Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: C9yi1rCcmz9xmdoT5ILEYwC/Y307wkoKJfUuJn+/DkE=
Subject key identifier: EC:2C:C0:B8:CF:EC:C3:60:58:D3:05:D7:6D:82:A1:E2:FD:09:68:65
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 019A4D3CD0AD1EF5134FDA4B1E2FAE538195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 0819
Signing time: Tue 04 Nov 2025 05:00:22 +0000
Manifest this update: Tue 04 Nov 2025 05:00:22 +0000
Manifest next update: Wed 05 Nov 2025 05:00:22 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: 2Or9pqGd2mtAGhlnRPM0hg3n1I6RTZbNx+7HKN/QA84=)
2: Z-dfosDrlzVSKVFTGJ7LYewGU6w.roa (hash: lSxGudn5Fs3j65oqD2ZSmu7gAATGql89N/KwokwP/NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:d0:ad:1e:f5:13:4f:da:4b:1e:2f:ae:53:81:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Nov 4 05:00:22 2025 GMT
Not After : Nov 5 05:00:22 2025 GMT
Subject: CN=ec2cc0b8cfecc36058d305d76d82a1e2fd096865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:4c:e7:ed:72:d4:64:30:c8:10:5b:5a:67:
b1:1f:07:cf:49:94:70:8f:fd:fa:01:6b:4c:f5:5a:
a4:15:47:e5:8f:22:7a:e8:04:6f:55:41:83:c2:bb:
ce:48:58:c7:44:53:cf:be:f0:b6:52:3f:2d:8d:90:
93:45:8c:28:97:b4:47:69:a7:12:59:1b:6d:48:f5:
c8:e5:d8:90:76:44:70:7f:f5:80:39:24:bd:e8:10:
11:77:60:8a:b1:5e:5f:2d:0c:4e:27:61:ec:b5:df:
88:53:00:04:fd:fb:a7:a5:6b:39:ff:9d:35:08:a8:
14:bf:b3:79:ee:5f:3e:7a:fb:13:cd:a6:48:f2:b3:
c5:8e:85:85:e5:40:93:66:6f:ec:c6:81:aa:4f:c7:
a8:fa:64:9c:5c:78:8c:ff:e0:c7:12:31:87:23:f2:
e7:f0:64:09:91:dd:f6:76:15:95:b4:ff:e8:dc:8d:
e2:40:20:21:b5:5c:9a:a2:af:bc:11:69:87:47:84:
5d:2d:9f:3f:62:d9:2b:11:31:3f:8a:40:34:c3:ac:
9c:6d:b4:64:d2:aa:0b:e1:62:e7:4a:0d:c2:d5:53:
94:90:91:dd:12:5d:e0:cf:56:2b:c5:06:fa:56:25:
4c:92:aa:57:47:97:de:eb:2d:e8:f7:c9:fc:58:04:
ef:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2C:C0:B8:CF:EC:C3:60:58:D3:05:D7:6D:82:A1:E2:FD:09:68:65
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c5:eb:4a:b1:b7:22:86:75:86:60:e6:a2:64:58:f1:6c:13:
47:6b:fc:e8:1a:6f:d0:fe:de:22:90:fb:9f:5f:8e:99:c4:e6:
78:4e:e1:43:6e:93:19:69:8a:57:b6:b5:e1:6a:2b:ea:3e:fd:
0e:37:f9:48:fa:12:d0:c6:eb:12:ec:83:d8:1e:13:47:be:b0:
da:10:71:da:0e:7d:b9:60:73:aa:0e:f2:3a:f6:ec:9a:10:6b:
86:5d:f7:42:46:22:3d:82:5f:6b:35:df:e7:56:f7:e8:21:3d:
c5:9e:f0:b6:b0:9d:8e:b5:f2:2d:81:53:2a:73:31:cf:e4:15:
7b:6f:3e:26:89:97:94:a8:87:2a:37:2e:e6:fa:73:1e:ea:10:
6f:71:e7:89:31:4e:41:18:c8:eb:0e:5f:04:6d:f4:10:20:c0:
dd:f5:87:f9:a7:27:34:5b:f0:f7:e1:88:f2:69:b4:0a:5f:45:
ac:ff:e3:33:12:c8:91:32:2d:fb:0e:95:8e:3b:9f:14:37:56:
f0:af:ca:75:32:62:11:e1:1f:30:0a:ae:d1:04:83:0a:fb:ba:
77:4f:b9:b4:9b:12:8d:56:5e:f0:96:6a:60:2e:6d:9d:fc:4b:
cf:f1:30:20:cd:81:64:f2:14:ff:29:e0:73:c5:3a:da:8e:8d:
1e:8d:01:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPNCtHvUTT9pLHi+uU4GVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNTgxNDc5ZGVlM2I1OTk0ZjExYzlkOTU2NDYzMWJmNWE0
MDRjMDcwHhcNMjUxMTA0MDUwMDIyWhcNMjUxMTA1MDUwMDIyWjAzMTEwLwYDVQQD
EyhlYzJjYzBiOGNmZWNjMzYwNThkMzA1ZDc2ZDgyYTFlMmZkMDk2ODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVtM5+1y1GQwyBBbWmexHwfPSZRw
j/36AWtM9VqkFUfljyJ66ARvVUGDwrvOSFjHRFPPvvC2Uj8tjZCTRYwol7RHaacS
WRttSPXI5diQdkRwf/WAOSS96BARd2CKsV5fLQxOJ2Hstd+IUwAE/funpWs5/501
CKgUv7N57l8+evsTzaZI8rPFjoWF5UCTZm/sxoGqT8eo+mScXHiM/+DHEjGHI/Ln
8GQJkd32dhWVtP/o3I3iQCAhtVyaoq+8EWmHR4RdLZ8/YtkrETE/ikA0w6ycbbRk
0qoL4WLnSg3C1VOUkJHdEl3gz1YrxQb6ViVMkqpXR5fe6y3o98n8WATvowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwswLjP7MNgWNMF122CoeL9CWhlMB8GA1UdIwQY
MBaAFNJYFHne47WZTxHJ2VZGMb9aQEwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYt
NmE2YzZlMDk2MDcxLzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYtNmE2YzZlMDk2MDcx
LzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApcXrSrG3
IoZ1hmDmomRY8WwTR2v86Bpv0P7eIpD7n1+OmcTmeE7hQ26TGWmKV7a14Wor6j79
Djf5SPoS0MbrEuyD2B4TR76w2hBx2g59uWBzqg7yOvbsmhBrhl33QkYiPYJfazXf
51b36CE9xZ7wtrCdjrXyLYFTKnMxz+QVe28+JomXlKiHKjcu5vpzHuoQb3HniTFO
QRjI6w5fBG30ECDA3fWH+acnNFvw9+GI8mm0Cl9FrP/jMxLIkTIt+w6VjjufFDdW
8K/KdTJiEeEfMAqu0QSDCvu6d0+5tJsSjVZe8JZqYC5tnfxLz/EwIM2BZPIU/yng
c8U62o6NHo0B0w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:38 2025 by rpki-client