Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
File: OUiGnOVLnTsvPjmu4snI6xnLWw8.mft (raw, json)
Hash identifier: iOPpoXpdLteuGMFWJu1xIVjyeC03As+mqilYF7+W62s=
Subject key identifier: 39:9F:FE:49:D0:7B:48:8A:21:39:AA:AB:D5:31:C0:30:B6:2D:48:64
Authority key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
Certificate issuer: /CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Certificate serial: 0199221E24EC779BF8A43C6BB6FD0C871E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 03:00:24 +0000
Manifest this update: Sun 07 Sep 2025 03:00:24 +0000
Manifest next update: Mon 08 Sep 2025 03:00:24 +0000
Files and hashes: 1: Jxs0meMKDCLBz_dVByd3J3wLTdc.roa (hash: ZCvr3TtSBPIKAQupwsVmwJ8f7SSejV5g4WH6kmkpM1s=)
2: OUiGnOVLnTsvPjmu4snI6xnLWw8.crl (hash: Hc7fEWGknM6IsNvRtS9RG17deVDSLQh6vLE3YCONTU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:24:ec:77:9b:f8:a4:3c:6b:b6:fd:0c:87:1e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Validity
Not Before: Sep 7 03:00:24 2025 GMT
Not After : Sep 8 03:00:24 2025 GMT
Subject: CN=399ffe49d07b488a2139aaabd531c030b62d4864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:36:6c:b8:e2:44:16:53:4f:47:4e:d0:1e:46:
c1:de:87:eb:57:1b:a7:89:54:cd:64:bf:43:fb:bc:
29:56:25:13:90:2f:94:ce:91:4c:fb:fe:3a:6e:29:
f0:0f:a3:89:a0:31:8e:13:44:4d:4e:29:90:3c:29:
53:0b:fa:75:5e:c3:88:24:7b:10:e1:ba:65:40:36:
2b:5a:e2:46:26:bc:bf:91:0c:f0:24:b3:35:ab:22:
21:0c:b4:81:d0:90:ec:a4:d9:7e:47:fe:03:51:15:
4b:4b:84:2b:04:11:88:e0:69:2c:40:e5:29:3f:71:
7e:ba:a9:44:20:76:1d:9b:9d:36:3c:fd:69:02:7b:
98:5d:7e:d7:31:4b:9e:4b:22:87:fc:1c:60:88:04:
de:23:7c:d7:a2:37:c6:e4:b9:e0:38:80:6b:86:75:
54:4b:7f:06:73:b4:47:ea:15:9a:cb:0e:12:b5:fc:
3f:cf:28:9b:28:16:8a:4c:b5:1d:02:46:d7:e7:32:
62:d5:27:18:04:99:61:f1:23:b5:e3:c5:6b:99:a1:
d3:fc:98:88:33:e2:a7:ba:98:0d:26:74:6f:2a:22:
d3:12:9d:e9:3d:45:c6:28:6e:3e:65:25:4e:6d:85:
db:96:46:9f:e6:53:de:20:23:ae:45:4e:01:0f:68:
ad:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9F:FE:49:D0:7B:48:8A:21:39:AA:AB:D5:31:C0:30:B6:2D:48:64
X509v3 Authority Key Identifier:
keyid:39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c8:16:9c:af:3a:4c:6e:f1:0b:a9:bf:91:e0:0e:f1:9a:fc:
e6:cd:3d:33:ec:8c:10:b3:71:80:9e:0b:56:e6:91:bc:75:29:
94:32:de:c6:35:99:b3:61:92:76:44:79:a5:34:8f:2a:f8:ae:
