Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
File: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft (raw, json)
Hash identifier: 1kRqsp/AEoJJZms3COOMvOk+dIHJM4GtqPkifTwe07Y=
Subject key identifier: 3A:9C:6C:98:A7:3B:BD:15:DB:92:62:88:C7:67:CB:C5:A9:EA:58:7B
Authority key identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
Certificate issuer: /CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Certificate serial: 01988957331B4058A222AD1CE68C39A2FD2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 11:00:49 +0000
Manifest this update: Fri 08 Aug 2025 11:00:49 +0000
Manifest next update: Sat 09 Aug 2025 11:00:49 +0000
Files and hashes: 1: 7rbCLoXWYly-2n7W-2TuSkBBMV8.roa (hash: SrTY3jKnRzrFELEhX/LwQ/2tjPUOB7vnlEoMlBte4mA=)
2: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl (hash: E/8/4QL1hjtY4HkCtNHscLmqqN/Gx1bhZBC826bptUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:33:1b:40:58:a2:22:ad:1c:e6:8c:39:a2:fd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Validity
Not Before: Aug 8 11:00:49 2025 GMT
Not After : Aug 9 11:00:49 2025 GMT
Subject: CN=3a9c6c98a73bbd15db926288c767cbc5a9ea587b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:88:60:e7:3b:0a:98:3a:bf:49:39:b7:0e:
2f:01:cc:96:50:d7:ff:d7:ab:9b:96:3d:bd:87:58:
43:5e:82:f9:85:c9:66:09:24:2d:ee:be:7e:0f:63:
db:bd:80:94:da:5a:1a:1a:4c:56:bd:75:b1:9f:d9:
d3:68:1b:28:46:ca:4b:f5:d4:3b:db:ec:60:3e:fd:
ac:f6:1c:fd:28:9f:53:69:33:19:24:9f:57:bb:4e:
fc:4a:24:3f:ff:32:e9:80:a0:dc:3a:8c:18:d0:f9:
96:20:05:0a:f1:e3:4b:92:62:a7:b6:3c:11:90:85:
25:23:86:0c:41:88:c5:ff:39:78:5a:38:0b:a4:6d:
45:e6:14:b2:a5:03:83:3d:ee:85:41:b8:7d:79:01:
95:be:81:c3:90:be:d7:5f:34:7b:4b:75:36:a1:62:
80:84:d6:9d:2d:c2:5d:7a:3e:7e:f8:72:7e:40:0b:
71:fd:00:68:0b:69:1a:55:19:c8:6f:71:99:75:db:
e0:25:8e:82:e6:2c:46:73:94:68:25:47:b9:6c:48:
33:3c:93:b4:41:89:33:21:a4:17:c0:f0:50:d7:cc:
2d:7f:97:c5:cf:4e:81:4f:c0:d0:59:c3:98:c4:6c:
b9:45:65:e3:bf:3f:1b:61:52:06:61:e3:b4:ce:78:
36:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9C:6C:98:A7:3B:BD:15:DB:92:62:88:C7:67:CB:C5:A9:EA:58:7B
X509v3 Authority Key Identifier:
keyid:FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6c:98:ed:33:55:9c:39:73:c7:3b:82:e4:26:0b:c6:ac:67:
3d:21:e1:92:ee:d8:74:f4:40:83:18:3f:ce:de:b7:fc:aa:c6:
56:b8:b3:87:01:ef:a4:6d:ca:16:d1:48:60:76:63:71:9a:b7:
18:86:7c:f7:7b:29:b6:61:cb:ab:fc:68:00:d2:fd:eb:f0:06:
11:55:f2:22:7b:5a:2f:22:7c:fd:fa:38:74:23:31:15:f4:53:
b4:af:58:74:7e:30:5f:b9:2b:8d:01:9d:69:19:15:38:1d:7f:
d9:91:39:7f:5c:1e:db:b8:0a:b3:13:2b:4d:7c:e4:0e:42:ae:
c9:98:c8:4a:7f:d0:a4:83:f2:02:d6:bb:96:32:53:5a:be:76:
b4:0b:73:3e:22:a0:1e:7b:95:5d:70:1b:9e:78:22:3d:6c:e8:
1b:03:6e:27:aa:58:0d:e9:97:b7:96:39:19:88:0f:ea:f6:ad:
2a:27:10:46:8f:45:97:a4:69:80:f9:18:61:3e:6f:d6:01:7c:
c7:bb:2c:fd:52:6d:ab:f9:52:cb:2a:be:08:f0:71:37:8e:12:
4d:e4:f3:97:f6:7f:4d:2b:2f:1f:4b:6a:bf:29:3e:47:c3:6e:
49:9b:0b:2c:44:e7:71:77:04:b0:09:28:f0:66:99:33:6c:05:
67:80:23:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJVzMbQFiiIq0c5ow5ov0qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZWUzMjI3OWMxNmRhY2RiNTM0OWYxYjg3YzU3ZDc0YzUw
ZWE1MzkwHhcNMjUwODA4MTEwMDQ5WhcNMjUwODA5MTEwMDQ5WjAzMTEwLwYDVQQD
EygzYTljNmM5OGE3M2JiZDE1ZGI5MjYyODhjNzY3Y2JjNWE5ZWE1ODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsseIYOc7Cpg6v0k5tw4vAcyWUNf/
16ublj29h1hDXoL5hclmCSQt7r5+D2PbvYCU2loaGkxWvXWxn9nTaBsoRspL9dQ7
2+xgPv2s9hz9KJ9TaTMZJJ9Xu078SiQ//zLpgKDcOowY0PmWIAUK8eNLkmKntjwR
kIUlI4YMQYjF/zl4WjgLpG1F5hSypQODPe6FQbh9eQGVvoHDkL7XXzR7S3U2oWKA
hNadLcJdej5++HJ+QAtx/QBoC2kaVRnIb3GZddvgJY6C5ixGc5RoJUe5bEgzPJO0
QYkzIaQXwPBQ18wtf5fFz06BT8DQWcOYxGy5RWXjvz8bYVIGYeO0zng2CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqcbJinO70V25JiiMdny8Wp6lh7MB8GA1UdIwQY
MBaAFPzuMiecFtrNtTSfG4fFfXTFDqU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX080eUo1d1cyczIxTko4Ymg4VjlkTVVPcFRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mNjA1MDItMjcwNC00ODM0LTlkNjgt
MzA0NjZkZWMzOTA1LzEvX080eUo1d1cyczIxTko4Ymg4VjlkTVVPcFRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9mNjA1MDItMjcwNC00ODM0LTlkNjgtMzA0NjZkZWMzOTA1
LzEvX080eUo1d1cyczIxTko4Ymg4VjlkTVVPcFRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWyY7TNV
nDlzxzuC5CYLxqxnPSHhku7YdPRAgxg/zt63/KrGVrizhwHvpG3KFtFIYHZjcZq3
GIZ893sptmHLq/xoANL96/AGEVXyIntaLyJ8/fo4dCMxFfRTtK9YdH4wX7krjQGd
aRkVOB1/2ZE5f1we27gKsxMrTXzkDkKuyZjISn/QpIPyAta7ljJTWr52tAtzPiKg
HnuVXXAbnngiPWzoGwNuJ6pYDemXt5Y5GYgP6vatKicQRo9Fl6RpgPkYYT5v1gF8
x7ss/VJtq/lSyyq+CPBxN44STeTzl/Z/TSsvH0tqvyk+R8NuSZsLLETncXcEsAko
8GaZM2wFZ4AjGA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:46:08 2025 by rpki-client