Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier: HYKW+nSOCWiC5w02uOxq9sLln1mHLRel3JbXaD6S5no=
Subject key identifier: 79:CC:32:EB:11:FB:3F:F5:7A:08:A9:96:FE:C9:99:4B:B2:37:68:AB
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial: 0198730682484ED3F8B9520821428C65F5B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number: EF
Signing time: Mon 04 Aug 2025 03:01:03 +0000
Manifest this update: Mon 04 Aug 2025 03:01:03 +0000
Manifest next update: Tue 05 Aug 2025 03:01:03 +0000
Files and hashes: 1: WcOI3xTree4feiB1aUEElS0psWg.roa (hash: aiHJErdFTntBFa2VGlw5qxOEBnPaXQitP2e0+IPbQn4=)
2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: Pn1mIUqL2aLgqXHY/eMosw9+JPEmoYk6wj64OEc0v7I=)
3: rJhQc64vZyQK9s6luNANsgKcie4.roa (hash: Wbhd0vQIHlwhZqfDUEHqh+EPALpqB/xJq31v2DZm/Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:82:48:4e:d3:f8:b9:52:08:21:42:8c:65:f5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Validity
Not Before: Aug 4 03:01:03 2025 GMT
Not After : Aug 5 03:01:03 2025 GMT
Subject: CN=79cc32eb11fb3ff57a08a996fec9994bb23768ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:81:8d:55:a8:4c:a7:07:5c:91:8a:44:ef:
d2:2e:a3:62:c6:2c:72:02:73:24:05:3e:d7:68:db:
ae:c4:62:82:82:24:bf:e1:42:80:fc:01:5e:db:c4:
6a:f4:86:6b:e3:23:d2:76:65:34:50:67:32:40:70:
4a:49:14:81:6a:68:13:80:16:6f:c0:96:cd:7a:7c:
2c:a4:13:ae:e3:78:03:85:69:ec:05:22:c7:69:f8:
ac:d7:43:ed:5a:94:c7:31:2c:28:34:31:61:f8:d7:
c0:47:e7:e7:ec:33:eb:48:46:48:d6:3c:e2:f9:38:
68:32:50:33:a1:80:c8:c2:c8:79:9b:f6:84:2d:e1:
11:35:12:f5:86:03:71:4d:e9:76:94:bc:28:c2:f7:
ef:dd:b5:3a:79:d6:c7:bd:aa:56:d3:11:40:f8:eb:
bb:3e:8a:4c:9f:62:71:6c:59:83:26:b8:1e:ff:b1:
94:a2:bc:5a:78:73:c3:57:6b:a6:0e:57:1b:35:9e:
2a:fc:76:03:5c:4c:48:28:ae:60:2b:50:05:17:d7:
d2:e3:f7:eb:9f:a3:c5:cc:cc:23:5a:cc:e5:bc:67:
23:95:38:6a:56:71:f0:1c:95:7e:8c:0a:ab:0c:30:
f2:11:9f:ae:cc:ce:da:f0:9c:59:66:0d:dc:55:97:
a1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CC:32:EB:11:FB:3F:F5:7A:08:A9:96:FE:C9:99:4B:B2:37:68:AB
X509v3 Authority Key Identifier:
keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e4:95:9e:10:2b:93:3d:86:10:14:10:00:e8:8f:7a:0f:8c:
51:73:42:f4:8b:cb:bb:bb:70:ba:b6:26:5e:05:5a:21:98:88:
43:c5:9f:ba:43:ab:12:9a:6d:70:36:52:77:87:95:65:36:2a:
29:b1:b6:28:fa:f3:c3:20:f4:c5:5c:32:54:be:ba:59:8c:99:
46:79:99:82:ae:58:e3:87:08:16:c9:67:19:cf:00:d1:c3:df:
cc:39:a9:71:86:94:74:74:26:44:af:40:4f:cc:f9:23:af:7a:
65:9c:c8:2b:66:4d:f9:7c:ba:28:87:36:84:86:de:e7:c9:e8:
16:78:07:48:84:dc:c6:f6:18:5b:58:42:71:a6:45:6d:cf:a8:
ab:e1:bc:2b:3b:ea:58:e1:d6:b3:27:af:d1:d4:e5:b7:b9:30:
f1:51:39:ff:01:33:d6:e5:18:19:10:ed:1c:42:13:9d:3b:e4:
95:35:53:50:f7:e7:12:01:d3:d7:80:ea:db:a2:59:be:42:52:
ec:e2:34:3e:6f:32:9f:5e:66:20:87:bd:d6:93:99:91:60:0c:
f4:d2:51:97:39:56:fa:2e:9d:84:52:96:a6:2c:f9:79:d5:43:
02:a0:54:a9:11:29:0f:fa:94:ec:98:22:d3:58:ca:29:a7:f5:
d2:1a:37:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBoJITtP4uVIIIUKMZfWwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExOGYwMmQ1ZWJjOWU4Yjk1MjFhZjcxMzJiMTJjYjZiYjY1
NjkzYzYwHhcNMjUwODA0MDMwMTAzWhcNMjUwODA1MDMwMTAzWjAzMTEwLwYDVQQD
Eyg3OWNjMzJlYjExZmIzZmY1N2EwOGE5OTZmZWM5OTk0YmIyMzc2OGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDiBjVWoTKcHXJGKRO/SLqNixixy
AnMkBT7XaNuuxGKCgiS/4UKA/AFe28Rq9IZr4yPSdmU0UGcyQHBKSRSBamgTgBZv
wJbNenwspBOu43gDhWnsBSLHafis10PtWpTHMSwoNDFh+NfAR+fn7DPrSEZI1jzi
+ThoMlAzoYDIwsh5m/aELeERNRL1hgNxTel2lLwowvfv3bU6edbHvapW0xFA+Ou7
PopMn2JxbFmDJrge/7GUorxaeHPDV2umDlcbNZ4q/HYDXExIKK5gK1AFF9fS4/fr
n6PFzMwjWszlvGcjlThqVnHwHJV+jAqrDDDyEZ+uzM7a8JxZZg3cVZehbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnMMusR+z/1egiplv7JmUuyN2irMB8GA1UdIwQY
MBaAFKGPAtXryei5Uhr3EysSy2u2VpPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83MWE5N2MtMzVmNC00ZjIxLWE0M2Et
NzM5NmU0MmIxODMwLzEvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83MWE5N2MtMzVmNC00ZjIxLWE0M2EtNzM5NmU0MmIxODMw
LzEvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAveSVnhAr
kz2GEBQQAOiPeg+MUXNC9IvLu7twurYmXgVaIZiIQ8WfukOrEpptcDZSd4eVZTYq
KbG2KPrzwyD0xVwyVL66WYyZRnmZgq5Y44cIFslnGc8A0cPfzDmpcYaUdHQmRK9A
T8z5I696ZZzIK2ZN+Xy6KIc2hIbe58noFngHSITcxvYYW1hCcaZFbc+oq+G8Kzvq
WOHWsyev0dTlt7kw8VE5/wEz1uUYGRDtHEITnTvklTVTUPfnEgHT14Dq26JZvkJS
7OI0Pm8yn15mIIe91pOZkWAM9NJRlzlW+i6dhFKWpiz5edVDAqBUqREpD/qU7Jgi
01jKKaf10ho3lA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:33 2025 by rpki-client