Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
File: oVJEYml6J_56uUtqypBnkx2SEC8.mft (raw, json)
Hash identifier: qGuuDKVc4R9b1MWeMi95QEzV6dyVgInLutcGJqD5NE8=
Subject key identifier: 32:D2:DB:97:0E:0D:91:57:94:35:D1:BD:8B:C7:C9:33:AF:5A:C4:27
Authority key identifier: A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
Certificate issuer: /CN=a1524462697a27fe7ab94b6aca9067931d92102f
Certificate serial: 0199239FD644D2578E0998959F5E0588B944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 10:01:41 +0000
Manifest this update: Sun 07 Sep 2025 10:01:41 +0000
Manifest next update: Mon 08 Sep 2025 10:01:41 +0000
Files and hashes: 1: oVJEYml6J_56uUtqypBnkx2SEC8.crl (hash: FFdFQGMrTRi5da66OdXSqhi8/xjq3QAaEyXfaUqPg9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:d6:44:d2:57:8e:09:98:95:9f:5e:05:88:b9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1524462697a27fe7ab94b6aca9067931d92102f
Validity
Not Before: Sep 7 10:01:41 2025 GMT
Not After : Sep 8 10:01:41 2025 GMT
Subject: CN=32d2db970e0d91579435d1bd8bc7c933af5ac427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:51:65:a4:7b:dd:bd:f7:13:07:8a:82:f2:74:
22:38:11:ed:7a:32:82:3b:ed:70:ad:80:18:c9:88:
0c:2b:d3:87:80:a4:d9:f6:9b:cf:ff:8c:16:85:db:
70:38:94:a3:af:92:0a:fe:48:fb:d5:5b:ac:e4:a6:
3a:b8:6a:1c:3d:cf:0c:57:b4:92:86:44:0c:27:5c:
c8:44:8f:3f:9d:43:0a:3b:37:26:13:5b:32:d5:72:
a2:5d:55:c3:51:05:3f:b8:48:68:f1:a8:13:8d:22:
84:a9:0e:1b:b3:e1:a1:b5:a2:45:15:76:1b:1b:b0:
9e:25:7c:3c:d5:8e:1e:9c:d4:ff:a2:40:d7:48:9e:
1a:a5:c4:51:4b:cf:a2:32:e7:34:5c:d4:be:55:b1:
fd:0f:c9:9c:a5:90:d9:91:36:0a:eb:10:7d:a3:c0:
bc:a0:9e:cc:e1:28:6a:dc:6f:0e:29:b8:3e:03:87:
90:c0:d3:a3:16:3a:22:90:93:a5:67:28:ff:e5:d9:
2c:93:f3:c6:3c:bf:47:7a:c4:03:8e:b6:45:7e:01:
05:d4:4d:8b:96:e1:22:b3:79:97:4a:fc:a4:6a:cc:
08:f6:9c:fd:57:ce:3e:3d:5a:97:8d:6c:4b:53:e1:
89:8b:5d:08:00:3d:91:4c:b2:05:7d:31:d0:b9:3f:
9f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D2:DB:97:0E:0D:91:57:94:35:D1:BD:8B:C7:C9:33:AF:5A:C4:27
X509v3 Authority Key Identifier:
keyid:A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0f:b2:d0:e4:36:d6:89:c0:53:33:82:e4:28:e0:d4:a0:79:
1f:a2:a2:56:d8:7e:56:f6:6a:ad:66:27:08:23:55:80:55:42:
40:ff:f2:83:e7:0d:9c:97:21:e2:e7:2b:1f:0b:d5:9b:d3:a6:
