
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
File: OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft (raw, json)
Hash identifier: HfRCV/XdQ599Tluac+EPmrAskB0Gt86CGwtI+4DpiOY=
Subject key identifier: 50:7B:1D:31:1A:FE:52:FA:7F:8F:DB:75:44:55:5D:DA:DE:2D:81:D1
Authority key identifier: 39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5
Certificate issuer: /CN=39805a05b8d9f0dfc43834c664d624715439f0d5
Certificate serial: 0198879F7768741F6567CA3DC465616B3FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 03:00:31 +0000
Manifest this update: Fri 08 Aug 2025 03:00:31 +0000
Manifest next update: Sat 09 Aug 2025 03:00:31 +0000
Files and hashes: 1: OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl (hash: UOMqQ3a2JCoF8w8+e/W1pOZgTVh0x0ACc5j2TTLVM94=)
2: RsGZdVH4KWGZ4OCvnGaMXWv4oaQ.roa (hash: fuepCE8j+3Iy2fKvIdO+nibeCW6A9px2SfnOVg5ddX0=)
3: fYkfiykKnS8ZeTHGRB-UgiJB3G8.roa (hash: r/260Im8uYUydEHgzIf9ZOg2UlQ6MQMr6ct6EbwfvX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:9f:77:68:74:1f:65:67:ca:3d:c4:65:61:6b:3f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39805a05b8d9f0dfc43834c664d624715439f0d5
Validity
Not Before: Aug 8 03:00:31 2025 GMT
Not After : Aug 9 03:00:31 2025 GMT
Subject: CN=507b1d311afe52fa7f8fdb7544555ddade2d81d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:e7:43:78:30:1b:14:5a:c0:48:27:88:f5:
fb:75:61:96:8e:9b:51:aa:85:d6:b2:63:e1:87:2d:
0b:7f:42:93:11:f4:21:44:f3:4f:15:32:1c:76:6e:
b3:bd:25:1a:25:28:74:25:c3:ea:a9:88:6c:e6:31:
14:7a:1e:91:40:a4:74:33:2f:71:4c:d6:08:c2:ab:
9f:d8:8b:ac:dd:ab:85:1d:c9:7a:23:3c:48:d2:4c:
b6:32:b2:2a:b0:90:bf:4d:af:09:2c:20:11:eb:d5:
c6:ad:ef:e9:89:52:0c:54:9f:ed:24:14:4e:f4:15:
12:2d:a0:b4:27:32:28:cd:29:bb:9f:68:3a:25:10:
2b:b9:90:3c:df:9f:f7:33:53:0b:f9:e9:05:8a:28:
6d:93:4b:34:04:74:e6:64:47:fc:a5:38:03:2a:09:
f2:3b:21:09:37:44:bc:bc:23:a0:e4:91:32:56:21:
d4:2f:a6:1e:6b:bf:f3:cc:5e:4b:74:0f:77:bf:a7:
02:14:ed:21:3d:54:f8:94:97:89:80:4f:ae:9f:9c:
2a:54:ec:1e:84:63:a4:f0:63:a2:df:d6:a6:66:3c:
8a:f3:22:b5:7d:87:b0:b0:cc:f8:d0:2d:d5:8e:59:
c2:f6:5b:78:13:ea:3c:8b:6c:26:fe:76:38:bc:0a:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7B:1D:31:1A:FE:52:FA:7F:8F:DB:75:44:55:5D:DA:DE:2D:81:D1
X509v3 Authority Key Identifier:
keyid:39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:f5:d6:03:5b:b9:76:8b:e2:6c:f5:f5:39:20:be:b0:bb:37:
bd:7a:9b:9e:ea:5f:cc:1d:54:e6:54:d4:ee:be:25:6f:ee:9d:
17:1e:16:ba:b4:ff:3d:4e:ab:8d:01:ac:98:e7:7a:cc:0f:23:
c5:2a:6f:1a:f8:73:63:2f:6d:b1:ff:de:2f:e3:36:d3:fa:f0:
82:92:ea:6d:61:bd:a4:57:59:bc:90:52:e1:6f:b0:32:88:59:
85:a3:81:5f:c2:10:7f:bf:d7:a4:eb:a3:f6:1b:5e:f5:c2:80:
40:77:4f:6a:23:61:14:13:fd:c1:de:a1:e1:6e:0d:30:e4:cc:
a5:14:4c:0c:16:9f:6c:c4:f9:bc:f1:f3:46:54:b8:d1:4d:1e:
7c:db:c0:a7:fa:75:ad:1a:03:ba:c0:69:63:bb:04:42:ee:37:
53:6c:60:79:a0:e1:61:19:fc:33:da:24:59:6a:45:16:52:23:
25:07:6d:a2:9c:7c:9c:cd:5d:48:ac:ab:05:a7:79:60:40:a3:
6f:be:4b:b1:0c:34:70:ed:6c:99:9e:ba:e5:fe:6c:be:aa:64:
5d:a9:9f:dd:2a:ad:02:3a:e3:79:0a:5d:91:83:74:2d:af:0f:
34:77:41:8d:6e:ad:02:41:d3:3a:69:b1:05:06:76:e5:7e:d4:
65:90:3a:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiHn3dodB9lZ8o9xGVhaz+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ODA1YTA1YjhkOWYwZGZjNDM4MzRjNjY0ZDYyNDcxNTQz
OWYwZDUwHhcNMjUwODA4MDMwMDMxWhcNMjUwODA5MDMwMDMxWjAzMTEwLwYDVQQD
Eyg1MDdiMWQzMTFhZmU1MmZhN2Y4ZmRiNzU0NDU1NWRkYWRlMmQ4MWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCXnQ3gwGxRawEgniPX7dWGWjptR
qoXWsmPhhy0Lf0KTEfQhRPNPFTIcdm6zvSUaJSh0JcPqqYhs5jEUeh6RQKR0My9x
TNYIwquf2Ius3auFHcl6IzxI0ky2MrIqsJC/Ta8JLCAR69XGre/piVIMVJ/tJBRO
9BUSLaC0JzIozSm7n2g6JRAruZA835/3M1ML+ekFiihtk0s0BHTmZEf8pTgDKgny
OyEJN0S8vCOg5JEyViHUL6Yea7/zzF5LdA93v6cCFO0hPVT4lJeJgE+un5wqVOwe
hGOk8GOi39amZjyK8yK1fYewsMz40C3VjlnC9lt4E+o8i2wm/nY4vAokCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFB7HTEa/lL6f4/bdURVXdreLYHRMB8GA1UdIwQY
MBaAFDmAWgW42fDfxDg0xmTWJHFUOfDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1lCYUJialo4Tl9FT0RUR1pOWWtjVlE1OE5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMDY5NDItYWZjOC00MzM2LTk3ZWUt
YWVlNjk2ZjgzOTAzLzEvT1lCYUJialo4Tl9FT0RUR1pOWWtjVlE1OE5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iMDY5NDItYWZjOC00MzM2LTk3ZWUtYWVlNjk2ZjgzOTAz
LzEvT1lCYUJialo4Tl9FT0RUR1pOWWtjVlE1OE5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyvXWA1u5
dovibPX1OSC+sLs3vXqbnupfzB1U5lTU7r4lb+6dFx4WurT/PU6rjQGsmOd6zA8j
xSpvGvhzYy9tsf/eL+M20/rwgpLqbWG9pFdZvJBS4W+wMohZhaOBX8IQf7/XpOuj
9hte9cKAQHdPaiNhFBP9wd6h4W4NMOTMpRRMDBafbMT5vPHzRlS40U0efNvAp/p1
rRoDusBpY7sEQu43U2xgeaDhYRn8M9okWWpFFlIjJQdtopx8nM1dSKyrBad5YECj
b75LsQw0cO1smZ665f5svqpkXamf3SqtAjrjeQpdkYN0La8PNHdBjW6tAkHTOmmx
BQZ25X7UZZA6bw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:02:04 2025 by rpki-client