Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
File: Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft (raw, json)
Hash identifier: R9bMLVI9BQobE+gZqid6tc9OO8FqRPoN9kibF/nuPxY=
Subject key identifier: 36:C0:8F:77:19:05:27:7F:91:63:23:49:33:E5:AD:0B:08:D0:FF:17
Authority key identifier: 3A:A9:E9:83:2E:D2:5D:E7:8C:3C:E0:50:12:08:26:10:66:28:1F:51
Certificate issuer: /CN=3aa9e9832ed25de78c3ce0501208261066281f51
Certificate serial: 0198D8BD7B7C554796A7719CDD71F9790CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
Manifest number: 1093
Signing time: Sat 23 Aug 2025 21:02:33 +0000
Manifest this update: Sat 23 Aug 2025 21:02:33 +0000
Manifest next update: Sun 24 Aug 2025 21:02:33 +0000
Files and hashes: 1: Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl (hash: FZZkjKtwC8Bue5r0FAwHG8v6+XCv1O8wyMObq8uwZ5c=)
2: aWYIXcaJkiVxLLibbCxl3jRBEqg.roa (hash: is1rfoaga6D1caCReE6B6u2V3E2PMjX4LQvHyaYSnhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 21:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:7b:7c:55:47:96:a7:71:9c:dd:71:f9:79:0c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa9e9832ed25de78c3ce0501208261066281f51
Validity
Not Before: Aug 23 21:02:33 2025 GMT
Not After : Aug 24 21:02:33 2025 GMT
Subject: CN=36c08f771905277f9163234933e5ad0b08d0ff17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:59:57:38:05:36:f1:05:c4:cc:ed:b9:40:7e:
3a:46:2d:3d:b6:07:8d:95:e0:8a:fb:12:ac:69:19:
7d:24:ca:5c:20:98:3b:50:6c:58:f8:28:77:bb:13:
32:f8:2c:28:8b:19:c7:fb:8f:82:dc:0c:88:78:9a:
b7:4e:9d:e8:8f:ff:f2:a1:a1:ac:2b:e6:31:5a:11:
95:72:4e:92:3d:70:a2:6a:2b:fe:02:6b:6f:59:b1:
b7:63:f6:50:f6:2b:39:12:79:17:be:bb:51:6b:38:
73:f8:3a:06:61:07:29:62:ed:e7:6e:a5:08:64:ca:
28:05:ef:74:0c:92:17:e5:29:bf:e4:8b:09:49:c4:
e0:5b:de:0c:26:de:b3:ee:46:54:0b:11:be:c3:5c:
2b:92:ff:ad:a2:66:16:23:44:13:eb:e4:19:8d:d0:
fa:eb:42:d5:2c:7a:d8:85:1c:7c:db:f2:ed:99:1c:
83:a0:c8:4a:5a:db:78:cb:ea:12:ce:e8:f8:7a:25:
43:32:d5:bf:01:c0:82:f4:57:79:4a:02:75:85:58:
93:a1:23:34:3d:d2:e0:70:94:91:00:c9:f9:2d:1c:
c1:b7:2e:06:3b:1d:af:83:38:ab:61:43:88:a9:ec:
0a:90:8a:df:19:c0:41:36:51:66:c1:e7:c7:7f:27:
8a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C0:8F:77:19:05:27:7F:91:63:23:49:33:E5:AD:0B:08:D0:FF:17
X509v3 Authority Key Identifier:
keyid:3A:A9:E9:83:2E:D2:5D:E7:8C:3C:E0:50:12:08:26:10:66:28:1F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:27:38:5f:2b:6e:a5:79:a4:9f:29:a8:08:94:d6:90:7d:0c:
