Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
File: OuvyLoZEQlX994owxMsLLZHlt1c.mft (raw, json)
Hash identifier: Jbi5un23eoDzRekzfcnBlG4dOxW/1xRFnwkmhwPeGsw=
Subject key identifier: 72:C4:47:B8:8B:C6:A3:DF:F0:3E:EF:21:65:7F:56:82:40:ED:A6:D2
Authority key identifier: 3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
Certificate issuer: /CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Certificate serial: 0199180AC3B011EA910B3469843F32F9EACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
Manifest number: 15FE
Signing time: Fri 05 Sep 2025 04:03:02 +0000
Manifest this update: Fri 05 Sep 2025 04:03:02 +0000
Manifest next update: Sat 06 Sep 2025 04:03:02 +0000
Files and hashes: 1: OuvyLoZEQlX994owxMsLLZHlt1c.crl (hash: ovtaJ6pRDLg8bm/VYHWUAX9Ukbpw/luYuPNFdC74FDM=)
2: XGOc6Yta1j7sUM6Fv0ZGp6ykvs4.roa (hash: c3SifmbdW15nfuTRwIPceqNmWNmz6mVEc9pu384Gaco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:c3:b0:11:ea:91:0b:34:69:84:3f:32:f9:ea:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Validity
Not Before: Sep 5 04:03:02 2025 GMT
Not After : Sep 6 04:03:02 2025 GMT
Subject: CN=72c447b88bc6a3dff03eef21657f568240eda6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:20:5e:96:41:19:dd:66:cc:10:3c:88:47:
48:25:11:cb:dd:3d:a2:2d:92:32:07:0b:c9:73:fd:
9a:0d:38:1e:bf:df:c1:b5:77:93:a2:35:b6:f2:01:
0a:be:5a:4b:6e:29:a3:c7:40:19:0c:9d:74:3b:10:
76:72:7b:10:e2:37:0e:6d:29:5d:6d:e7:65:6c:41:
65:d9:52:11:1a:ae:e5:a5:18:fc:5a:7a:87:7e:c2:
f6:5d:d1:0e:58:e5:13:27:01:e8:ad:92:1d:a5:e6:
8e:47:56:b5:89:7c:23:23:55:e1:75:70:53:4a:55:
52:e7:52:24:3f:43:99:e1:b6:cb:90:21:b5:e1:3b:
35:78:a0:5a:93:55:f2:03:0a:b8:2d:a1:43:c0:de:
f3:3a:fd:3c:49:a0:8e:88:4c:e6:e4:bf:f3:ae:df:
be:e8:95:0c:63:f8:95:45:3d:39:8b:71:70:90:52:
56:e3:56:e4:ab:2b:1c:29:2c:60:e0:24:04:56:29:
18:c5:20:ed:82:9b:23:71:3c:30:b3:9d:ff:0a:c2:
bf:db:75:0a:f8:c5:73:ea:28:80:b9:e5:38:f6:48:
6e:ff:2b:ea:ad:8a:e9:51:55:6d:ae:e9:5d:be:e9:
47:a4:75:63:a7:6a:bb:60:88:74:27:1b:2d:86:c1:
ee:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C4:47:B8:8B:C6:A3:DF:F0:3E:EF:21:65:7F:56:82:40:ED:A6:D2
X509v3 Authority Key Identifier:
keyid:3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:61:aa:77:c0:fd:b7:39:a7:f2:ab:5e:1e:88:00:25:f3:82:
d6:6c:7a:9c:e0:9f:a8:6f:70:a5:4f:f2:c5:3a:0b:d1:32:56:
cd:22:92:81:1c:3b:17:44:58:f5:3d:1c:a0:e2:c1:3d:64:4c:
f0:14:5f:9e:ed:55:f3:c4:f6:93:32:af:ab:41:d8:37:15:1a:
d4:5d:ff:e3:a0:46:d8:8a:f0:f8:14:ac:f8:16:39:25:5c:86:
3e:59:b3:56:0f:5c:7c:4b:6f:1b:8f:43:6a:38:83:bc:92:05:
c5:7c:75:0c:b4:d8:22:fb:bc:ea:b5:c3:11:19:4a:8b:30:8d:
bd:87:4d:40:f6:a1:b0:08:2c:ba:67:f9:98:20:0b:12:bb:34:
fe:c7:8c:82:c9:f2:88:51:21:9e:ec:00:07:77:13:f7:e3:57:
cd:43:7f:d4:8a:27:25:7a:0a:c5:ee:1f:73:a5:8a:29:a4:24:
dc:41:08:61:45:c0:54:78:c1:a7:55:a0:fb:71:2d:0f:6b:7c:
bc:46:3b:e6:8b:63:ad:52:1a:e9:45:90:b6:ae:0d:de:7d:00:
26:df:01:74:40:f8:37:be:bc:ef:b8:57:d2:35:17:ae:f4:d6:
3a:fb:77:98:65:77:e3:1a:b7:b8:de:dc:bf:a5:92:8a:0e:32:
59:48:92:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYCsOwEeqRCzRphD8y+erKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWJmMjJlODY0NDQyNTVmZGY3OGEzMGM0Y2IwYjJkOTFl
NWI3NTcwHhcNMjUwOTA1MDQwMzAyWhcNMjUwOTA2MDQwMzAyWjAzMTEwLwYDVQQD
Eyg3MmM0NDdiODhiYzZhM2RmZjAzZWVmMjE2NTdmNTY4MjQwZWRhNmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1sgXpZBGd1mzBA8iEdIJRHL3T2i
LZIyBwvJc/2aDTgev9/BtXeTojW28gEKvlpLbimjx0AZDJ10OxB2cnsQ4jcObSld
bedlbEFl2VIRGq7lpRj8WnqHfsL2XdEOWOUTJwHorZIdpeaOR1a1iXwjI1XhdXBT
SlVS51IkP0OZ4bbLkCG14Ts1eKBak1XyAwq4LaFDwN7zOv08SaCOiEzm5L/zrt++
6JUMY/iVRT05i3FwkFJW41bkqyscKSxg4CQEVikYxSDtgpsjcTwws53/CsK/23UK
+MVz6iiAueU49khu/yvqrYrpUVVtruldvulHpHVjp2q7YIh0JxsthsHuKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLER7iLxqPf8D7vIWV/VoJA7abSMB8GA1UdIwQY
MBaAFDrr8i6GREJV/feKMMTLCy2R5bdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3V2eUxvWkVRbFg5OTRvd3hNc0xMWkhsdDFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85OGIyZjUtNzVlMS00MjQ1LTk3NmQt
MDE1MGM5NGY5NDBkLzEvT3V2eUxvWkVRbFg5OTRvd3hNc0xMWkhsdDFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85OGIyZjUtNzVlMS00MjQ1LTk3NmQtMDE1MGM5NGY5NDBk
LzEvT3V2eUxvWkVRbFg5OTRvd3hNc0xMWkhsdDFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWGqd8D9
tzmn8qteHogAJfOC1mx6nOCfqG9wpU/yxToL0TJWzSKSgRw7F0RY9T0coOLBPWRM
8BRfnu1V88T2kzKvq0HYNxUa1F3/46BG2Irw+BSs+BY5JVyGPlmzVg9cfEtvG49D
ajiDvJIFxXx1DLTYIvu86rXDERlKizCNvYdNQPahsAgsumf5mCALErs0/seMgsny
iFEhnuwAB3cT9+NXzUN/1IonJXoKxe4fc6WKKaQk3EEIYUXAVHjBp1Wg+3EtD2t8
vEY75otjrVIa6UWQtq4N3n0AJt8BdED4N76877hX0jUXrvTWOvt3mGV34xq3uN7c
v6WSig4yWUiSrg==
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:52 2025 by rpki-client