Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
File: 0wUa-GYelCUtF1k103l-nsos2Aw.mft (raw, json)
Hash identifier: fb9I6nmI/Nm4oYcc1neUx5RAOW3TXGWAQx/laCe/so4=
Subject key identifier: B7:D0:2C:E8:C2:70:E0:88:25:41:F7:AA:11:79:4D:92:7B:89:62:FF
Authority key identifier: D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
Certificate issuer: /CN=d3051af8661e94252d175935d3797e9eca2cd80c
Certificate serial: 01987261C561A6B3E4B6A26E25CDE99F3139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
Manifest number: 0F7E
Signing time: Mon 04 Aug 2025 00:01:06 +0000
Manifest this update: Mon 04 Aug 2025 00:01:06 +0000
Manifest next update: Tue 05 Aug 2025 00:01:06 +0000
Files and hashes: 1: 0wUa-GYelCUtF1k103l-nsos2Aw.crl (hash: VBbGhCP2zhhizVz/BplmdumybsiUhXdCfLocG+f2wVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:61:c5:61:a6:b3:e4:b6:a2:6e:25:cd:e9:9f:31:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3051af8661e94252d175935d3797e9eca2cd80c
Validity
Not Before: Aug 4 00:01:06 2025 GMT
Not After : Aug 5 00:01:06 2025 GMT
Subject: CN=b7d02ce8c270e0882541f7aa11794d927b8962ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:4a:7b:a8:ab:06:d8:a1:a6:68:38:a2:1e:
06:c6:51:69:39:96:49:5c:59:7a:bf:c9:4a:4e:72:
ab:81:2c:7c:51:de:af:11:7f:84:0e:8d:6a:31:9b:
05:93:0c:4a:4a:e5:a6:dd:d5:c1:bd:0f:dc:cc:81:
63:2a:3d:16:e5:4f:da:ce:5d:ce:89:69:4e:f7:94:
1d:65:c2:90:5a:50:3d:11:88:c0:83:67:1a:73:33:
6e:7c:8e:7a:3a:db:28:ef:29:80:56:da:3e:96:9e:
c6:07:2f:e1:20:2d:9c:03:f1:6f:84:a9:e7:d0:c2:
3a:da:fc:d1:96:34:dd:1f:dd:23:69:93:fb:50:41:
fe:d2:42:38:8d:e2:b0:0b:96:1c:b3:a6:dc:62:4c:
f9:ac:71:21:55:3c:b2:3c:7c:6d:9d:b3:87:07:e3:
1a:cc:79:42:19:04:9d:b0:a1:eb:e1:1a:d9:d0:04:
ae:05:56:c3:51:e2:45:dc:ee:57:c5:71:7b:fb:43:
db:91:8d:c0:0f:80:02:67:0c:1e:8c:87:13:99:e9:
0b:51:95:02:a0:69:96:1e:48:c3:96:82:6e:9a:06:
e7:3e:37:57:d2:1b:b0:93:80:a9:eb:5d:de:27:c0:
4d:1c:a5:79:62:fa:e0:27:fc:71:95:6e:96:0d:13:
12:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D0:2C:E8:C2:70:E0:88:25:41:F7:AA:11:79:4D:92:7B:89:62:FF
X509v3 Authority Key Identifier:
keyid:D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:47:b1:a7:86:c1:92:ce:32:5e:f9:30:97:40:0e:a7:8f:dc:
f4:6a:73:90:c6:24:03:ad:69:b3:9a:51:56:1b:45:88:38:24:
bf:e4:dc:91:18:e6:12:e3:8e:dd:8c:9c:3c:d2:de:b1:61:d9:
c1:76:e0:b3:29:9a:fa:a9:c3:68:55:d8:a2:96:31:7e:06:cb:
f7:b7:07:e9:c1:a0:13:7e:82:5b:df:ad:b2:65:71:4e:56:df:
8c:26:f1:de:43:79:01:cc:dc:46:44:f9:c0:9b:bc:fd:f8:34:
b5:99:cd:1a:28:7a:de:6a:0a:2c:19:ab:16:06:d4:55:3c:d4:
81:33:62:3e:8f:61:6a:28:ec:f2:2e:4e:ef:df:da:6d:23:4f:
42:af:0f:1f:a6:e6:37:7d:d7:a6:8f:42:ab:20:b3:51:e8:65:
dc:47:8c:e3:25:99:8e:63:b9:5f:4b:87:2b:63:ae:f9:34:c8:
96:97:b1:f1:1d:ff:34:1f:89:9e:2e:c4:3d:7f:8f:70:bd:30:
23:06:93:53:bc:15:e1:64:a0:bb:e3:d9:e7:72:b0:49:cc:01:
01:50:62:ef:70:b6:64:78:d3:f6:fb:e2:22:c2:6b:1e:2f:ab:
cd:3a:8d:c8:84:68:46:0d:bf:ec:c0:42:17:ab:d1:da:c9:aa:
3b:98:fb:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyYcVhprPktqJuJc3pnzE5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMDUxYWY4NjYxZTk0MjUyZDE3NTkzNWQzNzk3ZTllY2Ey
Y2Q4MGMwHhcNMjUwODA0MDAwMTA2WhcNMjUwODA1MDAwMTA2WjAzMTEwLwYDVQQD
EyhiN2QwMmNlOGMyNzBlMDg4MjU0MWY3YWExMTc5NGQ5MjdiODk2MmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsRKe6irBtihpmg4oh4GxlFpOZZJ
XFl6v8lKTnKrgSx8Ud6vEX+EDo1qMZsFkwxKSuWm3dXBvQ/czIFjKj0W5U/azl3O
iWlO95QdZcKQWlA9EYjAg2caczNufI56Otso7ymAVto+lp7GBy/hIC2cA/FvhKnn
0MI62vzRljTdH90jaZP7UEH+0kI4jeKwC5Ycs6bcYkz5rHEhVTyyPHxtnbOHB+Ma
zHlCGQSdsKHr4RrZ0ASuBVbDUeJF3O5XxXF7+0PbkY3AD4ACZwwejIcTmekLUZUC
oGmWHkjDloJumgbnPjdX0huwk4Cp613eJ8BNHKV5YvrgJ/xxlW6WDRMSPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfQLOjCcOCIJUH3qhF5TZJ7iWL/MB8GA1UdIwQY
MBaAFNMFGvhmHpQlLRdZNdN5fp7KLNgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHdVYS1HWWVsQ1V0RjFrMTAzbC1uc29zMkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83NjcyZTItMWM3Zi00ZDJlLTg5NjEt
YzI2YzNlMjNiYWY2LzEvMHdVYS1HWWVsQ1V0RjFrMTAzbC1uc29zMkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83NjcyZTItMWM3Zi00ZDJlLTg5NjEtYzI2YzNlMjNiYWY2
LzEvMHdVYS1HWWVsQ1V0RjFrMTAzbC1uc29zMkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWkexp4bB
ks4yXvkwl0AOp4/c9GpzkMYkA61ps5pRVhtFiDgkv+TckRjmEuOO3YycPNLesWHZ
wXbgsyma+qnDaFXYopYxfgbL97cH6cGgE36CW9+tsmVxTlbfjCbx3kN5AczcRkT5
wJu8/fg0tZnNGih63moKLBmrFgbUVTzUgTNiPo9haijs8i5O79/abSNPQq8PH6bm
N33Xpo9CqyCzUehl3EeM4yWZjmO5X0uHK2Ou+TTIlpex8R3/NB+Jni7EPX+PcL0w
IwaTU7wV4WSgu+PZ53KwScwBAVBi73C2ZHjT9vviIsJrHi+rzTqNyIRoRg2/7MBC
F6vR2smqO5j70Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:39 2025 by rpki-client