Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
File: OXbmqwhMnu7ehuKva95yFSdLlac.mft (raw, json)
Hash identifier: Q+gdzGIGslmkxOH/iUTtJ8b93gwYGRL2OLnAuxF64AU=
Subject key identifier: 7E:A7:65:35:DA:CC:3C:23:A9:79:0C:E9:C3:7D:42:5E:23:12:6B:11
Authority key identifier: 39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7
Certificate issuer: /CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
Certificate serial: 0198A0845883C6B412BB9CB13C56343C472A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
Manifest number: 162C
Signing time: Tue 12 Aug 2025 23:01:24 +0000
Manifest this update: Tue 12 Aug 2025 23:01:24 +0000
Manifest next update: Wed 13 Aug 2025 23:01:24 +0000
Files and hashes: 1: OXbmqwhMnu7ehuKva95yFSdLlac.crl (hash: SGFYac5KfrQzhhKbxP3dVZFzSiRDXvNzyW9egTFCa10=)
2: bS8D5tTeBAXDkMQSy-j-MAcdPro.roa (hash: R+yA1y5Nb8S44doc/dttKyd8pVatx4WMIyAI41rpB+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:84:58:83:c6:b4:12:bb:9c:b1:3c:56:34:3c:47:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
Validity
Not Before: Aug 12 23:01:24 2025 GMT
Not After : Aug 13 23:01:24 2025 GMT
Subject: CN=7ea76535dacc3c23a9790ce9c37d425e23126b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:ea:d4:f9:61:e1:16:a5:40:e9:e4:95:61:
c0:0d:66:0f:38:61:9b:85:f3:60:c2:bd:2d:16:fb:
61:0b:a9:14:51:a2:59:02:66:70:f3:58:ed:02:90:
ac:c6:4a:e0:1e:fe:d3:cc:8a:a9:26:44:23:be:95:
51:a9:f9:14:5b:0f:80:3e:17:47:b1:86:90:68:6d:
5a:5b:8e:38:46:0b:3e:96:17:9a:1a:d6:6e:79:11:
74:9d:35:0e:34:d0:f8:3f:47:81:6d:56:99:62:be:
2a:81:3a:11:3e:07:3d:ef:1a:47:d2:e5:ee:ba:9d:
96:b7:f0:d5:27:fc:36:a2:22:06:f5:a1:18:8c:80:
0f:8e:5f:60:f5:d2:e8:0f:7d:57:42:5d:cb:8c:77:
48:13:c4:63:a7:10:f9:75:34:82:15:a1:7d:30:38:
17:5d:83:53:d6:9a:7e:5a:c8:c2:1b:9e:78:44:d6:
6b:b0:dc:28:b2:ea:a3:dc:e1:cf:40:72:bf:0d:0a:
dc:02:bd:20:31:a5:85:17:79:e6:64:8d:2d:40:15:
f5:ac:ba:8e:c9:c1:fd:7f:ff:9f:30:fe:d7:f0:ed:
28:52:99:8d:69:7e:56:17:f6:17:49:9c:29:4c:50:
f7:bb:5d:d1:dc:64:c1:0b:e1:e8:aa:08:f7:ab:f5:
83:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A7:65:35:DA:CC:3C:23:A9:79:0C:E9:C3:7D:42:5E:23:12:6B:11
X509v3 Authority Key Identifier:
keyid:39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:cc:9a:b7:4a:37:8d:a3:b0:8d:6e:e8:e3:20:dd:f1:a0:68:
30:ef:9a:af:c8:7b:86:34:4c:4a:e6:ed:e1:80:a4:33:2f:6c:
