Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
File: os1DAbKJXx2YqFDlic58BjxTn00.mft (raw, json)
Hash identifier: rEaNZDBXCsAafrg3vZSSUFsUrN8I4CaZjWX4Wyh2k4U=
Subject key identifier: 71:F4:8C:F4:4B:1D:F2:0B:D6:F0:BF:7F:4C:41:D4:9C:C1:E4:DB:A1
Authority key identifier: A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
Certificate issuer: /CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Certificate serial: 0198819DF4C26D8B52C91C188C88B9E5ABF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
Manifest number: 1183
Signing time: Wed 06 Aug 2025 23:01:09 +0000
Manifest this update: Wed 06 Aug 2025 23:01:09 +0000
Manifest next update: Thu 07 Aug 2025 23:01:09 +0000
Files and hashes: 1: KAKz0xo2XXEBIDI7U4s2tUakP98.roa (hash: nzwZHLIuL4E1A+Jcxn7qeWA8mqGxoFVori2v9JbkLPE=)
2: os1DAbKJXx2YqFDlic58BjxTn00.crl (hash: Dl/Q/19mEFHxAzjuW6DQEPGoJBNj/xRBZ+Db+NI1zno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:f4:c2:6d:8b:52:c9:1c:18:8c:88:b9:e5:ab:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Validity
Not Before: Aug 6 23:01:09 2025 GMT
Not After : Aug 7 23:01:09 2025 GMT
Subject: CN=71f48cf44b1df20bd6f0bf7f4c41d49cc1e4dba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f5:1c:21:9c:b3:cf:a6:00:66:a5:08:4d:72:
06:4e:9a:c7:bc:7d:22:d2:c6:10:7c:cf:3b:4a:f3:
76:5e:60:fd:8f:a2:39:d1:55:a4:91:d1:44:11:a7:
37:04:c4:99:59:93:12:8b:de:09:ef:ed:1c:a0:ca:
f1:80:de:fa:11:1f:ea:b9:84:24:de:15:10:f0:f7:
8d:02:47:96:bb:e7:73:91:01:6f:8e:d2:d3:8c:1c:
8d:2d:f7:6a:75:08:53:f0:05:61:4f:ea:cb:90:24:
74:e0:a6:28:6c:d4:38:4a:25:e6:59:c8:ee:ca:c0:
b2:a0:b0:7a:b7:ff:12:89:ab:af:fd:d9:cc:c3:c2:
e6:6e:fb:6a:d0:1f:93:25:62:23:1d:74:f8:e1:f4:
f3:01:56:96:f3:ee:4e:ca:70:01:b5:81:0d:d4:ab:
06:8b:5d:ad:2b:3e:0e:4a:5a:af:99:b4:91:d2:9b:
a8:86:fc:3c:6f:8d:fb:a7:6e:7a:3d:78:21:c0:ec:
16:f5:d4:0d:d5:da:21:2d:fb:c7:fc:ee:94:86:68:
e6:c0:3b:ea:76:38:36:c7:61:af:3f:01:52:5f:9f:
61:4a:f0:2d:cf:14:f2:38:c6:a3:9b:32:ff:d2:57:
9b:63:31:6b:8f:da:96:99:c1:c3:d8:33:8b:9c:12:
4a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F4:8C:F4:4B:1D:F2:0B:D6:F0:BF:7F:4C:41:D4:9C:C1:E4:DB:A1
X509v3 Authority Key Identifier:
keyid:A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cf:03:fb:17:22:45:f9:90:a4:0e:2a:d9:b7:24:e7:cf:dc:
1d:ba:83:e7:5a:18:31:4c:a2:65:f7:7f:bb:0c:06:8f:f1:79:
ec:fe:c2:df:79:18:12:54:9f:e6:38:48:14:35:63:2e:ff:77:
e4:29:2e:3e:2a:ec:75:08:26:8a:b3:86:a3:9e:2d:b1:81:de:
1e:c8:e3:2f:51:4d:12:31:bd:1c:f0:07:b6:17:33:f3:1b:eb:
27:08:03:86:aa:24:d0:23:7a:4a:ee:12:e5:42:3d:12:79:ac:
55:73:ee:d0:79:5d:a5:8e:a4:44:8b:b9:4c:aa:5e:71:7d:04:
40:44:1f:27:06:96:1c:b1:e4:01:41:84:be:2e:93:44:9f:55:
4d:c4:d3:96:86:52:a8:6c:dd:a8:1f:74:f8:25:9e:69:d5:5a:
2f:1e:04:9d:07:23:e6:9f:4c:4e:17:12:ea:c3:fa:2e:fc:a3:
aa:d2:2e:6c:f5:c5:df:6d:79:78:36:69:68:91:7d:81:c3:aa:
cd:b0:10:11:b8:1f:59:b9:f1:8f:fb:fe:f6:db:58:79:80:28:
dd:0f:b1:da:8a:14:b6:47:cc:1d:33:98:73:b6:11:6a:d1:14:
84:be:37:b3:a8:19:3e:e8:9a:8b:96:d1:76:2e:a0:6e:7a:c0:
7f:f7:c0:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBnfTCbYtSyRwYjIi55av5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyY2Q0MzAxYjI4OTVmMWQ5OGE4NTBlNTg5Y2U3YzA2M2M1
MzlmNGQwHhcNMjUwODA2MjMwMTA5WhcNMjUwODA3MjMwMTA5WjAzMTEwLwYDVQQD
Eyg3MWY0OGNmNDRiMWRmMjBiZDZmMGJmN2Y0YzQxZDQ5Y2MxZTRkYmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfUcIZyzz6YAZqUITXIGTprHvH0i
0sYQfM87SvN2XmD9j6I50VWkkdFEEac3BMSZWZMSi94J7+0coMrxgN76ER/quYQk
3hUQ8PeNAkeWu+dzkQFvjtLTjByNLfdqdQhT8AVhT+rLkCR04KYobNQ4SiXmWcju
ysCyoLB6t/8Siauv/dnMw8Lmbvtq0B+TJWIjHXT44fTzAVaW8+5OynABtYEN1KsG
i12tKz4OSlqvmbSR0puohvw8b437p256PXghwOwW9dQN1dohLfvH/O6UhmjmwDvq
djg2x2GvPwFSX59hSvAtzxTyOMajmzL/0lebYzFrj9qWmcHD2DOLnBJKuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHH0jPRLHfIL1vC/f0xB1JzB5NuhMB8GA1UdIwQY
MBaAFKLNQwGyiV8dmKhQ5YnOfAY8U59NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3MxREFiS0pYeDJZcUZEbGljNThCanhUbjAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zODQ4NmMtOWRlMy00NGVmLWFiMjkt
NThmM2YzN2NjZGQ5LzEvb3MxREFiS0pYeDJZcUZEbGljNThCanhUbjAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8zODQ4NmMtOWRlMy00NGVmLWFiMjktNThmM2YzN2NjZGQ5
LzEvb3MxREFiS0pYeDJZcUZEbGljNThCanhUbjAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFc8D+xci
RfmQpA4q2bck58/cHbqD51oYMUyiZfd/uwwGj/F57P7C33kYElSf5jhIFDVjLv93
5CkuPirsdQgmirOGo54tsYHeHsjjL1FNEjG9HPAHthcz8xvrJwgDhqok0CN6Su4S
5UI9EnmsVXPu0HldpY6kRIu5TKpecX0EQEQfJwaWHLHkAUGEvi6TRJ9VTcTTloZS
qGzdqB90+CWeadVaLx4EnQcj5p9MThcS6sP6LvyjqtIubPXF3215eDZpaJF9gcOq
zbAQEbgfWbnxj/v+9ttYeYAo3Q+x2ooUtkfMHTOYc7YRatEUhL43s6gZPuiai5bR
di6gbnrAf/fAcA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:23:53 2025 by rpki-client