Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
File: oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft (raw, json)
Hash identifier: avbVkwcsKMSk7CyERbISIZyFETnnr7VT5NOQfmZ42HU=
Subject key identifier: 22:F1:65:39:17:B0:FF:A9:4A:02:1A:60:AF:47:6B:EA:09:C8:BB:6F
Authority key identifier: A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
Certificate issuer: /CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Certificate serial: 01984B53496A762D41BCFF9F06206834E4FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 10:00:06 +0000
Manifest this update: Sun 27 Jul 2025 10:00:06 +0000
Manifest next update: Mon 28 Jul 2025 10:00:06 +0000
Files and hashes: 1: oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl (hash: Y98flBByNgf6xpYf7Ct/gQW/1G8Hew/83TWzI7m9JlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:49:6a:76:2d:41:bc:ff:9f:06:20:68:34:e4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Validity
Not Before: Jul 27 10:00:06 2025 GMT
Not After : Jul 28 10:00:06 2025 GMT
Subject: CN=22f1653917b0ffa94a021a60af476bea09c8bb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:b9:81:ab:8b:47:ef:b4:10:d1:9c:e3:d7:
9a:e7:b8:d6:ec:e6:ad:e2:9b:25:70:26:96:0a:50:
e7:28:3a:37:92:bc:09:f8:67:fa:9e:7f:f8:61:0d:
ca:01:2b:6b:ce:c0:6d:ec:34:80:70:41:e2:31:c3:
28:34:ce:89:2b:08:11:27:f9:51:68:bb:35:40:bd:
8e:c3:b9:51:73:bd:66:45:3f:5d:63:43:7c:43:14:
72:b4:b1:0b:2c:11:08:88:f4:b2:99:53:4a:ac:f7:
12:97:e4:42:0d:20:d8:b0:7e:59:dd:87:5e:78:2c:
a9:23:7b:52:f6:c5:49:41:b1:bf:85:7c:87:f8:ce:
25:56:dc:ea:f2:cc:62:9d:8b:95:5a:be:13:a8:ed:
94:99:b6:8e:08:9a:5d:e8:a6:f5:7a:e4:87:cd:b2:
1c:32:5f:41:80:35:ae:1d:77:fe:6f:4c:62:93:da:
b4:84:a6:37:15:b2:b0:2a:b8:4e:f9:99:be:9d:de:
af:41:6b:26:08:76:44:5b:e1:ee:15:83:db:f0:de:
58:6d:52:fb:63:67:6d:70:c5:4c:18:c9:46:55:b9:
f7:99:72:57:29:a8:3b:fd:04:4a:23:e3:09:de:15:
d0:23:7e:03:cd:9b:08:b6:c9:78:7b:08:30:b0:8d:
e6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F1:65:39:17:B0:FF:A9:4A:02:1A:60:AF:47:6B:EA:09:C8:BB:6F
X509v3 Authority Key Identifier:
keyid:A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e1:dc:c2:ba:a5:ea:2f:9f:66:78:79:4c:18:25:42:2a:75:
3d:0b:2a:dc:82:51:20:fb:a3:cf:36:c4:ec:b5:4e:2a:34:46:
0a:6e:52:14:11:81:63:0f:60:46:d1:f3:23:ec:e7:11:4e:d0:
15:40:cd:6d:ee:b8:09:c1:e7:55:14:1f:e1:67:e5:db:f9:62:
20:a5:3f:91:a2:ac:cc:a6:9f:71:a4:f8:4e:87:5d:1a:f0:f5:
b4:18:24:5c:9e:74:ca:b9:17:e4:bf:82:f7:3d:ae:f1:72:7f:
07:c5:d5:e0:a0:48:c5:85:2c:f9:56:88:44:57:9f:43:54:11:
14:b7:bc:9b:0f:9e:9f:90:18:8e:c3:ca:bd:f9:d1:8e:8c:b4:
22:f5:2e:32:e7:16:95:92:42:d6:7b:97:1a:04:43:5b:78:bd:
b5:e7:e9:af:c8:65:c6:4e:a5:8f:11:db:c6:b1:d1:73:c6:14:
df:7b:38:91:6e:68:cb:4b:55:20:5d:2c:27:b8:73:fa:c0:9e:
89:0f:d8:96:32:b6:02:68:47:28:24:9d:51:9e:6a:7a:06:ed:
2e:02:ff:0e:7c:b5:23:9a:2a:7f:c2:23:68:11:5f:4e:38:5c:
54:dd:86:b1:5b:63:37:19:55:ae:81:ff:9a:3e:96:2d:b2:34:
88:b6:c0:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLU0lqdi1BvP+fBiBoNOT8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMGYzNDFkM2FiNTYzYjlmYzQwOTgwYWU3YzE3NDAyYzIx
NWVmMmEwHhcNMjUwNzI3MTAwMDA2WhcNMjUwNzI4MTAwMDA2WjAzMTEwLwYDVQQD
EygyMmYxNjUzOTE3YjBmZmE5NGEwMjFhNjBhZjQ3NmJlYTA5YzhiYjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsG5gauLR++0ENGc49ea57jW7Oat
4pslcCaWClDnKDo3krwJ+Gf6nn/4YQ3KAStrzsBt7DSAcEHiMcMoNM6JKwgRJ/lR
aLs1QL2Ow7lRc71mRT9dY0N8QxRytLELLBEIiPSymVNKrPcSl+RCDSDYsH5Z3Yde
eCypI3tS9sVJQbG/hXyH+M4lVtzq8sxinYuVWr4TqO2UmbaOCJpd6Kb1euSHzbIc
Ml9BgDWuHXf+b0xik9q0hKY3FbKwKrhO+Zm+nd6vQWsmCHZEW+HuFYPb8N5YbVL7
Y2dtcMVMGMlGVbn3mXJXKag7/QRKI+MJ3hXQI34DzZsItsl4ewgwsI3mfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLxZTkXsP+pSgIaYK9Ha+oJyLtvMB8GA1UdIwQY
MBaAFKEPNB06tWO5/ECYCufBdALCFe8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1E4MEhUcTFZN244UUpnSzU4RjBBc0lWN3lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84YjJmMTQtYzMyOS00Y2JiLWFkNDEt
MTc0MDcxNjVhZmU2LzEvb1E4MEhUcTFZN244UUpnSzU4RjBBc0lWN3lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS84YjJmMTQtYzMyOS00Y2JiLWFkNDEtMTc0MDcxNjVhZmU2
LzEvb1E4MEhUcTFZN244UUpnSzU4RjBBc0lWN3lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+Hcwrql
6i+fZnh5TBglQip1PQsq3IJRIPujzzbE7LVOKjRGCm5SFBGBYw9gRtHzI+znEU7Q
FUDNbe64CcHnVRQf4Wfl2/liIKU/kaKszKafcaT4ToddGvD1tBgkXJ50yrkX5L+C
9z2u8XJ/B8XV4KBIxYUs+VaIRFefQ1QRFLe8mw+en5AYjsPKvfnRjoy0IvUuMucW
lZJC1nuXGgRDW3i9tefpr8hlxk6ljxHbxrHRc8YU33s4kW5oy0tVIF0sJ7hz+sCe
iQ/YljK2AmhHKCSdUZ5qegbtLgL/Dny1I5oqf8IjaBFfTjhcVN2GsVtjNxlVroH/
mj6WLbI0iLbAvw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 16:04:10 2025 by rpki-client