Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
File: OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft (raw, json)
Hash identifier: /Nvyi9rKsoS2JpvJwYgqGL2iilYedU57CLRDy/EEUPM=
Subject key identifier: A3:19:14:15:AC:4B:2F:3E:16:BE:93:FE:38:5D:AE:E3:30:3F:61:21
Authority key identifier: 39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
Certificate issuer: /CN=39abeb591716e908345d329fffd3700352315b98
Certificate serial: 019873E2D54F1CAC10FC7572FAB888DA114C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
Manifest number: 12AB
Signing time: Mon 04 Aug 2025 07:01:41 +0000
Manifest this update: Mon 04 Aug 2025 07:01:41 +0000
Manifest next update: Tue 05 Aug 2025 07:01:41 +0000
Files and hashes: 1: OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl (hash: JZnZBr5IVWmiIv4oRAy0EWRphDyjdJPOAzSZMh7aLpk=)
2: sRj9HIjhF6xAzSk8DsZiSona3z0.roa (hash: CKtuOB2HNTtxCaJDk6aobi//RFXR4AYliP1W8tH3cu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:d5:4f:1c:ac:10:fc:75:72:fa:b8:88:da:11:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39abeb591716e908345d329fffd3700352315b98
Validity
Not Before: Aug 4 07:01:41 2025 GMT
Not After : Aug 5 07:01:41 2025 GMT
Subject: CN=a3191415ac4b2f3e16be93fe385daee3303f6121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:40:dd:f1:8d:48:5a:cf:ed:bb:64:55:b4:
58:8f:30:bd:8a:be:2f:a3:75:8e:40:8f:6a:54:1f:
e7:31:25:e5:92:7a:98:b2:10:6d:83:e2:99:ef:e8:
4d:3b:26:24:b9:b4:6f:56:0e:89:22:90:d3:2f:dc:
24:5d:01:0a:52:32:6f:91:ad:38:a6:17:01:4b:7a:
0e:25:a0:54:de:4d:f8:3a:b7:19:15:0e:a8:58:71:
fa:ac:53:f7:d7:0c:3d:8c:09:84:9b:81:01:75:bd:
67:e0:62:ea:b8:ba:9a:be:d9:ac:c5:46:d4:a6:f7:
34:02:be:ab:de:b3:7b:5f:66:52:61:cf:5f:59:28:
45:fe:42:66:93:39:d7:1b:41:d4:a4:07:d3:10:b0:
c1:72:f4:d9:76:83:ab:3e:c4:f6:50:df:97:4c:cd:
c8:63:57:9f:ff:c6:7a:a6:99:59:78:4f:b0:7f:97:
bf:35:a4:a0:be:82:f1:4b:50:75:0e:40:19:29:c1:
14:bf:28:ad:57:81:e8:0b:be:51:e7:6a:15:ff:0d:
9c:5e:89:3b:6d:2a:91:35:46:e7:5a:eb:bf:4a:7b:
74:86:c6:f7:65:85:69:6a:87:76:ed:9b:ff:dc:e4:
94:83:3d:eb:91:7f:ca:21:16:02:93:34:b7:9d:2d:
b2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:19:14:15:AC:4B:2F:3E:16:BE:93:FE:38:5D:AE:E3:30:3F:61:21
X509v3 Authority Key Identifier:
keyid:39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e2:f9:b5:9f:b1:c1:3c:3a:b9:4c:9e:48:d4:76:36:4c:b2:
56:24:61:27:75:e8:b5:bc:d5:05:ad:8c:8f:8c:33:5b:6f:e0:
24:54:fd:08:e2:06:30:3b:0e:e8:cc:f0:d6:d2:83:88:fa:b8:
f4:16:cf:37:d6:d5:0b:5f:4f:04:5a:8e:b4:87:aa:36:15:35:
cf:79:b2:1c:c7:44:27:27:19:c2:78:db:70:5f:a8:dc:fa:44:
69:84:a2:d6:f1:04:61:33:7d:98:de:a7:09:ec:8a:df:51:92:
45:f6:86:b2:3a:a2:c8:07:92:a7:2e:ed:c6:49:44:e3:82:ed:
39:71:8d:0a:03:0b:9a:53:a6:c4:7d:ea:ad:24:c0:f8:40:a2:
0e:6c:da:20:f2:6d:8d:64:d3:64:c3:c3:ac:10:92:87:8a:83:
84:ea:42:75:06:a4:9c:ac:68:6a:22:ac:7c:f4:58:10:7e:d8:
76:b5:8c:53:11:d9:9f:ec:fe:05:d9:cd:bd:51:61:b6:c5:43:
d4:77:e6:83:80:96:3b:af:aa:ba:db:3e:b3:d3:57:fb:1f:78:
71:8a:36:78:ff:74:94:48:83:f5:a2:fa:b7:2a:bd:59:41:79:
30:37:72:28:0c:2d:52:02:90:34:cb:20:fd:c9:6c:cd:1d:74:
ec:a9:41:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4tVPHKwQ/HVy+riI2hFMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YWJlYjU5MTcxNmU5MDgzNDVkMzI5ZmZmZDM3MDAzNTIz
MTViOTgwHhcNMjUwODA0MDcwMTQxWhcNMjUwODA1MDcwMTQxWjAzMTEwLwYDVQQD
EyhhMzE5MTQxNWFjNGIyZjNlMTZiZTkzZmUzODVkYWVlMzMwM2Y2MTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGZA3fGNSFrP7btkVbRYjzC9ir4v
o3WOQI9qVB/nMSXlknqYshBtg+KZ7+hNOyYkubRvVg6JIpDTL9wkXQEKUjJvka04
phcBS3oOJaBU3k34OrcZFQ6oWHH6rFP31ww9jAmEm4EBdb1n4GLquLqavtmsxUbU
pvc0Ar6r3rN7X2ZSYc9fWShF/kJmkznXG0HUpAfTELDBcvTZdoOrPsT2UN+XTM3I
Y1ef/8Z6pplZeE+wf5e/NaSgvoLxS1B1DkAZKcEUvyitV4HoC75R52oV/w2cXok7
bSqRNUbnWuu/Snt0hsb3ZYVpaod27Zv/3OSUgz3rkX/KIRYCkzS3nS2yRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMZFBWsSy8+Fr6T/jhdruMwP2EhMB8GA1UdIwQY
MBaAFDmr61kXFukINF0yn//TcANSMVuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iMDhmMjItMTFmNi00ZWU1LWEyMzEt
YjdjZDQ0OTBhOTgzLzEvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9iMDhmMjItMTFmNi00ZWU1LWEyMzEtYjdjZDQ0OTBhOTgz
LzEvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReL5tZ+x
wTw6uUyeSNR2NkyyViRhJ3XotbzVBa2Mj4wzW2/gJFT9COIGMDsO6Mzw1tKDiPq4
9BbPN9bVC19PBFqOtIeqNhU1z3myHMdEJycZwnjbcF+o3PpEaYSi1vEEYTN9mN6n
CeyK31GSRfaGsjqiyAeSpy7txklE44LtOXGNCgMLmlOmxH3qrSTA+ECiDmzaIPJt
jWTTZMPDrBCSh4qDhOpCdQaknKxoaiKsfPRYEH7YdrWMUxHZn+z+BdnNvVFhtsVD
1Hfmg4CWO6+quts+s9NX+x94cYo2eP90lEiD9aL6tyq9WUF5MDdyKAwtUgKQNMsg
/clszR107KlBPw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:38 2025 by rpki-client