Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
File: oE_JgO38R54EauArEOVyRbuSyLc.mft (raw, json)
Hash identifier: DivhEh1waOimnEdXgoX2TcEp0c46GHbEt8IH8imE04w=
Subject key identifier: B8:DC:AA:DE:FC:74:25:79:72:2F:0A:8C:AF:0F:D4:21:FB:65:DE:40
Authority key identifier: A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
Certificate issuer: /CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Certificate serial: 019A706DD87514339A875FA858B112ABCAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
Manifest number: 071F
Signing time: Tue 11 Nov 2025 01:00:38 +0000
Manifest this update: Tue 11 Nov 2025 01:00:38 +0000
Manifest next update: Wed 12 Nov 2025 01:00:38 +0000
Files and hashes: 1: oE_JgO38R54EauArEOVyRbuSyLc.crl (hash: drpeYyEGir5z/YJ40LY/HGlgCcwzD5BbF52hEKfaNGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:d8:75:14:33:9a:87:5f:a8:58:b1:12:ab:ca:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Validity
Not Before: Nov 11 01:00:38 2025 GMT
Not After : Nov 12 01:00:38 2025 GMT
Subject: CN=b8dcaadefc742579722f0a8caf0fd421fb65de40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:53:1c:45:e5:6c:a4:f5:8f:de:05:d3:e9:
02:d6:1d:af:a6:a2:f5:03:ef:40:0d:07:79:f0:55:
64:28:03:aa:c8:16:f5:86:29:90:bc:15:15:a9:34:
b1:22:83:18:40:7a:24:d2:5e:6b:1c:dd:9a:93:66:
d1:96:cb:1c:4c:35:a3:90:4f:f7:3a:e1:23:04:97:
46:8a:37:ce:2b:9f:53:b6:b7:db:a8:66:7d:33:df:
28:59:ce:38:b8:3c:7f:23:51:fe:8b:7a:2e:75:f0:
7a:25:62:e9:11:17:18:0c:09:51:37:ae:7a:ed:5f:
8e:bf:07:45:78:e5:71:fb:75:86:46:4a:a2:78:81:
06:dc:9c:18:87:65:ce:e4:82:51:1c:cd:87:22:0e:
36:05:3c:7c:05:b8:db:46:74:1e:f5:dd:d9:8b:58:
c4:15:5f:5e:9f:c5:ef:06:33:ce:4f:c4:10:87:58:
e7:4b:a0:18:88:d3:2a:b8:1e:2a:54:86:30:cc:c4:
97:1e:c7:8e:c0:0d:ba:ac:ec:f2:bf:8a:56:d6:3e:
f0:e0:2e:99:fd:ca:92:b9:fc:8f:3f:1e:bf:99:5f:
49:34:0d:75:7c:99:96:69:74:2e:f3:99:5c:11:e2:
89:fa:47:19:8c:49:46:f2:fe:25:89:f2:d0:05:1a:
c2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DC:AA:DE:FC:74:25:79:72:2F:0A:8C:AF:0F:D4:21:FB:65:DE:40
X509v3 Authority Key Identifier:
keyid:A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0b:e9:66:ec:ce:2a:f7:a0:3f:f6:11:91:4b:33:f9:09:51:
e9:16:59:fd:cc:ce:d1:4f:47:a9:7a:e4:ce:21:20:4d:16:06:
11:5a:6a:e1:5d:66:6b:f4:c5:7e:03:2e:c3:95:fa:d4:0c:3b:
89:47:fc:af:14:54:26:53:a9:40:6f:39:59:d4:ce:05:9b:c3:
d8:9d:e0:61:85:15:bb:14:5b:45:cd:b2:7c:db:ce:a9:56:1a:
5e:b6:85:fa:cd:0e:be:04:26:b6:77:20:c0:f9:f0:94:f8:73:
6e:81:6f:79:9b:2e:0d:8f:f0:bd:1b:99:47:53:14:2c:61:2a:
3f:17:56:07:e9:00:1f:10:56:02:13:f1:da:c9:6d:73:28:80:
27:29:21:29:76:ee:70:d4:6c:fd:5d:e3:78:e1:47:e5:b4:64:
2e:d2:dd:50:89:b3:a0:e9:95:28:3d:c0:33:47:c8:c2:a1:a4:
cb:5e:d7:43:ee:b0:c8:29:89:e4:1f:18:c9:df:2e:c5:6b:e7:
55:ce:b5:61:4c:a1:1d:49:e9:d6:7f:26:e7:05:00:f3:d6:ab:
c8:1f:f8:0c:20:f3:c0:e2:7c:ea:e1:19:65:b6:07:3b:0c:97:
50:f9:78:7f:c7:b9:3b:9b:a1:95:6b:bc:02:52:83:77:c6:f2:
93:8d:aa:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbdh1FDOah1+oWLESq8qlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNGZjOTgwZWRmYzQ3OWUwNDZhZTAyYjEwZTU3MjQ1YmI5
MmM4YjcwHhcNMjUxMTExMDEwMDM4WhcNMjUxMTEyMDEwMDM4WjAzMTEwLwYDVQQD
EyhiOGRjYWFkZWZjNzQyNTc5NzIyZjBhOGNhZjBmZDQyMWZiNjVkZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne9THEXlbKT1j94F0+kC1h2vpqL1
A+9ADQd58FVkKAOqyBb1himQvBUVqTSxIoMYQHok0l5rHN2ak2bRlsscTDWjkE/3
OuEjBJdGijfOK59TtrfbqGZ9M98oWc44uDx/I1H+i3oudfB6JWLpERcYDAlRN656
7V+OvwdFeOVx+3WGRkqieIEG3JwYh2XO5IJRHM2HIg42BTx8BbjbRnQe9d3Zi1jE
FV9en8XvBjPOT8QQh1jnS6AYiNMquB4qVIYwzMSXHseOwA26rOzyv4pW1j7w4C6Z
/cqSufyPPx6/mV9JNA11fJmWaXQu85lcEeKJ+kcZjElG8v4lifLQBRrCEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjcqt78dCV5ci8KjK8P1CH7Zd5AMB8GA1UdIwQY
MBaAFKBPyYDt/EeeBGrgKxDlckW7ksi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNTVkZjEtMGJhNi00MzBmLTgwOWQt
NmIwMzVjZWUxOTgxLzEvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNTVkZjEtMGJhNi00MzBmLTgwOWQtNmIwMzVjZWUxOTgx
LzEvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAvpZuzO
KvegP/YRkUsz+QlR6RZZ/czO0U9HqXrkziEgTRYGEVpq4V1ma/TFfgMuw5X61Aw7
iUf8rxRUJlOpQG85WdTOBZvD2J3gYYUVuxRbRc2yfNvOqVYaXraF+s0OvgQmtncg
wPnwlPhzboFveZsuDY/wvRuZR1MULGEqPxdWB+kAHxBWAhPx2sltcyiAJykhKXbu
cNRs/V3jeOFH5bRkLtLdUImzoOmVKD3AM0fIwqGky17XQ+6wyCmJ5B8Yyd8uxWvn
Vc61YUyhHUnp1n8m5wUA89aryB/4DCDzwOJ86uEZZbYHOwyXUPl4f8e5O5uhlWu8
AlKDd8byk42qdQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:36 2025 by rpki-client