Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
File: O95jhoTGRf7dYA7TxQzfMQsRbT4.mft (raw, json)
Hash identifier: +5mmNFw9x9OxS8qtlwNOt2CU/dCqbhG+kFEtgbQKFg0=
Subject key identifier: F8:8D:99:68:0D:20:F5:3E:CE:37:14:63:2A:76:72:FD:90:A2:14:0A
Authority key identifier: 3B:DE:63:86:84:C6:45:FE:DD:60:0E:D3:C5:0C:DF:31:0B:11:6D:3E
Certificate issuer: /CN=3bde638684c645fedd600ed3c50cdf310b116d3e
Certificate serial: 019874BDD9DA1F6D65781148A082D1814AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
Manifest number: 1134
Signing time: Mon 04 Aug 2025 11:00:55 +0000
Manifest this update: Mon 04 Aug 2025 11:00:55 +0000
Manifest next update: Tue 05 Aug 2025 11:00:55 +0000
Files and hashes: 1: AmLrnFBBUwarj708-brt5mXEs6c.roa (hash: rrDod4wiM6+h8On16PiqN3FEJpayPPTDmJ6oUSkO4ZE=)
2: O95jhoTGRf7dYA7TxQzfMQsRbT4.crl (hash: gu19XxYshiQQyJut3Tl3mRDBGYDMa1Df8gFFe/Vm+00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:d9:da:1f:6d:65:78:11:48:a0:82:d1:81:4a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde638684c645fedd600ed3c50cdf310b116d3e
Validity
Not Before: Aug 4 11:00:55 2025 GMT
Not After : Aug 5 11:00:55 2025 GMT
Subject: CN=f88d99680d20f53ece3714632a7672fd90a2140a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:bf:da:65:d9:e7:d5:7b:7c:4b:a6:1d:cb:
13:00:a3:5e:e7:5a:a8:98:32:df:4b:ce:af:b5:69:
49:be:b5:70:b2:bc:82:62:5d:48:3d:78:0b:52:5b:
ac:e3:fe:51:4f:58:d7:41:dc:89:0d:a3:7a:0e:09:
01:69:83:90:29:30:7a:a5:30:87:c6:53:68:68:62:
a5:1d:8c:f8:e9:a6:d8:95:ce:ab:e1:7f:06:0b:23:
1b:92:58:fb:42:61:80:14:44:8b:2d:75:e7:ff:54:
e7:1c:51:47:f9:77:43:f7:86:60:59:ff:84:98:b6:
7e:1e:be:ab:aa:56:bf:e1:ca:93:87:c9:a4:c1:0e:
cd:d4:1c:0b:aa:37:c3:ad:f5:78:7e:05:c3:55:0e:
7d:a1:c7:21:d8:77:bb:a1:82:c1:6d:6b:44:4e:c7:
54:6f:65:62:fd:8b:b0:5d:64:aa:82:5a:f6:0f:9a:
69:a4:1b:85:04:23:cc:bf:8e:b9:35:1c:05:f8:4e:
c6:37:0b:c6:60:45:38:6b:ce:2b:78:91:fe:18:6b:
2a:9c:3b:7c:a5:74:23:9d:a4:b4:25:95:ac:5f:37:
a8:bc:3f:78:44:bc:76:bd:77:16:aa:02:eb:58:dc:
53:97:0c:e3:a5:16:98:f9:bc:65:14:5c:fd:7a:8b:
86:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8D:99:68:0D:20:F5:3E:CE:37:14:63:2A:76:72:FD:90:A2:14:0A
X509v3 Authority Key Identifier:
keyid:3B:DE:63:86:84:C6:45:FE:DD:60:0E:D3:C5:0C:DF:31:0B:11:6D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:71:14:8c:74:6a:2e:5d:60:f5:22:16:f0:b3:17:1c:1d:7c:
23:49:11:ee:b0:c6:c4:5f:5d:7d:7e:e3:d6:db:f4:70:1d:14:
f0:1a:6d:fc:fc:fa:b8:d9:8a:19:2c:76:c8:02:1d:c3:b8:a3:
c5:d8:fe:88:02:8a:43:de:ce:3a:56:b9:e9:78:73:6e:a7:c9:
84:2c:2d:4e:2f:74:47:91:89:a0:f2:3b:0c:7c:c5:ea:4f:19:
be:cf:45:5e:fb:fe:9b:c4:d3:02:63:05:a2:f1:8b:67:e9:83:
8d:3d:bf:ef:9e:45:d1:40:7d:1c:4f:4c:be:82:df:d2:0b:54:
b5:30:7f:0a:1a:65:c5:ba:87:ea:b2:d5:88:56:6e:70:00:bc:
c7:3a:10:18:df:a2:f1:ba:0f:28:3f:9c:c4:db:58:1b:07:8e:
4b:87:f2:51:2a:46:27:31:27:c7:7d:e1:ad:27:59:3e:31:28:
11:07:c7:d4:eb:94:b0:25:d4:ca:c4:ee:d7:89:d4:b9:ca:6c:
7b:0d:7f:0b:83:9d:4c:93:6d:14:79:8b:c8:92:8e:b5:5b:08:
41:7b:98:4e:d2:54:4a:a4:b9:cf:63:9c:d0:21:a8:46:5e:d3:
e7:01:81:94:4a:b6:7a:20:86:a8:1f:70:79:fd:ed:79:c2:49:
c2:c4:ca:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0vdnaH21leBFIoILRgUqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZGU2Mzg2ODRjNjQ1ZmVkZDYwMGVkM2M1MGNkZjMxMGIx
MTZkM2UwHhcNMjUwODA0MTEwMDU1WhcNMjUwODA1MTEwMDU1WjAzMTEwLwYDVQQD
EyhmODhkOTk2ODBkMjBmNTNlY2UzNzE0NjMyYTc2NzJmZDkwYTIxNDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphG/2mXZ59V7fEumHcsTAKNe51qo
mDLfS86vtWlJvrVwsryCYl1IPXgLUlus4/5RT1jXQdyJDaN6DgkBaYOQKTB6pTCH
xlNoaGKlHYz46abYlc6r4X8GCyMbklj7QmGAFESLLXXn/1TnHFFH+XdD94ZgWf+E
mLZ+Hr6rqla/4cqTh8mkwQ7N1BwLqjfDrfV4fgXDVQ59occh2He7oYLBbWtETsdU
b2Vi/YuwXWSqglr2D5pppBuFBCPMv465NRwF+E7GNwvGYEU4a84reJH+GGsqnDt8
pXQjnaS0JZWsXzeovD94RLx2vXcWqgLrWNxTlwzjpRaY+bxlFFz9eouGLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiNmWgNIPU+zjcUYyp2cv2QohQKMB8GA1UdIwQY
MBaAFDveY4aExkX+3WAO08UM3zELEW0+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzk1amhvVEdSZjdkWUE3VHhRemZNUXNSYlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82MmIxNWQtZWU1MC00NTBiLThlMmQt
MDk3YjA1MTBkM2UyLzEvTzk1amhvVEdSZjdkWUE3VHhRemZNUXNSYlQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS82MmIxNWQtZWU1MC00NTBiLThlMmQtMDk3YjA1MTBkM2Uy
LzEvTzk1amhvVEdSZjdkWUE3VHhRemZNUXNSYlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnEUjHRq
Ll1g9SIW8LMXHB18I0kR7rDGxF9dfX7j1tv0cB0U8Bpt/Pz6uNmKGSx2yAIdw7ij
xdj+iAKKQ97OOla56XhzbqfJhCwtTi90R5GJoPI7DHzF6k8Zvs9FXvv+m8TTAmMF
ovGLZ+mDjT2/755F0UB9HE9MvoLf0gtUtTB/ChplxbqH6rLViFZucAC8xzoQGN+i
8boPKD+cxNtYGweOS4fyUSpGJzEnx33hrSdZPjEoEQfH1OuUsCXUysTu14nUucps
ew1/C4OdTJNtFHmLyJKOtVsIQXuYTtJUSqS5z2Oc0CGoRl7T5wGBlEq2eiCGqB9w
ef3tecJJwsTKMw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:48 2025 by rpki-client