Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
File: o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft (raw, json)
Hash identifier: bgSsTOc2E6QTRwTOKvXkmzSHPsd28a5x9NygEA1Otp8=
Subject key identifier: BA:4E:C6:72:86:D9:39:4C:9A:24:7D:09:C3:FC:22:A3:BF:EF:74:3F
Authority key identifier: A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
Certificate issuer: /CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Certificate serial: 0198A0BB047F7B787CEE14243191D6852FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
Manifest number: 162E
Signing time: Wed 13 Aug 2025 00:01:07 +0000
Manifest this update: Wed 13 Aug 2025 00:01:07 +0000
Manifest next update: Thu 14 Aug 2025 00:01:07 +0000
Files and hashes: 1: HwLcn2tbXfaewoRLUqvEJHtXkUs.roa (hash: W1uC8oFLMGagyUd1+ow2TTRqqrP/F081zqAOESqRLNw=)
2: Mx-fCqDASlNjjbccZ-B5nKyFs1w.roa (hash: 1mo/7uKD2fUUwhxoh/B2HIiYyRaaQnMnmEkbBF+A3yk=)
3: o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl (hash: Ct93YwMRbaKFoSi/aYwyHzSx6M2xZaqn+DHM5TUn+Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:bb:04:7f:7b:78:7c:ee:14:24:31:91:d6:85:2f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Validity
Not Before: Aug 13 00:01:07 2025 GMT
Not After : Aug 14 00:01:07 2025 GMT
Subject: CN=ba4ec67286d9394c9a247d09c3fc22a3bfef743f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a2:be:66:79:fb:09:7c:d0:29:00:9f:4e:9c:
fa:c0:a9:fc:f9:07:a1:da:21:d6:fd:13:1f:55:d8:
99:50:53:b4:f2:6a:85:67:a3:47:60:1c:1d:9c:6b:
f7:93:36:4a:20:cb:4b:e9:31:d2:64:82:b7:f5:74:
59:fc:a2:ca:2e:32:a0:94:a9:5d:67:ab:a6:13:e8:
88:2a:18:a1:1d:8a:b8:ef:35:fa:ba:a8:e7:43:e1:
d7:85:dc:73:99:79:0d:d6:06:17:7f:e9:46:1e:fd:
d6:f7:64:ba:49:3a:be:af:39:d8:ae:bb:b7:f4:ea:
08:f6:6d:e1:ae:7c:a0:c2:11:f2:ac:e6:f1:99:7e:
7e:f4:93:97:19:dd:40:c3:1c:5a:ab:0a:ca:9f:e1:
bc:1e:d6:32:6b:1a:fa:f0:be:cc:60:ac:3b:48:83:
c3:cc:93:31:e0:b8:79:fc:b9:06:ac:c5:90:33:8f:
a7:ae:c5:e6:42:ab:46:5a:e2:1a:51:6b:42:80:1c:
93:62:e8:44:6e:e7:8e:01:71:fd:fd:38:8a:f9:8a:
23:a9:19:01:33:96:09:c8:e9:4e:36:7d:ed:cc:00:
3b:d5:ef:f4:0a:a3:ac:ab:64:5a:0f:ab:e0:b5:e9:
a9:b5:1a:bf:ca:ea:bc:26:ef:59:da:4b:d5:20:46:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4E:C6:72:86:D9:39:4C:9A:24:7D:09:C3:FC:22:A3:BF:EF:74:3F
X509v3 Authority Key Identifier:
keyid:A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:2e:d4:5b:92:4a:52:81:f6:70:09:42:41:1f:1c:08:e8:a9:
ba:ec:41:61:29:65:b0:a2:f8:ca:ba:67:d6:89:51:13:a0:ac:
6a:c4:99:22:d6:7f:0e:6f:2e:a5:a6:bc:88:1f:af:98:1d:ff:
45:fc:24:a2:54:81:41:4b:da:93:82:a9:bc:e0:6a:20:bf:6a:
fb:98:51:1b:81:d1:2f:af:ab:9f:f2:d6:b0:77:ad:53:6b:96:
a6:8b:a4:6b:e5:84:5c:22:ee:2b:aa:d8:53:8f:8d:5f:37:c0:
86:94:f9:92:45:13:26:17:e3:55:9b:4c:b7:01:ff:e2:4f:81:
e8:46:8b:e5:ac:cc:60:0f:19:ed:d8:af:38:cd:80:5e:2e:03:
25:ad:e2:92:ff:79:8a:7b:b2:30:95:7e:e5:0e:7f:08:9a:f9:
97:7d:b7:cd:bd:05:d8:11:70:36:30:d9:d8:61:0f:f4:a8:33:
ab:47:6e:28:89:16:4e:1e:f3:a1:0a:89:d2:ac:46:96:7b:b7:
37:06:83:ec:72:aa:57:c5:11:10:05:8d:07:0a:a1:c9:33:77:
36:0b:68:cc:d2:37:8f:09:39:21:7b:df:a2:87:09:aa:a9:ee:
18:73:ef:d1:42:d5:a2:ff:ca:ae:08:3f:74:2d:07:72:6f:68:
26:e0:02:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiguwR/e3h87hQkMZHWhS/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYWE4ZGQxMTg3NjZhZWQzYjA5ZWQ2OWYyZTQ3ZGMxZDJj
MTYxNTkwHhcNMjUwODEzMDAwMTA3WhcNMjUwODE0MDAwMTA3WjAzMTEwLwYDVQQD
EyhiYTRlYzY3Mjg2ZDkzOTRjOWEyNDdkMDljM2ZjMjJhM2JmZWY3NDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aK+Znn7CXzQKQCfTpz6wKn8+Qeh
2iHW/RMfVdiZUFO08mqFZ6NHYBwdnGv3kzZKIMtL6THSZIK39XRZ/KLKLjKglKld
Z6umE+iIKhihHYq47zX6uqjnQ+HXhdxzmXkN1gYXf+lGHv3W92S6STq+rznYrru3
9OoI9m3hrnygwhHyrObxmX5+9JOXGd1AwxxaqwrKn+G8HtYyaxr68L7MYKw7SIPD
zJMx4Lh5/LkGrMWQM4+nrsXmQqtGWuIaUWtCgByTYuhEbueOAXH9/TiK+YojqRkB
M5YJyOlONn3tzAA71e/0CqOsq2RaD6vgtemptRq/yuq8Ju9Z2kvVIEYoXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpOxnKG2TlMmiR9CcP8IqO/73Q/MB8GA1UdIwQY
MBaAFKOqjdEYdmrtOwntafLkfcHSwWFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZxTjBSaDJhdTA3Q2UxcDh1Ujl3ZExCWVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zOTFlNTQtYzIxYS00MDVhLTg4YWEt
NjA3OTc4OTEwMGNhLzEvbzZxTjBSaDJhdTA3Q2UxcDh1Ujl3ZExCWVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8zOTFlNTQtYzIxYS00MDVhLTg4YWEtNjA3OTc4OTEwMGNh
LzEvbzZxTjBSaDJhdTA3Q2UxcDh1Ujl3ZExCWVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAky7UW5JK
UoH2cAlCQR8cCOipuuxBYSllsKL4yrpn1olRE6CsasSZItZ/Dm8upaa8iB+vmB3/
RfwkolSBQUvak4KpvOBqIL9q+5hRG4HRL6+rn/LWsHetU2uWpouka+WEXCLuK6rY
U4+NXzfAhpT5kkUTJhfjVZtMtwH/4k+B6EaL5azMYA8Z7divOM2AXi4DJa3ikv95
inuyMJV+5Q5/CJr5l323zb0F2BFwNjDZ2GEP9Kgzq0duKIkWTh7zoQqJ0qxGlnu3
NwaD7HKqV8UREAWNBwqhyTN3NgtozNI3jwk5IXvfoocJqqnuGHPv0ULVov/Krgg/
dC0Hcm9oJuACbA==
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:27:50 2025 by rpki-client