Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
File: OndQiZTKTSzBidNfM4KiqKtXuEs.mft (raw, json)
Hash identifier: WJT8rETG+NPHeeJMlL8KiReVOiiHC+CsBQPUdqbcJvM=
Subject key identifier: 20:A3:04:A7:72:01:EA:2A:DD:64:F8:8E:40:91:E9:A9:6E:11:1B:61
Authority key identifier: 3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
Certificate issuer: /CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Certificate serial: 0198A15F2B07FAE599239E6811E95013762B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
Manifest number: 0713
Signing time: Wed 13 Aug 2025 03:00:25 +0000
Manifest this update: Wed 13 Aug 2025 03:00:25 +0000
Manifest next update: Thu 14 Aug 2025 03:00:25 +0000
Files and hashes: 1: OndQiZTKTSzBidNfM4KiqKtXuEs.crl (hash: iR3JzJ6oVDtoXGD1w8AL71ddS+bTAzIIoQIXfXzhFZQ=)
2: Wwk65fWkkC0KWWHed6RDHU5zdWE.roa (hash: OdE2ZmnpDqD8iDsUuCtPuylwN6Gs7CMSGI3EhFPXcxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:5f:2b:07:fa:e5:99:23:9e:68:11:e9:50:13:76:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Validity
Not Before: Aug 13 03:00:25 2025 GMT
Not After : Aug 14 03:00:25 2025 GMT
Subject: CN=20a304a77201ea2add64f88e4091e9a96e111b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:60:f4:86:63:68:e7:9e:de:18:9e:3b:7b:
0c:ab:b6:4e:d2:9d:51:9e:2e:5d:4f:3c:c7:b0:f6:
cd:59:52:31:fd:7b:70:69:07:5c:92:f8:13:18:5d:
ce:07:84:44:01:f7:09:3c:c6:73:6d:e4:4b:5b:24:
f9:16:de:13:ca:e7:99:3d:21:60:43:20:13:2a:61:
90:6a:0d:f2:15:ea:f8:4a:6f:b2:03:fe:85:cb:5c:
08:e3:36:34:38:56:b6:3b:f6:10:d4:e3:ef:26:30:
a3:d5:6d:21:fa:83:60:24:93:4f:f1:d4:79:36:f5:
01:45:b2:4f:6f:40:6c:3d:cd:c3:ce:47:8a:cf:a9:
77:84:d8:70:f0:e0:c2:8e:08:32:af:9c:a0:15:d4:
93:12:82:e1:1f:ad:ce:40:e1:7f:db:22:26:a4:ae:
31:11:a8:c2:6f:55:58:ea:33:7d:39:3b:f4:fa:82:
44:a4:7f:0b:a4:12:66:74:f8:4f:25:5e:f7:34:92:
d3:9c:f2:7b:11:3c:0a:9e:20:70:ff:3e:3b:a4:f9:
1e:17:60:7a:1a:b2:fe:fd:8d:84:fc:81:0a:db:f2:
a5:e5:2b:6c:35:c1:f0:39:a6:c7:f9:be:d9:05:19:
19:60:00:cd:d5:0c:3b:75:af:b4:b2:e7:08:15:41:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A3:04:A7:72:01:EA:2A:DD:64:F8:8E:40:91:E9:A9:6E:11:1B:61
X509v3 Authority Key Identifier:
keyid:3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3f:f7:7e:dd:80:65:d5:25:d1:f8:0f:59:97:6e:48:f3:fb:
03:0d:db:b7:9a:53:3f:aa:3d:55:79:e4:c4:8f:df:5e:13:51:
