Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
File: O_xkMfUzO23dMeg7aWgtjo7gb8E.mft (raw, json)
Hash identifier: 9w59om2N1J2LsFpvZD3YZKTiokrZjxz6PcZDLF75BlY=
Subject key identifier: 0F:D0:E0:6C:91:B5:FC:7A:DB:30:FD:80:04:4E:91:A8:68:38:BC:8E
Authority key identifier: 3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
Certificate issuer: /CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Certificate serial: 0198936CE0A4DE78739E69170BA9DC629358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 10:00:42 +0000
Manifest this update: Sun 10 Aug 2025 10:00:42 +0000
Manifest next update: Mon 11 Aug 2025 10:00:42 +0000
Files and hashes: 1: O_xkMfUzO23dMeg7aWgtjo7gb8E.crl (hash: zcSLeCRqN7x2xfEZoJjHCpqxw7vCx7vIjfaqxos43gY=)
2: nEwnWGMzytbCFQz7rWdabIS9yB0.roa (hash: 02h618IubyXzMPvUxA826AJsgMoOVyOdwoqacffXAD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6c:e0:a4:de:78:73:9e:69:17:0b:a9:dc:62:93:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Validity
Not Before: Aug 10 10:00:42 2025 GMT
Not After : Aug 11 10:00:42 2025 GMT
Subject: CN=0fd0e06c91b5fc7adb30fd80044e91a86838bc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:46:37:2b:a6:9c:cb:e0:d1:05:f8:69:e0:
55:72:a5:5d:79:5b:71:60:8e:07:22:c5:83:9b:98:
50:aa:3d:df:73:7e:e5:f4:df:85:dc:d4:6d:a3:f9:
41:e5:d3:e7:34:da:0c:e9:cd:d1:8a:37:de:c8:28:
96:ca:ba:2c:c5:46:ae:f0:b9:d4:72:bd:2c:7a:c4:
16:ad:2c:53:40:53:06:1e:14:d2:78:a2:00:be:1c:
ee:65:b9:fb:1d:d1:0a:a9:ec:ea:db:56:ea:79:30:
d0:99:38:a5:d1:ac:b8:87:08:e8:57:93:74:87:d8:
d6:6e:46:61:4f:10:90:b7:74:4b:0b:c8:cd:e1:d0:
bd:0d:74:68:be:0b:32:ef:91:ce:bb:77:90:c4:0c:
21:c7:b8:f6:fd:64:1a:f3:cf:cc:c1:e8:c7:87:ca:
63:17:90:2c:61:da:a2:90:d8:21:b6:93:aa:99:0a:
89:bf:fa:85:2a:fd:f6:5f:7d:24:26:47:df:3d:a7:
21:f7:94:4d:2e:6e:70:31:aa:f1:b6:b6:34:be:36:
b6:a1:0d:4f:fb:eb:5f:cd:8e:a8:ac:0b:e2:7f:4f:
4e:fe:6e:6b:7d:ee:4e:57:b0:2a:f1:5c:ab:ad:5d:
f6:9f:c8:e3:2f:7e:f4:45:6e:ab:8e:dc:4f:6c:0a:
10:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D0:E0:6C:91:B5:FC:7A:DB:30:FD:80:04:4E:91:A8:68:38:BC:8E
X509v3 Authority Key Identifier:
keyid:3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:b5:b1:98:0f:32:67:e1:8f:24:75:02:c7:21:52:25:db:0d:
fb:50:03:8f:ad:5c:31:8a:5c:a6:ea:7d:c2:2c:63:af:71:4a:
67:8a:87:32:68:7a:33:0b:4a:06:33:d1:5e:de:ec:1d:42:5b:
61:eb:cc:fc:2a:3a:f3:4b:ec:ae:87:59:21:03:6a:1d:84:54:
7d:cd:20:0c:91:1f:27:dd:dc:f2:38:ae:d3:27:85:08:53:35:
3e:a1:2e:94:10:df:62:64:68:79:60:d4:0f:48:ad:10:df:18:
8b:0c:48:0a:e1:e5:e9:a2:33:28:c3:69:ac:1d:f4:09:57:b5:
29:3f:7d:20:c3:6b:27:b1:0b:61:c5:ed:74:79:d5:1a:30:e9:
0d:76:5c:e4:b4:ea:75:72:88:10:7b:5f:a1:89:af:52:36:36:
93:cb:75:da:79:3f:8b:65:1c:d2:17:76:85:bf:92:9f:d5:5d:
f5:c1:57:34:a9:ff:eb:fd:7c:e6:b7:82:f0:9c:59:95:47:64:
3e:dd:e8:08:70:7e:2f:77:47:24:4c:23:e5:94:72:10:c2:b5:
c5:65:b7:05:10:ea:97:88:f0:01:e9:7a:2a:12:64:5c:25:24:
b7:a2:ea:35:f9:0a:b1:59:cf:53:7e:3a:89:8c:6f:3c:76:6b:
08:4f:2f:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTbOCk3nhznmkXC6ncYpNYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZmM2NDMxZjUzMzNiNmRkZDMxZTgzYjY5NjgyZDhlOGVl
MDZmYzEwHhcNMjUwODEwMTAwMDQyWhcNMjUwODExMTAwMDQyWjAzMTEwLwYDVQQD
EygwZmQwZTA2YzkxYjVmYzdhZGIzMGZkODAwNDRlOTFhODY4MzhiYzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+pGNyumnMvg0QX4aeBVcqVdeVtx
YI4HIsWDm5hQqj3fc37l9N+F3NRto/lB5dPnNNoM6c3RijfeyCiWyrosxUau8LnU
cr0sesQWrSxTQFMGHhTSeKIAvhzuZbn7HdEKqezq21bqeTDQmTil0ay4hwjoV5N0
h9jWbkZhTxCQt3RLC8jN4dC9DXRovgsy75HOu3eQxAwhx7j2/WQa88/MwejHh8pj
F5AsYdqikNghtpOqmQqJv/qFKv32X30kJkffPach95RNLm5wMarxtrY0vja2oQ1P
++tfzY6orAvif09O/m5rfe5OV7Aq8VyrrV32n8jjL370RW6rjtxPbAoQRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/Q4GyRtfx62zD9gAROkahoOLyOMB8GA1UdIwQY
MBaAFDv8ZDH1Mztt3THoO2loLY6O4G/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mNWE4YjEtNmUyMi00OTYxLWIzOGIt
ZmUwMWVlYzQwZWMxLzEvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9mNWE4YjEtNmUyMi00OTYxLWIzOGItZmUwMWVlYzQwZWMx
LzEvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz7WxmA8y
Z+GPJHUCxyFSJdsN+1ADj61cMYpcpup9wixjr3FKZ4qHMmh6MwtKBjPRXt7sHUJb
YevM/Co680vsrodZIQNqHYRUfc0gDJEfJ93c8jiu0yeFCFM1PqEulBDfYmRoeWDU
D0itEN8YiwxICuHl6aIzKMNprB30CVe1KT99IMNrJ7ELYcXtdHnVGjDpDXZc5LTq
dXKIEHtfoYmvUjY2k8t12nk/i2Uc0hd2hb+Sn9Vd9cFXNKn/6/185reC8JxZlUdk
Pt3oCHB+L3dHJEwj5ZRyEMK1xWW3BRDql4jwAel6KhJkXCUkt6LqNfkKsVnPU346
iYxvPHZrCE8vWw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:35 2025 by rpki-client