Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
File: OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json)
Hash identifier: 8S+aBlSG5rSmXkNXG46MVVGmH2RpCrOl1lugnBbjYoY=
Subject key identifier: 7C:B8:3A:CF:7C:69:A8:D7:A1:A5:A8:F1:39:AC:1D:29:BC:5C:97:32
Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Certificate serial: 01993537B0A09C4A1C9357DC5CA47F2566B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
Manifest number: 160B
Signing time: Wed 10 Sep 2025 20:01:06 +0000
Manifest this update: Wed 10 Sep 2025 20:01:06 +0000
Manifest next update: Thu 11 Sep 2025 20:01:06 +0000
Files and hashes: 1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: bUDk53rfbKgvHBL3/rgajMON4rW594/ET+1iegZAC5k=)
2: Wrm4Xo5M6Od7VmecTT8hFIZ3qpU.roa (hash: VMyIfns1xRX3nJc0aO+48RkMt038/NfSu9JKR70iYqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:b0:a0:9c:4a:1c:93:57:dc:5c:a4:7f:25:66:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Validity
Not Before: Sep 10 20:01:06 2025 GMT
Not After : Sep 11 20:01:06 2025 GMT
Subject: CN=7cb83acf7c69a8d7a1a5a8f139ac1d29bc5c9732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:65:e0:fc:f9:52:e4:9a:a7:51:df:63:60:
6a:8e:5c:00:ec:92:12:52:64:c8:22:2f:c6:11:b0:
85:a2:95:77:c7:30:70:f2:b7:5a:d8:30:32:2c:d2:
4a:e0:38:07:7f:4d:f5:55:ac:fb:de:1a:0c:83:a5:
a8:3f:ea:3e:1f:cf:f6:ec:80:2f:dd:b9:df:99:3d:
9c:60:ae:8b:05:ce:9b:dd:0f:42:e6:32:ae:2a:0d:
34:fe:64:d2:66:8e:81:06:ba:b8:b0:2b:c5:64:02:
7a:b9:d1:a7:67:11:77:13:a2:60:72:5c:16:82:d5:
d9:cc:ce:3f:e1:bd:6e:a0:c5:b8:6f:36:c0:2c:bb:
f1:40:40:01:fd:a7:40:cf:67:6e:b0:48:1f:f1:f9:
42:af:27:b1:78:77:45:b2:46:06:c1:49:31:a0:69:
cd:c2:4b:93:8a:1e:1a:6b:67:57:be:71:51:fe:df:
1d:34:36:cb:31:e2:7a:ea:b6:da:90:25:98:aa:39:
53:ff:a1:eb:45:f9:4c:f8:11:31:83:de:32:b4:fa:
e1:7c:a5:6b:fb:15:74:04:59:9d:7f:fe:08:fb:d6:
f0:b6:c1:8b:b1:06:eb:64:c7:f0:bb:3a:f0:ec:b8:
5c:1e:1b:2f:6b:38:14:14:b6:71:1b:6c:13:61:11:
0c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B8:3A:CF:7C:69:A8:D7:A1:A5:A8:F1:39:AC:1D:29:BC:5C:97:32
X509v3 Authority Key Identifier:
keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d1:41:ae:b5:ac:3b:c9:43:ba:23:86:a6:4f:c8:3a:c5:9a:
d7:69:b8:1a:e0:0c:06:94:ec:ef:eb:68:6a:dc:65:c8:18:1d:
a6:97:37:c3:9c:8a:23:18:0b:2f:46:1c:36:17:87:97:7b:12:
b8:bf:25:fd:3e:73:0a:66:53:1a:f0:be:e7:70:69:83:0d:8b:
42:dd:43:e3:eb:83:51:c1:5e:18:df:e7:78:a0:a1:67:f7:50:
e5:9b:39:fb:6c:be:fc:54:bc:47:d5:0a:c9:31:1b:72:f5:01:
6a:68:06:0e:c4:c6:ef:55:f7:b6:56:2a:9d:25:ce:70:aa:d5:
1a:50:70:34:63:da:63:4a:f9:59:2f:ac:48:66:34:f8:20:e4:
54:08:4a:cf:2a:eb:b0:69:f8:a2:b1:90:ed:7a:31:0a:c8:fe:
08:65:c0:ac:57:b2:ff:41:04:27:d1:ad:e9:2e:b4:c5:c2:fb:
1a:bd:39:ea:bc:37:c1:37:b4:f8:3c:4d:cc:56:ba:73:b6:5a:
96:de:61:83:29:9b:44:65:32:39:a3:59:be:64:c7:fe:44:50:
49:e9:68:11:3e:ea:53:28:96:2f:b9:8f:73:ea:68:10:b8:83:
06:36:b8:26:f8:ed:11:f1:bc:05:f0:7e:e1:8b:ea:1d:a4:7e:
53:36:ee:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1N7CgnEock1fcXKR/JWayMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZTQwNTllNTE5ZTdjYWQwNTM2YmQ1NGQ5MWJjOTc4NzU2
NDRjZGIwHhcNMjUwOTEwMjAwMTA2WhcNMjUwOTExMjAwMTA2WjAzMTEwLwYDVQQD
Eyg3Y2I4M2FjZjdjNjlhOGQ3YTFhNWE4ZjEzOWFjMWQyOWJjNWM5NzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9pl4Pz5UuSap1HfY2BqjlwA7JIS
UmTIIi/GEbCFopV3xzBw8rda2DAyLNJK4DgHf031Vaz73hoMg6WoP+o+H8/27IAv
3bnfmT2cYK6LBc6b3Q9C5jKuKg00/mTSZo6BBrq4sCvFZAJ6udGnZxF3E6JgclwW
gtXZzM4/4b1uoMW4bzbALLvxQEAB/adAz2dusEgf8flCryexeHdFskYGwUkxoGnN
wkuTih4aa2dXvnFR/t8dNDbLMeJ66rbakCWYqjlT/6HrRflM+BExg94ytPrhfKVr
+xV0BFmdf/4I+9bwtsGLsQbrZMfwuzrw7LhcHhsvazgUFLZxG2wTYREMJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHy4Os98aajXoaWo8TmsHSm8XJcyMB8GA1UdIwQY
MBaAFDnkBZ5RnnytBTa9VNkbyXh1ZEzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZjkyMjEtYzM1NC00ZTY3LWEzMmYt
ODRlNTk2YTNjMTIxLzEvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lZjkyMjEtYzM1NC00ZTY3LWEzMmYtODRlNTk2YTNjMTIx
LzEvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNFBrrWs
O8lDuiOGpk/IOsWa12m4GuAMBpTs7+toatxlyBgdppc3w5yKIxgLL0YcNheHl3sS
uL8l/T5zCmZTGvC+53Bpgw2LQt1D4+uDUcFeGN/neKChZ/dQ5Zs5+2y+/FS8R9UK
yTEbcvUBamgGDsTG71X3tlYqnSXOcKrVGlBwNGPaY0r5WS+sSGY0+CDkVAhKzyrr
sGn4orGQ7XoxCsj+CGXArFey/0EEJ9Gt6S60xcL7Gr056rw3wTe0+DxNzFa6c7Za
lt5hgymbRGUyOaNZvmTH/kRQSeloET7qUyiWL7mPc+poELiDBja4JvjtEfG8BfB+
4YvqHaR+UzbumA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 23:19:45 2025 by rpki-client