Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier: yNpaLh+G3g7I/vYtcmsyfRgq6c1ndinBrvr2U64F4aM=
Subject key identifier: 52:19:CF:A8:CE:C3:3B:B6:E2:8C:A6:FC:05:EF:D1:0D:28:0F:F2:70
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial: 01984A7812C2F85859B7E1DE44C81ECD55AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number: 0CF5
Signing time: Sun 27 Jul 2025 06:00:39 +0000
Manifest this update: Sun 27 Jul 2025 06:00:39 +0000
Manifest next update: Mon 28 Jul 2025 06:00:39 +0000
Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: CmgJoLWLZRBbd/Y+HuIU5KPPEcKxCuroT3AiR8O3E3I=)
2: dxC4OOVdD7y8lzmmwGYNpdpf-D0.roa (hash: 1F32hSGI4pbAFMDzlkPoS+O8tvJxdYgPLvmfvhN+IXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:12:c2:f8:58:59:b7:e1:de:44:c8:1e:cd:55:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Validity
Not Before: Jul 27 06:00:39 2025 GMT
Not After : Jul 28 06:00:39 2025 GMT
Subject: CN=5219cfa8cec33bb6e28ca6fc05efd10d280ff270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:88:f6:46:67:10:cf:b1:d8:06:6c:23:1e:60:
a5:5e:3e:81:f3:84:76:36:1a:cc:72:fc:cb:a3:35:
ff:55:3a:41:f4:16:ad:26:9c:7b:9a:72:28:91:c5:
b6:4b:ad:96:5f:cd:33:fc:ef:43:c7:88:8b:13:67:
ba:ce:5d:3c:4d:22:52:c5:f5:6d:5f:b6:82:70:29:
3a:f8:a5:aa:f2:61:2d:75:6e:28:02:02:b7:7c:3e:
74:89:b2:f9:99:f4:89:dc:10:4a:0f:e0:93:2d:ed:
6c:43:b8:e3:2a:0e:98:a9:17:08:96:5f:e3:d9:50:
b7:e5:a0:41:09:51:a9:aa:e9:37:dc:14:de:10:44:
93:43:5f:44:b3:15:2d:06:e9:4a:38:c1:74:08:3f:
ee:a2:47:76:69:4e:fc:38:c7:7a:4e:f8:d8:b6:b0:
63:3e:29:50:d9:79:0f:47:a2:ac:fd:3d:4c:9f:5a:
7e:cd:75:7b:02:41:4d:e3:23:98:23:52:73:53:43:
fc:95:b3:24:18:e3:18:5e:fb:c4:00:cc:2f:90:4c:
26:e2:0b:da:57:3a:99:3c:78:a4:fe:ec:8c:10:fb:
e6:3c:96:4e:89:4b:33:76:c6:5f:a1:8b:86:9c:17:
43:86:ec:81:36:01:3a:a8:66:d2:51:cf:16:19:03:
37:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:19:CF:A8:CE:C3:3B:B6:E2:8C:A6:FC:05:EF:D1:0D:28:0F:F2:70
X509v3 Authority Key Identifier:
keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c9:f7:c9:f9:24:99:32:90:d0:a4:9d:02:ff:cf:ca:d7:92:
81:b0:9c:4d:fd:42:af:3a:8c:60:85:cc:ad:a2:44:0e:56:bd:
d7:99:6a:f2:26:3c:11:02:5b:bc:04:25:b3:7e:b4:b4:40:7e:
24:54:92:79:9c:b1:5e:e6:7c:c3:3f:dc:33:e6:e3:95:e7:92:
da:86:66:4c:5f:ef:04:ff:a3:4d:9d:87:1b:a1:00:5d:47:6c:
c0:76:75:05:bd:7c:c8:1d:37:33:06:4a:d7:c0:57:8f:80:33:
2c:c1:57:dc:75:49:1b:6f:6a:ff:53:6f:a5:a7:bd:fc:73:a8:
fc:2a:f4:53:82:44:81:cf:7e:f9:3b:cc:bd:7a:bb:40:c7:09:
b5:54:86:5a:c2:32:c5:d5:ea:5e:bb:e3:0a:ec:42:88:1a:3f:
71:09:4e:93:ef:07:ed:fe:31:51:0a:53:6f:20:15:9a:2f:20:
6d:2d:ec:1c:30:25:30:ad:28:7f:8a:74:53:29:f8:d0:69:5d:
7f:ee:23:fe:fe:9f:35:9e:33:a5:04:03:4f:c3:2d:36:cc:fa:
eb:33:db:52:be:91:66:3a:fd:86:f1:fd:75:df:c1:93:82:5b:
9a:6a:1a:73:42:6a:47:20:c9:3c:7c:bc:b0:81:59:b6:96:fd:
89:bd:cc:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKeBLC+FhZt+HeRMgezVWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MjlkMTMxYmU1MjgxMGU0N2M5Y2JiZjgzYTNmZmJkNGY3
Y2JkYmYwHhcNMjUwNzI3MDYwMDM5WhcNMjUwNzI4MDYwMDM5WjAzMTEwLwYDVQQD
Eyg1MjE5Y2ZhOGNlYzMzYmI2ZTI4Y2E2ZmMwNWVmZDEwZDI4MGZmMjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Yj2RmcQz7HYBmwjHmClXj6B84R2
NhrMcvzLozX/VTpB9BatJpx7mnIokcW2S62WX80z/O9Dx4iLE2e6zl08TSJSxfVt
X7aCcCk6+KWq8mEtdW4oAgK3fD50ibL5mfSJ3BBKD+CTLe1sQ7jjKg6YqRcIll/j
2VC35aBBCVGpquk33BTeEESTQ19EsxUtBulKOMF0CD/uokd2aU78OMd6TvjYtrBj
PilQ2XkPR6Ks/T1Mn1p+zXV7AkFN4yOYI1JzU0P8lbMkGOMYXvvEAMwvkEwm4gva
VzqZPHik/uyMEPvmPJZOiUszdsZfoYuGnBdDhuyBNgE6qGbSUc8WGQM3uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIZz6jOwzu24oym/AXv0Q0oD/JwMB8GA1UdIwQY
MBaAFDgp0TG+UoEOR8nLv4Oj/71PfL2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYt
YjAzOGRiODk4YjdlLzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYtYjAzOGRiODk4Yjdl
LzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8n3yfkk
mTKQ0KSdAv/PyteSgbCcTf1CrzqMYIXMraJEDla915lq8iY8EQJbvAQls360tEB+
JFSSeZyxXuZ8wz/cM+bjleeS2oZmTF/vBP+jTZ2HG6EAXUdswHZ1Bb18yB03MwZK
18BXj4AzLMFX3HVJG29q/1Nvpae9/HOo/Cr0U4JEgc9++TvMvXq7QMcJtVSGWsIy
xdXqXrvjCuxCiBo/cQlOk+8H7f4xUQpTbyAVmi8gbS3sHDAlMK0of4p0Uyn40Gld
f+4j/v6fNZ4zpQQDT8MtNsz66zPbUr6RZjr9hvH9dd/Bk4Jbmmoac0JqRyDJPHy8
sIFZtpb9ib3MKw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:01:52 2025 by rpki-client