fd:a4:f5:0b:89:3e:61:48:6e:17:d5:0b:2f:90:bb:54:89:a2:
79:44:8c:92:32:4e:7d:45:e2:d9:ba:e3:36:d6:30:4e:00:e9:
a7:35:2e:80:15:04:e9:95:52:5f:46:a2:9b:98:f6:3c:a2:da:
0e:a3:a9:d0:9c:fa:30:df:88:2a:f2:b5:44:3c:17:5a:cd:7e:
28:93:3f:85:2f:0c:b2:e4:5c:38:37:ee:b7:6c:88:a8:57:c3:
3e:38:1c:c0:15:de:ee:d5:a5:bf:55:17:e9:b6:f5:53:61:41:
78:1d:8e:7b:d3:77:22:8e:93:76:7f:8d:68:c7:21:37:4c:ca:
6d:5d:9e:72:2d:43:9b:bd:68:81:cd:d1:7d:8b:14:77:7a:ba:
c1:58:3d:61:f8:c1:1b:7e:c3:aa:a6:f0:0f:88:9b:04:57:c3:
d8:0c:01:b2:8b:57:ab:ba:1a:53:a7:83:b4:61:0c:d5:30:e6:
7e:ea:0a:19:eb:e1:7d:54:4e:80:24:b0:23:2a:0c:3e:97:41:
81:52:84:6b:65:2b:f8:d5:4c:a2:32:02:25:00:2c:72:8e:c0:
9b:ac:f9:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZihXysH+uWZI55oEelQE3YrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNzc1MDg5OTRjYTRkMmNjMTg5ZDM1ZjMzODJhMmE4YWI1
N2I4NGIwHhcNMjUwODEzMDMwMDI1WhcNMjUwODE0MDMwMDI1WjAzMTEwLwYDVQQD
EygyMGEzMDRhNzcyMDFlYTJhZGQ2NGY4OGU0MDkxZTlhOTZlMTExYjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbNg9IZjaOee3hieO3sMq7ZO0p1R
ni5dTzzHsPbNWVIx/XtwaQdckvgTGF3OB4REAfcJPMZzbeRLWyT5Ft4TyueZPSFg
QyATKmGQag3yFer4Sm+yA/6Fy1wI4zY0OFa2O/YQ1OPvJjCj1W0h+oNgJJNP8dR5
NvUBRbJPb0BsPc3DzkeKz6l3hNhw8ODCjggyr5ygFdSTEoLhH63OQOF/2yImpK4x
EajCb1VY6jN9OTv0+oJEpH8LpBJmdPhPJV73NJLTnPJ7ETwKniBw/z47pPkeF2B6
GrL+/Y2E/IEK2/Kl5StsNcHwOabH+b7ZBRkZYADN1Qw7da+0sucIFUH9AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCjBKdyAeoq3WT4jkCR6aluERthMB8GA1UdIwQY
MBaAFDp3UImUyk0swYnTXzOCoqirV7hLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT25kUWlaVEtUU3pCaWROZk00S2lxS3RYdUVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zYjRkOGUtMDZlOC00ZWEyLTkyN2It
YTc5NjMwYjA2ZDkzLzEvT25kUWlaVEtUU3pCaWROZk00S2lxS3RYdUVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8zYjRkOGUtMDZlOC00ZWEyLTkyN2ItYTc5NjMwYjA2ZDkz
LzEvT25kUWlaVEtUU3pCaWROZk00S2lxS3RYdUVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVj/3ft2A
ZdUl0fgPWZduSPP7Aw3bt5pTP6o9VXnkxI/fXhNR/aT1C4k+YUhuF9ULL5C7VImi
eUSMkjJOfUXi2brjNtYwTgDppzUugBUE6ZVSX0aim5j2PKLaDqOp0Jz6MN+IKvK1
RDwXWs1+KJM/hS8MsuRcODfut2yIqFfDPjgcwBXe7tWlv1UX6bb1U2FBeB2Oe9N3
Io6Tdn+NaMchN0zKbV2eci1Dm71ogc3RfYsUd3q6wVg9YfjBG37DqqbwD4ibBFfD
2AwBsotXq7oaU6eDtGEM1TDmfuoKGevhfVROgCSwIyoMPpdBgVKEa2Ur+NVMojIC
JQAsco7Am6z5Vw==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:33 2025 by rpki-client