Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
File: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft (raw, json)
Hash identifier: V8clcg9Bn5rQYMZExEZRkz/rmjRhDiiRCpHLkj/n73I=
Subject key identifier: 28:4C:CF:54:BD:57:FD:D8:66:98:B1:4E:D5:D0:A2:7B:F9:09:A2:01
Authority key identifier: 38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
Certificate issuer: /CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Certificate serial: 01984B53A908B9AE05C155FA9D4E7572E025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
Manifest number: 117F
Signing time: Sun 27 Jul 2025 10:00:30 +0000
Manifest this update: Sun 27 Jul 2025 10:00:30 +0000
Manifest next update: Mon 28 Jul 2025 10:00:30 +0000
Files and hashes: 1: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl (hash: Azl4ZYzspHJa/MfpUFjmUcndQuHAv1XAzqNESEgs/Ds=)
2: hbt7WcwBqBoPW6rBuDIQ3SNZmzc.roa (hash: gFxs6hHw3FxfMImk+yNCzFI6L94MQhx1psEtxtAsjbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:a9:08:b9:ae:05:c1:55:fa:9d:4e:75:72:e0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Validity
Not Before: Jul 27 10:00:30 2025 GMT
Not After : Jul 28 10:00:30 2025 GMT
Subject: CN=284ccf54bd57fdd86698b14ed5d0a27bf909a201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b8:4e:f1:61:99:27:85:b2:37:03:5d:94:73:
5d:75:90:06:71:ee:c9:58:c5:c0:75:e8:41:47:e4:
52:38:ca:8f:29:35:5d:37:24:00:00:b6:03:99:c5:
4d:57:b3:27:2b:ff:62:09:cd:11:d4:7a:f6:21:09:
92:71:ee:2f:d3:93:d9:7d:ba:d3:b7:7a:e6:cf:0e:
17:f9:39:2f:d7:b8:49:d4:67:d5:2f:74:b8:a5:82:
63:61:84:ff:fd:65:da:12:60:82:b6:d2:de:fe:fe:
46:4b:0b:72:69:bb:73:da:09:40:fd:4f:dd:3c:23:
f8:b5:50:59:83:b5:6d:08:3e:dc:41:33:f9:d1:d3:
9f:86:bf:6f:22:03:9e:eb:d5:c0:2c:15:30:d4:1a:
5c:74:ac:b7:55:e0:b2:e0:80:79:11:bf:58:93:cd:
c8:6e:67:10:0e:2b:f5:9c:57:56:15:61:9b:3b:9f:
78:8e:a1:a8:b1:42:e3:b0:97:e3:cf:7b:05:8b:7d:
3f:78:8b:e1:d9:fa:47:31:a3:c9:21:9a:4e:33:60:
72:9c:9a:d2:c7:ca:3c:d1:75:d4:4c:a8:f6:83:32:
27:70:fa:0a:f1:f1:9d:d8:29:c9:98:01:76:91:bb:
24:93:e5:51:fe:4c:a0:43:5c:e6:6a:a8:44:13:d6:
94:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4C:CF:54:BD:57:FD:D8:66:98:B1:4E:D5:D0:A2:7B:F9:09:A2:01
X509v3 Authority Key Identifier:
keyid:38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d7:92:e8:6b:9e:3c:00:b9:ba:e7:8a:80:93:ac:09:44:5f:
78:4f:6e:75:84:5a:72:8a:45:25:f8:6d:d1:ad:c3:09:68:e9:
f7:7b:44:bd:38:55:0b:42:33:29:e6:8d:b0:3f:02:69:bc:1e:
9a:db:c5:85:01:4d:7f:d5:10:13:b9:5b:7e:0f:6f:70:e5:78:
9f:d0:07:f4:e3:e6:ee:b6:8b:bb:31:5e:77:2c:01:39:b6:93:
6d:7e:e8:ac:77:51:32:61:5f:87:a5:db:e8:d2:a8:18:01:59:
42:2a:02:7e:99:ae:b7:31:df:71:0e:55:44:99:ce:76:6b:9d:
9d:2e:67:11:9c:2f:c5:94:0c:5d:d3:94:e7:af:50:5e:24:ce:
55:e0:da:03:1f:e5:36:1b:a4:96:8f:6c:ff:6e:93:1d:e0:45:
8d:09:fb:61:cb:df:43:37:7b:1d:67:7f:aa:89:ed:32:9c:54:
f2:80:0e:99:b6:4e:ab:89:b4:d6:2c:b1:d8:43:e6:63:c9:d2:
4a:7f:1c:fb:1c:28:00:93:dc:21:55:fb:6d:02:eb:08:9b:36:
d4:66:a7:14:dc:69:45:5d:21:75:9c:08:c2:9f:f6:5f:88:b3:
e8:8e:56:42:ad:5b:35:8b:87:eb:46:49:c9:7d:08:38:3e:7a:
eb:22:1d:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLU6kIua4FwVX6nU51cuAlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MjI3YTk2ZmE2NGFkOTUyNDBmMGFlZTBiZDM3NDY0NmM2
YmJlZTIwHhcNMjUwNzI3MTAwMDMwWhcNMjUwNzI4MTAwMDMwWjAzMTEwLwYDVQQD
EygyODRjY2Y1NGJkNTdmZGQ4NjY5OGIxNGVkNWQwYTI3YmY5MDlhMjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbhO8WGZJ4WyNwNdlHNddZAGce7J
WMXAdehBR+RSOMqPKTVdNyQAALYDmcVNV7MnK/9iCc0R1Hr2IQmSce4v05PZfbrT
t3rmzw4X+Tkv17hJ1GfVL3S4pYJjYYT//WXaEmCCttLe/v5GSwtyabtz2glA/U/d
PCP4tVBZg7VtCD7cQTP50dOfhr9vIgOe69XALBUw1BpcdKy3VeCy4IB5Eb9Yk83I
bmcQDiv1nFdWFWGbO594jqGosULjsJfjz3sFi30/eIvh2fpHMaPJIZpOM2BynJrS
x8o80XXUTKj2gzIncPoK8fGd2CnJmAF2kbskk+VR/kygQ1zmaqhEE9aUIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChMz1S9V/3YZpixTtXQonv5CaIBMB8GA1UdIwQY
MBaAFDgiepb6ZK2VJA8K7gvTdGRsa77iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0NKNmx2cGtyWlVrRHdydUM5TjBaR3hydnVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xY2Y5YWMtMTBkNC00YTVlLWE3MDYt
ZDFjOWJhMDhmNTU5LzEvT0NKNmx2cGtyWlVrRHdydUM5TjBaR3hydnVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xY2Y5YWMtMTBkNC00YTVlLWE3MDYtZDFjOWJhMDhmNTU5
LzEvT0NKNmx2cGtyWlVrRHdydUM5TjBaR3hydnVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9eS6Gue
PAC5uueKgJOsCURfeE9udYRacopFJfht0a3DCWjp93tEvThVC0IzKeaNsD8Cabwe
mtvFhQFNf9UQE7lbfg9vcOV4n9AH9OPm7raLuzFedywBObaTbX7orHdRMmFfh6Xb
6NKoGAFZQioCfpmutzHfcQ5VRJnOdmudnS5nEZwvxZQMXdOU569QXiTOVeDaAx/l
Nhuklo9s/26THeBFjQn7YcvfQzd7HWd/qontMpxU8oAOmbZOq4m01iyx2EPmY8nS
Sn8c+xwoAJPcIVX7bQLrCJs21GanFNxpRV0hdZwIwp/2X4iz6I5WQq1bNYuH60ZJ
yX0IOD566yIdOA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:03:47 2025 by rpki-client