Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
File: dODVhfGshfVEks_JXh3OD8L3lw8.mft (raw, json)
Hash identifier: OUk5n6VSMOiz9eIFRvG7AD7nOOkL6ahI5mhxvHkYMoU=
Subject key identifier: 5A:9E:2E:3A:4C:3E:93:13:9F:67:8F:1B:67:0B:AD:E2:98:D1:C3:54
Authority key identifier: 74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F
Certificate issuer: /CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f
Certificate serial: 019921B0C492D7847426FA2707239005B498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
Manifest number: 02B9
Signing time: Sun 07 Sep 2025 01:00:56 +0000
Manifest this update: Sun 07 Sep 2025 01:00:56 +0000
Manifest next update: Mon 08 Sep 2025 01:00:56 +0000
Files and hashes: 1: ZK2-Yf0vyUn-1yqVZSeh59hAASc.roa (hash: dJFWEY6bKtkQB9DqJ5/i3H6PU+2US3ATnt6WwIQ5YmQ=)
2: dODVhfGshfVEks_JXh3OD8L3lw8.crl (hash: Cs3aVnKOuc7WmlJS7PBr1pp2aaB9LBX+Efzc3rK/OOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:c4:92:d7:84:74:26:fa:27:07:23:90:05:b4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f
Validity
Not Before: Sep 7 01:00:56 2025 GMT
Not After : Sep 8 01:00:56 2025 GMT
Subject: CN=5a9e2e3a4c3e93139f678f1b670bade298d1c354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:f2:32:75:ac:7b:33:b1:51:64:4f:41:3a:
15:1e:96:e8:63:97:36:f8:39:20:65:3e:45:c9:a3:
c4:d3:cd:75:c3:ae:52:e0:7f:09:a3:5a:5d:35:d9:
5c:a0:26:f2:0d:89:a5:fa:e0:cf:f0:34:2a:e1:08:
e1:d4:16:de:b3:00:ca:be:94:56:3e:6e:46:fd:f5:
cf:82:f1:f4:cc:7f:09:6c:e0:73:8f:e8:92:b8:a9:
87:79:f2:39:f9:d6:06:62:a8:da:3a:bf:96:16:7c:
95:f6:69:93:0e:f3:c2:44:d5:44:7a:81:b9:5c:ce:
ba:76:b5:25:33:36:cb:ea:9b:71:ee:a3:d0:d8:f2:
1c:f8:55:e8:05:4d:f9:8f:ff:cb:4a:b2:2b:6b:67:
4b:aa:75:e5:89:ae:d2:e6:3f:2d:a4:d6:a9:cb:86:
38:ed:dd:5a:b8:58:ad:0d:75:63:76:12:91:11:07:
ac:77:b8:1c:44:a7:84:95:a7:03:28:87:2b:21:3d:
2d:11:5f:aa:33:68:cc:e8:a3:17:32:e3:92:95:8c:
35:a0:3e:db:92:bc:39:cf:72:d6:c7:de:84:54:1c:
9a:54:dd:17:72:34:07:79:9f:82:e0:3c:6c:30:48:
28:45:39:2c:f0:f5:b4:4a:be:bd:56:80:35:88:01:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9E:2E:3A:4C:3E:93:13:9F:67:8F:1B:67:0B:AD:E2:98:D1:C3:54
X509v3 Authority Key Identifier:
keyid:74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:78:1d:c8:ce:9b:50:9a:fb:00:4e:c1:0c:76:8a:f5:fe:c5:
77:89:bb:0e:7b:50:62:f1:27:c6:4a:8f:b2:d7:46:fa:f0:bb:
70:f5:0b:5b:0d:6e:5c:f6:04:46:2b:89:6f:30:4e:51:94:0d:
a3:df:5b:e4:c2:30:f3:6a:72:da:5e:a3:2e:b8:75:c5:09:21:
64:d3:c6:28:90:f5:f3:94:f9:9e:65:1d:d0:cf:ac:6f:9c:b8:
02:ac:3a:74:dd:94:e0:19:51:70:f5:e6:92:e8:a6:24:10:67:
e5:cf:f2:5a:47:43:28:77:ef:bb:8d:a9:0f:98:50:18:60:ef:
b6:d8:d1:b1:d8:a5:28:59:00:70:84:00:7e:22:5a:49:bc:cb:
0a:d3:3e:aa:56:46:0c:c7:af:05:71:5b:94:20:e7:c9:92:ea:
2c:9f:0a:d5:28:cd:bf:d3:32:33:ce:4e:5a:c5:50:91:1a:cc:
c7:c4:bd:ea:6c:89:d4:fd:58:d8:d2:0a:bf:f5:d7:cc:8b:ee:
9e:a6:57:b6:d4:d6:9d:d9:2e:36:a5:bf:a8:14:36:78:89:64:
a5:8e:62:95:bc:71:db:43:49:ad:e2:d3:d9:59:7f:48:c1:2c:
9e:3e:72:85:77:4a:66:8f:8c:b9:ce:39:9b:00:01:77:dd:d5:
de:54:78:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsMSS14R0JvonByOQBbSYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZTBkNTg1ZjFhYzg1ZjU0NDkyY2ZjOTVlMWRjZTBmYzJm
Nzk3MGYwHhcNMjUwOTA3MDEwMDU2WhcNMjUwOTA4MDEwMDU2WjAzMTEwLwYDVQQD
Eyg1YTllMmUzYTRjM2U5MzEzOWY2NzhmMWI2NzBiYWRlMjk4ZDFjMzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSzyMnWsezOxUWRPQToVHpboY5c2
+DkgZT5FyaPE0811w65S4H8Jo1pdNdlcoCbyDYml+uDP8DQq4Qjh1BbeswDKvpRW
Pm5G/fXPgvH0zH8JbOBzj+iSuKmHefI5+dYGYqjaOr+WFnyV9mmTDvPCRNVEeoG5
XM66drUlMzbL6ptx7qPQ2PIc+FXoBU35j//LSrIra2dLqnXlia7S5j8tpNapy4Y4
7d1auFitDXVjdhKREQesd7gcRKeElacDKIcrIT0tEV+qM2jM6KMXMuOSlYw1oD7b
krw5z3LWx96EVByaVN0XcjQHeZ+C4DxsMEgoRTks8PW0Sr69VoA1iAGELQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqeLjpMPpMTn2ePG2cLreKY0cNUMB8GA1UdIwQY
MBaAFHTg1YXxrIX1RJLPyV4dzg/C95cPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE9EVmhmR3NoZlZFa3NfSlhoM09EOEwzbHc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mZTBiZjItZjgzOC00MDhiLTk4NDMt
NjU5ODkxMDIwMmEyLzEvZE9EVmhmR3NoZlZFa3NfSlhoM09EOEwzbHc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9mZTBiZjItZjgzOC00MDhiLTk4NDMtNjU5ODkxMDIwMmEy
LzEvZE9EVmhmR3NoZlZFa3NfSlhoM09EOEwzbHc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3gdyM6b
UJr7AE7BDHaK9f7Fd4m7DntQYvEnxkqPstdG+vC7cPULWw1uXPYERiuJbzBOUZQN
o99b5MIw82py2l6jLrh1xQkhZNPGKJD185T5nmUd0M+sb5y4Aqw6dN2U4BlRcPXm
kuimJBBn5c/yWkdDKHfvu42pD5hQGGDvttjRsdilKFkAcIQAfiJaSbzLCtM+qlZG
DMevBXFblCDnyZLqLJ8K1SjNv9MyM85OWsVQkRrMx8S96myJ1P1Y2NIKv/XXzIvu
nqZXttTWndkuNqW/qBQ2eIlkpY5ilbxx20NJreLT2Vl/SMEsnj5yhXdKZo+Muc45
mwABd93V3lR4qg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:01 2025 by rpki-client