Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier: FvxfF/i4QYm+0tmBIN5mO56CfqsFsUMEdRcKWB8rMCU=
Subject key identifier: 28:4C:2C:E4:13:4F:6B:1F:1E:15:C5:0A:2C:3C:B5:E0:E9:2C:FF:E5
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 01988F9071F4E1F6121F839578893BF98E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number: 1269
Signing time: Sat 09 Aug 2025 16:01:04 +0000
Manifest this update: Sat 09 Aug 2025 16:01:04 +0000
Manifest next update: Sun 10 Aug 2025 16:01:04 +0000
Files and hashes: 1: 6qcJyLkGHGKYEWJcRiN4L6Z8qn8.roa (hash: 5OQd3tPQBKWKRhlqwep2BEZpe6x6xAIuVkUwGHnZJ7w=)
2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: pDQa0f8dtIFcCieFYB++LqoTtv81rL879SQORKat49o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:71:f4:e1:f6:12:1f:83:95:78:89:3b:f9:8e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Aug 9 16:01:04 2025 GMT
Not After : Aug 10 16:01:04 2025 GMT
Subject: CN=284c2ce4134f6b1f1e15c50a2c3cb5e0e92cffe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9d:8f:d7:5b:66:92:51:9d:4c:3d:a2:3f:cc:
1c:c8:a0:9f:e8:89:f9:6c:58:0d:37:21:7a:71:ae:
b8:6d:91:05:4c:be:ee:c7:84:bf:30:cf:ae:d6:43:
09:db:ed:cc:1e:bc:f8:b0:ac:91:76:db:c4:e4:75:
2b:36:50:c8:24:29:ae:04:06:e0:a3:c8:c6:48:f5:
1a:52:44:85:66:80:ef:ea:60:c8:8e:49:84:7b:c3:
8e:c3:db:46:95:98:b3:cc:0a:08:fe:b7:f1:67:68:
cb:12:47:ab:b4:dc:82:c2:88:66:08:a7:ba:71:41:
16:5e:cd:c1:8f:65:a6:58:a5:43:fa:41:ce:19:f5:
ed:02:1a:a9:bb:20:f8:cf:38:2b:6c:83:43:8d:ef:
32:d4:d0:22:fb:ed:fb:f7:dd:69:56:8d:55:1e:57:
6f:81:b0:4b:a1:21:8b:3f:15:a5:6b:5a:0c:13:9b:
1d:f0:34:e0:92:a3:7a:08:d1:86:75:ec:a7:8a:ed:
e3:44:95:1a:2f:b2:1a:bc:5a:cc:11:72:a8:d3:b9:
31:09:fc:85:73:9a:4b:47:5b:a1:10:32:ba:fa:20:
db:75:8c:16:1c:4e:1c:74:ce:c9:d1:20:3d:55:ab:
71:2f:e5:a6:94:32:be:64:75:0b:22:6c:06:ea:02:
5b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4C:2C:E4:13:4F:6B:1F:1E:15:C5:0A:2C:3C:B5:E0:E9:2C:FF:E5
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:7c:38:5e:c0:f0:3c:18:7b:1e:f7:06:20:81:f1:19:f6:59:
b9:2b:bc:bc:3d:5d:ce:92:c5:a1:e0:54:7a:48:c6:3a:e1:a0:
45:19:64:87:cc:6d:bd:f7:c5:17:97:58:b1:e9:55:72:5b:3f:
6a:57:3c:70:66:a1:cc:03:a0:4a:cf:44:d9:64:a4:84:a2:d9:
fb:76:f9:37:b9:4c:51:28:23:38:35:23:cd:dd:bf:7d:c8:2a:
d9:e0:dc:81:b2:1b:f5:6a:18:29:b9:a0:bd:33:da:03:c7:52:
0f:a2:25:71:43:5b:94:e5:0a:3e:c5:14:ee:9e:b2:f5:0f:e5:
0d:b4:72:ed:2b:5e:56:34:3b:56:0e:75:aa:c5:5a:32:49:9d:
ef:da:25:08:44:f7:00:19:50:3a:45:df:84:25:57:ec:b0:41:
79:56:f2:98:f9:66:c6:0a:27:eb:08:2d:92:31:fa:e5:f1:d2:
1c:8b:71:c9:cf:72:db:b2:a0:90:d8:0d:c4:81:79:de:2f:fc:
f6:18:12:3e:6d:97:8c:25:5e:a4:09:d9:ee:c1:89:73:2c:11:
88:83:d2:83:b2:53:22:cf:9c:24:e7:57:b6:1c:9d:4d:3a:0e:
68:b7:a0:cb:da:fd:8f:f8:86:46:2c:ac:7d:e8:08:5f:90:b2:
20:60:7f:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPkHH04fYSH4OVeIk7+Y48MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZGEwMTk2MDk2YzExYzIzMWU0OWJiMzA4OTY3MGI5NGRi
ZjVlODAwHhcNMjUwODA5MTYwMTA0WhcNMjUwODEwMTYwMTA0WjAzMTEwLwYDVQQD
EygyODRjMmNlNDEzNGY2YjFmMWUxNWM1MGEyYzNjYjVlMGU5MmNmZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp2P11tmklGdTD2iP8wcyKCf6In5
bFgNNyF6ca64bZEFTL7ux4S/MM+u1kMJ2+3MHrz4sKyRdtvE5HUrNlDIJCmuBAbg
o8jGSPUaUkSFZoDv6mDIjkmEe8OOw9tGlZizzAoI/rfxZ2jLEkertNyCwohmCKe6
cUEWXs3Bj2WmWKVD+kHOGfXtAhqpuyD4zzgrbINDje8y1NAi++37991pVo1VHldv
gbBLoSGLPxWla1oME5sd8DTgkqN6CNGGdeyniu3jRJUaL7IavFrMEXKo07kxCfyF
c5pLR1uhEDK6+iDbdYwWHE4cdM7J0SA9VatxL+WmlDK+ZHULImwG6gJbJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChMLOQTT2sfHhXFCiw8teDpLP/lMB8GA1UdIwQY
MBaAFKPaAZYJbBHCMeSbswiWcLlNv16AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83ZDk4NTQtOTY5ZS00ZTM0LWExZGYt
YTMwMmY2YTc0YjA4LzEvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83ZDk4NTQtOTY5ZS00ZTM0LWExZGYtYTMwMmY2YTc0YjA4
LzEvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXw4XsDw
PBh7HvcGIIHxGfZZuSu8vD1dzpLFoeBUekjGOuGgRRlkh8xtvffFF5dYselVcls/
alc8cGahzAOgSs9E2WSkhKLZ+3b5N7lMUSgjODUjzd2/fcgq2eDcgbIb9WoYKbmg
vTPaA8dSD6IlcUNblOUKPsUU7p6y9Q/lDbRy7SteVjQ7Vg51qsVaMkmd79olCET3
ABlQOkXfhCVX7LBBeVbymPlmxgon6wgtkjH65fHSHItxyc9y27KgkNgNxIF53i/8
9hgSPm2XjCVepAnZ7sGJcywRiIPSg7JTIs+cJOdXthydTToOaLegy9r9j/iGRiys
fegIX5CyIGB/jA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:45:22 2025 by rpki-client