Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier: R87dvbBDBzjtXJkMDH91Kv2FyUephU4Z3L3dhISPMAw=
Subject key identifier: 48:EE:45:FA:65:9C:39:B7:F0:0D:51:3B:AB:C0:C5:CD:84:C3:87:6A
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial: 01987ABFB30104303D0AD640BBE2D3C71BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number: 0D0E
Signing time: Tue 05 Aug 2025 15:00:40 +0000
Manifest this update: Tue 05 Aug 2025 15:00:40 +0000
Manifest next update: Wed 06 Aug 2025 15:00:40 +0000
Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: EaDYyv5sHwQcUsyWnZ1tN8QhF4wJuBsgYkO5DnsBtJM=)
2: dxC4OOVdD7y8lzmmwGYNpdpf-D0.roa (hash: 1F32hSGI4pbAFMDzlkPoS+O8tvJxdYgPLvmfvhN+IXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:b3:01:04:30:3d:0a:d6:40:bb:e2:d3:c7:1b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Validity
Not Before: Aug 5 15:00:40 2025 GMT
Not After : Aug 6 15:00:40 2025 GMT
Subject: CN=48ee45fa659c39b7f00d513babc0c5cd84c3876a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:22:61:b3:ef:da:aa:ce:f9:ce:f1:86:61:b5:
f9:8e:65:19:cf:e6:44:2e:85:2d:84:bf:23:8c:df:
dd:8e:bf:cc:99:96:44:ed:78:59:87:4e:5a:d4:21:
7b:fa:b8:55:b4:52:8c:29:9e:27:08:e7:2f:38:77:
2f:ca:bd:48:ae:38:a4:2d:ae:e7:f5:0d:8f:fb:1e:
b6:5f:9a:e8:22:09:73:b1:43:57:59:44:82:4d:f8:
ab:57:f8:ed:ce:b1:34:0b:fd:37:7b:3a:13:fa:b1:
eb:5d:f2:58:55:2a:87:88:99:2d:22:e9:32:22:87:
5a:3c:ba:25:c7:60:fc:9e:b3:b6:25:8a:32:3b:5b:
78:66:80:08:5d:61:56:ca:5f:cf:47:05:ec:31:5f:
a8:e8:fe:02:0a:ae:c4:3e:97:da:ad:4b:78:e5:04:
97:6f:92:50:da:2a:eb:1c:3b:e3:82:be:d0:61:ec:
e2:bb:4d:c9:49:e0:56:6c:99:13:44:14:d2:e8:85:
d8:50:51:22:8e:ce:43:2a:db:f7:1f:48:c7:08:53:
e2:63:8c:7c:c2:08:10:a3:ea:2b:1f:15:a3:56:1e:
db:2d:07:66:01:ae:79:32:82:9f:67:91:06:05:66:
32:69:b0:1e:2f:d2:df:76:ea:4b:36:9b:ec:f5:13:
61:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EE:45:FA:65:9C:39:B7:F0:0D:51:3B:AB:C0:C5:CD:84:C3:87:6A
X509v3 Authority Key Identifier:
keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1f:bb:ac:0e:c1:90:81:87:9e:72:d7:9a:d9:eb:ff:b0:f5:
19:aa:b3:f3:a0:50:de:9e:64:fc:34:8b:78:0a:a7:46:47:6b:
b7:a4:56:41:2e:c7:02:18:49:29:87:9d:62:4f:02:f7:32:8b:
68:8f:0e:93:ca:c1:e3:38:d0:5b:52:65:67:c0:4a:89:27:74:
95:4c:97:a1:6a:34:72:ba:b3:81:be:6a:85:53:8c:72:13:21:
75:b0:73:bd:58:ae:ae:d5:b2:1f:ff:7c:c7:6b:11:48:64:ef:
98:bd:f6:fe:f7:19:d9:d4:33:79:64:5a:bc:bd:4a:c3:67:b4:
25:b8:a4:f2:0b:21:73:01:2e:50:ef:2a:76:dd:89:8c:d4:99:
43:86:a1:21:76:0f:84:5e:5b:10:d0:17:e5:a7:f2:9b:4c:90:
02:7f:75:e3:6e:11:ea:8b:cc:21:4f:89:23:68:ae:e0:4a:36:
1b:70:e4:2b:dd:ce:19:a9:96:9c:6f:54:8e:18:49:29:ad:e7:
d8:1a:f3:d1:ba:38:55:e4:fb:ab:49:57:b5:7a:2b:d6:63:6d:
9f:a4:e7:97:75:5d:3f:0f:98:b7:52:4a:8a:56:b8:2a:56:16:
5a:7c:2e:25:52:8a:6a:08:e1:72:11:4a:08:4f:52:21:64:f4:
54:7c:7e:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6v7MBBDA9CtZAu+LTxxv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MjlkMTMxYmU1MjgxMGU0N2M5Y2JiZjgzYTNmZmJkNGY3
Y2JkYmYwHhcNMjUwODA1MTUwMDQwWhcNMjUwODA2MTUwMDQwWjAzMTEwLwYDVQQD
Eyg0OGVlNDVmYTY1OWMzOWI3ZjAwZDUxM2JhYmMwYzVjZDg0YzM4NzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCJhs+/aqs75zvGGYbX5jmUZz+ZE
LoUthL8jjN/djr/MmZZE7XhZh05a1CF7+rhVtFKMKZ4nCOcvOHcvyr1IrjikLa7n
9Q2P+x62X5roIglzsUNXWUSCTfirV/jtzrE0C/03ezoT+rHrXfJYVSqHiJktIuky
IodaPLolx2D8nrO2JYoyO1t4ZoAIXWFWyl/PRwXsMV+o6P4CCq7EPpfarUt45QSX
b5JQ2irrHDvjgr7QYeziu03JSeBWbJkTRBTS6IXYUFEijs5DKtv3H0jHCFPiY4x8
wggQo+orHxWjVh7bLQdmAa55MoKfZ5EGBWYyabAeL9LfdupLNpvs9RNhIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjuRfplnDm38A1RO6vAxc2Ew4dqMB8GA1UdIwQY
MBaAFDgp0TG+UoEOR8nLv4Oj/71PfL2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYt
YjAzOGRiODk4YjdlLzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYtYjAzOGRiODk4Yjdl
LzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPB+7rA7B
kIGHnnLXmtnr/7D1Gaqz86BQ3p5k/DSLeAqnRkdrt6RWQS7HAhhJKYedYk8C9zKL
aI8Ok8rB4zjQW1JlZ8BKiSd0lUyXoWo0crqzgb5qhVOMchMhdbBzvViurtWyH/98
x2sRSGTvmL32/vcZ2dQzeWRavL1Kw2e0Jbik8gshcwEuUO8qdt2JjNSZQ4ahIXYP
hF5bENAX5afym0yQAn91424R6ovMIU+JI2iu4Eo2G3DkK93OGamWnG9UjhhJKa3n
2Brz0bo4VeT7q0lXtXor1mNtn6Tnl3VdPw+Yt1JKila4KlYWWnwuJVKKagjhchFK
CE9SIWT0VHx+rQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:14:41 2025 by rpki-client