Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft
File: oNki4v4kvSzaeToqrcEzYlAM2bE.mft (raw, json)
Hash identifier: vDd8ZUWRwowfBMhRH8LYCTU+vcz14oxzZfqsmWyqXcw=
Subject key identifier: 56:92:0C:B4:D1:7C:B1:DE:E4:54:6B:60:2B:4C:61:D4:2C:CB:BF:41
Authority key identifier: A0:D9:22:E2:FE:24:BD:2C:DA:79:3A:2A:AD:C1:33:62:50:0C:D9:B1
Certificate issuer: /CN=a0d922e2fe24bd2cda793a2aadc13362500cd9b1
Certificate serial: 01989F038270923B1144546A00A3BFF28CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft
Manifest number: 0C30
Signing time: Tue 12 Aug 2025 16:01:03 +0000
Manifest this update: Tue 12 Aug 2025 16:01:03 +0000
Manifest next update: Wed 13 Aug 2025 16:01:03 +0000
Files and hashes: 1: QU8GopeOlHwkTprCT-S3aTgX93c.roa (hash: wdEn+nBxYgSylw1Zt9va3XXWns8S/pGLaLLxEZ/5irY=)
2: oNki4v4kvSzaeToqrcEzYlAM2bE.crl (hash: uKN6qUyPqWUguqtvYgWHYbkRNWYnMm20n9nf7JXIad4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:03:82:70:92:3b:11:44:54:6a:00:a3:bf:f2:8c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d922e2fe24bd2cda793a2aadc13362500cd9b1
Validity
Not Before: Aug 12 16:01:03 2025 GMT
Not After : Aug 13 16:01:03 2025 GMT
Subject: CN=56920cb4d17cb1dee4546b602b4c61d42ccbbf41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:62:f3:09:eb:8d:11:d9:fc:80:a2:8b:4d:
44:06:e2:87:4d:e0:4a:c4:5d:1a:e8:4f:06:4f:d0:
82:54:86:2a:d5:33:f6:49:ca:15:90:1a:55:63:98:
df:cd:1d:ba:2f:ee:50:32:b0:6a:f1:3d:51:da:6d:
5c:eb:76:6b:79:9b:cf:8d:62:1e:d1:ef:8c:12:1f:
5a:e0:44:66:7d:bc:3d:de:be:0f:01:71:a9:78:c9:
20:cf:80:98:cd:06:47:52:30:8e:33:f7:f3:b8:68:
eb:57:00:55:98:64:3b:15:71:6e:5d:3e:47:83:a5:
91:33:ce:39:68:e6:62:2f:d2:9a:6b:f8:0f:1a:1c:
a7:d0:5a:78:1d:28:fe:a8:a2:1f:5a:95:1c:d9:ba:
37:1a:20:61:3b:cb:ce:40:a8:c6:70:8b:ce:fd:57:
39:83:32:22:f2:31:6f:2a:27:37:25:69:54:69:a9:
a9:34:67:11:85:8a:fe:55:bc:a9:c5:67:e1:41:c3:
dd:81:84:c0:f1:53:20:9a:ad:a8:61:78:c1:8f:3d:
0e:0a:6b:68:05:03:1b:8b:e3:34:1b:69:2d:b3:be:
c7:d1:4e:8a:94:77:f9:f2:ed:8c:0d:50:3b:38:fb:
3d:3f:29:b0:11:4e:c5:81:92:13:35:ad:a0:1d:43:
80:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:92:0C:B4:D1:7C:B1:DE:E4:54:6B:60:2B:4C:61:D4:2C:CB:BF:41
X509v3 Authority Key Identifier:
keyid:A0:D9:22:E2:FE:24:BD:2C:DA:79:3A:2A:AD:C1:33:62:50:0C:D9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:dc:b5:a8:d7:88:58:bf:49:9e:96:14:91:d1:9c:57:2b:6d:
52:ce:15:25:aa:07:62:99:11:d6:31:d6:80:6e:3b:5e:e2:e5:
a1:2b:65:49:1d:86:22:a7:87:23:4f:d2:9a:c4:4f:06:f1:0d:
0b:e1:77:7c:2b:b5:70:af:8d:90:62:c8:76:bc:ca:d2:44:73:
1a:cc:5f:25:88:06:2d:a9:68:43:86:71:c7:0a:be:50:ae:b1:
fe:f2:50:70:80:5c:0f:e5:1c:c8:be:35:78:8c:d9:80:0b:97:
f8:86:92:55:fd:4d:79:9d:4e:3e:76:05:a3:c9:6a:c8:b8:53:
d5:40:07:c9:e9:03:df:5b:39:bb:7a:e5:46:31:10:e7:34:fa:
bc:d5:ac:da:62:21:eb:8c:3d:88:41:8c:a3:d0:ba:7f:f9:0a:
db:9d:f9:af:22:cc:89:b6:ff:4c:9c:87:46:31:f5:3a:6d:59:
74:c7:90:3e:76:69:8b:ca:95:30:6c:80:57:94:0a:ab:f9:96:
ca:54:30:00:f4:4c:a7:c3:b9:75:55:99:7b:96:1e:a8:1a:6b:
75:64:9c:68:d9:c3:da:1b:de:4b:d4:76:de:cb:cf:b8:e3:6b:
03:f3:b9:24:64:24:f3:b8:fe:99:d5:7f:61:96:b7:65:73:a8:
89:b3:79:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZifA4JwkjsRRFRqAKO/8ozsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZDkyMmUyZmUyNGJkMmNkYTc5M2EyYWFkYzEzMzYyNTAw
Y2Q5YjEwHhcNMjUwODEyMTYwMTAzWhcNMjUwODEzMTYwMTAzWjAzMTEwLwYDVQQD
Eyg1NjkyMGNiNGQxN2NiMWRlZTQ1NDZiNjAyYjRjNjFkNDJjY2JiZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmli8wnrjRHZ/ICii01EBuKHTeBK
xF0a6E8GT9CCVIYq1TP2ScoVkBpVY5jfzR26L+5QMrBq8T1R2m1c63ZreZvPjWIe
0e+MEh9a4ERmfbw93r4PAXGpeMkgz4CYzQZHUjCOM/fzuGjrVwBVmGQ7FXFuXT5H
g6WRM845aOZiL9Kaa/gPGhyn0Fp4HSj+qKIfWpUc2bo3GiBhO8vOQKjGcIvO/Vc5
gzIi8jFvKic3JWlUaampNGcRhYr+VbypxWfhQcPdgYTA8VMgmq2oYXjBjz0OCmto
BQMbi+M0G2kts77H0U6KlHf58u2MDVA7OPs9PymwEU7FgZITNa2gHUOAVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaSDLTRfLHe5FRrYCtMYdQsy79BMB8GA1UdIwQY
MBaAFKDZIuL+JL0s2nk6Kq3BM2JQDNmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb05raTR2NGt2U3phZVRvcXJjRXpZbEFNMmJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9kNGZjNGMtNDgxNS00ZTU2LWJmNzMt
NGE2YWNlMjZiOTcyLzEvb05raTR2NGt2U3phZVRvcXJjRXpZbEFNMmJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9kNGZjNGMtNDgxNS00ZTU2LWJmNzMtNGE2YWNlMjZiOTcy
LzEvb05raTR2NGt2U3phZVRvcXJjRXpZbEFNMmJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACty1qNeI
WL9JnpYUkdGcVyttUs4VJaoHYpkR1jHWgG47XuLloStlSR2GIqeHI0/SmsRPBvEN
C+F3fCu1cK+NkGLIdrzK0kRzGsxfJYgGLaloQ4Zxxwq+UK6x/vJQcIBcD+UcyL41
eIzZgAuX+IaSVf1NeZ1OPnYFo8lqyLhT1UAHyekD31s5u3rlRjEQ5zT6vNWs2mIh
64w9iEGMo9C6f/kK2535ryLMibb/TJyHRjH1Om1ZdMeQPnZpi8qVMGyAV5QKq/mW
ylQwAPRMp8O5dVWZe5YeqBprdWScaNnD2hveS9R23svPuONrA/O5JGQk87j+mdV/
YZa3ZXOoibN5CA==
-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:10 2025 by rpki-client