Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
File: oVJWhcluMm8grjcpwDD0T9FJmwU.mft (raw, json)
Hash identifier: m/dMK0+YvPPekiIIbbPHn0RFY3Y98Z3TAq/Vw/e5xfM=
Subject key identifier: 43:2B:8B:1D:4B:99:97:23:00:A1:E2:96:D2:B8:20:73:6F:6B:EF:19
Authority key identifier: A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
Certificate issuer: /CN=a1525685c96e326f20ae3729c030f44fd1499b05
Certificate serial: 01984BC1E83021E32D5B8BB7409B0D8DB132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
Manifest number: 080E
Signing time: Sun 27 Jul 2025 12:00:55 +0000
Manifest this update: Sun 27 Jul 2025 12:00:55 +0000
Manifest next update: Mon 28 Jul 2025 12:00:55 +0000
Files and hashes: 1: oVJWhcluMm8grjcpwDD0T9FJmwU.crl (hash: 9Mvl8nx2xW4qJ1V48YSY+j8drDoREImHCx7VaZkweME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:e8:30:21:e3:2d:5b:8b:b7:40:9b:0d:8d:b1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1525685c96e326f20ae3729c030f44fd1499b05
Validity
Not Before: Jul 27 12:00:55 2025 GMT
Not After : Jul 28 12:00:55 2025 GMT
Subject: CN=432b8b1d4b99972300a1e296d2b820736f6bef19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:55:7f:b5:d1:dc:ae:36:a0:97:a0:de:1b:
af:b7:4f:b4:3f:a1:57:bb:e3:18:46:15:51:25:48:
10:c8:67:e0:ea:ee:79:9c:32:16:58:bf:f3:03:b4:
22:be:bc:d2:05:dd:b0:91:f9:d8:7e:b5:44:d1:ad:
a1:96:60:f0:4e:a1:ed:50:b6:ed:56:ea:b6:9b:9b:
10:cd:2c:fe:78:af:f8:f7:98:4d:88:0c:e5:48:25:
5e:2e:22:78:c7:4f:32:92:45:a7:70:92:b7:46:18:
bd:55:ae:27:8b:5a:fc:dd:06:17:07:02:49:f0:20:
f2:1d:6e:82:c3:1a:99:a9:f8:62:4e:5c:f6:60:b5:
c6:e3:e5:91:d4:31:53:e5:d9:f3:c0:5a:89:09:82:
ca:31:bc:55:81:95:2c:ee:d8:78:e2:46:f3:9e:13:
d4:a2:9e:02:99:5e:eb:b1:ed:fa:36:e8:b8:77:ec:
46:13:1e:2f:2f:56:c6:ac:f7:d6:4f:e6:ba:07:13:
5c:2d:65:28:3c:e1:c9:3c:23:70:09:34:d2:e5:a1:
33:96:48:fe:33:76:92:78:e5:e9:0d:41:92:c9:20:
0c:58:92:fa:bf:d3:6f:d3:5c:7f:4e:eb:fe:83:2e:
59:80:1d:aa:25:dd:cf:31:0b:38:13:75:81:1d:d3:
aa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2B:8B:1D:4B:99:97:23:00:A1:E2:96:D2:B8:20:73:6F:6B:EF:19
X509v3 Authority Key Identifier:
keyid:A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5d:e5:57:99:d7:ca:1d:bc:9b:8a:ad:74:74:bc:2e:70:65:
98:10:29:8a:b5:2a:61:78:18:5c:e5:d6:ed:d5:1b:24:b0:16:
40:3d:6e:cb:5e:f5:a2:a0:97:6f:a3:39:43:3e:be:c1:42:7f:
1d:f3:cc:05:0a:3d:af:d9:a4:2e:d3:ca:c9:77:4e:6c:82:69:
2c:e9:ad:6a:fd:9f:4c:9c:f0:1d:76:60:42:20:d4:f5:ed:b3:
1a:6d:20:d3:ee:10:9c:8f:d3:8e:d2:77:1e:2d:47:f0:45:82:
64:41:61:e2:19:ce:42:d9:50:31:aa:1e:6c:3b:b4:b0:9a:d0:
cb:ad:40:e5:4c:99:2c:5f:bc:e2:d6:68:a9:40:7c:b1:30:6a:
59:d0:8b:7c:9a:af:de:e1:bd:1e:6c:7b:58:0e:f2:d8:d5:65:
08:30:1d:0e:48:52:c9:31:7e:f3:3f:3c:43:d6:ce:1b:5b:c0:
a7:14:f6:21:32:21:91:e9:ff:68:e1:26:4a:8f:e6:f7:d9:8c:
f2:b4:f6:72:09:26:44:f0:96:54:c6:f7:74:a4:bb:3c:fe:a4:
3f:51:4f:2a:2f:51:53:e2:d0:24:a8:0b:d6:25:d5:0b:50:da:
ec:42:18:f5:96:70:7d:76:25:7c:61:3e:88:5f:40:8d:11:cf:
f0:e6:2e:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLwegwIeMtW4u3QJsNjbEyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNTI1Njg1Yzk2ZTMyNmYyMGFlMzcyOWMwMzBmNDRmZDE0
OTliMDUwHhcNMjUwNzI3MTIwMDU1WhcNMjUwNzI4MTIwMDU1WjAzMTEwLwYDVQQD
Eyg0MzJiOGIxZDRiOTk5NzIzMDBhMWUyOTZkMmI4MjA3MzZmNmJlZjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrZVf7XR3K42oJeg3huvt0+0P6FX
u+MYRhVRJUgQyGfg6u55nDIWWL/zA7QivrzSBd2wkfnYfrVE0a2hlmDwTqHtULbt
Vuq2m5sQzSz+eK/495hNiAzlSCVeLiJ4x08ykkWncJK3Rhi9Va4ni1r83QYXBwJJ
8CDyHW6CwxqZqfhiTlz2YLXG4+WR1DFT5dnzwFqJCYLKMbxVgZUs7th44kbznhPU
op4CmV7rse36Nui4d+xGEx4vL1bGrPfWT+a6BxNcLWUoPOHJPCNwCTTS5aEzlkj+
M3aSeOXpDUGSySAMWJL6v9Nv01x/Tuv+gy5ZgB2qJd3PMQs4E3WBHdOqIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMrix1LmZcjAKHiltK4IHNva+8ZMB8GA1UdIwQY
MBaAFKFSVoXJbjJvIK43KcAw9E/RSZsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ZKV2hjbHVNbThncmpjcHdERDBUOUZKbXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lMmNjOGItODYwNi00ZjI1LTkyZDAt
NDQzNzFiMWNjNzJmLzEvb1ZKV2hjbHVNbThncmpjcHdERDBUOUZKbXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lMmNjOGItODYwNi00ZjI1LTkyZDAtNDQzNzFiMWNjNzJm
LzEvb1ZKV2hjbHVNbThncmpjcHdERDBUOUZKbXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADl3lV5nX
yh28m4qtdHS8LnBlmBApirUqYXgYXOXW7dUbJLAWQD1uy171oqCXb6M5Qz6+wUJ/
HfPMBQo9r9mkLtPKyXdObIJpLOmtav2fTJzwHXZgQiDU9e2zGm0g0+4QnI/TjtJ3
Hi1H8EWCZEFh4hnOQtlQMaoebDu0sJrQy61A5UyZLF+84tZoqUB8sTBqWdCLfJqv
3uG9Hmx7WA7y2NVlCDAdDkhSyTF+8z88Q9bOG1vApxT2ITIhken/aOEmSo/m99mM
8rT2cgkmRPCWVMb3dKS7PP6kP1FPKi9RU+LQJKgL1iXVC1Da7EIY9ZZwfXYlfGE+
iF9AjRHP8OYu/g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 16:29:37 2025 by rpki-client