Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
File: oyHD8vYVgRDoDpLioyIdaVwnp9g.mft (raw, json)
Hash identifier: HdAKgdklf2c3CImZ54iUPT8kN7gYOuZd2xOekzknPaU=
Subject key identifier: 92:9A:6A:6D:3E:F8:A2:EA:E8:B3:38:DE:CA:32:4C:6B:A4:F2:D6:78
Authority key identifier: A3:21:C3:F2:F6:15:81:10:E8:0E:92:E2:A3:22:1D:69:5C:27:A7:D8
Certificate issuer: /CN=a321c3f2f6158110e80e92e2a3221d695c27a7d8
Certificate serial: 0199239F1088357348374A08B824D8ADB318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
Manifest number: 0F16
Signing time: Sun 07 Sep 2025 10:00:50 +0000
Manifest this update: Sun 07 Sep 2025 10:00:50 +0000
Manifest next update: Mon 08 Sep 2025 10:00:50 +0000
Files and hashes: 1: oyHD8vYVgRDoDpLioyIdaVwnp9g.crl (hash: BlbnPxs2wQNMjGKc+7hwL0gSI3M0kWZZpn+gqtLct+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:10:88:35:73:48:37:4a:08:b8:24:d8:ad:b3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a321c3f2f6158110e80e92e2a3221d695c27a7d8
Validity
Not Before: Sep 7 10:00:50 2025 GMT
Not After : Sep 8 10:00:50 2025 GMT
Subject: CN=929a6a6d3ef8a2eae8b338deca324c6ba4f2d678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:48:a5:34:f4:f3:ed:64:61:22:1c:02:c8:
e6:00:08:a2:82:0b:82:3a:f2:a1:5d:02:ed:53:8d:
b3:96:0b:7d:42:bd:80:8d:2d:82:bf:55:2a:5a:e7:
70:e0:97:d7:a0:06:51:ef:e2:67:c8:47:93:49:19:
f3:3a:5c:6c:20:48:01:fe:73:d0:8f:ed:de:ab:a1:
45:9e:de:7c:d4:00:9b:06:a5:38:7b:20:fb:78:63:
5b:ec:33:ca:07:47:31:3b:60:8a:71:c6:3c:b2:a6:
14:8a:c5:cf:4d:ec:a6:16:8a:c8:d5:14:b8:64:f9:
b3:a1:b0:42:17:2f:8d:9a:c1:82:66:fd:76:3b:59:
b1:b2:32:0e:98:9c:97:e9:32:08:14:5b:52:44:bc:
70:c9:55:c7:69:f9:1a:a0:88:35:7b:46:b7:5f:51:
4b:e4:98:19:5a:16:71:cb:8d:1b:a1:6f:8e:47:56:
d5:ff:29:92:11:ed:7b:17:ce:e6:46:fb:3d:5c:2c:
ca:e0:7d:39:d5:72:eb:cb:eb:32:7f:03:63:e2:95:
70:c9:50:d8:9d:64:59:19:2b:e3:39:60:d4:2c:73:
47:21:e4:54:62:96:12:27:8c:59:11:ce:f4:38:91:
c5:d9:d6:93:6d:27:87:5d:0b:d6:15:0b:f8:41:59:
01:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9A:6A:6D:3E:F8:A2:EA:E8:B3:38:DE:CA:32:4C:6B:A4:F2:D6:78
X509v3 Authority Key Identifier:
keyid:A3:21:C3:F2:F6:15:81:10:E8:0E:92:E2:A3:22:1D:69:5C:27:A7:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:7f:2d:74:26:52:fd:cf:c6:df:95:84:c0:3e:36:6b:09:aa:
5d:00:53:93:b0:9e:25:e2:2c:0e:14:bd:02:76:d9:80:d9:01:
0d:08:a0:fc:e0:13:bf:9a:02:81:37:74:2f:c3:c7:8f:e6:38:
fe:de:86:7b:74:7b:ac:f0:c4:98:6c:6b:d3:5b:f1:d9:93:e0:
20:b0:aa:b8:2a:17:de:26:3d:6b:81:69:9f:eb:7f:b2:02:e4:
fd:39:1c:5a:89:5d:5e:ac:fa:76:78:b2:d9:ec:33:92:a8:2a:
4b:24:1f:bb:8c:4d:fc:d0:6b:b1:38:d3:fb:b0:35:5d:88:d7:
05:7b:2f:f3:d9:77:0c:cf:3a:78:85:d3:2d:5f:df:ce:03:7a:
ed:84:cb:6e:98:fd:14:5e:0e:01:50:9f:7a:69:73:8b:fe:69:
18:11:d7:4b:29:4b:8f:83:08:4e:37:5b:f7:37:3d:a9:1e:08:
0a:12:c2:d1:58:51:c6:ee:d2:26:34:4e:79:12:67:0a:f7:7a:
ac:68:55:4a:47:be:ce:5e:80:b4:67:48:11:e0:3b:7e:af:e7:
38:29:3b:00:b1:8e:ae:a0:0d:e3:0a:e2:2f:2c:f9:07:6a:59:
81:36:04:5d:54:43:78:b3:3a:4e:aa:45:07:c4:ca:f1:2e:42:
2a:b4:40:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnxCINXNIN0oIuCTYrbMYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMjFjM2YyZjYxNTgxMTBlODBlOTJlMmEzMjIxZDY5NWMy
N2E3ZDgwHhcNMjUwOTA3MTAwMDUwWhcNMjUwOTA4MTAwMDUwWjAzMTEwLwYDVQQD
Eyg5MjlhNmE2ZDNlZjhhMmVhZThiMzM4ZGVjYTMyNGM2YmE0ZjJkNjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJxIpTT08+1kYSIcAsjmAAiigguC
OvKhXQLtU42zlgt9Qr2AjS2Cv1UqWudw4JfXoAZR7+JnyEeTSRnzOlxsIEgB/nPQ
j+3eq6FFnt581ACbBqU4eyD7eGNb7DPKB0cxO2CKccY8sqYUisXPTeymForI1RS4
ZPmzobBCFy+NmsGCZv12O1mxsjIOmJyX6TIIFFtSRLxwyVXHafkaoIg1e0a3X1FL
5JgZWhZxy40boW+OR1bV/ymSEe17F87mRvs9XCzK4H051XLry+syfwNj4pVwyVDY
nWRZGSvjOWDULHNHIeRUYpYSJ4xZEc70OJHF2daTbSeHXQvWFQv4QVkB6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKaam0++KLq6LM43soyTGuk8tZ4MB8GA1UdIwQY
MBaAFKMhw/L2FYEQ6A6S4qMiHWlcJ6fYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3lIRDh2WVZnUkRvRHBMaW95SWRhVnducDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83ZDNhNTUtY2NiNy00ZDBjLWJkMjYt
Y2ZmNDYxZTBkZjM0LzEvb3lIRDh2WVZnUkRvRHBMaW95SWRhVnducDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83ZDNhNTUtY2NiNy00ZDBjLWJkMjYtY2ZmNDYxZTBkZjM0
LzEvb3lIRDh2WVZnUkRvRHBMaW95SWRhVnducDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy38tdCZS
/c/G35WEwD42awmqXQBTk7CeJeIsDhS9AnbZgNkBDQig/OATv5oCgTd0L8PHj+Y4
/t6Ge3R7rPDEmGxr01vx2ZPgILCquCoX3iY9a4Fpn+t/sgLk/TkcWoldXqz6dniy
2ewzkqgqSyQfu4xN/NBrsTjT+7A1XYjXBXsv89l3DM86eIXTLV/fzgN67YTLbpj9
FF4OAVCfemlzi/5pGBHXSylLj4MITjdb9zc9qR4IChLC0VhRxu7SJjROeRJnCvd6
rGhVSke+zl6AtGdIEeA7fq/nOCk7ALGOrqAN4wriLyz5B2pZgTYEXVRDeLM6TqpF
B8TK8S5CKrRAnA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:53:47 2025 by rpki-client