96:1c:7d:10:37:be:92:a8:66:8f:e2:c1:f6:60:aa:a5:90:e8:
16:36:27:2a:27:bb:0d:9c:47:cd:a5:f7:0f:97:41:17:3c:61:
31:bf:88:f3:10:99:d4:7d:31:19:59:4a:e2:4a:9d:04:48:ae:
1f:fd:b8:93:5d:9e:8a:15:64:0d:27:42:b3:ef:bd:57:05:80:
14:29:19:57:84:c2:46:58:8e:bf:6d:85:ba:d7:a9:3a:43:af:
7c:0f:c4:41:4a:11:e3:18:7d:80:98:47:18:04:f1:ec:ee:5e:
64:36:ef:db:55:bc:74:a6:fe:b0:c2:4d:ee:b8:17:1a:8c:bb:
8f:26:13:12:2f:67:f6:ee:95:20:77:18:6a:06:44:83:a1:1c:
e5:19:cf:96:59:2e:0a:f3:7f:96:bd:a0:e4:e0:93:12:35:f9:
71:d4:3b:47:f8:60:c3:0d:fa:02:89:7f:38:98:f2:55:a9:bd:
28:62:b1:8b:64:87:d6:e0:bd:a3:23:72:4b:9a:44:eb:10:72:
72:a5:64:1a:1e:05:5f:0d:a6:ad:f2:af:00:29:f2:d8:a9:80:
ed:f0:22:02:37:1e:f9:94:6f:38:31:67:99:75:81:d1:2f:c8:
cd:bd:65:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYvXt8VUeWp3Gc3XH5eQz1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYTllOTgzMmVkMjVkZTc4YzNjZTA1MDEyMDgyNjEwNjYy
ODFmNTEwHhcNMjUwODIzMjEwMjMzWhcNMjUwODI0MjEwMjMzWjAzMTEwLwYDVQQD
EygzNmMwOGY3NzE5MDUyNzdmOTE2MzIzNDkzM2U1YWQwYjA4ZDBmZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VlXOAU28QXEzO25QH46Ri09tgeN
leCK+xKsaRl9JMpcIJg7UGxY+Ch3uxMy+CwoixnH+4+C3AyIeJq3Tp3oj//yoaGs
K+YxWhGVck6SPXCiaiv+AmtvWbG3Y/ZQ9is5EnkXvrtRazhz+DoGYQcpYu3nbqUI
ZMooBe90DJIX5Sm/5IsJScTgW94MJt6z7kZUCxG+w1wrkv+tomYWI0QT6+QZjdD6
60LVLHrYhRx82/LtmRyDoMhKWtt4y+oSzuj4eiVDMtW/AcCC9Fd5SgJ1hViToSM0
PdLgcJSRAMn5LRzBty4GOx2vgzirYUOIqewKkIrfGcBBNlFmwefHfyeKSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbAj3cZBSd/kWMjSTPlrQsI0P8XMB8GA1UdIwQY
MBaAFDqp6YMu0l3njDzgUBIIJhBmKB9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3FucGd5N1NYZWVNUE9CUUVnZ21FR1lvSDFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81ZmQyNzMtZjNhOS00NzU1LWIyM2Et
M2JiZDg4N2QwNWMyLzEvT3FucGd5N1NYZWVNUE9CUUVnZ21FR1lvSDFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy81ZmQyNzMtZjNhOS00NzU1LWIyM2EtM2JiZDg4N2QwNWMy
LzEvT3FucGd5N1NYZWVNUE9CUUVnZ21FR1lvSDFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSc4Xytu
pXmknymoCJTWkH0Mlhx9EDe+kqhmj+LB9mCqpZDoFjYnKie7DZxHzaX3D5dBFzxh
Mb+I8xCZ1H0xGVlK4kqdBEiuH/24k12eihVkDSdCs++9VwWAFCkZV4TCRliOv22F
utepOkOvfA/EQUoR4xh9gJhHGATx7O5eZDbv21W8dKb+sMJN7rgXGoy7jyYTEi9n
9u6VIHcYagZEg6Ec5RnPllkuCvN/lr2g5OCTEjX5cdQ7R/hgww36Aol/OJjyVam9
KGKxi2SH1uC9oyNyS5pE6xBycqVkGh4FXw2mrfKvACny2KmA7fAiAjce+ZRvODFn
mXWB0S/Izb1lDw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:30:15 2025 by rpki-client