Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
File: OQW37By46JWiW9SsZ7wxZmFdi2I.mft (raw, json)
Hash identifier: rNPMZjB3S/BixOedggbtltTZTiJfqShEhPxJIzPIzBI=
Subject key identifier: 1E:06:80:AC:DF:21:8C:4A:6D:28:53:F5:1E:C8:9E:56:CA:30:70:A9
Authority key identifier: 39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
Certificate issuer: /CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Certificate serial: 019916880358445193231750FECCCDF05D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
Manifest number: 074F
Signing time: Thu 04 Sep 2025 21:00:36 +0000
Manifest this update: Thu 04 Sep 2025 21:00:36 +0000
Manifest next update: Fri 05 Sep 2025 21:00:36 +0000
Files and hashes: 1: GzEFY4FMaNIn9ALjdEIyqJJseSE.roa (hash: A0TZx6QvZikNrmKwA+Q10TiJHkrQxZ4XZGZdjheoj80=)
2: OQW37By46JWiW9SsZ7wxZmFdi2I.crl (hash: QRptlTipidMChbz7W3cwq/ZiDvhG5N5LfWzj91wD3gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:03:58:44:51:93:23:17:50:fe:cc:cd:f0:5d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Validity
Not Before: Sep 4 21:00:36 2025 GMT
Not After : Sep 5 21:00:36 2025 GMT
Subject: CN=1e0680acdf218c4a6d2853f51ec89e56ca3070a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:29:27:b0:6f:09:b6:a0:8b:ce:b8:fb:8d:f7:
94:e6:79:17:94:7d:44:a4:75:4a:08:20:9b:91:7f:
36:70:9f:9d:4e:f8:85:53:1f:cc:de:35:33:86:3a:
37:ad:0f:bc:2a:86:44:4e:11:3b:12:eb:61:9d:c7:
c6:67:3e:10:c2:ff:ee:f7:e0:27:33:b2:89:e1:19:
06:e8:54:6e:33:43:1e:59:06:5b:63:d6:0a:81:b5:
61:d1:54:f7:d3:8d:7b:ab:f6:44:5e:49:4f:78:4f:
e8:46:5a:a4:38:0f:23:96:2f:44:a7:ac:85:55:61:
96:21:8c:20:81:14:88:41:28:dc:25:b5:39:9a:58:
7b:f5:3e:5d:9c:f1:b5:ec:5a:c5:f5:a1:9f:dd:7e:
68:77:3a:e3:2a:80:a8:de:62:d6:e0:59:7f:57:d0:
9f:ea:3e:86:ed:1e:db:ca:9e:41:a9:3a:bf:39:71:
6a:c9:ab:58:4c:66:df:15:6c:0b:b3:05:fc:61:28:
5a:9d:88:cf:ec:0d:8d:6e:e8:65:94:7e:ec:05:21:
20:69:bf:e5:5b:78:6c:f8:d2:ef:88:93:2f:18:65:
a7:41:99:91:36:bf:f9:66:de:13:a9:c9:94:91:47:
47:97:e1:4b:43:cd:1b:87:35:9c:2f:35:ab:e5:f5:
fb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:06:80:AC:DF:21:8C:4A:6D:28:53:F5:1E:C8:9E:56:CA:30:70:A9
X509v3 Authority Key Identifier:
keyid:39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7c:2f:38:ec:c9:24:ed:d7:c2:b9:61:21:68:8d:b0:ad:2a:
d2:df:6c:ad:92:fc:35:e2:8b:09:cf:1d:ce:55:c6:7b:8f:e9:
8d:e9:26:3e:d4:4f:f3:7e:b3:41:6d:36:97:ca:94:d1:3f:80:
34:37:4d:d7:dc:77:0b:75:4b:60:37:66:95:f3:5d:36:23:0f:
dc:ff:84:30:fb:f0:38:77:c4:c1:5c:2d:d9:ba:7e:d3:e9:98:
4c:6f:12:6c:02:bb:e7:6e:5e:55:07:89:a7:94:c1:53:07:d1:
52:00:77:98:50:9d:70:ac:a1:23:52:68:0e:c9:75:55:07:4b:
2d:66:08:13:81:c2:44:23:4a:27:82:10:2d:f1:d5:af:12:b2:
5d:8b:8c:6a:70:e7:7f:dd:f0:85:a6:bb:61:f2:2f:65:69:5a:
dc:74:17:91:33:c2:14:8b:c7:b7:54:cb:21:19:65:c5:b2:5e:
1d:83:04:93:6f:5e:2d:b7:e8:86:f2:aa:fc:a6:5a:40:ec:90:
44:2c:df:09:91:d3:eb:e3:0c:10:4e:71:ef:ab:f9:4d:a6:48:
19:d2:31:f6:e1:5c:a1:2d:69:e8:79:51:b1:eb:ff:4f:e8:b8:
84:4b:a7:41:d9:d2:af:3d:91:7c:ee:66:cc:6a:98:04:9f:bd:
c9:f3:19:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkWiANYRFGTIxdQ/szN8F0+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MDViN2VjMWNiOGU4OTVhMjViZDRhYzY3YmMzMTY2NjE1
ZDhiNjIwHhcNMjUwOTA0MjEwMDM2WhcNMjUwOTA1MjEwMDM2WjAzMTEwLwYDVQQD
EygxZTA2ODBhY2RmMjE4YzRhNmQyODUzZjUxZWM4OWU1NmNhMzA3MGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iknsG8JtqCLzrj7jfeU5nkXlH1E
pHVKCCCbkX82cJ+dTviFUx/M3jUzhjo3rQ+8KoZEThE7EuthncfGZz4Qwv/u9+An
M7KJ4RkG6FRuM0MeWQZbY9YKgbVh0VT30417q/ZEXklPeE/oRlqkOA8jli9Ep6yF
VWGWIYwggRSIQSjcJbU5mlh79T5dnPG17FrF9aGf3X5odzrjKoCo3mLW4Fl/V9Cf
6j6G7R7byp5BqTq/OXFqyatYTGbfFWwLswX8YShanYjP7A2NbuhllH7sBSEgab/l
W3hs+NLviJMvGGWnQZmRNr/5Zt4TqcmUkUdHl+FLQ80bhzWcLzWr5fX7bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4GgKzfIYxKbShT9R7InlbKMHCpMB8GA1UdIwQY
MBaAFDkFt+wcuOiVolvUrGe8MWZhXYtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1FXMzdCeTQ2SldpVzlTc1o3d3habUZkaTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80ZTZiNDMtMTNkNy00ZDNiLTkyZWQt
ZDlhZWJlNDNlZjQyLzEvT1FXMzdCeTQ2SldpVzlTc1o3d3habUZkaTJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80ZTZiNDMtMTNkNy00ZDNiLTkyZWQtZDlhZWJlNDNlZjQy
LzEvT1FXMzdCeTQ2SldpVzlTc1o3d3habUZkaTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoHwvOOzJ
JO3XwrlhIWiNsK0q0t9srZL8NeKLCc8dzlXGe4/pjekmPtRP836zQW02l8qU0T+A
NDdN19x3C3VLYDdmlfNdNiMP3P+EMPvwOHfEwVwt2bp+0+mYTG8SbAK7525eVQeJ
p5TBUwfRUgB3mFCdcKyhI1JoDsl1VQdLLWYIE4HCRCNKJ4IQLfHVrxKyXYuManDn
f93whaa7YfIvZWla3HQXkTPCFIvHt1TLIRllxbJeHYMEk29eLbfohvKq/KZaQOyQ
RCzfCZHT6+MMEE5x76v5TaZIGdIx9uFcoS1p6HlRsev/T+i4hEunQdnSrz2RfO5m
zGqYBJ+9yfMZHA==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:17 2025 by rpki-client