Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
File: OQGfnAqym0Lg2xLprIezJ7_FWvk.mft (raw, json)
Hash identifier: dW0OjZ5E2F1OhS83Iv20CK/yLk2c5fi+Q/EUcM9XG1U=
Subject key identifier: 82:B7:EB:02:51:A6:61:52:F2:30:07:97:1C:F8:47:5C:D6:97:3D:6E
Authority key identifier: 39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
Certificate issuer: /CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Certificate serial: 019A50E442953B708578B45A7C0A186E662B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 22:02:07 +0000
Manifest this update: Tue 04 Nov 2025 22:02:07 +0000
Manifest next update: Wed 05 Nov 2025 22:02:07 +0000
Files and hashes: 1: OQGfnAqym0Lg2xLprIezJ7_FWvk.crl (hash: xiAiqzv1XMJ2gguZTlLR7bRI+bSv8zW1QOBv9+RVQpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:42:95:3b:70:85:78:b4:5a:7c:0a:18:6e:66:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Validity
Not Before: Nov 4 22:02:07 2025 GMT
Not After : Nov 5 22:02:07 2025 GMT
Subject: CN=82b7eb0251a66152f23007971cf8475cd6973d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:79:e5:1c:cb:4b:dc:10:f5:b0:92:6b:dd:6c:
69:77:7f:2e:24:1a:0d:31:47:f8:ec:e7:0d:96:5e:
cd:7e:0e:48:bf:24:60:0c:fe:8e:b3:7b:b4:ce:17:
21:84:59:d5:c7:ee:36:e3:f3:3d:38:40:7a:6c:a9:
39:2f:74:8a:f0:ae:62:6b:b7:1b:13:57:8a:7c:d6:
c7:5e:dc:c4:47:82:c9:5f:cb:c3:ee:10:9d:ba:1b:
f0:57:2d:01:2e:24:4e:d3:67:15:c4:8e:fa:b4:aa:
72:1e:c5:75:0f:73:c1:ae:b1:62:1d:42:ae:20:72:
9d:09:c3:b2:24:3e:be:f0:b6:79:56:1c:c9:b6:fa:
dc:81:4d:96:9a:f4:e9:44:c0:ee:a7:f9:2b:5f:70:
ac:ca:f6:c7:6d:e0:e4:da:87:06:a1:c0:9b:76:c1:
66:68:4d:d5:3f:ab:17:a2:6b:bd:ad:fb:47:9b:55:
6c:9b:7f:bc:68:be:12:37:03:51:3c:3a:02:a5:00:
35:96:a5:15:c3:2f:a6:f2:7e:ed:a9:a1:ac:8c:18:
c7:8e:a4:82:5b:fa:c2:00:96:6c:2a:52:ed:c2:f8:
0b:6b:b8:41:8f:2e:c0:c2:0a:67:60:ea:93:99:db:
07:99:78:fa:12:b7:a2:b4:de:e9:43:87:2c:b1:b3:
d0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B7:EB:02:51:A6:61:52:F2:30:07:97:1C:F8:47:5C:D6:97:3D:6E
X509v3 Authority Key Identifier:
keyid:39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:cf:95:22:8e:71:fc:c4:aa:c4:d6:28:a8:66:e7:05:49:d1:
88:9c:b7:72:da:68:4a:b6:40:5d:1d:e2:68:7b:c4:cc:3d:14:
d2:c2:25:ef:25:28:48:49:fc:19:62:4a:1b:11:e2:67:f3:32:
94:e0:38:d3:df:67:0e:10:d6:70:7c:f3:7d:9f:22:76:45:17:
b0:f8:15:f6:56:74:c3:9d:50:8b:57:40:d5:12:35:ba:43:be:
41:bb:a0:a7:63:98:26:92:9d:a7:3c:ac:af:70:f5:e1:46:a4:
8a:ad:14:7a:77:99:cc:4a:4b:ef:5c:6e:bc:6f:55:fb:16:4e:
e3:46:ac:cd:3f:64:ac:44:da:64:80:15:02:07:5f:15:b5:7f:
7e:c7:22:ec:7e:2f:10:7c:fe:f0:59:1e:29:66:41:87:11:0c:
44:02:ed:ea:80:b9:c6:1b:ab:15:40:6c:3c:76:90:3d:5d:eb:
dc:f7:5c:66:86:8e:5e:cf:40:0a:c1:7a:23:f6:7f:48:fb:dc:
91:7d:6d:ba:28:d5:e6:66:f3:6c:e1:0e:c3:e0:d3:fc:3d:80:
a1:9f:1e:e9:0a:b4:1f:e2:83:c8:ea:38:0f:39:af:b7:f0:3b:
20:f3:2d:85:92:0e:51:ad:86:f4:7a:42:0e:1f:30:95:62:9e:
90:ee:57:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ5EKVO3CFeLRafAoYbmYrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MDE5ZjljMGFiMjliNDJlMGRiMTJlOWFjODdiMzI3YmZj
NTVhZjkwHhcNMjUxMTA0MjIwMjA3WhcNMjUxMTA1MjIwMjA3WjAzMTEwLwYDVQQD
Eyg4MmI3ZWIwMjUxYTY2MTUyZjIzMDA3OTcxY2Y4NDc1Y2Q2OTczZDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53nlHMtL3BD1sJJr3Wxpd38uJBoN
MUf47OcNll7Nfg5IvyRgDP6Os3u0zhchhFnVx+424/M9OEB6bKk5L3SK8K5ia7cb
E1eKfNbHXtzER4LJX8vD7hCduhvwVy0BLiRO02cVxI76tKpyHsV1D3PBrrFiHUKu
IHKdCcOyJD6+8LZ5VhzJtvrcgU2WmvTpRMDup/krX3CsyvbHbeDk2ocGocCbdsFm
aE3VP6sXomu9rftHm1Vsm3+8aL4SNwNRPDoCpQA1lqUVwy+m8n7tqaGsjBjHjqSC
W/rCAJZsKlLtwvgLa7hBjy7AwgpnYOqTmdsHmXj6EreitN7pQ4cssbPQWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIK36wJRpmFS8jAHlxz4R1zWlz1uMB8GA1UdIwQY
MBaAFDkBn5wKsptC4NsS6ayHsye/xVr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1FHZm5BcXltMExnMnhMcHJJZXpKN19GV3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80MzBjODEtZWU0Yi00ZTg4LWEzNmYt
Nzg4ZjVhNTgwNDRmLzEvT1FHZm5BcXltMExnMnhMcHJJZXpKN19GV3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80MzBjODEtZWU0Yi00ZTg4LWEzNmYtNzg4ZjVhNTgwNDRm
LzEvT1FHZm5BcXltMExnMnhMcHJJZXpKN19GV3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8+VIo5x
/MSqxNYoqGbnBUnRiJy3ctpoSrZAXR3iaHvEzD0U0sIl7yUoSEn8GWJKGxHiZ/My
lOA4099nDhDWcHzzfZ8idkUXsPgV9lZ0w51Qi1dA1RI1ukO+Qbugp2OYJpKdpzys
r3D14Uakiq0UeneZzEpL71xuvG9V+xZO40aszT9krETaZIAVAgdfFbV/fsci7H4v
EHz+8FkeKWZBhxEMRALt6oC5xhurFUBsPHaQPV3r3PdcZoaOXs9ACsF6I/Z/SPvc
kX1tuijV5mbzbOEOw+DT/D2AoZ8e6Qq0H+KDyOo4Dzmvt/A7IPMthZIOUa2G9HpC
Dh8wlWKekO5XSg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:10:46 2025 by rpki-client