Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
File: oIRWvGXLSxVanmtLMW3VFOBDG2k.mft (raw, json)
Hash identifier: 8SihGPPTkgIbTt2Gnj+P68QisKBlifSRuGB5qWli03M=
Subject key identifier: 09:A3:84:39:CB:4B:95:81:08:CB:67:C4:DD:5A:C1:08:7D:2C:30:0F
Authority key identifier: A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
Certificate issuer: /CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Certificate serial: 0198733DBDEE0CD5E232BCF7B87DF7E06DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
Manifest number: 0ED5
Signing time: Mon 04 Aug 2025 04:01:22 +0000
Manifest this update: Mon 04 Aug 2025 04:01:22 +0000
Manifest next update: Tue 05 Aug 2025 04:01:22 +0000
Files and hashes: 1: oIRWvGXLSxVanmtLMW3VFOBDG2k.crl (hash: CWPqjQMEOHT7mB1K/LoQK2ajdDImPU6XxYrxD9P1vXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:bd:ee:0c:d5:e2:32:bc:f7:b8:7d:f7:e0:6d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Validity
Not Before: Aug 4 04:01:22 2025 GMT
Not After : Aug 5 04:01:22 2025 GMT
Subject: CN=09a38439cb4b958108cb67c4dd5ac1087d2c300f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:e7:10:56:3b:c5:31:94:da:58:0d:89:c6:
54:25:c2:2d:5d:d8:90:a7:32:01:1d:b8:46:c9:92:
d0:26:d7:66:f2:14:c0:a8:90:04:e3:e8:c3:ae:9b:
66:7b:be:22:b2:69:e8:88:7f:e6:2c:d1:d3:f2:1c:
e0:4f:ef:ba:33:6d:42:09:2f:9a:ab:1e:82:a2:39:
37:b2:35:56:f0:29:9c:d7:07:ea:65:4d:44:8d:14:
dc:98:4f:76:f1:6f:38:41:c0:d3:d4:3c:62:d2:53:
c2:b6:bb:8e:79:a3:48:5d:ff:e5:cf:7e:f6:2b:6a:
4e:79:59:7d:0f:e3:97:34:35:d3:90:76:19:1b:f1:
91:9e:14:35:41:ff:26:4a:2f:a5:0a:ea:67:3c:ea:
88:61:51:30:d1:79:db:91:07:1a:bf:e6:d1:b7:94:
ae:ea:99:3e:b7:53:1b:3e:31:b9:5d:50:c2:43:28:
d6:57:53:b1:37:48:1e:f7:9c:e0:8b:02:b0:bb:33:
9b:8f:15:9a:3f:89:ae:05:16:e3:b4:18:9d:b4:d8:
89:2f:3e:e2:b2:9b:f9:6c:68:3c:32:f1:b0:0a:11:
d5:58:1f:65:fe:c8:7e:50:3e:17:0e:5f:6c:53:a2:
6b:9b:8b:a0:a2:95:55:51:18:4e:08:7c:8f:4b:92:
59:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A3:84:39:CB:4B:95:81:08:CB:67:C4:DD:5A:C1:08:7D:2C:30:0F
X509v3 Authority Key Identifier:
keyid:A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:05:6e:bd:d5:8b:95:14:b0:11:0b:ca:7d:ef:be:63:e5:68:
e7:ff:ba:b3:ca:46:72:aa:23:0b:e8:d1:5e:8a:5c:24:a9:30:
8b:11:37:1e:aa:2e:2b:36:cf:a7:d2:54:ef:83:e5:fd:9d:bc:
16:8a:e9:fd:b9:93:39:e3:66:9a:c8:0d:cd:1e:0b:6a:70:a1:
9f:7a:63:e9:32:54:41:ef:3e:68:11:69:7b:41:51:3e:e9:4f:
73:81:a3:e7:e8:84:3b:d9:13:d9:e1:1f:93:7f:cc:52:1b:e4:
5e:4b:7e:f2:f3:90:6a:60:c6:80:b3:2a:aa:72:1b:2a:d8:be:
d9:ef:2c:4b:d8:27:09:e8:8f:50:01:b5:00:ac:e2:4d:48:15:
3a:52:d2:ca:7d:83:1a:9e:5a:a6:e6:24:e6:6f:ad:c5:84:f5:
43:0d:f4:4d:2d:54:46:89:e2:93:42:f4:8f:13:60:75:41:94:
a2:4d:c8:63:34:1e:f6:52:b7:37:32:fb:a4:05:af:02:82:83:
84:3d:35:16:19:72:9f:e8:1f:0f:02:8f:72:be:4e:e0:c5:b0:
12:2b:0d:79:8e:6a:83:d3:b5:fb:35:8d:d8:71:06:de:eb:21:
22:88:19:cd:33:7b:5e:3b:e8:9a:54:83:3f:20:f2:4c:ac:a8:
06:9c:15:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPb3uDNXiMrz3uH334G3UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwODQ1NmJjNjVjYjRiMTU1YTllNmI0YjMxNmRkNTE0ZTA0
MzFiNjkwHhcNMjUwODA0MDQwMTIyWhcNMjUwODA1MDQwMTIyWjAzMTEwLwYDVQQD
EygwOWEzODQzOWNiNGI5NTgxMDhjYjY3YzRkZDVhYzEwODdkMmMzMDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf3nEFY7xTGU2lgNicZUJcItXdiQ
pzIBHbhGyZLQJtdm8hTAqJAE4+jDrptme74ismnoiH/mLNHT8hzgT++6M21CCS+a
qx6Cojk3sjVW8Cmc1wfqZU1EjRTcmE928W84QcDT1Dxi0lPCtruOeaNIXf/lz372
K2pOeVl9D+OXNDXTkHYZG/GRnhQ1Qf8mSi+lCupnPOqIYVEw0XnbkQcav+bRt5Su
6pk+t1MbPjG5XVDCQyjWV1OxN0ge95zgiwKwuzObjxWaP4muBRbjtBidtNiJLz7i
spv5bGg8MvGwChHVWB9l/sh+UD4XDl9sU6Jrm4ugopVVURhOCHyPS5JZKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmjhDnLS5WBCMtnxN1awQh9LDAPMB8GA1UdIwQY
MBaAFKCEVrxly0sVWp5rSzFt1RTgQxtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNjNjOGQtZDdjNy00ZThjLWI4NzYt
ZmZlZGYwYWQwYmUzLzEvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNjNjOGQtZDdjNy00ZThjLWI4NzYtZmZlZGYwYWQwYmUz
LzEvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAVuvdWL
lRSwEQvKfe++Y+Vo5/+6s8pGcqojC+jRXopcJKkwixE3HqouKzbPp9JU74Pl/Z28
Forp/bmTOeNmmsgNzR4LanChn3pj6TJUQe8+aBFpe0FRPulPc4Gj5+iEO9kT2eEf
k3/MUhvkXkt+8vOQamDGgLMqqnIbKti+2e8sS9gnCeiPUAG1AKziTUgVOlLSyn2D
Gp5apuYk5m+txYT1Qw30TS1URonik0L0jxNgdUGUok3IYzQe9lK3NzL7pAWvAoKD
hD01Fhlyn+gfDwKPcr5O4MWwEisNeY5qg9O1+zWN2HEG3ushIogZzTN7XjvomlSD
PyDyTKyoBpwV4Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:34 2025 by rpki-client