
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
File: OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft (raw, json)
Hash identifier: q38Mphdkypyp01ekWykOs0TofBIeVd0pTT06YAGgwR0=
Subject key identifier: 8E:8E:9D:C6:F0:94:DF:C5:36:C6:19:60:D4:E6:5B:BC:BA:1A:57:C5
Authority key identifier: 38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
Certificate issuer: /CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Certificate serial: 01988B45A7C62B738D2BA5A656FDE2A02A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 20:00:54 +0000
Manifest this update: Fri 08 Aug 2025 20:00:54 +0000
Manifest next update: Sat 09 Aug 2025 20:00:54 +0000
Files and hashes: 1: OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl (hash: UxnGQZoE8gO0nNNWVTMYvuu6t93sDMdqQkWXF9u6Iaw=)
2: Q4SQTvELqYETYT6vjRCA2iGLGgc.roa (hash: tzC8sef+XSgDXhot9EyLUIit2vwD1a0sRJU8Ks3S1wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:a7:c6:2b:73:8d:2b:a5:a6:56:fd:e2:a0:2a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Validity
Not Before: Aug 8 20:00:54 2025 GMT
Not After : Aug 9 20:00:54 2025 GMT
Subject: CN=8e8e9dc6f094dfc536c61960d4e65bbcba1a57c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d5:de:f5:a3:46:41:66:c4:d1:b5:3e:f2:15:
fe:3d:ba:87:79:3e:c8:a1:df:f3:dc:e8:4a:e7:51:
9c:56:0d:4e:b7:e3:ce:fd:79:11:8b:b6:fc:6b:a5:
06:10:bf:b7:1c:f0:ae:f3:82:43:d6:c4:64:d7:37:
74:c7:12:50:fe:2b:a1:72:b0:94:99:ff:27:f7:b2:
ca:04:5b:12:fb:2c:63:1f:fa:80:d6:64:21:ad:ed:
df:f8:33:b7:9c:96:69:10:d7:28:0f:29:ec:7d:3c:
fe:49:7b:ae:29:ea:e1:f2:03:2e:56:2e:6d:3a:62:
b2:2b:e7:e9:78:dc:77:78:d2:07:9b:07:6f:ef:c5:
7b:25:97:29:0f:35:96:e8:e5:3e:b3:ca:18:f5:27:
ba:45:7c:27:f1:9d:88:d0:85:f7:66:03:c9:50:38:
ba:c1:77:fb:b0:e9:86:ad:c0:83:75:41:61:b2:c4:
f6:a1:01:d8:ad:fc:bd:5c:0c:cc:68:8e:3c:c1:ce:
38:53:f7:bc:75:ec:ac:51:d3:d5:46:61:d3:39:8f:
1c:0e:b4:d6:6a:0e:ec:11:3b:be:c6:f2:3b:3e:1e:
d7:4b:c4:ec:d9:a5:df:2f:72:8a:09:7a:92:0a:9f:
cf:ae:42:23:70:7a:5d:35:73:9e:ad:54:6e:44:1e:
c6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8E:9D:C6:F0:94:DF:C5:36:C6:19:60:D4:E6:5B:BC:BA:1A:57:C5
X509v3 Authority Key Identifier:
keyid:38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ce:dc:f6:e2:f1:28:9a:09:f6:54:1c:6a:5e:9f:a7:7c:1c:
80:f7:47:e0:2d:2d:f4:be:66:bf:c1:8e:18:4e:81:e9:38:70:
1b:ca:ae:a2:c4:6d:11:ae:ee:57:8b:04:fe:b0:2c:b4:dd:8d:
c6:80:33:64:d9:e1:5d:ea:e4:4c:b6:59:b2:5a:79:68:47:ef:
9d:28:07:77:1b:ed:ab:8f:1c:ae:06:44:41:aa:15:f3:51:e2:
17:61:2b:2a:9c:7e:69:d4:62:bd:f7:61:03:a0:d7:12:27:09:
27:17:f1:59:ee:75:97:c7:81:eb:56:9c:61:72:9e:27:a2:d3:
55:08:31:3d:46:b2:6b:19:8f:12:5d:29:f4:39:2f:09:1d:b2:
0b:61:33:db:2c:44:b0:83:91:27:4d:04:0c:67:ab:23:da:b9:
fa:70:73:48:41:58:ae:94:ec:c0:16:d1:1b:f6:e6:3d:7e:b9:
26:88:d0:f0:0b:7d:a9:68:6a:ab:2d:f4:5d:35:ac:36:9b:a5:
8c:2b:6a:b6:2d:90:6f:9c:25:56:b3:a0:c8:2e:41:2d:cb:b1:
a5:f7:25:71:4e:0c:44:df:cd:95:2d:55:a9:83:b9:8a:df:55:
25:a9:3c:ce:a7:c6:e5:44:e6:4c:e5:0e:14:29:ec:af:d7:84:
9e:ef:28:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLRafGK3ONK6WmVv3ioCo1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MjUyOGFiMWNkMWI2ZGM3M2MwYjA5YjY3ZDNlN2UzNTg0
ZjM2M2QwHhcNMjUwODA4MjAwMDU0WhcNMjUwODA5MjAwMDU0WjAzMTEwLwYDVQQD
Eyg4ZThlOWRjNmYwOTRkZmM1MzZjNjE5NjBkNGU2NWJiY2JhMWE1N2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tXe9aNGQWbE0bU+8hX+PbqHeT7I
od/z3OhK51GcVg1Ot+PO/XkRi7b8a6UGEL+3HPCu84JD1sRk1zd0xxJQ/iuhcrCU
mf8n97LKBFsS+yxjH/qA1mQhre3f+DO3nJZpENcoDynsfTz+SXuuKerh8gMuVi5t
OmKyK+fpeNx3eNIHmwdv78V7JZcpDzWW6OU+s8oY9Se6RXwn8Z2I0IX3ZgPJUDi6
wXf7sOmGrcCDdUFhssT2oQHYrfy9XAzMaI48wc44U/e8deysUdPVRmHTOY8cDrTW
ag7sETu+xvI7Ph7XS8Ts2aXfL3KKCXqSCp/PrkIjcHpdNXOerVRuRB7G7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6OncbwlN/FNsYZYNTmW7y6GlfFMB8GA1UdIwQY
MBaAFDglKKsc0bbcc8Cwm2fT5+NYTzY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0NVb3F4elJ0dHh6d0xDYlo5UG40MWhQTmowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wMDgxNmEtZWVkZi00MTkwLWJjMzMt
M2EwMmEyNDJmNDQ0LzEvT0NVb3F4elJ0dHh6d0xDYlo5UG40MWhQTmowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wMDgxNmEtZWVkZi00MTkwLWJjMzMtM2EwMmEyNDJmNDQ0
LzEvT0NVb3F4elJ0dHh6d0xDYlo5UG40MWhQTmowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABc7c9uLx
KJoJ9lQcal6fp3wcgPdH4C0t9L5mv8GOGE6B6ThwG8quosRtEa7uV4sE/rAstN2N
xoAzZNnhXerkTLZZslp5aEfvnSgHdxvtq48crgZEQaoV81HiF2ErKpx+adRivfdh
A6DXEicJJxfxWe51l8eB61acYXKeJ6LTVQgxPUayaxmPEl0p9DkvCR2yC2Ez2yxE
sIORJ00EDGerI9q5+nBzSEFYrpTswBbRG/bmPX65JojQ8At9qWhqqy30XTWsNpul
jCtqti2Qb5wlVrOgyC5BLcuxpfclcU4MRN/NlS1VqYO5it9VJak8zqfG5UTmTOUO
FCnsr9eEnu8oOA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:24:11 2025 by rpki-client