Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
File: oIRWvGXLSxVanmtLMW3VFOBDG2k.mft (raw, json)
Hash identifier: xthBVUP5R9023vaTboEndpcArqWLge0Op8A21PpraUU=
Subject key identifier: 8C:2F:95:DC:0A:CA:FC:00:95:30:0B:24:34:7F:1E:28:E4:EB:A4:39
Authority key identifier: A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
Certificate issuer: /CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Certificate serial: 019A72CA3CF2DD583DB20FCF6EC7C733EEAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
Manifest number: 0FDE
Signing time: Tue 11 Nov 2025 12:00:47 +0000
Manifest this update: Tue 11 Nov 2025 12:00:47 +0000
Manifest next update: Wed 12 Nov 2025 12:00:47 +0000
Files and hashes: 1: oIRWvGXLSxVanmtLMW3VFOBDG2k.crl (hash: DCGFeQjjSrl0oZv0cLPPtv5i4GIhPQkiBQEcMxUuMDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:3c:f2:dd:58:3d:b2:0f:cf:6e:c7:c7:33:ee:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Validity
Not Before: Nov 11 12:00:47 2025 GMT
Not After : Nov 12 12:00:47 2025 GMT
Subject: CN=8c2f95dc0acafc0095300b24347f1e28e4eba439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:72:2f:4a:48:06:36:79:34:0d:09:12:d3:
b4:ca:c3:60:b3:2a:76:44:ab:04:ce:25:55:9f:06:
5d:35:3b:25:79:a5:b8:79:41:28:b5:5f:ec:93:d4:
50:7c:91:20:48:18:31:c7:75:09:7e:b1:70:47:10:
8b:ae:de:10:40:a3:71:9c:72:c0:e8:ea:37:04:79:
81:8c:bb:ae:96:fa:2e:78:71:fe:9e:33:06:3b:1f:
eb:ff:c1:0e:d9:18:4d:ed:7f:5b:7b:68:93:91:bf:
18:64:1b:38:c4:e6:12:cc:98:05:69:e2:9d:0f:2d:
83:bf:9c:02:58:c0:f5:34:c3:db:2d:8b:ff:dc:59:
92:89:8c:3a:c3:3c:c9:fe:40:0e:e6:9b:2e:0e:82:
ad:3b:d9:d4:bc:79:e1:d2:ca:d8:0a:8b:5b:be:d4:
fa:eb:e8:38:d2:6a:34:2f:2c:fa:ac:04:92:95:cf:
75:4f:19:5d:17:78:a2:dd:80:ea:d3:06:52:cf:31:
21:c4:f9:ad:63:f1:e4:e2:85:c0:c9:10:3f:e6:d9:
f7:d5:97:48:53:c6:c8:4c:b4:3b:d5:90:70:af:c8:
6e:2e:78:d4:2e:2b:8d:ec:13:eb:5e:c1:65:37:6c:
ea:98:f4:4c:6e:da:d3:1a:ad:06:63:97:17:ff:cb:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2F:95:DC:0A:CA:FC:00:95:30:0B:24:34:7F:1E:28:E4:EB:A4:39
X509v3 Authority Key Identifier:
keyid:A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fb:36:7e:4d:32:cb:1f:c8:76:ea:5e:a2:50:59:96:40:18:
68:57:dd:de:f9:90:28:00:49:44:f4:9b:86:5f:c6:53:19:cb:
f6:70:3f:92:01:a3:70:d8:38:fc:24:7d:f3:07:ff:03:1c:d9:
cd:65:7c:f2:20:e1:17:74:2b:ea:3b:d2:8f:60:ec:74:b1:ee:
af:59:bc:40:f0:76:3a:75:cf:0f:af:4f:0a:59:2f:21:43:53:
b7:af:3e:16:1a:af:68:4e:20:39:26:21:a5:e9:88:02:89:5c:
6c:5b:46:42:de:9f:97:bb:82:5b:c7:54:67:21:12:57:36:5a:
6d:0b:97:df:21:fb:d9:b2:32:1f:bb:ef:d4:a0:20:2e:72:00:
86:b3:be:98:52:04:82:e5:9d:1a:1f:97:28:02:25:7c:c9:54:
51:e5:07:c8:1b:78:d3:ba:d5:db:43:3a:e0:50:9e:32:ea:29:
aa:0f:7d:75:31:99:04:aa:81:ef:4a:1c:ec:11:bb:3c:a7:5b:
da:96:6f:f4:54:89:85:11:71:c5:c3:c3:a8:21:10:c2:d3:53:
80:c0:67:fd:32:30:f3:a1:6b:85:e7:bc:36:bb:27:af:de:b2:
a0:75:83:d7:c1:e8:0e:61:22:53:a0:b0:3c:37:7e:63:fa:64:
a8:61:22:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyjzy3Vg9sg/PbsfHM+6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwODQ1NmJjNjVjYjRiMTU1YTllNmI0YjMxNmRkNTE0ZTA0
MzFiNjkwHhcNMjUxMTExMTIwMDQ3WhcNMjUxMTEyMTIwMDQ3WjAzMTEwLwYDVQQD
Eyg4YzJmOTVkYzBhY2FmYzAwOTUzMDBiMjQzNDdmMWUyOGU0ZWJhNDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDZyL0pIBjZ5NA0JEtO0ysNgsyp2
RKsEziVVnwZdNTsleaW4eUEotV/sk9RQfJEgSBgxx3UJfrFwRxCLrt4QQKNxnHLA
6Oo3BHmBjLuulvoueHH+njMGOx/r/8EO2RhN7X9be2iTkb8YZBs4xOYSzJgFaeKd
Dy2Dv5wCWMD1NMPbLYv/3FmSiYw6wzzJ/kAO5psuDoKtO9nUvHnh0srYCotbvtT6
6+g40mo0Lyz6rASSlc91TxldF3ii3YDq0wZSzzEhxPmtY/Hk4oXAyRA/5tn31ZdI
U8bITLQ71ZBwr8huLnjULiuN7BPrXsFlN2zqmPRMbtrTGq0GY5cX/8trOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwvldwKyvwAlTALJDR/Hijk66Q5MB8GA1UdIwQY
MBaAFKCEVrxly0sVWp5rSzFt1RTgQxtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNjNjOGQtZDdjNy00ZThjLWI4NzYt
ZmZlZGYwYWQwYmUzLzEvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNjNjOGQtZDdjNy00ZThjLWI4NzYtZmZlZGYwYWQwYmUz
LzEvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfs2fk0y
yx/IdupeolBZlkAYaFfd3vmQKABJRPSbhl/GUxnL9nA/kgGjcNg4/CR98wf/AxzZ
zWV88iDhF3Qr6jvSj2DsdLHur1m8QPB2OnXPD69PClkvIUNTt68+FhqvaE4gOSYh
pemIAolcbFtGQt6fl7uCW8dUZyESVzZabQuX3yH72bIyH7vv1KAgLnIAhrO+mFIE
guWdGh+XKAIlfMlUUeUHyBt407rV20M64FCeMuopqg99dTGZBKqB70oc7BG7PKdb
2pZv9FSJhRFxxcPDqCEQwtNTgMBn/TIw86Frhee8Nrsnr96yoHWD18HoDmEiU6Cw
PDd+Y/pkqGEiUA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:30 2025 by rpki-client