Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
File: 0mKOBpte2LRVk0O1tn9atPkiUf4.mft (raw, json)
Hash identifier: SdJ9LSbvCB72aEYIAHMGEYE2xuFtAWbicVHKnHKLOe0=
Subject key identifier: 43:F9:B5:87:C3:68:38:AF:27:F1:06:7C:0D:26:35:5D:AD:5B:5A:86
Authority key identifier: D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
Certificate issuer: /CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Certificate serial: 019873AAC955FF47A5CE18EC69C13E3F4409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
Manifest number: 0161
Signing time: Mon 04 Aug 2025 06:00:29 +0000
Manifest this update: Mon 04 Aug 2025 06:00:29 +0000
Manifest next update: Tue 05 Aug 2025 06:00:29 +0000
Files and hashes: 1: 0mKOBpte2LRVk0O1tn9atPkiUf4.crl (hash: fzhU7lQ061wqnGLL6d3mMf4HLvnQFtb0h2FVoK2EwWU=)
2: TB8ZBOob0du7AFIwtgPrOWYvJ3c.roa (hash: 3RnPy4J7fbTZwjn2ySXLoVRzIX9Hk6aFnkI/5SMsvYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:aa:c9:55:ff:47:a5:ce:18:ec:69:c1:3e:3f:44:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Validity
Not Before: Aug 4 06:00:29 2025 GMT
Not After : Aug 5 06:00:29 2025 GMT
Subject: CN=43f9b587c36838af27f1067c0d26355dad5b5a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e9:e2:fe:68:be:cb:0e:97:82:f3:93:17:08:
13:31:d7:93:65:43:36:b5:14:81:63:96:35:e3:05:
5a:3b:96:45:8b:b6:00:1c:0c:a0:da:59:c2:2d:14:
8d:d8:3f:d7:22:cf:5c:cc:54:53:1c:49:c2:0c:db:
47:b2:bc:cb:ce:e7:26:58:d3:db:cf:c7:09:db:3e:
25:66:ba:25:b4:0f:2d:cd:b9:42:8a:be:45:0b:b9:
eb:93:bf:c5:b2:d7:43:1a:12:e8:2b:4b:ee:49:25:
f4:35:f4:b9:e9:e3:d5:d7:3f:0d:10:59:4f:6b:8b:
55:de:c5:bb:91:07:c8:0f:a0:30:c4:e9:9f:20:62:
ba:d6:d8:f4:e5:86:83:18:c1:03:bf:a3:0c:d9:6b:
6a:e7:d4:cf:f4:d2:1d:bf:11:6e:c9:a6:4a:de:be:
c4:29:9c:d0:d9:d9:d3:20:bb:63:aa:8f:ac:27:aa:
bd:10:21:97:95:f6:44:53:8c:3e:62:01:87:bf:02:
ff:09:f2:b6:06:d1:08:dc:08:a0:3c:ed:2e:00:d3:
bf:46:0b:c2:d0:1e:75:40:85:d3:79:06:dc:32:9c:
87:42:7e:dc:8d:35:22:62:4b:e4:9c:c9:85:0b:49:
39:00:74:1b:c6:6f:39:2a:37:15:ce:8c:15:04:30:
99:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F9:B5:87:C3:68:38:AF:27:F1:06:7C:0D:26:35:5D:AD:5B:5A:86
X509v3 Authority Key Identifier:
keyid:D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ee:77:4e:ff:f8:89:50:6a:dc:6b:d0:c5:97:ec:a8:d7:da:
86:7f:49:79:fd:5c:fc:c6:88:b9:ef:df:a3:9c:07:a9:36:d9:
89:b8:68:ac:8d:7f:e4:4b:f3:41:a9:82:f1:04:b1:79:3f:3e:
f3:8b:de:0b:1b:11:09:a2:0e:fd:79:4f:8b:02:5c:74:a6:df:
a0:b2:7b:41:72:89:90:76:7d:e5:ad:5a:06:99:4d:7a:4f:46:
04:f8:6a:e6:b1:5c:15:cc:38:fb:8f:76:c6:4f:08:be:f8:78:
c4:f7:9c:f7:15:0d:d1:4e:2f:24:76:a1:f1:5f:3d:9f:d7:4a:
d9:52:5a:57:80:bd:42:39:82:cd:9e:8e:9b:7b:99:1b:93:ed:
e9:92:e5:ac:b2:d6:d5:d8:9e:3e:e3:3d:e5:00:47:88:f9:bc:
34:78:c9:5f:94:fb:d1:35:44:92:4f:30:43:94:f1:8e:da:f6:
26:42:0a:26:40:ee:94:08:a8:fc:30:27:09:fd:1a:0e:a6:9c:
8c:d6:44:9f:83:56:c7:2b:b5:5c:da:82:c6:a8:1d:0f:86:d1:
1f:ca:fd:bf:4f:e3:d9:a4:0e:97:2e:48:80:fc:68:af:b5:a7:
d6:e7:86:62:e2:d2:b8:db:df:b0:a5:30:9a:8d:6d:07:29:a7:
0d:63:8e:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzqslV/0elzhjsacE+P0QJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjI4ZTA2OWI1ZWQ4YjQ1NTkzNDNiNWI2N2Y1YWI0Zjky
MjUxZmUwHhcNMjUwODA0MDYwMDI5WhcNMjUwODA1MDYwMDI5WjAzMTEwLwYDVQQD
Eyg0M2Y5YjU4N2MzNjgzOGFmMjdmMTA2N2MwZDI2MzU1ZGFkNWI1YTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOni/mi+yw6XgvOTFwgTMdeTZUM2
tRSBY5Y14wVaO5ZFi7YAHAyg2lnCLRSN2D/XIs9czFRTHEnCDNtHsrzLzucmWNPb
z8cJ2z4lZroltA8tzblCir5FC7nrk7/FstdDGhLoK0vuSSX0NfS56ePV1z8NEFlP
a4tV3sW7kQfID6AwxOmfIGK61tj05YaDGMEDv6MM2Wtq59TP9NIdvxFuyaZK3r7E
KZzQ2dnTILtjqo+sJ6q9ECGXlfZEU4w+YgGHvwL/CfK2BtEI3AigPO0uANO/RgvC
0B51QIXTeQbcMpyHQn7cjTUiYkvknMmFC0k5AHQbxm85KjcVzowVBDCZzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEP5tYfDaDivJ/EGfA0mNV2tW1qGMB8GA1UdIwQY
MBaAFNJijgabXti0VZNDtbZ/WrT5IlH+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1LT0JwdGUyTFJWazBPMXRuOWF0UGtpVWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZWI5N2EtODNiZC00NDQ4LWIwOWUt
YWY2NGE1N2FjOGQyLzEvMG1LT0JwdGUyTFJWazBPMXRuOWF0UGtpVWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xZWI5N2EtODNiZC00NDQ4LWIwOWUtYWY2NGE1N2FjOGQy
LzEvMG1LT0JwdGUyTFJWazBPMXRuOWF0UGtpVWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApe53Tv/4
iVBq3GvQxZfsqNfahn9Jef1c/MaIue/fo5wHqTbZibhorI1/5EvzQamC8QSxeT8+
84veCxsRCaIO/XlPiwJcdKbfoLJ7QXKJkHZ95a1aBplNek9GBPhq5rFcFcw4+492
xk8Ivvh4xPec9xUN0U4vJHah8V89n9dK2VJaV4C9QjmCzZ6Om3uZG5Pt6ZLlrLLW
1diePuM95QBHiPm8NHjJX5T70TVEkk8wQ5Txjtr2JkIKJkDulAio/DAnCf0aDqac
jNZEn4NWxyu1XNqCxqgdD4bRH8r9v0/j2aQOly5IgPxor7Wn1ueGYuLSuNvfsKUw
mo1tBymnDWOOfA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:35 2025 by rpki-client