4d:e2:03:5d:1f:e7:6e:ff:19:f5:46:4e:3e:53:ed:c4:0e:26:
a4:98:2c:b5:1a:61:ea:16:c6:4b:1d:e4:cf:97:ee:eb:40:1b:
63:e3:9d:88:5b:50:9a:71:a8:67:80:16:3b:19:4f:9a:ff:13:
b9:e1:0d:50:4a:6c:bf:7b:7b:6f:eb:4b:e5:84:6e:23:f9:9a:
d7:09:f7:3f:3f:76:c0:d6:1e:7a:32:36:7d:36:7e:54:3d:a5:
52:be:cb:ff:ef:d2:fd:55:ce:0a:e6:af:5a:4e:3e:17:a4:37:
8a:b1:d1:9b:5d:b1:77:79:ee:7b:fa:ff:93:8a:20:8b:80:01:
6f:2d:18:72:d6:52:2e:91:e9:2f:d5:d7:34:1a:13:20:df:b0:
4d:0d:80:17:2e:88:a9:57:0b:5b:7a:06:e2:2d:6d:94:0f:5f:
c2:ee:f6:85:6e:af:b8:23:c1:74:fd:be:04:4c:19:b5:e6:a1:
ba:f2:c3:a9:7f:8d:1c:bd:8c:39:fc:42:49:95:08:f8:3e:86:
1c:c3:63:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHiTsd5v4pDxrtv0Mhx51MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NDg4NjljZTU0YjlkM2IyZjNlMzlhZWUyYzljOGViMTlj
YjViMGYwHhcNMjUwOTA3MDMwMDI0WhcNMjUwOTA4MDMwMDI0WjAzMTEwLwYDVQQD
EygzOTlmZmU0OWQwN2I0ODhhMjEzOWFhYWJkNTMxYzAzMGI2MmQ0ODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zZsuOJEFlNPR07QHkbB3ofrVxun
iVTNZL9D+7wpViUTkC+UzpFM+/46binwD6OJoDGOE0RNTimQPClTC/p1XsOIJHsQ
4bplQDYrWuJGJry/kQzwJLM1qyIhDLSB0JDspNl+R/4DURVLS4QrBBGI4GksQOUp
P3F+uqlEIHYdm502PP1pAnuYXX7XMUueSyKH/BxgiATeI3zXojfG5LngOIBrhnVU
S38Gc7RH6hWayw4Stfw/zyibKBaKTLUdAkbX5zJi1ScYBJlh8SO148VrmaHT/JiI
M+KnupgNJnRvKiLTEp3pPUXGKG4+ZSVObYXblkaf5lPeICOuRU4BD2itqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmf/knQe0iKITmqq9UxwDC2LUhkMB8GA1UdIwQY
MBaAFDlIhpzlS507Lz45ruLJyOsZy1sPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1VpR25PVkxuVHN2UGptdTRzbkk2eG5MV3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kZDAxODktNzk2OS00ZmQ1LTk3NDct
MjhiZGFiY2E3MGNiLzEvT1VpR25PVkxuVHN2UGptdTRzbkk2eG5MV3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kZDAxODktNzk2OS00ZmQ1LTk3NDctMjhiZGFiY2E3MGNi
LzEvT1VpR25PVkxuVHN2UGptdTRzbkk2eG5MV3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMgWnK86
TG7xC6m/keAO8Zr85s09M+yMELNxgJ4LVuaRvHUplDLexjWZs2GSdkR5pTSPKviu
TeIDXR/nbv8Z9UZOPlPtxA4mpJgstRph6hbGSx3kz5fu60AbY+OdiFtQmnGoZ4AW
OxlPmv8TueENUEpsv3t7b+tL5YRuI/ma1wn3Pz92wNYeejI2fTZ+VD2lUr7L/+/S
/VXOCuavWk4+F6Q3irHRm12xd3nue/r/k4ogi4ABby0YctZSLpHpL9XXNBoTIN+w
TQ2AFy6IqVcLW3oG4i1tlA9fwu72hW6vuCPBdP2+BEwZteahuvLDqX+NHL2MOfxC
SZUI+D6GHMNj+Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:40 2025 by rpki-client