Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
File: OuUFv8f9kXaGscizohj1UI9aNwo.mft (raw, json)
Hash identifier: nqre8vopRratQ4pbQLpH+km2QEkp0F9Oqy5YWEYnVOI=
Subject key identifier: 03:32:46:C2:A4:BE:3F:2D:17:35:53:D0:1F:40:35:D2:5E:0B:04:17
Authority key identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
Certificate issuer: /CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Certificate serial: 01985155D25E03409FA6DB761959031DDA65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
Manifest number: 0255
Signing time: Mon 28 Jul 2025 14:00:35 +0000
Manifest this update: Mon 28 Jul 2025 14:00:35 +0000
Manifest next update: Tue 29 Jul 2025 14:00:35 +0000
Files and hashes: 1: OuUFv8f9kXaGscizohj1UI9aNwo.crl (hash: Wtf2L7Q3EnQGimRHgQFSBvIkXEYE+7rbrlvnFIyMb6M=)
2: lhV68OSkur6ZsAA_2dy8-L_4IL0.roa (hash: BvvVh8/fqP1HPi1uOxwh0N4UEkoJk2nM455CRrFSNec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:55:d2:5e:03:40:9f:a6:db:76:19:59:03:1d:da:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Validity
Not Before: Jul 28 14:00:35 2025 GMT
Not After : Jul 29 14:00:35 2025 GMT
Subject: CN=033246c2a4be3f2d173553d01f4035d25e0b0417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:34:74:e6:bf:6c:c6:2d:58:33:ed:18:f5:4b:
05:1a:b5:e9:ae:44:98:c1:2c:25:0b:a6:77:b4:a4:
95:bd:fc:b1:50:75:97:aa:38:0f:96:8b:71:03:f8:
36:75:c5:30:5f:7c:1a:4d:6b:b0:1f:2c:10:14:4d:
c1:50:f9:e2:d0:e8:a4:99:a1:5a:38:68:14:20:85:
4c:40:7f:80:10:3c:06:2f:25:6d:69:19:ce:33:f0:
a1:e9:52:30:39:d4:4b:5f:fc:7e:54:d5:9c:34:72:
98:36:e1:34:a7:aa:89:dd:c3:cf:6e:41:9b:6f:18:
41:de:6a:a2:07:0f:e3:eb:8f:ac:54:92:a3:2a:c8:
a4:6e:28:93:94:b9:e3:6e:dc:59:e5:85:af:3d:6f:
71:57:3e:d8:d5:3f:3e:94:45:44:a5:be:fb:a7:f2:
69:4a:aa:c6:fc:b7:73:f3:c5:8d:44:75:f0:40:74:
d7:38:4b:fe:26:19:49:19:dc:c3:0a:73:07:4b:df:
16:7a:d4:0e:ff:9c:61:52:d8:db:d2:0a:92:91:46:
fc:3b:51:16:14:ae:33:6f:c1:d2:9a:d3:8c:90:4f:
a2:71:d8:ef:f1:7c:d5:17:a6:1e:45:11:5d:29:3c:
77:7d:e3:a8:81:07:d4:b2:07:94:98:5c:80:a4:b5:
ff:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:32:46:C2:A4:BE:3F:2D:17:35:53:D0:1F:40:35:D2:5E:0B:04:17
X509v3 Authority Key Identifier:
keyid:3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1f:1c:d2:f8:45:4f:f4:04:57:e0:96:42:e6:19:6d:61:c2:
aa:35:1f:98:66:54:6e:8b:3f:38:10:84:d7:1a:fd:bc:a1:df:
9f:60:d4:6d:52:51:2e:47:68:3f:21:ed:98:19:aa:34:d6:b6:
59:9a:9d:a5:f7:7d:4a:b3:6f:e9:81:d5:fe:77:d5:14:8d:c1:
26:4e:43:6d:58:27:e2:96:c1:7f:9b:bb:75:1a:0b:8d:1a:9e:
1f:fc:21:72:c6:e7:73:76:49:b0:9a:68:a4:7c:a2:99:52:45:
18:e5:77:c3:69:13:7e:05:cf:d4:43:64:36:ca:3b:fd:93:61:
07:61:8a:a6:11:d4:66:3e:56:b5:34:a8:de:15:fc:f1:c1:fe:
16:0c:bb:59:bb:85:6a:1b:7c:73:f9:da:3b:17:14:cb:30:15:
89:e9:9e:97:11:e7:41:26:9b:4d:28:7b:bc:99:08:88:d4:c8:
ae:18:b5:99:52:a4:d5:2c:b9:8c:55:e4:4f:fb:4e:31:7d:48:
4d:c4:e3:24:68:c5:bf:40:c7:34:26:57:05:7c:fe:e7:b7:6c:
10:f3:6b:8a:26:9c:95:c1:71:91:1b:29:d6:ce:b9:09:76:29:
4d:db:31:dd:09:96:0c:be:70:bf:77:4a:5d:36:9d:0d:23:4e:
6e:80:5b:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhRVdJeA0Cfptt2GVkDHdplMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZTUwNWJmYzdmZDkxNzY4NmIxYzhiM2EyMThmNTUwOGY1
YTM3MGEwHhcNMjUwNzI4MTQwMDM1WhcNMjUwNzI5MTQwMDM1WjAzMTEwLwYDVQQD
EygwMzMyNDZjMmE0YmUzZjJkMTczNTUzZDAxZjQwMzVkMjVlMGIwNDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DR05r9sxi1YM+0Y9UsFGrXprkSY
wSwlC6Z3tKSVvfyxUHWXqjgPlotxA/g2dcUwX3waTWuwHywQFE3BUPni0OikmaFa
OGgUIIVMQH+AEDwGLyVtaRnOM/Ch6VIwOdRLX/x+VNWcNHKYNuE0p6qJ3cPPbkGb
bxhB3mqiBw/j64+sVJKjKsikbiiTlLnjbtxZ5YWvPW9xVz7Y1T8+lEVEpb77p/Jp
SqrG/Ldz88WNRHXwQHTXOEv+JhlJGdzDCnMHS98WetQO/5xhUtjb0gqSkUb8O1EW
FK4zb8HSmtOMkE+icdjv8XzVF6YeRRFdKTx3feOogQfUsgeUmFyApLX/JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMyRsKkvj8tFzVT0B9ANdJeCwQXMB8GA1UdIwQY
MBaAFDrlBb/H/ZF2hrHIs6IY9VCPWjcKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3VVRnY4ZjlrWGFHc2Npem9oajFVSTlhTndvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80MTkzZWEtYzgzZi00YmViLWEyMWUt
YTFjNzhhMGE2YmZkLzEvT3VVRnY4ZjlrWGFHc2Npem9oajFVSTlhTndvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS80MTkzZWEtYzgzZi00YmViLWEyMWUtYTFjNzhhMGE2YmZk
LzEvT3VVRnY4ZjlrWGFHc2Npem9oajFVSTlhTndvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFR8c0vhF
T/QEV+CWQuYZbWHCqjUfmGZUbos/OBCE1xr9vKHfn2DUbVJRLkdoPyHtmBmqNNa2
WZqdpfd9SrNv6YHV/nfVFI3BJk5DbVgn4pbBf5u7dRoLjRqeH/whcsbnc3ZJsJpo
pHyimVJFGOV3w2kTfgXP1ENkNso7/ZNhB2GKphHUZj5WtTSo3hX88cH+Fgy7WbuF
aht8c/naOxcUyzAViemelxHnQSabTSh7vJkIiNTIrhi1mVKk1Sy5jFXkT/tOMX1I
TcTjJGjFv0DHNCZXBXz+57dsEPNriiaclcFxkRsp1s65CXYpTdsx3QmWDL5wv3dK
XTadDSNOboBbMQ==
-----END CERTIFICATE-----
Generated at Mon Jul 28 20:03:39 2025 by rpki-client