Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.mft
File: OXsxr3cA59mVkO39nVhKG1A46tc.mft (raw, json)
Hash identifier: CzO+R3xcbbdu0bLTrxMixTyh6HnuETxTn69ik/7VWLI=
Subject key identifier: D3:A4:A2:EB:93:BE:6E:9B:4F:CF:57:0D:38:8C:73:F6:FE:DB:39:23
Authority key identifier: 39:7B:31:AF:77:00:E7:D9:95:90:ED:FD:9D:58:4A:1B:50:38:EA:D7
Certificate issuer: /CN=397b31af7700e7d99590edfd9d584a1b5038ead7
Certificate serial: 019A70DC6D29C802C5998B231D58B28DBD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXsxr3cA59mVkO39nVhKG1A46tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.mft
Manifest number: 01D3
Signing time: Tue 11 Nov 2025 03:01:25 +0000
Manifest this update: Tue 11 Nov 2025 03:01:25 +0000
Manifest next update: Wed 12 Nov 2025 03:01:25 +0000
Files and hashes: 1: OXsxr3cA59mVkO39nVhKG1A46tc.crl (hash: LDrYW9gwCa2ZeGj8XEXuiy+f28FgKQ8RKA4eVdx1yqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXsxr3cA59mVkO39nVhKG1A46tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:6d:29:c8:02:c5:99:8b:23:1d:58:b2:8d:bd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397b31af7700e7d99590edfd9d584a1b5038ead7
Validity
Not Before: Nov 11 03:01:25 2025 GMT
Not After : Nov 12 03:01:25 2025 GMT
Subject: CN=d3a4a2eb93be6e9b4fcf570d388c73f6fedb3923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:4a:6d:35:c0:91:37:af:4d:54:a8:52:68:
00:8a:c5:3d:01:ac:3b:3d:84:21:ca:26:a4:56:33:
3e:07:8a:7e:45:de:47:46:9b:c6:09:43:6f:d9:93:
63:7b:0e:1c:f0:77:e0:2b:64:15:45:89:48:b9:aa:
72:0b:d5:66:14:9a:08:c6:e1:46:fe:0e:d5:74:5c:
88:9a:b7:85:12:85:22:1c:3c:50:a7:aa:94:ea:51:
c1:35:2f:4a:09:8d:c9:37:8a:77:e0:37:44:39:8d:
97:13:27:50:6b:b9:67:1a:52:27:0d:cb:56:cb:19:
b2:f1:b4:55:16:f6:34:26:2d:00:3c:72:17:4c:1a:
19:4f:3c:91:cd:16:7d:c7:c8:b5:42:36:bb:66:a6:
3a:16:f1:27:e5:72:c1:58:a8:ae:1a:a2:16:3c:db:
76:48:b4:d4:fd:f2:3a:65:4c:e1:bf:a3:f7:52:b0:
fc:af:0d:34:7d:39:72:87:36:ad:fc:43:61:3f:78:
16:1d:d2:c1:ca:02:fa:f8:39:b2:a0:57:f2:4b:b9:
58:5b:d9:cb:93:27:b0:52:8c:61:bb:bf:1b:90:7c:
33:45:b6:8e:f3:16:d8:1c:73:44:ba:29:48:18:3f:
6f:7a:42:c1:6a:00:db:11:f1:e6:97:21:21:2b:73:
81:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A4:A2:EB:93:BE:6E:9B:4F:CF:57:0D:38:8C:73:F6:FE:DB:39:23
X509v3 Authority Key Identifier:
keyid:39:7B:31:AF:77:00:E7:D9:95:90:ED:FD:9D:58:4A:1B:50:38:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXsxr3cA59mVkO39nVhKG1A46tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:03:cc:86:63:7e:d4:53:c9:64:27:01:e4:72:9f:e6:44:e7:
16:df:3e:6b:db:bf:63:c6:2b:05:a3:58:13:bc:cf:09:42:bf:
2c:3c:25:ae:3b:c4:88:c0:77:39:af:cd:7a:b4:9c:4e:70:e8:
1e:d0:5b:d2:9a:6f:80:04:e3:4b:4f:83:dd:33:ff:7f:07:ba:
59:67:05:b3:f2:5d:0d:cf:dc:55:a6:e9:1e:d1:ec:ee:39:aa:
43:c8:12:3b:c1:77:55:1f:c4:9e:ed:fb:02:79:a3:ab:0c:5e:
04:37:6d:f2:ed:ad:15:e4:14:6a:bc:fa:2f:eb:dc:4e:f8:a9:
ce:a2:84:ac:2e:da:a2:70:50:72:bf:6b:29:2e:08:d7:09:d9:
c8:4a:54:c0:2b:28:5d:52:6a:65:b5:44:87:67:b6:b0:5b:9a:
ff:27:a8:db:72:aa:aa:82:c7:67:01:dc:cd:db:7f:37:86:92:
b5:1d:92:76:24:fa:fb:58:96:2b:c4:70:08:16:e7:4d:17:2d:
8d:98:cb:28:fe:31:be:e4:53:92:f3:19:ea:76:ce:7f:cd:c9:
0f:62:a2:ff:19:34:62:9e:ce:c8:37:b5:9c:cf:2f:a6:ea:ad:
10:78:79:55:39:48:fa:17:38:0e:96:27:79:4a:68:72:52:e2:
f0:92:bd:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3G0pyALFmYsjHViyjb1+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5N2IzMWFmNzcwMGU3ZDk5NTkwZWRmZDlkNTg0YTFiNTAz
OGVhZDcwHhcNMjUxMTExMDMwMTI1WhcNMjUxMTEyMDMwMTI1WjAzMTEwLwYDVQQD
EyhkM2E0YTJlYjkzYmU2ZTliNGZjZjU3MGQzODhjNzNmNmZlZGIzOTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+pKbTXAkTevTVSoUmgAisU9Aaw7
PYQhyiakVjM+B4p+Rd5HRpvGCUNv2ZNjew4c8HfgK2QVRYlIuapyC9VmFJoIxuFG
/g7VdFyImreFEoUiHDxQp6qU6lHBNS9KCY3JN4p34DdEOY2XEydQa7lnGlInDctW
yxmy8bRVFvY0Ji0APHIXTBoZTzyRzRZ9x8i1Qja7ZqY6FvEn5XLBWKiuGqIWPNt2
SLTU/fI6ZUzhv6P3UrD8rw00fTlyhzat/ENhP3gWHdLBygL6+DmyoFfyS7lYW9nL
kyewUoxhu78bkHwzRbaO8xbYHHNEuilIGD9vekLBagDbEfHmlyEhK3OBkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOkouuTvm6bT89XDTiMc/b+2zkjMB8GA1UdIwQY
MBaAFDl7Ma93AOfZlZDt/Z1YShtQOOrXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hzeHIzY0E1OW1Wa08zOW5WaEtHMUE0NnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8wZDlkM2ItZDc5MC00YWU4LWEyM2Qt
YjIwMmUwNWFjODRhLzEvT1hzeHIzY0E1OW1Wa08zOW5WaEtHMUE0NnRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8wZDlkM2ItZDc5MC00YWU4LWEyM2QtYjIwMmUwNWFjODRh
LzEvT1hzeHIzY0E1OW1Wa08zOW5WaEtHMUE0NnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAPMhmN+
1FPJZCcB5HKf5kTnFt8+a9u/Y8YrBaNYE7zPCUK/LDwlrjvEiMB3Oa/NerScTnDo
HtBb0ppvgATjS0+D3TP/fwe6WWcFs/JdDc/cVabpHtHs7jmqQ8gSO8F3VR/Enu37
AnmjqwxeBDdt8u2tFeQUarz6L+vcTvipzqKErC7aonBQcr9rKS4I1wnZyEpUwCso
XVJqZbVEh2e2sFua/yeo23KqqoLHZwHczdt/N4aStR2SdiT6+1iWK8RwCBbnTRct
jZjLKP4xvuRTkvMZ6nbOf83JD2Ki/xk0Yp7OyDe1nM8vpuqtEHh5VTlI+hc4DpYn
eUpoclLi8JK9DQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:47 2025 by rpki-client