Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
File: mdOi1vrWUWeOltJOJNGdcf44BAk.mft (raw, json)
Hash identifier: N60MJXGL6t0t+olTM4CaRieDIhx0io1ml8mdp6Nrc1A=
Subject key identifier: 96:EC:EE:54:4E:86:78:A0:C3:C9:E1:1C:18:E1:1D:6D:6D:ED:CE:20
Authority key identifier: 99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
Certificate issuer: /CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Certificate serial: 01987298877317C837B5D5986C69E7311BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
Manifest number: 0E51
Signing time: Mon 04 Aug 2025 01:00:55 +0000
Manifest this update: Mon 04 Aug 2025 01:00:55 +0000
Manifest next update: Tue 05 Aug 2025 01:00:55 +0000
Files and hashes: 1: WVEl02tR4FpSWGE0ahJdvTx1Yno.roa (hash: 5NNyoAtIIwqGJh3NNq7YS6x3xdzErX6ICXLZ0eVA/9g=)
2: Z259DsTig8t3A9cd7HAu8mMPpR0.roa (hash: JRmS+LkkqmTVluxufvzadoY4Pc8kUr0Ok9oaH67NvH8=)
3: _ltzxuGkz6znSaa7SgLi6XMBftU.roa (hash: +kNXhyoqNb3mbEFSERmsDLNGdx3dBqclzBGCcZo07A0=)
4: mdOi1vrWUWeOltJOJNGdcf44BAk.crl (hash: EirS7Q7K3J0tgxIbsDJApPf/be0cScapXIB5D0tabyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:87:73:17:c8:37:b5:d5:98:6c:69:e7:31:1b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Validity
Not Before: Aug 4 01:00:55 2025 GMT
Not After : Aug 5 01:00:55 2025 GMT
Subject: CN=96ecee544e8678a0c3c9e11c18e11d6d6dedce20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fe:ed:13:01:30:d3:8b:03:a9:99:5e:db:43:
9f:b2:04:9d:83:c2:0f:84:0c:4c:fd:dd:9f:bd:b6:
29:5c:75:14:6f:c9:ab:c5:f7:df:ec:e8:d1:a0:ff:
f2:fc:a6:01:fb:dc:d1:dd:83:97:94:66:e1:4b:65:
89:8b:b9:5b:ce:31:73:af:89:9d:5c:f2:d8:aa:c8:
f6:56:65:89:48:84:78:73:99:aa:6d:29:44:eb:1a:
80:05:70:f8:29:61:61:43:29:4a:31:e0:0a:4f:2c:
98:7a:8e:84:20:07:b9:c5:70:d0:29:55:20:39:22:
3a:b6:1b:b7:bf:c1:92:3d:7b:ad:ed:52:88:1f:d0:
a6:cc:f5:fa:c0:f1:cc:19:2c:d3:0c:8d:55:75:f0:
25:f6:6c:51:b1:63:eb:6a:63:b7:20:56:a7:43:fa:
f0:ed:5b:a7:e8:88:c8:52:0c:c1:aa:47:1d:0c:ea:
9d:5f:f8:b4:a0:6c:f1:16:39:ff:20:1d:01:73:6a:
eb:e8:be:46:19:1b:a7:d9:12:21:09:a3:3e:e9:d9:
4b:36:89:3f:28:f7:e9:4c:c9:ce:ff:e3:85:3b:18:
65:12:80:a2:75:e5:90:6e:1b:7b:b9:e2:04:14:41:
c8:24:0c:11:78:4e:28:f1:a5:d3:a6:7b:d8:79:f1:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EC:EE:54:4E:86:78:A0:C3:C9:E1:1C:18:E1:1D:6D:6D:ED:CE:20
X509v3 Authority Key Identifier:
keyid:99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e3:81:02:de:8f:6d:08:32:40:50:03:98:a3:d6:9c:7e:47:
d5:29:9c:7c:8b:fb:30:91:85:d5:4a:65:90:54:b4:db:38:7c:
d9:29:0e:ff:1c:12:aa:d4:62:0d:2c:85:b0:30:f0:83:77:42:
44:6f:a9:13:41:13:e6:7d:e2:fe:8d:b9:57:f4:39:3b:e9:35:
b0:f2:00:53:a1:3f:63:d3:87:d6:2c:0f:8f:91:92:86:fe:5d:
c5:44:3a:13:77:7d:16:6c:a9:cc:75:b6:6a:81:f2:6b:6c:39:
9f:9e:13:b8:18:e6:93:9b:98:b6:11:5e:4d:1b:67:86:fe:f2:
75:ee:51:ea:67:0a:d5:a6:2a:78:8e:08:33:04:24:37:9e:49:
53:b2:80:5c:4e:78:97:7f:46:69:d6:2c:b1:2b:93:df:83:21:
2f:e1:5b:9a:a5:db:57:5d:df:56:38:ff:57:78:d7:d1:47:bf:
90:a2:94:12:44:e1:8e:4c:5d:3a:44:66:64:b7:d7:c1:6d:e8:
41:6f:c4:78:22:85:a1:a8:b2:a0:c2:47:45:df:b1:a1:92:b8:
09:d8:e0:1c:17:5d:ce:92:2a:7b:f0:d7:cd:64:5b:3e:cf:da:
72:e5:99:80:6d:69:7f:5e:89:5d:94:6e:de:9c:e4:c3:50:c7:
84:42:47:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymIdzF8g3tdWYbGnnMRvPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZDNhMmQ2ZmFkNjUxNjc4ZTk2ZDI0ZTI0ZDE5ZDcxZmUz
ODA0MDkwHhcNMjUwODA0MDEwMDU1WhcNMjUwODA1MDEwMDU1WjAzMTEwLwYDVQQD
Eyg5NmVjZWU1NDRlODY3OGEwYzNjOWUxMWMxOGUxMWQ2ZDZkZWRjZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv7tEwEw04sDqZle20OfsgSdg8IP
hAxM/d2fvbYpXHUUb8mrxfff7OjRoP/y/KYB+9zR3YOXlGbhS2WJi7lbzjFzr4md
XPLYqsj2VmWJSIR4c5mqbSlE6xqABXD4KWFhQylKMeAKTyyYeo6EIAe5xXDQKVUg
OSI6thu3v8GSPXut7VKIH9CmzPX6wPHMGSzTDI1VdfAl9mxRsWPramO3IFanQ/rw
7Vun6IjIUgzBqkcdDOqdX/i0oGzxFjn/IB0Bc2rr6L5GGRun2RIhCaM+6dlLNok/
KPfpTMnO/+OFOxhlEoCideWQbht7ueIEFEHIJAwReE4o8aXTpnvYefG04wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbs7lROhnigw8nhHBjhHW1t7c4gMB8GA1UdIwQY
MBaAFJnTotb61lFnjpbSTiTRnXH+OAQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWRPaTF2cldVV2VPbHRKT0pOR2RjZjQ0QkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80MTBkOTQtYWY3OC00Mzk3LWFkZmUt
NDhkNzM4YzU5NDdkLzEvbWRPaTF2cldVV2VPbHRKT0pOR2RjZjQ0QkFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80MTBkOTQtYWY3OC00Mzk3LWFkZmUtNDhkNzM4YzU5NDdk
LzEvbWRPaTF2cldVV2VPbHRKT0pOR2RjZjQ0QkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuOBAt6P
bQgyQFADmKPWnH5H1SmcfIv7MJGF1UplkFS02zh82SkO/xwSqtRiDSyFsDDwg3dC
RG+pE0ET5n3i/o25V/Q5O+k1sPIAU6E/Y9OH1iwPj5GShv5dxUQ6E3d9FmypzHW2
aoHya2w5n54TuBjmk5uYthFeTRtnhv7yde5R6mcK1aYqeI4IMwQkN55JU7KAXE54
l39GadYssSuT34MhL+FbmqXbV13fVjj/V3jX0Ue/kKKUEkThjkxdOkRmZLfXwW3o
QW/EeCKFoaiyoMJHRd+xoZK4CdjgHBddzpIqe/DXzWRbPs/acuWZgG1pf16JXZRu
3pzkw1DHhEJH2Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:25 2025 by rpki-client