Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json)
Hash identifier: aw8YXfxVwgPUWOg8a3o3aZ5BQT8yBDepZYVRVFj2u6Q=
Subject key identifier: 73:9E:1B:22:17:FF:17:4E:AB:5C:AC:37:78:62:51:97:6E:35:9E:D6
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 01987450A49CC180616AFF98B19D33DAC968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
Manifest number: 0D8A
Signing time: Mon 04 Aug 2025 09:01:38 +0000
Manifest this update: Mon 04 Aug 2025 09:01:38 +0000
Manifest next update: Tue 05 Aug 2025 09:01:38 +0000
Files and hashes: 1: 4EkSsDmoQioZqy5Nx3ZgwgNVKek.roa (hash: VGhbj0GwVploD/uygEp/n7MuApEtZ3hQmaUGbybY4XI=)
2: LXrqqPRInqT0YQQrkSiScVOv68s.roa (hash: RhWWbbeT6YQP2eTW6sSumZ2mUd9atkadmzcbsktp9d0=)
3: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: LCmPGAs+eOK+z5sAQ/BC/g8rqHHYRHuM2DGn0SyfoEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:a4:9c:c1:80:61:6a:ff:98:b1:9d:33:da:c9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Aug 4 09:01:38 2025 GMT
Not After : Aug 5 09:01:38 2025 GMT
Subject: CN=739e1b2217ff174eab5cac37786251976e359ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:8e:90:1c:7a:31:9f:76:fb:df:a1:27:90:
5a:2a:df:40:3b:22:83:51:e3:da:c7:22:4f:7d:8c:
b8:9b:38:85:c3:e9:a8:e4:38:13:6e:ea:22:35:b3:
b1:87:f9:2b:8a:bf:fa:01:aa:b7:9c:1a:80:b3:29:
fe:63:19:c5:90:71:6d:9c:f5:4d:b3:c8:7b:1e:51:
9e:a3:e1:24:46:41:9a:ec:c0:b0:0c:1b:c7:bd:c6:
0c:5f:19:dc:d7:1b:29:5c:ce:75:91:d2:0c:91:2d:
11:55:3d:7f:50:a2:60:83:14:94:c2:18:a8:b6:3e:
c3:ef:59:88:44:15:db:07:50:a7:e4:37:00:a9:10:
81:b7:58:19:fb:f2:73:fb:77:57:c8:44:45:9f:9c:
2d:36:4e:88:3b:ca:9b:6c:d7:8f:a7:8c:de:7d:a4:
76:0a:69:15:e5:6e:fb:b1:de:9a:f8:d3:c8:34:e2:
1d:52:40:a9:aa:cd:ad:6d:7c:37:1a:8d:75:5a:c7:
73:e8:48:b7:94:6a:7a:5e:a4:e6:ca:1d:51:6c:f6:
34:d7:3a:7e:3f:d0:2c:1d:76:31:f5:cc:85:10:6f:
39:0f:08:23:17:2e:45:b6:58:f9:9c:35:26:b3:24:
84:9d:2e:f8:41:93:62:b2:25:64:40:d1:c5:e7:1d:
fb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9E:1B:22:17:FF:17:4E:AB:5C:AC:37:78:62:51:97:6E:35:9E:D6
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:45:5e:14:9d:44:43:69:bf:db:94:e5:e4:65:71:25:1e:e8:
83:8e:f6:0b:28:96:36:05:0e:02:46:c3:26:96:dc:df:7e:fe:
26:cf:ae:20:61:99:80:49:46:67:22:7e:2f:5b:24:bb:96:94:
5f:f5:b4:1c:50:ac:b7:42:47:c1:e0:82:4a:8f:2c:59:0c:31:
ca:ab:c6:46:74:f3:1f:98:4d:ce:b5:91:b5:45:0c:49:0d:78:
6f:94:cb:56:96:b3:ab:4b:b1:74:72:1f:09:8f:a4:34:01:3b:
83:1e:cc:ec:70:c5:4e:9e:44:ba:bf:22:2d:8b:b7:d0:4f:e8:
d6:93:19:59:09:1a:d9:b5:8e:26:35:c8:13:dc:4d:c7:69:3e:
06:83:0a:2a:2a:d2:25:7c:d5:b7:a0:12:59:c7:e6:c4:73:f5:
62:31:79:0b:1a:29:52:e8:7f:1d:71:bc:2a:0a:30:68:fa:6e:
64:ec:28:af:d1:c1:e0:24:d3:0a:58:df:f4:3e:74:b4:bd:44:
46:d3:49:f1:5e:73:1a:45:89:da:75:6e:37:76:35:5f:34:27:
07:bc:79:96:18:59:56:38:5b:15:59:e8:ca:ed:ce:0c:19:f0:
2d:68:45:33:ed:75:e5:55:dd:b8:7a:15:e7:bb:b4:85:1d:91:
23:bc:f8:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UKScwYBhav+YsZ0z2sloMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNWEyMGE4NjkzOWM4ZGU4YWVkYzMwNTI0M2IwZmQ0YWQ4
NjU0ZDAwHhcNMjUwODA0MDkwMTM4WhcNMjUwODA1MDkwMTM4WjAzMTEwLwYDVQQD
Eyg3MzllMWIyMjE3ZmYxNzRlYWI1Y2FjMzc3ODYyNTE5NzZlMzU5ZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvqOkBx6MZ92+9+hJ5BaKt9AOyKD
UePaxyJPfYy4mziFw+mo5DgTbuoiNbOxh/krir/6Aaq3nBqAsyn+YxnFkHFtnPVN
s8h7HlGeo+EkRkGa7MCwDBvHvcYMXxnc1xspXM51kdIMkS0RVT1/UKJggxSUwhio
tj7D71mIRBXbB1Cn5DcAqRCBt1gZ+/Jz+3dXyERFn5wtNk6IO8qbbNePp4zefaR2
CmkV5W77sd6a+NPINOIdUkCpqs2tbXw3Go11Wsdz6Ei3lGp6XqTmyh1RbPY01zp+
P9AsHXYx9cyFEG85DwgjFy5Ftlj5nDUmsySEnS74QZNisiVkQNHF5x37zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOeGyIX/xdOq1ysN3hiUZduNZ7WMB8GA1UdIwQY
MBaAFLNaIKhpOcjeiu3DBSQ7D9SthlTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAt
YTU0MjU4OTc5OWJjLzEvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAtYTU0MjU4OTc5OWJj
LzEvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEVeFJ1E
Q2m/25Tl5GVxJR7og472CyiWNgUOAkbDJpbc337+Js+uIGGZgElGZyJ+L1sku5aU
X/W0HFCst0JHweCCSo8sWQwxyqvGRnTzH5hNzrWRtUUMSQ14b5TLVpazq0uxdHIf
CY+kNAE7gx7M7HDFTp5Eur8iLYu30E/o1pMZWQka2bWOJjXIE9xNx2k+BoMKKirS
JXzVt6ASWcfmxHP1YjF5CxopUuh/HXG8KgowaPpuZOwor9HB4CTTCljf9D50tL1E
RtNJ8V5zGkWJ2nVuN3Y1XzQnB7x5lhhZVjhbFVnoyu3ODBnwLWhFM+115VXduHoV
57u0hR2RI7z4pg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:55 2025 by rpki-client