Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
File: Onb8XJAQtBEZymjca5lQul_3Mn4.mft (raw, json)
Hash identifier: 6/a9LeZXx+lZkyQNZERFy3piXsFW3stC7A7yZ2JkjMo=
Subject key identifier: 4D:A8:58:56:4C:7D:02:27:8C:2C:06:77:B6:0A:CE:5E:4F:76:ED:C0
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial: 01991809BD2570782FB046EDD87D7670D257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
Manifest number: 1048
Signing time: Fri 05 Sep 2025 04:01:55 +0000
Manifest this update: Fri 05 Sep 2025 04:01:55 +0000
Manifest next update: Sat 06 Sep 2025 04:01:55 +0000
Files and hashes: 1: Onb8XJAQtBEZymjca5lQul_3Mn4.crl (hash: yBjBMg0df9ct5eRPkXcoLCbkskBDENaoyoH51QKVujU=)
2: aLeS6kJNMMsXR_fWm4nfBJc0RbY.roa (hash: 2eZg5Esd5JZxUzRdKZEfMd9ilMWbL+Zmx8dFdFF5esA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:bd:25:70:78:2f:b0:46:ed:d8:7d:76:70:d2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Validity
Not Before: Sep 5 04:01:55 2025 GMT
Not After : Sep 6 04:01:55 2025 GMT
Subject: CN=4da858564c7d02278c2c0677b60ace5e4f76edc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:22:bc:fe:f9:83:53:e7:b6:98:ef:c9:41:
30:c9:ba:cd:c0:ba:a6:d9:8e:88:7a:18:d0:cd:dd:
0b:2a:ce:3c:3e:5a:02:ea:6c:ae:05:e9:e3:27:31:
37:d4:b1:9b:3a:b4:4d:8f:9e:6a:1f:c1:27:36:df:
c6:90:91:33:a3:7d:85:44:d5:98:2b:70:f2:e3:2d:
15:0b:67:70:ca:7f:06:9d:fd:32:57:42:3f:d3:6c:
81:0a:29:d6:b4:6a:d9:b2:d7:54:c9:21:a6:c5:9b:
28:1b:e3:00:07:f0:9b:86:0f:ec:cf:b4:ca:8b:be:
ec:2a:60:01:6c:d3:c6:c6:c2:10:c4:d5:6c:3f:9d:
5a:ee:bb:30:9e:b9:60:27:3e:3a:e4:fb:1c:1d:db:
9b:90:be:94:8b:b0:96:51:d0:b5:33:86:82:a3:c8:
8a:04:9d:a3:ff:40:f2:2e:ab:48:0b:f5:e2:2d:da:
ad:f7:5c:a0:36:2f:21:1c:b9:ab:a5:22:e0:37:39:
60:53:db:63:73:05:eb:26:bc:94:b9:2f:ea:aa:69:
56:b3:fe:34:51:3e:8c:58:f5:e9:62:ae:16:8d:38:
cf:a5:1c:6a:d1:b4:0a:bf:f1:34:22:7e:47:43:95:
33:a0:6e:a3:67:43:28:30:23:df:33:a1:86:dd:d5:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A8:58:56:4C:7D:02:27:8C:2C:06:77:B6:0A:CE:5E:4F:76:ED:C0
X509v3 Authority Key Identifier:
keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a5:34:05:86:c3:ce:bc:11:c5:5b:55:8f:7c:c9:e9:5e:45:
cf:94:1c:63:ba:ed:24:5e:5d:ea:34:f2:ff:1a:2a:c2:cb:22:
fb:04:f6:1a:95:23:24:3d:ef:75:1b:32:b4:30:74:cc:c8:cf:
92:ea:9d:18:9f:11:8b:3a:d6:54:da:1d:96:49:f0:25:47:7b:
b1:75:76:38:b5:0d:93:d6:12:1a:a7:59:18:4b:d6:19:a7:76:
b5:6c:2f:83:aa:9c:57:28:06:5e:7d:2e:00:72:fe:38:3a:7f:
cf:35:b1:c7:c4:4b:5a:99:0e:b7:79:33:9c:fb:53:c8:2d:54:
bc:ea:52:3d:3d:78:62:78:99:22:2e:b0:73:a9:a8:59:9e:56:
bc:df:54:11:de:7c:a4:01:68:63:3b:e1:e1:cd:4a:e7:77:b9:
d7:86:70:05:16:29:21:b4:6e:5c:12:1e:8d:a0:32:cd:f3:41:
7e:d9:44:d6:39:57:92:99:c5:4c:1a:92:44:2f:28:da:18:63:
62:2b:31:9c:ba:52:0c:8d:e2:9b:49:cc:38:ae:ca:16:89:76:
d6:3e:cf:d3:64:bb:87:3e:15:c0:77:70:57:1e:d1:82:d1:ce:
e1:57:d0:db:a7:a1:ed:6f:dd:60:15:c4:95:5f:98:c1:be:5a:
ef:24:e3:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYCb0lcHgvsEbt2H12cNJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNzZmYzVjOTAxMGI0MTExOWNhNjhkYzZiOTk1MGJhNWZm
NzMyN2UwHhcNMjUwOTA1MDQwMTU1WhcNMjUwOTA2MDQwMTU1WjAzMTEwLwYDVQQD
Eyg0ZGE4NTg1NjRjN2QwMjI3OGMyYzA2NzdiNjBhY2U1ZTRmNzZlZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYMivP75g1PntpjvyUEwybrNwLqm
2Y6IehjQzd0LKs48PloC6myuBenjJzE31LGbOrRNj55qH8EnNt/GkJEzo32FRNWY
K3Dy4y0VC2dwyn8Gnf0yV0I/02yBCinWtGrZstdUySGmxZsoG+MAB/Cbhg/sz7TK
i77sKmABbNPGxsIQxNVsP51a7rswnrlgJz465PscHdubkL6Ui7CWUdC1M4aCo8iK
BJ2j/0DyLqtIC/XiLdqt91ygNi8hHLmrpSLgNzlgU9tjcwXrJryUuS/qqmlWs/40
UT6MWPXpYq4WjTjPpRxq0bQKv/E0In5HQ5UzoG6jZ0MoMCPfM6GG3dWDlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2oWFZMfQInjCwGd7YKzl5Pdu3AMB8GA1UdIwQY
MBaAFDp2/FyQELQRGcpo3GuZULpf9zJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2Qt
YmRmYTdjNGY4YjBhLzEvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2QtYmRmYTdjNGY4YjBh
LzEvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqU0BYbD
zrwRxVtVj3zJ6V5Fz5QcY7rtJF5d6jTy/xoqwssi+wT2GpUjJD3vdRsytDB0zMjP
kuqdGJ8RizrWVNodlknwJUd7sXV2OLUNk9YSGqdZGEvWGad2tWwvg6qcVygGXn0u
AHL+ODp/zzWxx8RLWpkOt3kznPtTyC1UvOpSPT14YniZIi6wc6moWZ5WvN9UEd58
pAFoYzvh4c1K53e514ZwBRYpIbRuXBIejaAyzfNBftlE1jlXkpnFTBqSRC8o2hhj
YisxnLpSDI3im0nMOK7KFol21j7P02S7hz4VwHdwVx7RgtHO4VfQ26eh7W/dYBXE
lV+Ywb5a7yTjxA==
-----END CERTIFICATE-----
Generated at Fri Sep 5 09:50:41 2025 by rpki-client