Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
File: oUYsqczoyP_R-dfefH6QXG6JPPw.mft (raw, json)
Hash identifier: br8WSe8J8D74uJY7lSguvqZJ65e46jp3C7bXI588rLg=
Subject key identifier: 37:86:13:04:05:7D:A5:A2:BC:64:46:25:D6:74:AF:CC:E3:03:07:6C
Authority key identifier: A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC
Certificate issuer: /CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc
Certificate serial: 019879AEF13B1DEB6A04B47F8A50432EA328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
Manifest number: 1616
Signing time: Tue 05 Aug 2025 10:02:44 +0000
Manifest this update: Tue 05 Aug 2025 10:02:44 +0000
Manifest next update: Wed 06 Aug 2025 10:02:44 +0000
Files and hashes: 1: oUYsqczoyP_R-dfefH6QXG6JPPw.crl (hash: kAg8j+S6rFFBdLhz3flwjbVFjcuAYLMyQEl7iCUrrmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:f1:3b:1d:eb:6a:04:b4:7f:8a:50:43:2e:a3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc
Validity
Not Before: Aug 5 10:02:44 2025 GMT
Not After : Aug 6 10:02:44 2025 GMT
Subject: CN=37861304057da5a2bc644625d674afcce303076c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:4b:91:c3:92:f2:52:12:12:61:af:90:40:
52:f3:92:d1:a7:8f:6f:7a:1d:99:a2:2b:08:e1:40:
ea:b4:94:20:08:2f:af:15:a7:ef:25:20:1b:fe:27:
cc:90:3a:6d:66:1b:81:1d:d0:2b:e9:75:82:2c:0c:
4f:be:fd:d8:73:a9:9b:9f:a6:7c:e1:67:64:9e:4f:
42:28:92:a3:85:18:c3:a6:4b:88:d4:fe:cd:70:1e:
51:cc:e3:fb:79:9a:6a:7e:2f:72:8b:8a:2c:10:e8:
f9:4d:1b:02:c2:25:c1:48:94:63:8d:9b:9d:5e:dc:
e6:1d:2c:f1:3b:a7:7d:e2:3f:44:8d:6a:5f:25:11:
30:a5:54:3b:0a:cd:d0:ab:9b:28:6a:02:b4:74:4b:
47:76:89:96:7a:93:84:6d:6c:e1:ff:0f:f2:54:90:
4f:66:e1:7d:30:1a:19:f5:1c:be:4a:d1:11:22:bf:
c6:7a:14:70:78:73:8c:6f:8b:f1:6f:d4:55:a5:01:
83:b8:da:b0:ca:b3:99:5c:c9:c3:cc:35:d2:5e:f5:
43:11:6b:a5:e7:60:26:b4:ea:bb:c2:84:c1:83:4f:
5d:cf:1e:f2:7a:16:eb:96:9f:19:79:4b:0d:7c:9e:
99:77:8d:8c:ee:d2:5e:77:ef:de:14:1e:03:8d:af:
a0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:86:13:04:05:7D:A5:A2:BC:64:46:25:D6:74:AF:CC:E3:03:07:6C
X509v3 Authority Key Identifier:
keyid:A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:48:08:1b:19:f9:8f:48:ff:c2:d0:96:67:47:de:e6:0b:e4:
67:e7:66:b2:18:95:7e:c2:00:d8:1e:33:96:21:62:36:b1:28:
91:46:1d:ba:ad:e5:eb:01:2d:71:a8:bc:da:d8:17:83:cf:e5:
cf:97:34:5b:d0:8c:17:7a:4a:60:94:8d:ca:c2:64:fb:10:e8:
0d:8b:75:cc:33:9b:8e:33:12:ea:42:b5:9a:91:ac:b6:71:39:
cf:97:b5:2f:6b:58:5e:d2:01:15:08:cd:58:d5:ac:78:81:0c:
06:de:1f:80:60:f0:53:3e:c6:9d:8c:38:07:e8:ed:61:81:b4:
35:8c:29:bf:3c:50:f1:1e:65:2e:bf:b7:08:33:af:95:c6:89:
69:89:8e:e0:1e:a3:90:aa:6e:e3:37:76:5c:04:9b:ac:f6:d9:
39:6f:47:1c:6f:4c:ec:6f:88:c4:aa:f1:39:01:36:9c:23:05:
a1:5d:a4:89:af:5a:6f:56:12:41:2f:8c:92:dd:ed:79:da:ff:
65:62:6a:bc:c5:9f:7e:5c:3f:c3:5c:fb:24:0d:be:f5:6c:94:
60:92:9c:8d:46:85:28:23:9a:44:41:b5:b7:b7:81:2b:a4:b5:
da:ca:0f:28:48:a1:50:b2:76:55:cd:71:e8:61:a4:6a:9e:11:
a2:2c:d4:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh5rvE7HetqBLR/ilBDLqMoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNDYyY2E5Y2NlOGM4ZmZkMWY5ZDdkZTdjN2U5MDVjNmU4
OTNjZmMwHhcNMjUwODA1MTAwMjQ0WhcNMjUwODA2MTAwMjQ0WjAzMTEwLwYDVQQD
EygzNzg2MTMwNDA1N2RhNWEyYmM2NDQ2MjVkNjc0YWZjY2UzMDMwNzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr61LkcOS8lISEmGvkEBS85LRp49v
eh2ZoisI4UDqtJQgCC+vFafvJSAb/ifMkDptZhuBHdAr6XWCLAxPvv3Yc6mbn6Z8
4Wdknk9CKJKjhRjDpkuI1P7NcB5RzOP7eZpqfi9yi4osEOj5TRsCwiXBSJRjjZud
XtzmHSzxO6d94j9EjWpfJREwpVQ7Cs3Qq5soagK0dEtHdomWepOEbWzh/w/yVJBP
ZuF9MBoZ9Ry+StERIr/GehRweHOMb4vxb9RVpQGDuNqwyrOZXMnDzDXSXvVDEWul
52AmtOq7woTBg09dzx7yehbrlp8ZeUsNfJ6Zd42M7tJed+/eFB4Dja+guwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeGEwQFfaWivGRGJdZ0r8zjAwdsMB8GA1UdIwQY
MBaAFKFGLKnM6Mj/0fnX3nx+kFxuiTz8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1VZc3Fjem95UF9SLWRmZWZINlFYRzZKUFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83OTcxZWQtNTg0Mi00ZTViLWI4Mjgt
MjcyY2M5MmNjNjBiLzEvb1VZc3Fjem95UF9SLWRmZWZINlFYRzZKUFB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83OTcxZWQtNTg0Mi00ZTViLWI4MjgtMjcyY2M5MmNjNjBi
LzEvb1VZc3Fjem95UF9SLWRmZWZINlFYRzZKUFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0gIGxn5
j0j/wtCWZ0fe5gvkZ+dmshiVfsIA2B4zliFiNrEokUYduq3l6wEtcai82tgXg8/l
z5c0W9CMF3pKYJSNysJk+xDoDYt1zDObjjMS6kK1mpGstnE5z5e1L2tYXtIBFQjN
WNWseIEMBt4fgGDwUz7GnYw4B+jtYYG0NYwpvzxQ8R5lLr+3CDOvlcaJaYmO4B6j
kKpu4zd2XASbrPbZOW9HHG9M7G+IxKrxOQE2nCMFoV2kia9ab1YSQS+Mkt3tedr/
ZWJqvMWfflw/w1z7JA2+9WyUYJKcjUaFKCOaREG1t7eBK6S12soPKEihULJ2Vc1x
6GGkap4RoizUOw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:20:20 2025 by rpki-client