10:49:95:fb:91:bc:23:30:a5:b2:64:10:26:96:25:cf:2c:c6:
31:3c:41:8f:60:e1:f1:43:f2:7c:e6:cd:c0:b7:94:ac:b4:44:
3b:79:b3:39:5c:ac:a5:0d:40:a1:b4:bd:29:1f:53:e0:10:7a:
53:2c:2e:c9:f2:6e:fb:31:a6:45:2c:b8:83:ee:06:04:7b:f6:
c9:0d:19:34:f6:a9:47:4c:a6:b9:75:d3:0c:ba:2d:5a:27:57:
54:d5:89:90:c8:4a:ab:77:0e:5b:b5:ca:04:f2:dc:a9:30:14:
11:7c:c3:25:44:a3:dd:24:65:1c:c5:00:bc:f2:81:6d:02:66:
4e:8e:17:08:8d:e4:17:0a:42:82:5b:56:d4:8d:29:ad:ea:0b:
bd:a5:2f:01:7c:36:6e:55:e9:b8:2d:4f:a6:9a:60:fb:c4:a3:
b2:f6:1b:98:2d:36:8c:36:37:88:0c:12:61:3d:4b:32:19:c0:
3b:66:d5:41:65:25:3f:45:eb:b7:82:97:d7:3d:25:65:f3:8f:
6b:bc:9e:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn9ZE0leOCZiVn14FiLlEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNTI0NDYyNjk3YTI3ZmU3YWI5NGI2YWNhOTA2NzkzMWQ5
MjEwMmYwHhcNMjUwOTA3MTAwMTQxWhcNMjUwOTA4MTAwMTQxWjAzMTEwLwYDVQQD
EygzMmQyZGI5NzBlMGQ5MTU3OTQzNWQxYmQ4YmM3YzkzM2FmNWFjNDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FFlpHvdvfcTB4qC8nQiOBHtejKC
O+1wrYAYyYgMK9OHgKTZ9pvP/4wWhdtwOJSjr5IK/kj71Vus5KY6uGocPc8MV7SS
hkQMJ1zIRI8/nUMKOzcmE1sy1XKiXVXDUQU/uEho8agTjSKEqQ4bs+GhtaJFFXYb
G7CeJXw81Y4enNT/okDXSJ4apcRRS8+iMuc0XNS+VbH9D8mcpZDZkTYK6xB9o8C8
oJ7M4Shq3G8OKbg+A4eQwNOjFjoikJOlZyj/5dksk/PGPL9HesQDjrZFfgEF1E2L
luEis3mXSvykaswI9pz9V84+PVqXjWxLU+GJi10IAD2RTLIFfTHQuT+f8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLS25cODZFXlDXRvYvHyTOvWsQnMB8GA1UdIwQY
MBaAFKFSRGJpeif+erlLasqQZ5MdkhAvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ZKRVltbDZKXzU2dVV0cXlwQm5reDJTRUM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYTc2ZmUtNjExOS00ZGUwLWJmNGIt
NGIxYWY0MTRmZDAwLzEvb1ZKRVltbDZKXzU2dVV0cXlwQm5reDJTRUM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lYTc2ZmUtNjExOS00ZGUwLWJmNGItNGIxYWY0MTRmZDAw
LzEvb1ZKRVltbDZKXzU2dVV0cXlwQm5reDJTRUM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHg+y0OQ2
1onAUzOC5Cjg1KB5H6KiVth+VvZqrWYnCCNVgFVCQP/yg+cNnJch4ucrHwvVm9Om
EEmV+5G8IzClsmQQJpYlzyzGMTxBj2Dh8UPyfObNwLeUrLREO3mzOVyspQ1AobS9
KR9T4BB6UywuyfJu+zGmRSy4g+4GBHv2yQ0ZNPapR0ymuXXTDLotWidXVNWJkMhK
q3cOW7XKBPLcqTAUEXzDJUSj3SRlHMUAvPKBbQJmTo4XCI3kFwpCgltW1I0preoL
vaUvAXw2blXpuC1Ppppg+8SjsvYbmC02jDY3iAwSYT1LMhnAO2bVQWUlP0Xrt4KX
1z0lZfOPa7yeIw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:36 2025 by rpki-client