Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
File: OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft (raw, json)
Hash identifier: 5nTFijWfQE5B+HBUHBa7tOTpX8u+x8otSPT1KRwYE4c=
Subject key identifier: 37:45:3E:59:44:E7:1C:D1:39:BB:F5:B4:D1:54:5B:A7:5C:3D:44:A1
Authority key identifier: 39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1
Certificate issuer: /CN=398e539bcc5e934624344d884f622993b1ee9aa1
Certificate serial: 019A7112E00D30997ABB18E7BAA07040C0DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
Manifest number: 056D
Signing time: Tue 11 Nov 2025 04:00:53 +0000
Manifest this update: Tue 11 Nov 2025 04:00:53 +0000
Manifest next update: Wed 12 Nov 2025 04:00:53 +0000
Files and hashes: 1: OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl (hash: /Tl8p6n+2k/ayroGBgpDwlb0z/Gf6HxpB7SlUaASJQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e0:0d:30:99:7a:bb:18:e7:ba:a0:70:40:c0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398e539bcc5e934624344d884f622993b1ee9aa1
Validity
Not Before: Nov 11 04:00:53 2025 GMT
Not After : Nov 12 04:00:53 2025 GMT
Subject: CN=37453e5944e71cd139bbf5b4d1545ba75c3d44a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:e8:17:03:38:bc:71:f1:8d:6f:ae:7e:57:
63:96:89:17:cf:df:59:33:13:c4:30:41:fd:ff:42:
c5:c0:19:29:01:d7:01:9c:d9:ba:e2:19:92:70:e9:
47:5f:08:ad:a1:2a:34:cf:48:82:4a:6c:67:01:de:
20:86:71:88:d9:0c:ac:29:88:78:06:f1:76:75:2a:
37:2f:66:a7:20:74:d4:30:e1:f7:bf:bc:06:75:42:
bb:b5:2e:1c:d2:0c:45:f9:a3:d4:78:fd:e2:8e:e8:
38:bf:66:54:f4:f8:06:07:38:19:54:d4:78:dc:03:
49:60:bc:6b:28:2e:24:53:9d:63:7f:70:81:d9:4d:
0d:7c:11:08:82:79:5e:2e:64:de:83:a5:0c:99:3f:
de:7d:a8:00:4e:60:60:88:9e:ae:40:25:70:04:f1:
f6:f7:15:6d:de:0a:28:f1:1a:29:69:a6:a2:dd:f8:
dd:f4:aa:e0:63:fd:2d:f3:7f:87:40:68:47:4f:19:
04:8a:6c:f2:74:8b:fa:df:b1:8d:1f:2f:8b:d1:bf:
94:86:2c:bf:4d:83:08:29:51:97:22:ab:d9:c8:01:
2b:a2:3d:7f:9e:50:c2:21:36:a3:33:60:5a:ed:59:
6f:eb:93:b7:12:52:d7:ce:21:cc:31:8f:76:d8:78:
ae:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:45:3E:59:44:E7:1C:D1:39:BB:F5:B4:D1:54:5B:A7:5C:3D:44:A1
X509v3 Authority Key Identifier:
keyid:39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8c:9f:27:7b:7c:81:32:df:93:e2:21:6e:ed:27:7d:95:a5:
57:ba:03:ef:39:ed:32:b9:eb:49:9b:d3:7e:30:67:5f:14:db:
1e:b7:ee:f9:0d:4a:56:2d:a8:3e:46:b9:60:dc:89:85:f1:8b:
a0:81:f7:49:69:3d:58:bb:73:e3:5f:19:89:97:a5:18:15:39:
88:32:02:59:2f:01:2c:2f:81:ed:0f:b1:a6:43:33:43:16:54:
64:c3:75:0b:e8:f7:a7:5a:bf:b4:da:3e:85:0f:4b:76:cc:3e:
58:75:10:e3:05:88:a2:ad:8a:ea:a1:1e:18:66:56:e3:3c:6b:
05:62:21:0b:f6:4d:57:5a:30:d0:f0:7f:cd:41:a4:72:ff:e3:
cd:8e:55:bc:3c:3b:9a:7f:fb:37:af:8c:0b:54:0d:56:54:56:
1c:42:41:9c:1a:d6:f7:00:70:69:5e:40:58:20:ee:80:aa:d4:
58:3b:a6:40:15:6e:71:c9:e3:e0:76:93:bc:df:ba:7a:52:50:
43:1f:92:74:e8:54:3d:f5:85:d6:11:18:bd:68:92:8c:76:af:
88:c8:d2:a4:2f:7a:51:79:eb:97:63:a5:05:b3:c8:46:2f:dd:
55:be:f3:9b:ee:4d:fe:f3:42:5e:e7:85:25:46:20:c9:8d:c9:
ae:68:c4:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEuANMJl6uxjnuqBwQMDeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5OGU1MzliY2M1ZTkzNDYyNDM0NGQ4ODRmNjIyOTkzYjFl
ZTlhYTEwHhcNMjUxMTExMDQwMDUzWhcNMjUxMTEyMDQwMDUzWjAzMTEwLwYDVQQD
EygzNzQ1M2U1OTQ0ZTcxY2QxMzliYmY1YjRkMTU0NWJhNzVjM2Q0NGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0LoFwM4vHHxjW+ufldjlokXz99Z
MxPEMEH9/0LFwBkpAdcBnNm64hmScOlHXwitoSo0z0iCSmxnAd4ghnGI2QysKYh4
BvF2dSo3L2anIHTUMOH3v7wGdUK7tS4c0gxF+aPUeP3ijug4v2ZU9PgGBzgZVNR4
3ANJYLxrKC4kU51jf3CB2U0NfBEIgnleLmTeg6UMmT/efagATmBgiJ6uQCVwBPH2
9xVt3goo8Ropaaai3fjd9KrgY/0t83+HQGhHTxkEimzydIv637GNHy+L0b+Uhiy/
TYMIKVGXIqvZyAEroj1/nlDCITajM2Ba7Vlv65O3ElLXziHMMY922HiuUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdFPllE5xzRObv1tNFUW6dcPUShMB8GA1UdIwQY
MBaAFDmOU5vMXpNGJDRNiE9iKZOx7pqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1k1VG04eGVrMFlrTkUySVQySXBrN0h1bXFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wMTQ1MjYtZGEzMS00N2M1LTlhNWMt
OWQ4NjUyOGRhMDk5LzEvT1k1VG04eGVrMFlrTkUySVQySXBrN0h1bXFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wMTQ1MjYtZGEzMS00N2M1LTlhNWMtOWQ4NjUyOGRhMDk5
LzEvT1k1VG04eGVrMFlrTkUySVQySXBrN0h1bXFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYyfJ3t8
gTLfk+Ihbu0nfZWlV7oD7zntMrnrSZvTfjBnXxTbHrfu+Q1KVi2oPka5YNyJhfGL
oIH3SWk9WLtz418ZiZelGBU5iDICWS8BLC+B7Q+xpkMzQxZUZMN1C+j3p1q/tNo+
hQ9Ldsw+WHUQ4wWIoq2K6qEeGGZW4zxrBWIhC/ZNV1ow0PB/zUGkcv/jzY5VvDw7
mn/7N6+MC1QNVlRWHEJBnBrW9wBwaV5AWCDugKrUWDumQBVuccnj4HaTvN+6elJQ
Qx+SdOhUPfWF1hEYvWiSjHaviMjSpC96UXnrl2OlBbPIRi/dVb7zm+5N/vNCXueF
JUYgyY3JrmjEkg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:07 2025 by rpki-client