Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
File: 4OkqeIpBBX0ndk8W87HSo-9jRdY.mft (raw, json)
Hash identifier: PmH3YrNN3OAGlNuOVhuvIakNMwhTT+KvZlz5oHlfN7s=
Subject key identifier: 82:B5:A7:74:5A:D8:FB:9E:27:6F:F3:A5:B5:7A:D0:1E:02:08:21:3E
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Certificate issuer: /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial: 0198971273D5949D9C4C103092794E6A4A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
Manifest number: 1629
Signing time: Mon 11 Aug 2025 03:00:25 +0000
Manifest this update: Mon 11 Aug 2025 03:00:25 +0000
Manifest next update: Tue 12 Aug 2025 03:00:25 +0000
Files and hashes: 1: 4OkqeIpBBX0ndk8W87HSo-9jRdY.crl (hash: hI1Ww3JuxBvi/McMD2IDD76FSXXIX6+SKJbuyf1+K1M=)
2: BL-NDYgvhNS3ykN2bZ3XYSmCEZI.roa (hash: fBvbXWPI6WfZJHj+SHtFQme53z0G5Q3tNcbJRdIO7rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:73:d5:94:9d:9c:4c:10:30:92:79:4e:6a:4a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Validity
Not Before: Aug 11 03:00:25 2025 GMT
Not After : Aug 12 03:00:25 2025 GMT
Subject: CN=82b5a7745ad8fb9e276ff3a5b57ad01e0208213e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:6f:34:3f:a5:5a:6b:58:50:cb:fe:18:b0:
b9:67:e4:18:1c:28:7a:82:47:dc:32:f2:6e:7f:51:
af:15:0b:d0:61:f7:01:34:4c:04:0a:81:d9:ff:21:
f4:71:4d:89:75:b4:8a:3b:25:f2:aa:58:59:8d:17:
a8:27:82:57:65:d6:f2:43:35:ae:9a:e8:c2:a5:ac:
96:63:6d:61:03:ce:34:41:71:e0:15:38:7a:d9:6a:
d3:57:ed:29:f7:eb:87:df:92:ad:4c:e1:3d:69:25:
fe:33:1e:f6:76:0a:ee:04:e0:6b:14:54:ae:c4:48:
54:e3:c6:33:4f:be:1a:d1:fa:87:7b:57:a4:3d:b0:
b0:bc:02:02:26:01:0d:72:b8:4d:98:ef:dd:8e:ae:
66:d4:2e:be:46:a2:f6:7b:ec:cf:0e:e0:89:0b:46:
ca:77:47:c1:5b:94:fc:24:91:52:04:9d:a0:af:c9:
a1:a0:ae:4a:24:a5:b0:a6:0b:a2:a3:59:4d:d8:8a:
05:7d:3a:b7:dd:37:61:90:e9:76:be:b6:b6:1d:94:
ba:36:f8:9b:45:92:b1:ac:a6:30:1a:d9:91:cc:d6:
16:e2:1a:97:d1:8e:c3:05:98:5e:5a:fe:02:90:23:
86:39:50:7e:6d:1d:63:9c:5a:53:af:07:12:35:69:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B5:A7:74:5A:D8:FB:9E:27:6F:F3:A5:B5:7A:D0:1E:02:08:21:3E
X509v3 Authority Key Identifier:
keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b9:ef:ec:f5:38:79:f4:a7:36:06:6a:ba:db:af:18:87:be:
35:c7:d7:5d:44:d4:a3:63:fe:b6:0e:5e:4b:19:c3:a1:7f:6d:
05:f3:99:bf:a4:ee:dd:8c:c9:d8:52:1b:22:ac:dc:57:98:9f:
1a:90:db:d3:cd:bd:20:97:4a:94:2d:53:cf:a1:7c:d2:c3:42:
fa:6b:36:95:d0:e8:c0:76:43:b1:7c:00:d6:5a:60:c5:9c:e9:
68:b0:be:6f:be:28:a1:85:36:d0:45:84:53:65:8d:be:91:1c:
92:a3:f1:38:0c:2a:a9:78:1f:e4:25:95:9d:92:cf:03:48:fa:
e5:e6:68:99:6e:5f:d9:da:15:13:fe:a5:b0:73:0b:2e:8a:3e:
55:60:fc:26:04:87:06:45:97:7c:3a:d1:3c:28:65:63:6e:a3:
da:44:f6:ef:b9:c5:34:17:d2:51:a5:c1:d3:dd:28:5a:7b:6a:
b5:6a:90:28:79:f1:63:41:58:13:df:09:ad:bd:5a:79:20:90:
4e:e8:b0:36:4b:1f:2e:da:9b:7e:10:fd:36:a6:29:33:f2:8e:
91:3b:78:c2:40:24:09:b1:21:3d:17:c2:80:86:c8:fc:28:04:
26:86:6e:8b:3f:db:6e:e9:b2:20:0f:ad:c5:84:39:2d:27:67:
09:1a:4a:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXEnPVlJ2cTBAwknlOako3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZTkyYTc4OGE0MTA1N2QyNzc2NGYxNmYzYjFkMmEzZWY2
MzQ1ZDYwHhcNMjUwODExMDMwMDI1WhcNMjUwODEyMDMwMDI1WjAzMTEwLwYDVQQD
Eyg4MmI1YTc3NDVhZDhmYjllMjc2ZmYzYTViNTdhZDAxZTAyMDgyMTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNJvND+lWmtYUMv+GLC5Z+QYHCh6
gkfcMvJuf1GvFQvQYfcBNEwECoHZ/yH0cU2JdbSKOyXyqlhZjReoJ4JXZdbyQzWu
mujCpayWY21hA840QXHgFTh62WrTV+0p9+uH35KtTOE9aSX+Mx72dgruBOBrFFSu
xEhU48YzT74a0fqHe1ekPbCwvAICJgENcrhNmO/djq5m1C6+RqL2e+zPDuCJC0bK
d0fBW5T8JJFSBJ2gr8mhoK5KJKWwpguio1lN2IoFfTq33TdhkOl2vra2HZS6Nvib
RZKxrKYwGtmRzNYW4hqX0Y7DBZheWv4CkCOGOVB+bR1jnFpTrwcSNWmWsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIK1p3Ra2PueJ2/zpbV60B4CCCE+MB8GA1UdIwQY
MBaAFODpKniKQQV9J3ZPFvOx0qPvY0XWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE9rcWVJcEJCWDBuZGs4Vzg3SFNvLTlqUmRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9kNDY0ODctNDNmZi00NWVlLTgyMjgt
YmE1OWZiMmM0NjEwLzEvNE9rcWVJcEJCWDBuZGs4Vzg3SFNvLTlqUmRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9kNDY0ODctNDNmZi00NWVlLTgyMjgtYmE1OWZiMmM0NjEw
LzEvNE9rcWVJcEJCWDBuZGs4Vzg3SFNvLTlqUmRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrnv7PU4
efSnNgZqutuvGIe+NcfXXUTUo2P+tg5eSxnDoX9tBfOZv6Tu3YzJ2FIbIqzcV5if
GpDb0829IJdKlC1Tz6F80sNC+ms2ldDowHZDsXwA1lpgxZzpaLC+b74ooYU20EWE
U2WNvpEckqPxOAwqqXgf5CWVnZLPA0j65eZomW5f2doVE/6lsHMLLoo+VWD8JgSH
BkWXfDrRPChlY26j2kT277nFNBfSUaXB090oWntqtWqQKHnxY0FYE98Jrb1aeSCQ
TuiwNksfLtqbfhD9NqYpM/KOkTt4wkAkCbEhPRfCgIbI/CgEJoZuiz/bbumyIA+t
xYQ5LSdnCRpKBA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:46:44 2025 by rpki-client