Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
File: ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft (raw, json)
Hash identifier: zi5A3czkjaX/atkQpqkYVCXl5oaiBPK2b2IwPS+41nw=
Subject key identifier: 85:D8:6F:D1:51:3E:79:8A:33:77:27:99:98:17:97:B4:1D:49:B6:20
Authority key identifier: A2:33:A6:AF:5F:68:84:32:87:9C:7E:0C:07:72:CD:DD:8F:17:6D:B5
Certificate issuer: /CN=a233a6af5f688432879c7e0c0772cddd8f176db5
Certificate serial: 019848C0B00354CB4FEE9326E74A3CA1C8BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 22:00:44 +0000
Manifest this update: Sat 26 Jul 2025 22:00:44 +0000
Manifest next update: Sun 27 Jul 2025 22:00:44 +0000
Files and hashes: 1: ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl (hash: lAt+GBA0vjm4OGjzIMMMzrvEjRftWVWyVS6IhKVZpU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:b0:03:54:cb:4f:ee:93:26:e7:4a:3c:a1:c8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a233a6af5f688432879c7e0c0772cddd8f176db5
Validity
Not Before: Jul 26 22:00:44 2025 GMT
Not After : Jul 27 22:00:44 2025 GMT
Subject: CN=85d86fd1513e798a33772799981797b41d49b620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8a:23:9d:3e:a0:c9:68:44:44:1f:61:48:ac:
83:8f:77:33:d4:91:cc:51:47:fb:e1:c4:2e:de:61:
eb:72:f7:2e:f1:2e:32:c4:9a:14:c4:7c:29:d1:19:
24:ad:ba:09:dc:c0:ea:14:8d:8b:ee:90:58:01:2a:
da:0e:f6:2e:0e:49:6e:4c:74:17:c9:4c:6d:3e:ac:
20:11:2a:e4:e4:94:2e:c0:ce:c9:09:c5:89:67:c3:
6c:28:dc:f3:d4:89:97:f1:2a:5a:d2:95:84:19:fc:
7b:0e:4c:fd:4d:b2:63:ac:97:df:2e:ee:34:2b:cb:
3d:c6:0a:2f:d0:23:5a:5c:54:92:b7:75:7c:71:d0:
0f:cd:0f:1a:86:be:f9:a5:a2:98:b9:6d:91:70:70:
20:b6:af:58:b3:c1:5c:eb:36:81:61:b4:7f:3a:9b:
e8:2d:78:a7:6b:0f:07:1f:bf:2f:b9:3a:a1:91:be:
93:32:28:39:b6:75:b6:d4:e7:a4:7d:66:df:da:36:
de:47:9b:6c:90:74:4d:17:b7:dd:8f:ca:05:18:b2:
65:29:47:68:f8:db:e3:7e:ec:d0:cc:2e:49:b1:4b:
79:56:1d:0e:bf:b8:7f:c4:dd:0e:98:3d:44:73:e4:
bc:0c:9c:31:d8:90:01:be:c4:cc:cb:ee:a9:af:9c:
44:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D8:6F:D1:51:3E:79:8A:33:77:27:99:98:17:97:B4:1D:49:B6:20
X509v3 Authority Key Identifier:
keyid:A2:33:A6:AF:5F:68:84:32:87:9C:7E:0C:07:72:CD:DD:8F:17:6D:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a3:1d:36:81:d3:0a:c9:79:13:4b:6e:3e:5d:01:8e:9b:cc:
c6:d4:2b:1c:76:5f:a4:af:7b:5d:ec:e3:cf:69:c3:6c:d2:42:
e4:00:b5:43:3e:10:81:02:81:a5:a9:54:17:1a:80:45:86:38:
8c:8c:9a:6c:5e:25:ee:19:99:60:5c:61:0e:39:62:76:3d:bb:
35:6d:96:c9:43:e9:a7:86:dc:c2:64:75:df:34:64:60:2c:3d:
32:dd:80:30:c1:71:8b:0c:71:3e:5b:68:b0:a6:12:51:f9:61:
66:32:94:ca:6f:20:74:1e:15:88:00:4b:97:de:62:dc:a0:47:
82:64:07:d7:c4:90:41:52:f6:ad:97:b4:66:86:42:89:f5:7d:
e3:84:79:41:dd:87:c7:4e:75:ec:cf:2e:c5:02:8f:55:05:6f:
5f:71:99:3d:70:9c:f1:d9:33:c3:b9:8b:f0:bc:1f:09:33:8c:
95:a7:41:24:ee:5f:2c:e0:77:17:d5:93:f0:f9:c2:59:4b:3f:
e1:ec:16:e4:77:10:94:2a:70:cd:31:56:19:ab:6d:52:8a:4e:
2a:2c:76:ba:1c:a0:cf:d3:02:60:58:22:b1:0b:6a:7f:fe:39:
3a:5b:8a:e1:18:0f:cf:6a:86:d0:3b:13:13:31:c4:ec:47:18:
26:87:cf:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwLADVMtP7pMm50o8oci6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMzNhNmFmNWY2ODg0MzI4NzljN2UwYzA3NzJjZGRkOGYx
NzZkYjUwHhcNMjUwNzI2MjIwMDQ0WhcNMjUwNzI3MjIwMDQ0WjAzMTEwLwYDVQQD
Eyg4NWQ4NmZkMTUxM2U3OThhMzM3NzI3OTk5ODE3OTdiNDFkNDliNjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YojnT6gyWhERB9hSKyDj3cz1JHM
UUf74cQu3mHrcvcu8S4yxJoUxHwp0RkkrboJ3MDqFI2L7pBYASraDvYuDkluTHQX
yUxtPqwgESrk5JQuwM7JCcWJZ8NsKNzz1ImX8Spa0pWEGfx7Dkz9TbJjrJffLu40
K8s9xgov0CNaXFSSt3V8cdAPzQ8ahr75paKYuW2RcHAgtq9Ys8Fc6zaBYbR/Opvo
LXinaw8HH78vuTqhkb6TMig5tnW21OekfWbf2jbeR5tskHRNF7fdj8oFGLJlKUdo
+NvjfuzQzC5JsUt5Vh0Ov7h/xN0OmD1Ec+S8DJwx2JABvsTMy+6pr5xE1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXYb9FRPnmKM3cnmZgXl7QdSbYgMB8GA1UdIwQY
MBaAFKIzpq9faIQyh5x+DAdyzd2PF221MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2pPbXIxOW9oREtIbkg0TUIzTE4zWThYYmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81NGQzOGUtYzkwYi00YjcxLWI3MWEt
M2U0MjQwNTY5NDhmLzEvb2pPbXIxOW9oREtIbkg0TUIzTE4zWThYYmJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC81NGQzOGUtYzkwYi00YjcxLWI3MWEtM2U0MjQwNTY5NDhm
LzEvb2pPbXIxOW9oREtIbkg0TUIzTE4zWThYYmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqMdNoHT
Csl5E0tuPl0BjpvMxtQrHHZfpK97Xezjz2nDbNJC5AC1Qz4QgQKBpalUFxqARYY4
jIyabF4l7hmZYFxhDjlidj27NW2WyUPpp4bcwmR13zRkYCw9Mt2AMMFxiwxxPlto
sKYSUflhZjKUym8gdB4ViABLl95i3KBHgmQH18SQQVL2rZe0ZoZCifV944R5Qd2H
x0517M8uxQKPVQVvX3GZPXCc8dkzw7mL8LwfCTOMladBJO5fLOB3F9WT8PnCWUs/
4ewW5HcQlCpwzTFWGattUopOKix2uhygz9MCYFgisQtqf/45OluK4RgPz2qG0DsT
EzHE7EcYJofP5g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:18:00 2025 by rpki-client