Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
File: cOetBZggimr50VAKdA1zvPKPA4Q.mft (raw, json)
Hash identifier: Wpj+O5KzZCUIkYljlLrkmnWuCEFjwX34xmA0+QCZh+g=
Subject key identifier: D5:8B:BB:E7:F6:36:19:85:48:66:96:4C:86:6D:DC:05:37:DE:00:02
Authority key identifier: 70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84
Certificate issuer: /CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
Certificate serial: 0198941241E167C6C2E4BBDCB796BFDA9812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
Manifest number: 134B
Signing time: Sun 10 Aug 2025 13:01:21 +0000
Manifest this update: Sun 10 Aug 2025 13:01:21 +0000
Manifest next update: Mon 11 Aug 2025 13:01:21 +0000
Files and hashes: 1: HH4kNc1X7Vv3MoqhViTWK_E_VGI.roa (hash: O3Hf94Oha/v7Hh9wzuFaVr7kYXEFrWI2haBjKaDT/FA=)
2: QRWbN9gDLtiBKX0OHWitK4sar4Y.roa (hash: 9r207a3pRIUCl7V+9HyJcMsCjA45mcSFholzvZsRQ5g=)
3: cOetBZggimr50VAKdA1zvPKPA4Q.crl (hash: +580mxP2BiovgfnpGLwygRlM+M6Msi1ldPh3rO1f/os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:12:41:e1:67:c6:c2:e4:bb:dc:b7:96:bf:da:98:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
Validity
Not Before: Aug 10 13:01:21 2025 GMT
Not After : Aug 11 13:01:21 2025 GMT
Subject: CN=d58bbbe7f63619854866964c866ddc0537de0002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:91:3f:c4:cb:23:63:c3:d6:80:74:e4:b6:82:
fd:9e:1d:c7:d5:e7:a1:57:73:84:8a:7b:fb:21:0d:
fd:98:18:6d:d3:01:d4:16:62:88:a2:c8:ab:94:97:
0c:bf:67:b7:fc:59:0d:14:d2:29:50:3d:03:3e:1d:
9b:9c:e1:a3:6a:48:62:73:6e:f1:21:8e:73:6a:ad:
d6:4e:c8:c1:ae:ab:7e:2c:27:f0:1f:b6:a3:48:1b:
66:e8:36:cd:01:29:9a:8e:fb:88:d9:f7:af:a1:ab:
66:72:6f:5b:0a:db:91:7c:da:7c:26:b2:73:8b:4c:
9f:f9:35:78:63:67:a5:97:53:54:45:44:03:b3:c1:
aa:dd:37:d2:3b:eb:84:fe:ef:df:4e:e3:c1:b3:7d:
6c:74:e6:45:c8:ab:36:00:f8:76:39:fe:d8:df:a2:
ea:22:fb:ac:be:e7:d7:e9:31:43:6f:22:61:98:67:
26:09:da:30:f0:6d:b3:7e:d5:20:26:c4:51:fd:89:
5c:e5:f4:96:aa:63:91:24:0d:f7:db:24:80:a1:93:
53:90:9f:2e:6e:f4:17:8d:c0:9e:2f:29:41:38:96:
21:16:8b:25:e4:d6:47:ca:77:a5:48:c8:7b:a5:55:
f9:10:82:45:a0:ff:98:8a:87:a3:09:fc:cc:ce:60:
73:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8B:BB:E7:F6:36:19:85:48:66:96:4C:86:6D:DC:05:37:DE:00:02
X509v3 Authority Key Identifier:
keyid:70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b3:be:be:2b:da:a6:a1:20:69:aa:b3:51:45:41:6f:77:0b:
fa:2d:58:a8:d1:95:bb:02:be:7f:ae:db:e4:ad:55:b0:6e:02:
56:be:ab:16:5d:d4:79:70:d2:ad:15:d2:80:d0:f0:5e:ab:11:
13:5f:47:8a:70:b9:2a:8a:75:54:ea:b5:38:31:9c:ad:b8:70:
8b:a5:0f:20:bc:ff:41:2b:dc:f8:05:a8:15:3c:76:87:04:e3:
47:38:ea:cc:c9:71:c9:f1:c6:2e:a1:d4:d3:bf:0f:2d:9e:19:
93:df:4b:ba:6b:43:5f:c3:b8:0e:95:a2:0c:ac:d6:f2:e1:3a:
4b:4e:b2:16:f8:6a:44:af:df:7a:eb:27:c6:61:1c:a9:02:0a:
36:27:69:48:0b:f4:87:f9:2a:ff:01:09:ce:56:63:d6:17:e4:
be:30:f9:70:dd:a6:82:43:35:f6:f1:40:46:95:8f:31:61:d2:
1e:48:db:1b:f8:48:01:a5:f5:b8:5a:58:10:e1:eb:f7:e6:39:
13:0f:5b:c5:e9:c0:8f:df:ab:3e:6d:fa:48:db:d9:7d:22:21:
9c:9d:4f:bd:27:d4:84:a5:80:7e:af:96:99:7e:88:15:47:4b:
8c:0b:6b:58:dd:b7:aa:e9:0a:ab:ce:e1:ef:67:3f:8b:47:8b:
af:c5:3e:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUEkHhZ8bC5Lvct5a/2pgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTdhZDA1OTgyMDhhNmFmOWQxNTAwYTc0MGQ3M2JjZjI4
ZjAzODQwHhcNMjUwODEwMTMwMTIxWhcNMjUwODExMTMwMTIxWjAzMTEwLwYDVQQD
EyhkNThiYmJlN2Y2MzYxOTg1NDg2Njk2NGM4NjZkZGMwNTM3ZGUwMDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZE/xMsjY8PWgHTktoL9nh3H1eeh
V3OEinv7IQ39mBht0wHUFmKIosirlJcMv2e3/FkNFNIpUD0DPh2bnOGjakhic27x
IY5zaq3WTsjBrqt+LCfwH7ajSBtm6DbNASmajvuI2fevoatmcm9bCtuRfNp8JrJz
i0yf+TV4Y2ell1NURUQDs8Gq3TfSO+uE/u/fTuPBs31sdOZFyKs2APh2Of7Y36Lq
IvusvufX6TFDbyJhmGcmCdow8G2zftUgJsRR/Ylc5fSWqmORJA332ySAoZNTkJ8u
bvQXjcCeLylBOJYhFosl5NZHynelSMh7pVX5EIJFoP+YioejCfzMzmBzmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWLu+f2NhmFSGaWTIZt3AU33gACMB8GA1UdIwQY
MBaAFHDnrQWYIIpq+dFQCnQNc7zyjwOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09ldEJaZ2dpbXI1MFZBS2RBMXp2UEtQQTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS82NjY0MDQtYzI4Zi00ZDI5LTk2ZTQt
NjA3ZTE3YWVjNzUwLzEvY09ldEJaZ2dpbXI1MFZBS2RBMXp2UEtQQTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS82NjY0MDQtYzI4Zi00ZDI5LTk2ZTQtNjA3ZTE3YWVjNzUw
LzEvY09ldEJaZ2dpbXI1MFZBS2RBMXp2UEtQQTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7O+viva
pqEgaaqzUUVBb3cL+i1YqNGVuwK+f67b5K1VsG4CVr6rFl3UeXDSrRXSgNDwXqsR
E19HinC5Kop1VOq1ODGcrbhwi6UPILz/QSvc+AWoFTx2hwTjRzjqzMlxyfHGLqHU
078PLZ4Zk99LumtDX8O4DpWiDKzW8uE6S06yFvhqRK/feusnxmEcqQIKNidpSAv0
h/kq/wEJzlZj1hfkvjD5cN2mgkM19vFARpWPMWHSHkjbG/hIAaX1uFpYEOHr9+Y5
Ew9bxenAj9+rPm36SNvZfSIhnJ1PvSfUhKWAfq+WmX6IFUdLjAtrWN23qukKq87h
72c/i0eLr8U+7A==
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:40 2025 by rpki-client