Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
File: IOagEH1ompNwtiKVGkSWRsw4tZA.mft (raw, json)
Hash identifier: 1a9y+a2s+o0EdB3dEUNSOX/QIUNq3/7VNJH6yzjTXc0=
Subject key identifier: 30:FF:98:ED:73:3E:30:A3:9C:1C:16:C4:04:F6:32:A5:1A:2A:4D:6D
Authority key identifier: 20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
Certificate issuer: /CN=20e6a0107d689a9370b622951a449646cc38b590
Certificate serial: 01987B9B9E08C73572D5E115B19AE8FF62DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
Manifest number: 119B
Signing time: Tue 05 Aug 2025 19:00:52 +0000
Manifest this update: Tue 05 Aug 2025 19:00:52 +0000
Manifest next update: Wed 06 Aug 2025 19:00:52 +0000
Files and hashes: 1: IOagEH1ompNwtiKVGkSWRsw4tZA.crl (hash: OAF2+6oPPlT3EUSKI/DWlBLQzDb2exRttGOjC22OMg4=)
2: g2AkX7o9HPLfXDUc9lLxF0hd7Tw.roa (hash: GtbK3C6ImbkCxUfm64Bkm+DP0kf7OaLjUPRMxP6pI/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:9e:08:c7:35:72:d5:e1:15:b1:9a:e8:ff:62:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e6a0107d689a9370b622951a449646cc38b590
Validity
Not Before: Aug 5 19:00:52 2025 GMT
Not After : Aug 6 19:00:52 2025 GMT
Subject: CN=30ff98ed733e30a39c1c16c404f632a51a2a4d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:53:fa:4d:86:2a:5b:ff:34:10:36:22:62:
c9:0e:fd:75:97:cb:6e:64:5c:2f:6f:df:9f:3c:69:
b8:e5:34:15:73:cd:c3:29:3c:11:59:7d:b5:fe:2c:
9d:ca:5b:1f:32:af:f8:e8:3a:c4:8d:2f:81:b7:c1:
ef:8c:5f:07:20:80:cf:47:39:84:96:d3:dd:5f:e0:
21:82:93:ef:73:d3:a3:d5:f5:83:17:0b:4d:e4:7b:
f7:fd:d9:92:79:e9:9e:90:02:c7:c4:ec:74:4c:6b:
7a:27:87:bf:df:2f:e7:2a:24:18:a9:c2:8e:bb:d0:
e9:e9:82:4a:12:23:7d:fc:14:15:7b:05:a4:46:af:
16:99:3b:a0:e6:cf:1e:77:96:05:9b:7c:5c:8a:3e:
a1:30:f6:5e:2a:66:11:5c:a5:d0:65:17:01:f2:2c:
69:51:b0:73:96:11:21:34:8e:2d:21:dd:1a:e4:62:
b8:2d:b0:9b:02:79:63:5d:d4:cf:3a:ab:96:f3:d6:
07:ed:6d:2a:0b:53:bf:39:a5:85:ff:bb:e3:a9:db:
12:97:88:06:57:cf:e8:9f:b5:6f:8e:cd:eb:31:91:
9a:90:0f:df:3b:d2:46:01:63:f6:74:f9:20:25:a5:
ac:98:8a:da:80:11:62:59:2b:88:9f:b2:4d:31:82:
b3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FF:98:ED:73:3E:30:A3:9C:1C:16:C4:04:F6:32:A5:1A:2A:4D:6D
X509v3 Authority Key Identifier:
keyid:20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:bf:2e:ea:24:e9:c9:eb:21:14:84:c5:32:f0:75:50:90:02:
8e:b2:1f:ca:23:93:96:e6:7e:11:84:72:e4:ef:69:51:04:e0:
59:7e:17:09:e3:2a:75:98:d3:2e:f4:a7:70:29:9d:4a:8f:1a:
cb:39:ad:9d:11:be:36:a9:33:e8:98:98:ce:98:0c:6f:fe:4e:
4b:22:7e:21:99:82:95:db:55:84:6b:d1:bd:32:fc:d8:a4:d8:
00:e6:4d:9f:e8:fa:73:00:a6:84:96:35:38:76:c1:47:e8:fb:
42:e9:a1:50:64:71:28:ee:12:88:55:c5:af:78:0b:da:a1:f1:
f5:7f:fa:2d:b8:51:ba:d4:e5:10:a1:1f:30:0d:b8:e1:31:6d:
f4:20:4b:dd:29:0a:c2:43:aa:72:20:01:77:b4:d7:19:b4:0b:
0c:83:d6:07:a6:c8:c1:3c:21:43:ea:b1:ac:1a:96:a3:e5:93:
2c:dd:74:2b:cb:64:9b:24:b3:a2:47:09:1e:85:c3:b3:06:30:
82:98:41:31:08:e1:50:e3:26:37:6a:2c:4a:8f:a9:79:b7:3f:
03:05:f1:dd:e8:cb:f6:30:c6:64:52:d3:d9:4b:bc:92:01:fb:
3d:d9:16:d8:0b:e8:8e:ae:57:c6:bb:a0:54:57:af:73:15:6d:
4d:ca:38:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7m54IxzVy1eEVsZro/2LbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZTZhMDEwN2Q2ODlhOTM3MGI2MjI5NTFhNDQ5NjQ2Y2Mz
OGI1OTAwHhcNMjUwODA1MTkwMDUyWhcNMjUwODA2MTkwMDUyWjAzMTEwLwYDVQQD
EygzMGZmOThlZDczM2UzMGEzOWMxYzE2YzQwNGY2MzJhNTFhMmE0ZDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluFT+k2GKlv/NBA2ImLJDv11l8tu
ZFwvb9+fPGm45TQVc83DKTwRWX21/iydylsfMq/46DrEjS+Bt8HvjF8HIIDPRzmE
ltPdX+AhgpPvc9Oj1fWDFwtN5Hv3/dmSeemekALHxOx0TGt6J4e/3y/nKiQYqcKO
u9Dp6YJKEiN9/BQVewWkRq8WmTug5s8ed5YFm3xcij6hMPZeKmYRXKXQZRcB8ixp
UbBzlhEhNI4tId0a5GK4LbCbAnljXdTPOquW89YH7W0qC1O/OaWF/7vjqdsSl4gG
V8/on7Vvjs3rMZGakA/fO9JGAWP2dPkgJaWsmIragBFiWSuIn7JNMYKzJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDD/mO1zPjCjnBwWxAT2MqUaKk1tMB8GA1UdIwQY
MBaAFCDmoBB9aJqTcLYilRpElkbMOLWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU9hZ0VIMW9tcE53dGlLVkdrU1dSc3c0dFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9lODRlOGYtOGJiMi00MDU0LWI0OTUt
MTI1ZWVkZjhkOWYxLzEvSU9hZ0VIMW9tcE53dGlLVkdrU1dSc3c0dFpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9lODRlOGYtOGJiMi00MDU0LWI0OTUtMTI1ZWVkZjhkOWYx
LzEvSU9hZ0VIMW9tcE53dGlLVkdrU1dSc3c0dFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALb8u6iTp
yeshFITFMvB1UJACjrIfyiOTluZ+EYRy5O9pUQTgWX4XCeMqdZjTLvSncCmdSo8a
yzmtnRG+Nqkz6JiYzpgMb/5OSyJ+IZmCldtVhGvRvTL82KTYAOZNn+j6cwCmhJY1
OHbBR+j7QumhUGRxKO4SiFXFr3gL2qHx9X/6LbhRutTlEKEfMA244TFt9CBL3SkK
wkOqciABd7TXGbQLDIPWB6bIwTwhQ+qxrBqWo+WTLN10K8tkmySzokcJHoXDswYw
gphBMQjhUOMmN2osSo+pebc/AwXx3ejL9jDGZFLT2Uu8kgH7PdkW2Avojq5Xxrug
VFevcxVtTco4Fw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:05:25 2025 by rpki-client