3a:7e:ec:2e:77:b5:01:77:ad:7e:d6:fb:7e:e7:30:60:7f:89:
07:d2:6a:b0:24:b4:3d:96:ed:d6:7f:91:82:f1:ed:e0:10:c9:
df:00:aa:af:4c:1b:87:2c:2a:35:0c:d3:01:d2:7e:c9:b0:0c:
50:d9:2f:84:79:c1:88:d9:b5:a0:38:55:1b:59:9d:0a:99:19:
9a:f3:ad:5e:e4:81:39:2d:5b:8c:6a:94:bc:f4:44:4b:18:ff:
a2:4d:c2:88:93:8e:b4:38:80:f2:5f:66:da:31:03:b0:21:0f:
68:7b:bf:3c:3e:d7:02:7b:28:f2:b2:af:65:72:96:e3:98:11:
78:13:5d:f5:12:31:88:13:59:dd:c6:3f:20:d1:fe:53:53:e1:
a9:47:0b:2a:b9:aa:48:13:fe:b5:75:58:b4:9b:6b:01:4b:d2:
27:74:eb:6c:9c:8f:56:4b:1d:35:27:cb:25:94:cd:f1:cd:20:
46:b7:a8:fc:24:4b:56:6f:79:79:a0:32:fc:12:45:6e:05:40:
40:90:52:e8:cf:eb:24:74:bd:06:fe:9c:19:6f:c6:14:bd:42:
23:37:96:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZighFiDxrQSu5yxPFY0PEcqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzZlNmFiMDg0YzllZWVkZTg2ZTJhZjZiZGU3MjE1Mjc0
Yjk1YTcwHhcNMjUwODEyMjMwMTI0WhcNMjUwODEzMjMwMTI0WjAzMTEwLwYDVQQD
Eyg3ZWE3NjUzNWRhY2MzYzIzYTk3OTBjZTljMzdkNDI1ZTIzMTI2YjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs3q1Plh4RalQOnklWHADWYPOGGb
hfNgwr0tFvthC6kUUaJZAmZw81jtApCsxkrgHv7TzIqpJkQjvpVRqfkUWw+APhdH
sYaQaG1aW444Rgs+lheaGtZueRF0nTUONND4P0eBbVaZYr4qgToRPgc97xpH0uXu
up2Wt/DVJ/w2oiIG9aEYjIAPjl9g9dLoD31XQl3LjHdIE8RjpxD5dTSCFaF9MDgX
XYNT1pp+WsjCG554RNZrsNwosuqj3OHPQHK/DQrcAr0gMaWFF3nmZI0tQBX1rLqO
ycH9f/+fMP7X8O0oUpmNaX5WF/YXSZwpTFD3u13R3GTBC+Hoqgj3q/WDswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6nZTXazDwjqXkM6cN9Ql4jEmsRMB8GA1UdIwQY
MBaAFDl25qsITJ7u3obir2vechUnS5WnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hibXF3aE1udTdlaHVLdmE5NXlGU2RMbGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83MDI5Y2MtZDMzMS00NjA2LTg4OWMt
ZDY2Njc0Y2ZhNDI0LzEvT1hibXF3aE1udTdlaHVLdmE5NXlGU2RMbGFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC83MDI5Y2MtZDMzMS00NjA2LTg4OWMtZDY2Njc0Y2ZhNDI0
LzEvT1hibXF3aE1udTdlaHVLdmE5NXlGU2RMbGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8yat0o3
jaOwjW7o4yDd8aBoMO+ar8h7hjRMSubt4YCkMy9sOn7sLne1AXetftb7fucwYH+J
B9JqsCS0PZbt1n+RgvHt4BDJ3wCqr0wbhywqNQzTAdJ+ybAMUNkvhHnBiNm1oDhV
G1mdCpkZmvOtXuSBOS1bjGqUvPRESxj/ok3CiJOOtDiA8l9m2jEDsCEPaHu/PD7X
Anso8rKvZXKW45gReBNd9RIxiBNZ3cY/INH+U1PhqUcLKrmqSBP+tXVYtJtrAUvS
J3TrbJyPVksdNSfLJZTN8c0gRreo/CRLVm95eaAy/BJFbgVAQJBS6M/rJHS9Bv6c
GW/GFL1CIzeWgQ==
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:04 2025 by rpki-client