Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
File: O5WuuspzMW3EaAyAi3k-aglWXxs.mft (raw, json)
Hash identifier: eAYADtLZlMIViMCaaO5HH9t4o0pqS4FCByRKDmST1T8=
Subject key identifier: 85:DD:C6:E0:09:D6:B2:4D:BF:36:14:97:FB:5C:83:B5:4A:D3:75:03
Authority key identifier: 3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
Certificate issuer: /CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Certificate serial: 01992331895E9789542FE68B4AEEC9FA0490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
Manifest number: 04C8
Signing time: Sun 07 Sep 2025 08:01:12 +0000
Manifest this update: Sun 07 Sep 2025 08:01:12 +0000
Manifest next update: Mon 08 Sep 2025 08:01:12 +0000
Files and hashes: 1: O5WuuspzMW3EaAyAi3k-aglWXxs.crl (hash: fgzZUxTnBbtbyHa0OO6LxFs3QuojetPueHS2387yaEI=)
2: tsimjRApcLdxNhZEKgAs63IqA5I.roa (hash: HrZUtgrX3ioBRBNFpZduF4ySYEUBH1QJ3tZ4kshDhvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:89:5e:97:89:54:2f:e6:8b:4a:ee:c9:fa:04:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Validity
Not Before: Sep 7 08:01:12 2025 GMT
Not After : Sep 8 08:01:12 2025 GMT
Subject: CN=85ddc6e009d6b24dbf361497fb5c83b54ad37503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:b5:01:59:9b:0a:ad:2c:dd:c8:9c:90:95:
9f:2f:1e:ad:dc:e0:3a:a2:f9:32:8f:e2:01:ec:34:
7e:34:08:c9:c7:ea:95:49:7a:7f:d1:c5:f1:39:04:
01:ae:fe:ea:80:75:c4:fb:46:9c:8b:a7:3c:6c:97:
c7:85:ef:83:9a:a8:e1:ed:2f:ef:b6:71:96:c1:7e:
5d:31:fe:75:b0:b0:54:cc:72:25:98:18:65:c9:0d:
18:30:9c:10:11:7c:a1:a7:e7:2f:f7:20:80:f3:57:
b5:b4:f6:9c:77:8e:4d:79:17:d0:7d:70:1f:b0:90:
0f:bb:c1:65:39:e4:cf:37:66:36:d0:ce:86:fc:35:
9b:04:b8:ea:55:b4:cb:9c:61:cc:dc:89:50:fd:44:
5f:8e:6c:ac:58:0c:06:b3:ba:6f:ee:d4:6f:12:93:
d9:d8:fc:a9:28:1e:bd:bb:4e:50:c4:8b:6b:28:42:
4b:3b:fe:91:ab:bc:63:5e:4f:34:d2:61:07:79:d7:
d2:29:e4:2a:12:f6:60:be:f3:24:24:ea:d4:23:55:
b0:c5:2c:17:1b:5e:68:7e:8c:bf:c9:e3:c7:6f:12:
d6:23:49:b6:56:2b:d6:cc:fa:b8:b2:fd:20:4b:a8:
ba:77:51:94:53:62:48:e9:c1:f6:a9:3f:01:89:ec:
3c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DD:C6:E0:09:D6:B2:4D:BF:36:14:97:FB:5C:83:B5:4A:D3:75:03
X509v3 Authority Key Identifier:
keyid:3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:aa:d0:bb:79:0d:f5:ad:65:e2:16:84:96:77:b1:66:58:6a:
26:f7:53:54:d4:7c:42:57:ff:47:f8:bd:df:15:1e:1f:55:3f:
b9:4d:fd:47:99:c4:94:d5:3c:e1:c9:ea:08:8b:f6:ba:66:16:
ab:d7:66:96:2c:f9:15:d6:aa:8f:30:ff:7b:f0:f7:39:07:c4:
93:62:70:1b:1c:50:6b:bf:0b:97:f0:e3:16:c1:64:7b:8f:56:
fc:52:99:2a:2c:ec:54:a4:5b:3f:a6:ab:f6:27:bd:44:bd:e3:
57:fc:69:4c:53:aa:91:1e:40:73:02:e2:4b:d4:f3:77:8f:3c:
46:03:43:c7:37:5e:27:93:e0:eb:84:78:b9:68:fd:c4:b5:8d:
91:28:15:cb:ab:60:c9:f8:00:94:2c:ad:30:3f:d9:c7:5a:aa:
9f:50:0b:5b:17:37:05:fb:30:b9:79:bc:36:c4:ff:f7:95:14:
46:31:85:6f:12:ad:61:56:ff:6b:e9:d7:85:81:13:74:82:97:
de:b1:57:2f:ff:a7:65:c9:0b:9d:0f:4a:e0:47:f5:24:40:d9:
6c:7b:71:ac:6f:14:94:df:96:41:ca:32:b1:8e:da:bf:c7:2e:
f4:8c:ef:95:17:69:6b:22:fe:33:c4:60:89:87:c4:a3:89:8e:
dc:2c:6e:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMYlel4lUL+aLSu7J+gSQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOTVhZWJhY2E3MzMxNmRjNDY4MGM4MDhiNzkzZTZhMDk1
NjVmMWIwHhcNMjUwOTA3MDgwMTEyWhcNMjUwOTA4MDgwMTEyWjAzMTEwLwYDVQQD
Eyg4NWRkYzZlMDA5ZDZiMjRkYmYzNjE0OTdmYjVjODNiNTRhZDM3NTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQS1AVmbCq0s3cickJWfLx6t3OA6
ovkyj+IB7DR+NAjJx+qVSXp/0cXxOQQBrv7qgHXE+0aci6c8bJfHhe+Dmqjh7S/v
tnGWwX5dMf51sLBUzHIlmBhlyQ0YMJwQEXyhp+cv9yCA81e1tPacd45NeRfQfXAf
sJAPu8FlOeTPN2Y20M6G/DWbBLjqVbTLnGHM3IlQ/URfjmysWAwGs7pv7tRvEpPZ
2PypKB69u05QxItrKEJLO/6Rq7xjXk800mEHedfSKeQqEvZgvvMkJOrUI1WwxSwX
G15ofoy/yePHbxLWI0m2VivWzPq4sv0gS6i6d1GUU2JI6cH2qT8Biew8HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXdxuAJ1rJNvzYUl/tcg7VK03UDMB8GA1UdIwQY
MBaAFDuVrrrKczFtxGgMgIt5PmoJVl8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzVXdXVzcHpNVzNFYUF5QWkzay1hZ2xXWHhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9hYjNmMzYtNzg1MC00MjY2LWI2N2Et
MDIzY2MxZmMxOTEwLzEvTzVXdXVzcHpNVzNFYUF5QWkzay1hZ2xXWHhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9hYjNmMzYtNzg1MC00MjY2LWI2N2EtMDIzY2MxZmMxOTEw
LzEvTzVXdXVzcHpNVzNFYUF5QWkzay1hZ2xXWHhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALarQu3kN
9a1l4haElnexZlhqJvdTVNR8Qlf/R/i93xUeH1U/uU39R5nElNU84cnqCIv2umYW
q9dmliz5FdaqjzD/e/D3OQfEk2JwGxxQa78Ll/DjFsFke49W/FKZKizsVKRbP6ar
9ie9RL3jV/xpTFOqkR5AcwLiS9Tzd488RgNDxzdeJ5Pg64R4uWj9xLWNkSgVy6tg
yfgAlCytMD/Zx1qqn1ALWxc3BfswuXm8NsT/95UURjGFbxKtYVb/a+nXhYETdIKX
3rFXL/+nZckLnQ9K4Ef1JEDZbHtxrG8UlN+WQcoysY7av8cu9IzvlRdpayL+M8Rg
iYfEo4mO3CxuDQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:23 2025 by rpki-client