Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
File: OEGrqj51xG2YtvqGeNNP7yrDhbA.mft (raw, json)
Hash identifier: BoO/mDp+HKA5hqiKby9aHAVNK+IYb82PQNMkF4HRNe4=
Subject key identifier: 49:6E:76:A2:A4:B7:8D:2B:C7:92:BF:77:0E:DF:80:D8:15:53:09:84
Authority key identifier: 38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
Certificate issuer: /CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Certificate serial: 019A7293A038215EF3020464BE15F76D9912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
Manifest number: 0E7C
Signing time: Tue 11 Nov 2025 11:01:08 +0000
Manifest this update: Tue 11 Nov 2025 11:01:08 +0000
Manifest next update: Wed 12 Nov 2025 11:01:08 +0000
Files and hashes: 1: OEGrqj51xG2YtvqGeNNP7yrDhbA.crl (hash: i1rQuE1kfVjM5b1KGKQZWxgWaQ8V2CzCsQhuGAvupSQ=)
2: pBUdyGJF00Aj8L8ciDIjRG3CSGw.roa (hash: 6hEe+Tga9lCPNVaKmIW/t2FOnq+wOL+8Dc3AiID4ekU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:a0:38:21:5e:f3:02:04:64:be:15:f7:6d:99:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Validity
Not Before: Nov 11 11:01:08 2025 GMT
Not After : Nov 12 11:01:08 2025 GMT
Subject: CN=496e76a2a4b78d2bc792bf770edf80d815530984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:fd:e3:85:9d:c6:1d:fb:a7:52:50:39:e5:
a2:14:fe:60:92:bf:a2:2b:a6:39:f5:e9:b3:f1:80:
7e:bd:7b:a8:94:ae:15:2c:05:93:95:78:c8:ce:86:
30:22:dc:da:78:9b:30:55:b5:b7:fe:13:3e:e9:17:
08:db:88:9a:a4:9c:ff:fa:ec:54:66:ea:1e:f9:22:
1d:0e:03:6d:67:00:4b:f9:be:17:91:9d:2c:e4:13:
20:f2:75:51:cb:6d:60:21:e5:76:9f:de:3d:4d:06:
1b:fe:74:05:29:7a:87:2d:02:b9:fe:f1:cd:2d:c4:
92:83:0d:22:a6:48:f3:31:35:0e:c2:6a:76:94:79:
eb:23:7c:94:ed:c6:ca:0a:16:c4:09:03:bc:a4:95:
cd:55:bc:82:32:30:a3:f6:33:c4:28:a2:45:81:60:
a4:6e:f1:d9:9f:5e:ff:1c:75:1b:71:c5:94:7e:59:
db:74:58:5b:4f:23:b3:d8:c7:ca:31:3b:f5:1b:f1:
d1:d6:17:c8:27:e7:23:ed:e6:02:3d:e5:d0:ac:f0:
43:8c:15:4e:a3:b4:be:3d:bf:a5:81:a0:00:94:45:
8b:ac:a8:dd:c4:53:06:02:72:71:d5:a1:82:62:0c:
08:81:7f:07:7d:92:c7:7a:47:30:d6:fa:a4:61:a7:
ff:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6E:76:A2:A4:B7:8D:2B:C7:92:BF:77:0E:DF:80:D8:15:53:09:84
X509v3 Authority Key Identifier:
keyid:38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7e:47:9d:60:91:d9:ee:97:5a:85:e2:87:c5:c9:ae:b6:2e:
97:2d:f8:ba:df:72:33:9f:73:6e:ea:fc:6a:eb:80:b3:69:ed:
a5:ef:d2:51:02:95:dc:79:72:1c:36:2b:f5:7a:31:ea:6a:58:
7a:e0:80:5d:87:a7:b3:3c:91:53:e6:7b:19:f7:2f:51:eb:ac:
6f:36:d9:30:1f:d3:4d:2d:6d:15:f0:6b:fe:59:50:60:56:11:
e2:52:20:d4:88:e6:cd:b0:4b:0f:ee:8a:4d:5e:1c:bf:34:cd:
af:6f:5c:e2:36:8e:bd:d0:67:d5:9d:43:12:5d:1a:57:7f:ff:
39:c4:16:2c:64:6e:f5:74:12:99:83:e7:2f:6f:7f:87:af:7e:
c8:4d:66:af:2e:75:29:cf:d3:91:14:e5:4f:2e:f5:b6:23:c0:
a5:ad:ce:3a:30:0f:ad:cd:36:d0:96:5b:5e:78:4a:b8:9c:5d:
1d:4d:79:18:6a:d9:98:03:e3:fa:0e:e5:c4:64:91:0c:ad:c2:
aa:32:d7:be:5f:ef:31:6c:c1:79:34:70:65:ad:d2:54:45:66:
0e:47:14:4e:d2:09:ce:ff:14:be:27:f8:96:8e:b0:61:d9:7c:
f5:16:b3:71:a5:2e:32:26:00:00:a2:62:79:b7:79:44:88:eb:
95:c4:f6:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk6A4IV7zAgRkvhX3bZkSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDFhYmFhM2U3NWM0NmQ5OGI2ZmE4Njc4ZDM0ZmVmMmFj
Mzg1YjAwHhcNMjUxMTExMTEwMTA4WhcNMjUxMTEyMTEwMTA4WjAzMTEwLwYDVQQD
Eyg0OTZlNzZhMmE0Yjc4ZDJiYzc5MmJmNzcwZWRmODBkODE1NTMwOTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4/944Wdxh37p1JQOeWiFP5gkr+i
K6Y59emz8YB+vXuolK4VLAWTlXjIzoYwItzaeJswVbW3/hM+6RcI24iapJz/+uxU
Zuoe+SIdDgNtZwBL+b4XkZ0s5BMg8nVRy21gIeV2n949TQYb/nQFKXqHLQK5/vHN
LcSSgw0ipkjzMTUOwmp2lHnrI3yU7cbKChbECQO8pJXNVbyCMjCj9jPEKKJFgWCk
bvHZn17/HHUbccWUflnbdFhbTyOz2MfKMTv1G/HR1hfIJ+cj7eYCPeXQrPBDjBVO
o7S+Pb+lgaAAlEWLrKjdxFMGAnJx1aGCYgwIgX8HfZLHekcw1vqkYaf/sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEludqKkt40rx5K/dw7fgNgVUwmEMB8GA1UdIwQY
MBaAFDhBq6o+dcRtmLb6hnjTT+8qw4WwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMTI5ZGUtYmY0My00OTY3LThjMDQt
ZjIyNjEwZTYzYzkyLzEvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8xMTI5ZGUtYmY0My00OTY3LThjMDQtZjIyNjEwZTYzYzky
LzEvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANH5HnWCR
2e6XWoXih8XJrrYuly34ut9yM59zbur8auuAs2ntpe/SUQKV3HlyHDYr9Xox6mpY
euCAXYenszyRU+Z7GfcvUeusbzbZMB/TTS1tFfBr/llQYFYR4lIg1IjmzbBLD+6K
TV4cvzTNr29c4jaOvdBn1Z1DEl0aV3//OcQWLGRu9XQSmYPnL29/h69+yE1mry51
Kc/TkRTlTy71tiPApa3OOjAPrc020JZbXnhKuJxdHU15GGrZmAPj+g7lxGSRDK3C
qjLXvl/vMWzBeTRwZa3SVEVmDkcUTtIJzv8Uvif4lo6wYdl89RazcaUuMiYAAKJi
ebd5RIjrlcT2aQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:24 2025 by rpki-client