Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json)
Hash identifier: VtYjBOrm5n0RIXz3dgbtpz6QkWuTu91Vn+HYPhWA/2k=
Subject key identifier: 94:08:CE:C1:FD:3E:B2:92:D0:D4:ED:18:89:00:44:D9:2D:59:3C:F6
Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Certificate serial: 019926A0387CA90DD7F608675EABC55989AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
Manifest number: 0D86
Signing time: Mon 08 Sep 2025 00:00:58 +0000
Manifest this update: Mon 08 Sep 2025 00:00:58 +0000
Manifest next update: Tue 09 Sep 2025 00:00:58 +0000
Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: z5Pd7cJEsOGif7AhlD07NDR/oI6Nh0pnsFQzr/r8Iks=)
2: Pq3PJBDygUjjz_TTAnDa5kWUA6s.roa (hash: wl7p1VcPhHxXGT78nGLW8yRi9KyIJcca4JW840Jj2X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:a0:38:7c:a9:0d:d7:f6:08:67:5e:ab:c5:59:89:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Validity
Not Before: Sep 8 00:00:58 2025 GMT
Not After : Sep 9 00:00:58 2025 GMT
Subject: CN=9408cec1fd3eb292d0d4ed18890044d92d593cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:88:c4:ee:af:cc:a9:6d:71:3a:b3:b0:6a:e7:
74:d1:2e:dc:f6:da:5d:63:7b:46:72:fe:1e:d3:cc:
d9:33:5a:87:82:c6:2b:ad:e1:e6:ff:24:40:8e:79:
f9:8b:07:ba:01:c4:c3:5a:8b:97:9b:71:b0:a2:f8:
38:50:16:84:df:e1:08:f9:a1:ca:55:76:29:f3:a8:
fe:e6:5f:89:d0:cd:47:4f:00:a0:77:f7:b5:e0:3e:
b9:26:9a:10:31:6f:6c:89:8d:82:db:a0:dd:c0:4d:
25:5d:8c:38:40:cc:d0:ae:d8:24:98:bc:92:51:81:
e8:9f:60:55:c3:89:38:35:66:68:34:21:3f:a4:5c:
21:28:93:d4:47:87:f1:fa:94:64:d7:7b:ac:85:09:
fa:06:45:7a:31:2e:d1:3c:91:70:a3:8b:0e:c8:0a:
7a:50:c1:f2:2a:1d:0f:77:cc:cd:19:ba:05:18:06:
26:1c:ff:3f:fc:01:1f:94:7f:13:fd:49:ea:3f:30:
2b:be:61:e5:a7:ed:aa:15:83:ab:eb:13:71:5e:b0:
71:ef:64:1d:74:0f:53:37:d9:92:5f:74:fd:db:74:
2d:c8:85:2a:7e:f5:58:c0:a4:9f:05:dc:5e:65:ee:
84:c6:1b:c0:0f:64:e3:07:07:03:87:3b:19:e5:43:
24:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:08:CE:C1:FD:3E:B2:92:D0:D4:ED:18:89:00:44:D9:2D:59:3C:F6
X509v3 Authority Key Identifier:
keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ca:78:a2:6b:ca:b4:06:96:9f:e7:54:f9:b9:d3:5b:f3:e3:
a0:44:3e:7b:f8:aa:ce:bb:c5:06:ae:1d:fa:41:f6:8a:ff:e0:
cb:79:3c:6e:18:88:60:18:f9:4b:6c:ee:d5:a1:44:42:8b:5e:
c7:00:d6:d8:32:e2:e8:b9:c5:fc:0c:13:9f:85:6a:6f:74:81:
85:9d:2e:2b:30:79:6e:b0:a3:66:13:8e:77:ec:a9:d7:37:31:
53:26:cf:89:7c:a7:c3:97:a0:19:ee:90:03:4b:af:1f:99:30:
5a:76:31:35:71:07:59:bb:a6:9e:46:fe:62:07:46:0c:a5:46:
b0:1d:d8:77:c6:e8:b5:90:e7:c7:47:69:09:82:fb:e5:a8:c3:
41:9f:97:fc:f4:bb:97:62:eb:8c:ad:66:6a:5f:0f:75:df:14:
e6:52:ec:8e:6c:ce:c9:5f:b5:19:21:32:ca:1e:3e:f5:6c:74:
28:74:16:96:4a:f3:2f:74:22:c0:38:74:fa:f4:19:11:95:d3:
6b:9c:a6:b2:3e:d5:58:11:7c:50:30:7a:7a:f9:56:12:4b:b2:
49:4f:a0:07:7b:e1:10:05:03:32:f1:3a:76:ea:15:d7:e9:ee:
7a:e8:6b:12:0b:9a:49:45:35:7b:3f:b8:64:00:91:9a:12:fc:
bd:e5:2d:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkmoDh8qQ3X9ghnXqvFWYmtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OWMxM2M2YjNjMWRjNmIyMjE1MDM1YTY0MmYxZWZiOWIw
MGRkZjUwHhcNMjUwOTA4MDAwMDU4WhcNMjUwOTA5MDAwMDU4WjAzMTEwLwYDVQQD
Eyg5NDA4Y2VjMWZkM2ViMjkyZDBkNGVkMTg4OTAwNDRkOTJkNTkzY2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ojE7q/MqW1xOrOwaud00S7c9tpd
Y3tGcv4e08zZM1qHgsYrreHm/yRAjnn5iwe6AcTDWouXm3Gwovg4UBaE3+EI+aHK
VXYp86j+5l+J0M1HTwCgd/e14D65JpoQMW9siY2C26DdwE0lXYw4QMzQrtgkmLyS
UYHon2BVw4k4NWZoNCE/pFwhKJPUR4fx+pRk13ushQn6BkV6MS7RPJFwo4sOyAp6
UMHyKh0Pd8zNGboFGAYmHP8//AEflH8T/UnqPzArvmHlp+2qFYOr6xNxXrBx72Qd
dA9TN9mSX3T923QtyIUqfvVYwKSfBdxeZe6ExhvAD2TjBwcDhzsZ5UMkEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQIzsH9PrKS0NTtGIkARNktWTz2MB8GA1UdIwQY
MBaAFDicE8azwdxrIhUDWmQvHvubAN31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84MGViMjEtYWYyMC00OGViLWEyZGMt
NjIxMGVhYjA1YjcwLzEvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC84MGViMjEtYWYyMC00OGViLWEyZGMtNjIxMGVhYjA1Yjcw
LzEvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcp4omvK
tAaWn+dU+bnTW/PjoEQ+e/iqzrvFBq4d+kH2iv/gy3k8bhiIYBj5S2zu1aFEQote
xwDW2DLi6LnF/AwTn4Vqb3SBhZ0uKzB5brCjZhOOd+yp1zcxUybPiXynw5egGe6Q
A0uvH5kwWnYxNXEHWbumnkb+YgdGDKVGsB3Yd8botZDnx0dpCYL75ajDQZ+X/PS7
l2LrjK1mal8Pdd8U5lLsjmzOyV+1GSEyyh4+9Wx0KHQWlkrzL3QiwDh0+vQZEZXT
a5ymsj7VWBF8UDB6evlWEkuySU+gB3vhEAUDMvE6duoV1+nueuhrEguaSUU1ez+4
ZACRmhL8veUtnA==
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:41:45 2025 by rpki-client