Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
File: oy2niZiHqsRJlYu5DrU1lRqXOgA.mft (raw, json)
Hash identifier: a6BSLJe3bIw9SdrTybSd94WHrHXecvpZ9dLtNwqci8c=
Subject key identifier: AC:1A:1C:9B:FA:23:D5:D8:81:69:B5:F9:8B:6F:1C:81:4B:39:8D:07
Authority key identifier: A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
Certificate issuer: /CN=a32da7899887aac449958bb90eb535951a973a00
Certificate serial: 019A52D2A5BB10B517A67FD43E5EA331570B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
Manifest number: 100E
Signing time: Wed 05 Nov 2025 07:02:07 +0000
Manifest this update: Wed 05 Nov 2025 07:02:07 +0000
Manifest next update: Thu 06 Nov 2025 07:02:07 +0000
Files and hashes: 1: oy2niZiHqsRJlYu5DrU1lRqXOgA.crl (hash: uE81H3JgvNaXDEc5T1pEy2zxmjk8DY8FPx7YOX3GHQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:a5:bb:10:b5:17:a6:7f:d4:3e:5e:a3:31:57:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32da7899887aac449958bb90eb535951a973a00
Validity
Not Before: Nov 5 07:02:07 2025 GMT
Not After : Nov 6 07:02:07 2025 GMT
Subject: CN=ac1a1c9bfa23d5d88169b5f98b6f1c814b398d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:b8:a0:fb:2d:8c:34:1d:a5:3c:0b:d5:11:
fc:2c:20:75:77:44:d1:62:0d:2a:d1:b5:eb:4c:dd:
43:6a:31:59:fa:fd:88:8a:d2:96:c8:19:09:54:d9:
b3:f8:63:8a:ba:df:e9:5f:16:b6:5a:8c:d2:36:f0:
e5:e0:28:2e:ad:8e:6e:a9:ab:61:5c:49:3b:8b:0c:
50:a7:2c:22:18:38:6b:c6:33:ee:9f:12:59:62:62:
79:7d:21:b9:05:9b:e9:77:c1:47:40:23:39:49:8f:
03:d3:7a:c0:87:69:eb:b7:7f:fa:84:10:9f:6d:4b:
8e:49:0b:77:01:6f:23:c2:73:a4:cd:98:20:b7:15:
38:5a:87:4c:54:d5:46:5c:66:5c:10:38:6d:51:05:
db:74:29:c6:60:58:46:e6:2f:ba:e5:98:9f:ba:9c:
37:f7:22:72:78:77:03:53:47:1e:75:c6:0e:61:90:
ca:5a:1d:79:97:77:ac:e3:5f:06:88:85:fb:19:df:
e2:86:ba:9c:17:aa:cb:bb:d9:3e:0a:8f:e9:79:d5:
f2:90:b4:73:d8:31:e1:fb:29:54:9d:7d:de:40:4a:
29:e8:19:eb:b7:95:52:89:15:a3:0c:27:f3:4d:5c:
aa:5d:13:31:aa:6b:3d:16:04:96:b5:86:22:e1:56:
ac:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1A:1C:9B:FA:23:D5:D8:81:69:B5:F9:8B:6F:1C:81:4B:39:8D:07
X509v3 Authority Key Identifier:
keyid:A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d0:83:7d:cf:0b:ae:78:2e:39:77:bf:f0:22:e3:f0:10:fb:
fe:59:9f:9a:38:b6:db:af:f3:4c:2f:94:00:f8:18:a7:4c:67:
06:2f:81:d0:27:96:86:6d:e7:0d:0e:ad:8e:b3:5e:bc:02:64:
2e:ef:ec:be:dd:21:eb:f1:0e:5b:77:b2:59:1c:6b:b5:5f:e6:
e2:fc:1d:ec:77:6d:bf:cc:ac:bf:07:c2:6c:9a:60:ff:91:73:
55:19:c8:40:fd:13:a2:a5:b6:88:0e:bd:0b:f4:e8:cf:18:13:
01:ee:74:71:fc:a9:d5:47:91:a4:66:76:fe:b2:62:70:80:6f:
f2:66:63:d9:a7:54:cf:48:9d:5b:75:e8:13:6a:84:e2:89:19:
d9:24:de:2c:dd:90:70:5c:60:d2:6e:6b:53:1c:78:4e:e5:23:
91:4b:f0:eb:e5:b7:34:70:f3:d5:cb:d7:95:f6:80:b9:23:d1:
03:66:45:6b:8f:71:af:88:6a:35:3e:cf:72:bb:bd:b0:f5:00:
51:a0:39:10:ef:e9:78:5c:e1:30:2c:dc:53:f8:23:18:30:49:
36:75:22:1c:40:96:4b:27:a6:b7:92:93:4f:8f:12:4c:b2:50:
5b:8d:98:80:f3:78:78:b3:c1:18:97:dc:7e:a4:6e:9e:cd:8c:
7e:83:fe:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0qW7ELUXpn/UPl6jMVcLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMmRhNzg5OTg4N2FhYzQ0OTk1OGJiOTBlYjUzNTk1MWE5
NzNhMDAwHhcNMjUxMTA1MDcwMjA3WhcNMjUxMTA2MDcwMjA3WjAzMTEwLwYDVQQD
EyhhYzFhMWM5YmZhMjNkNWQ4ODE2OWI1Zjk4YjZmMWM4MTRiMzk4ZDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHa4oPstjDQdpTwL1RH8LCB1d0TR
Yg0q0bXrTN1DajFZ+v2IitKWyBkJVNmz+GOKut/pXxa2WozSNvDl4CgurY5uqath
XEk7iwxQpywiGDhrxjPunxJZYmJ5fSG5BZvpd8FHQCM5SY8D03rAh2nrt3/6hBCf
bUuOSQt3AW8jwnOkzZggtxU4WodMVNVGXGZcEDhtUQXbdCnGYFhG5i+65Zifupw3
9yJyeHcDU0cedcYOYZDKWh15l3es418GiIX7Gd/ihrqcF6rLu9k+Co/pedXykLRz
2DHh+ylUnX3eQEop6Bnrt5VSiRWjDCfzTVyqXRMxqms9FgSWtYYi4VasqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwaHJv6I9XYgWm1+YtvHIFLOY0HMB8GA1UdIwQY
MBaAFKMtp4mYh6rESZWLuQ61NZUalzoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3kybmlaaUhxc1JKbFl1NURyVTFsUnFYT2dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hMzg4YjYtNDNjNi00NDU4LWFiZjUt
ZDMzMzJmOTA0NGVjLzEvb3kybmlaaUhxc1JKbFl1NURyVTFsUnFYT2dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9hMzg4YjYtNDNjNi00NDU4LWFiZjUtZDMzMzJmOTA0NGVj
LzEvb3kybmlaaUhxc1JKbFl1NURyVTFsUnFYT2dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNCDfc8L
rnguOXe/8CLj8BD7/lmfmji226/zTC+UAPgYp0xnBi+B0CeWhm3nDQ6tjrNevAJk
Lu/svt0h6/EOW3eyWRxrtV/m4vwd7Hdtv8ysvwfCbJpg/5FzVRnIQP0ToqW2iA69
C/TozxgTAe50cfyp1UeRpGZ2/rJicIBv8mZj2adUz0idW3XoE2qE4okZ2STeLN2Q
cFxg0m5rUxx4TuUjkUvw6+W3NHDz1cvXlfaAuSPRA2ZFa49xr4hqNT7Pcru9sPUA
UaA5EO/peFzhMCzcU/gjGDBJNnUiHECWSyemt5KTT48STLJQW42YgPN4eLPBGJfc
fqRuns2MfoP+1A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:36:07 2025 by rpki-client