Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json)
Hash identifier: 40ZVdDY6J7B/21A5Z4vorTd8nrQYDcRkB9GX6QI8daM=
Subject key identifier: 39:FA:6D:A1:DC:D7:66:E4:B3:FA:05:7E:0F:DA:06:88:8F:37:1C:61
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 0199C457BD1FFC3B68D1BAB22423D8DCBF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
Manifest number: 08F2
Signing time: Wed 08 Oct 2025 15:01:48 +0000
Manifest this update: Wed 08 Oct 2025 15:01:48 +0000
Manifest next update: Thu 09 Oct 2025 15:01:48 +0000
Files and hashes: 1: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: y8EWPxwxAGRGfQDzxUH50NF0XEu6l6YVURE1e76DDb8=)
2: QLu-t4-kWwjTWD2HUVQ3JUjA93E.roa (hash: wwPcnLN7UsFWJVqWb0xH9PzsYRh1MZUdzN16ZynKLqU=)
3: X9-z3qhXpej4BCNHXlOlwIoxiSI.roa (hash: +XeMFApgKN+wHjuGvI8Wb1xE1s+7UuhIUkYxW35SfdA=)
4: hwkpF7GCiN1Fi1Bf-G_kcCT7lXg.roa (hash: owUDYc5hXMNAaSpXWFyOh6YRLado21xVEXGeqVIdneY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:57:bd:1f:fc:3b:68:d1:ba:b2:24:23:d8:dc:bf:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Oct 8 15:01:48 2025 GMT
Not After : Oct 9 15:01:48 2025 GMT
Subject: CN=39fa6da1dcd766e4b3fa057e0fda06888f371c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:12:eb:7b:6a:41:e8:21:37:34:d6:c1:52:f6:
37:13:e0:ca:f0:52:9f:e7:aa:f1:46:40:fb:20:ac:
ac:38:8f:fb:d4:93:14:3a:bf:28:23:d7:1b:2d:cc:
56:c1:51:ac:eb:e5:d9:27:61:ba:de:e7:d2:8c:f1:
a1:5c:cf:7c:11:02:46:1b:2f:09:a5:83:d5:74:9d:
20:e1:fb:03:25:23:f4:be:38:a3:42:98:00:8e:fb:
bb:dc:ad:5b:ff:21:d5:1a:e9:6f:9c:1d:16:d6:89:
ef:f1:8d:d0:3f:06:26:0e:e8:f5:9a:7a:72:b0:d7:
f8:fa:c0:03:a0:08:96:33:c0:32:0d:ae:84:05:c7:
e5:30:13:fd:2c:f1:76:61:28:80:af:07:bd:1b:8d:
7d:d8:e2:07:68:9e:6d:04:88:47:54:be:e5:0e:d7:
17:dc:3c:ab:52:ca:d7:31:7f:77:de:bd:07:0d:9a:
40:00:e9:85:d2:8d:a9:fe:03:06:19:f6:90:bb:e5:
fa:ff:eb:e1:52:3d:63:5c:de:21:e1:3c:72:58:95:
46:39:ca:7d:17:e1:8c:83:0b:d9:ce:b5:8e:ea:61:
c1:89:63:89:e1:7b:d9:f4:14:98:90:d4:69:23:69:
0f:49:73:1e:2d:4f:8a:d3:52:3a:83:af:82:68:8a:
ea:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FA:6D:A1:DC:D7:66:E4:B3:FA:05:7E:0F:DA:06:88:8F:37:1C:61
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7b:b3:d6:f2:1f:80:27:e5:27:47:47:31:8b:9f:b4:e8:83:
76:0a:9c:82:12:68:5b:59:7f:81:d1:46:85:94:42:9a:ea:44:
5d:29:b1:81:12:0b:62:2e:69:6e:4d:90:b3:b1:97:a8:7b:08:
39:fa:ec:14:97:e1:b0:3a:c3:3d:e8:64:c6:f8:56:0e:50:57:
20:75:7f:a9:d5:94:9f:93:83:8e:d5:a8:bb:64:75:24:d4:8b:
b6:9b:35:20:0e:89:34:0f:8d:4d:42:bb:fa:29:73:c8:9b:3b:
bf:44:b5:f1:96:e5:1c:9b:3d:26:3f:3a:b3:4a:12:2c:bb:b8:
bd:7d:27:e1:2b:d0:3f:a1:e7:86:74:8e:5b:2e:c5:ad:a5:82:
15:a0:be:f5:4a:e1:ea:6c:67:98:ca:48:6a:c5:1c:42:1b:dc:
e7:aa:64:6b:59:d6:38:45:37:1c:c0:8d:69:13:b9:6d:c8:e7:
b9:50:2d:4e:45:93:b1:5f:aa:48:86:b2:99:4d:b4:6e:46:1e:
5a:82:31:66:47:1c:6b:1a:bc:c8:fc:f3:1e:65:62:37:0e:c4:
85:b9:2d:0a:2a:d4:d2:4a:dd:82:58:d3:f4:82:31:69:c8:93:
06:a0:1d:74:ce:16:cb:e9:db:bf:9b:04:9f:53:bb:55:c4:81:
60:92:1e:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnEV70f/Dto0bqyJCPY3L8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMDQyOWI1YWVjYWM4MzY0NTQ0YmY2MjNmOTRmMTYzYWZk
Y2U1NjEwHhcNMjUxMDA4MTUwMTQ4WhcNMjUxMDA5MTUwMTQ4WjAzMTEwLwYDVQQD
EygzOWZhNmRhMWRjZDc2NmU0YjNmYTA1N2UwZmRhMDY4ODhmMzcxYzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxLre2pB6CE3NNbBUvY3E+DK8FKf
56rxRkD7IKysOI/71JMUOr8oI9cbLcxWwVGs6+XZJ2G63ufSjPGhXM98EQJGGy8J
pYPVdJ0g4fsDJSP0vjijQpgAjvu73K1b/yHVGulvnB0W1onv8Y3QPwYmDuj1mnpy
sNf4+sADoAiWM8AyDa6EBcflMBP9LPF2YSiArwe9G4192OIHaJ5tBIhHVL7lDtcX
3DyrUsrXMX933r0HDZpAAOmF0o2p/gMGGfaQu+X6/+vhUj1jXN4h4TxyWJVGOcp9
F+GMgwvZzrWO6mHBiWOJ4XvZ9BSYkNRpI2kPSXMeLU+K01I6g6+CaIrqgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDn6baHc12bks/oFfg/aBoiPNxxhMB8GA1UdIwQY
MBaAFDoEKbWuysg2RUS/Yj+U8WOv3OVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEt
ODQ3MTJjOWYzNDY0LzEvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEtODQ3MTJjOWYzNDY0
LzEvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXuz1vIf
gCflJ0dHMYuftOiDdgqcghJoW1l/gdFGhZRCmupEXSmxgRILYi5pbk2Qs7GXqHsI
OfrsFJfhsDrDPehkxvhWDlBXIHV/qdWUn5ODjtWou2R1JNSLtps1IA6JNA+NTUK7
+ilzyJs7v0S18ZblHJs9Jj86s0oSLLu4vX0n4SvQP6HnhnSOWy7FraWCFaC+9Urh
6mxnmMpIasUcQhvc56pka1nWOEU3HMCNaRO5bcjnuVAtTkWTsV+qSIaymU20bkYe
WoIxZkccaxq8yPzzHmViNw7EhbktCirU0krdgljT9IIxaciTBqAddM4Wy+nbv5sE
n1O7VcSBYJIecw==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:21:57 2025 by rpki-client