68:9d:ef:c6:53:02:22:d5:08:9b:2d:30:
aa:d0:d9:d8:40:bd:1a:47:1e:3b:5e:a2:4e:b7:54:10:43:5e:
ea:14:7c:68:36:ed:0f:29:0f:99:21:a1:b4:b8:d0:25:ba:60:
14:27:1c:0b:c5:38:58:87:e9:b1:14:92:19:14:b0:75:8f:32:
43:4d:00:e1:4c:0c:d3:3e:2e:38:7d:1c:cb:c7:4b:63:cf:fe:
0b:c5:ee:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVYssvMDLHvagCt5gAwvBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjZjZDMwYjRjZmExOTNlMjI2YmJhOTI4MmUzNjZhMjJh
MzExMGYwHhcNMjUwOTA3MDQwMDU1WhcNMjUwOTA4MDQwMDU1WjAzMTEwLwYDVQQD
Eyg3MzI2NDM0YWE3OWRlZjUwMTVjMWNlYTQzZDQ5ZDYyOWE0ZmUxODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQIT0ET/FCgibWs4AAuLW3t//+nu
6HlRNKZAN667veK4rJcrSyc76a4aCMi7w+UcLkgEjvZfnbnNb+chYZwXetPh08yr
uvN7DTqMAPpsgbPY8xadKdCdEWEtuTr3w/ChYVh/QNIJeevO65OeVOfYkG0vaC5i
XRjRcsmMekTJ+rggCHzl/j3V235kozxDEp7J0xlAAViCgTs/cYcwiXyTMhVE1boD
D1hbZV27uatlAcb4SCEL/nDwEDTdu514ySoQFVFnmJHa3rQZbQQmBGwHI4PEHFim
kJoLg6TUNSDHoGTbm0PMe9vWPbhIzr0V1gGjkxakr4pjVlhR/UTpOEgGFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMmQ0qnne9QFcHOpD1J1imk/hhbMB8GA1UdIwQY
MBaAFND2zTC0z6GT4ia7qSguNmoioxEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQt
ZTI5OWU5MTAwMzllLzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQtZTI5OWU5MTAwMzll
LzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOoQMIUCX
PGlHRwRaFogURsuT/E39vR2DvoATkhWNv3Ex5JG3AkrYEbu0GiaTyIf5LDvmeYSb
E8T1/x+iXBvrlY6XEn9TzdF5bR8bsVNBw/HOpJCNhWAGElU7whIaZl6Eg7QYg/GH
ixRsjqlp50lbZRknjYQ9OjKjPDfC2kyEEcbYSPDxqtUPYx7BPfyOeaFewqxYJGtL
1wxm9FCH3MaDdD3c8728kRMcaJ3vxlMCItUImy0wqtDZ2EC9GkceO16iTrdUEENe
6hR8aDbtDykPmSGhtLjQJbpgFCccC8U4WIfpsRSSGRSwdY8yQ00A4UwM0z4uOH0c
y8dLY8/+C8Xuag==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:36 2025 by rpki-client