Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
File: s2dOgi84dtJ96u1fZtvpwaQi6xY.mft (raw, json)
Hash identifier: 17aAI9+ftgJOyL6uwDZoIjKtWUxyLvlKfrysKxaDI00=
Subject key identifier: 0B:C0:4D:44:08:93:65:2F:5B:78:A8:66:35:8F:EE:49:C1:59:94:69
Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
Certificate issuer: /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Certificate serial: 01988C2148C3EF1B7BBD0BD2DAD02378905B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
Manifest number: 05FA
Signing time: Sat 09 Aug 2025 00:00:48 +0000
Manifest this update: Sat 09 Aug 2025 00:00:48 +0000
Manifest next update: Sun 10 Aug 2025 00:00:48 +0000
Files and hashes: 1: 9pPz27JGQLU2k4Cv19ksHTIF6XA.roa (hash: UiF2JHV9wR4fk8UlKATn/RRbasL4AJJse9aZNGFTtIM=)
2: PHlmZzsVHNdtkbgZZGVIzuxsSOI.roa (hash: nURq80w5QR4Tg4i37nqE1f7UXJnobOs0QVmX70MkIAU=)
3: s2dOgi84dtJ96u1fZtvpwaQi6xY.crl (hash: YI5hDJZSxLjp7Ex9LUWzmo5Mi6MdQv7FGLuAyPmyCQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:21:48:c3:ef:1b:7b:bd:0b:d2:da:d0:23:78:90:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Validity
Not Before: Aug 9 00:00:48 2025 GMT
Not After : Aug 10 00:00:48 2025 GMT
Subject: CN=0bc04d440893652f5b78a866358fee49c1599469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:c4:cc:2e:fa:85:63:52:fc:f3:ad:ed:1b:
e1:da:63:4b:85:57:bb:d9:74:96:c2:4d:93:09:08:
67:aa:62:f7:f9:c2:20:78:f1:1d:af:81:59:90:0a:
a9:fc:6f:7e:65:03:9f:d1:a3:c6:bb:60:1a:98:26:
21:63:1d:b0:ac:d2:a8:7b:7e:86:23:81:f7:b7:7a:
cc:f8:f7:fe:c6:a8:cf:e8:3f:8e:88:02:55:c2:cd:
bc:54:23:17:ee:92:ae:8d:97:68:8b:59:8a:f5:e0:
bb:1d:6e:84:ea:4d:7c:7e:c9:c6:03:40:20:af:19:
0c:bd:34:f9:41:d8:9c:b2:d7:7d:96:1d:b6:cf:f1:
a6:34:6b:c8:3e:b8:29:41:26:a7:31:27:f0:f6:37:
17:90:01:70:69:0c:a9:03:ea:9c:a5:15:88:e3:b7:
b7:a7:37:bd:71:d6:89:d6:e1:e6:a1:75:34:d9:99:
a8:76:f8:d0:a8:33:68:60:8a:b9:17:9a:90:cd:88:
1a:e4:78:4a:ca:91:74:8f:e6:a3:7e:cb:3e:c7:19:
66:ff:c2:06:c2:7a:2f:f1:3f:2e:94:76:30:36:1a:
c9:67:5e:ee:9a:2c:8a:fd:1c:c2:99:50:1d:01:03:
c3:ae:2e:1f:33:b6:bd:c2:fd:12:83:1d:6c:d2:f2:
fd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C0:4D:44:08:93:65:2F:5B:78:A8:66:35:8F:EE:49:C1:59:94:69
X509v3 Authority Key Identifier:
keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f9:49:a4:98:2c:52:7b:e2:20:cd:c4:95:42:11:49:8d:07:
fb:f8:cd:de:2d:2e:5e:d6:7e:5e:32:1a:6c:53:fd:1f:b7:13:
c1:aa:f6:0a:bf:a3:19:20:6a:7e:e1:b1:5b:4c:2b:5b:2f:a7:
a1:78:63:21:2a:58:1a:8e:d0:c7:10:d8:04:f5:bd:5b:85:89:
68:a8:a8:a0:ee:dc:6e:48:57:cc:39:e1:35:a0:a7:e1:cf:ee:
93:df:b6:fe:ce:2c:42:ed:98:4b:9f:c8:62:9c:ec:ae:8c:43:
c1:ac:de:b2:96:4b:71:1a:45:15:00:3a:09:cf:07:59:e7:2b:
4a:a8:e5:40:a9:f1:0a:1d:a9:79:89:dd:df:ef:84:91:4c:58:
86:64:db:d4:ae:35:bb:7d:4a:37:e8:94:1e:b9:32:13:71:26:
48:be:9f:6b:3c:cd:5e:96:7d:5e:71:21:48:78:f3:3b:68:8e:
97:ab:de:11:e3:a8:65:b4:7a:73:db:3d:dd:51:6b:f1:26:c2:
f5:21:dd:34:ed:b3:98:cc:9d:fa:d1:f4:72:f6:26:c3:b1:a8:
67:15:d9:74:69:55:59:78:b5:18:a1:aa:5e:8a:7c:17:f1:49:
3c:3f:9a:61:12:32:26:98:c5:30:2a:34:41:83:e3:60:c1:8f:
b6:8f:26:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMIUjD7xt7vQvS2tAjeJBbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNjc0ZTgyMmYzODc2ZDI3ZGVhZWQ1ZjY2ZGJlOWMxYTQy
MmViMTYwHhcNMjUwODA5MDAwMDQ4WhcNMjUwODEwMDAwMDQ4WjAzMTEwLwYDVQQD
EygwYmMwNGQ0NDA4OTM2NTJmNWI3OGE4NjYzNThmZWU0OWMxNTk5NDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHzEzC76hWNS/POt7Rvh2mNLhVe7
2XSWwk2TCQhnqmL3+cIgePEdr4FZkAqp/G9+ZQOf0aPGu2AamCYhYx2wrNKoe36G
I4H3t3rM+Pf+xqjP6D+OiAJVws28VCMX7pKujZdoi1mK9eC7HW6E6k18fsnGA0Ag
rxkMvTT5Qdicstd9lh22z/GmNGvIPrgpQSanMSfw9jcXkAFwaQypA+qcpRWI47e3
pze9cdaJ1uHmoXU02ZmodvjQqDNoYIq5F5qQzYga5HhKypF0j+ajfss+xxlm/8IG
wnov8T8ulHYwNhrJZ17umiyK/RzCmVAdAQPDri4fM7a9wv0Sgx1s0vL9pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvATUQIk2UvW3ioZjWP7knBWZRpMB8GA1UdIwQY
MBaAFLNnToIvOHbSfertX2bb6cGkIusWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczJkT2dpODRkdEo5NnUxZlp0dnB3YVFpNnhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zOTMyNTEtYjQ4OC00MGQzLWJlMzkt
ZjhmMDhmZTY0ODM4LzEvczJkT2dpODRkdEo5NnUxZlp0dnB3YVFpNnhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zOTMyNTEtYjQ4OC00MGQzLWJlMzktZjhmMDhmZTY0ODM4
LzEvczJkT2dpODRkdEo5NnUxZlp0dnB3YVFpNnhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/lJpJgs
UnviIM3ElUIRSY0H+/jN3i0uXtZ+XjIabFP9H7cTwar2Cr+jGSBqfuGxW0wrWy+n
oXhjISpYGo7QxxDYBPW9W4WJaKiooO7cbkhXzDnhNaCn4c/uk9+2/s4sQu2YS5/I
YpzsroxDwazespZLcRpFFQA6Cc8HWecrSqjlQKnxCh2peYnd3++EkUxYhmTb1K41
u31KN+iUHrkyE3EmSL6fazzNXpZ9XnEhSHjzO2iOl6veEeOoZbR6c9s93VFr8SbC
9SHdNO2zmMyd+tH0cvYmw7GoZxXZdGlVWXi1GKGqXop8F/FJPD+aYRIyJpjFMCo0
QYPjYMGPto8m7w==
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:56:46 2025 by rpki-client