Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
File: OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft (raw, json)
Hash identifier: k3WEEtBvVD61og/asfvQoaJSJ+qj/OlGAM30TsPL7Rg=
Subject key identifier: 2D:2D:EE:77:67:3E:CE:98:B2:23:21:D0:A9:C0:89:44:7B:C1:40:14
Authority key identifier: 39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1
Certificate issuer: /CN=398e539bcc5e934624344d884f622993b1ee9aa1
Certificate serial: 0197B5FBBDAA393CFC804579FF45EA3A37C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
Manifest number: 0403
Signing time: Sat 28 Jun 2025 10:01:03 +0000
Manifest this update: Sat 28 Jun 2025 10:01:03 +0000
Manifest next update: Sun 29 Jun 2025 10:01:03 +0000
Files and hashes: 1: OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl (hash: P78ExHu1UAx5+OAuc/e+gNx9sNUW7uYhYyjq6ua+XMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:bd:aa:39:3c:fc:80:45:79:ff:45:ea:3a:37:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398e539bcc5e934624344d884f622993b1ee9aa1
Validity
Not Before: Jun 28 10:01:03 2025 GMT
Not After : Jun 29 10:01:03 2025 GMT
Subject: CN=2d2dee77673ece98b22321d0a9c089447bc14014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0b:5d:8c:09:72:fb:26:f3:7b:63:21:10:74:
c3:a3:1c:39:40:33:a0:7c:d6:6a:84:4d:75:10:6d:
a4:4d:a2:13:be:82:08:c2:c8:c2:aa:7a:ad:37:a4:
58:34:04:ff:39:ce:da:70:64:c4:10:52:af:9c:98:
05:dc:9b:a4:e9:1a:6e:c7:34:ee:6c:aa:68:31:a8:
5d:ce:4b:66:84:f3:8d:5e:9b:e2:34:7e:a4:23:14:
f0:4c:29:f4:54:f4:a2:4e:4c:53:57:91:16:9d:02:
88:e9:2b:c6:fd:02:4e:96:50:b3:95:ed:d8:6d:5e:
39:49:4d:cc:18:b0:c6:0c:85:e8:69:af:3c:72:58:
c0:59:af:66:7f:f0:9c:35:a3:62:7d:9b:80:c9:2a:
a0:d7:2d:db:0e:9a:15:e1:7b:4f:25:d6:4a:38:8c:
7f:51:81:e2:d0:f9:79:66:7a:e0:54:04:f7:c4:a6:
a8:8f:f1:11:f0:0d:fa:2c:04:81:a4:5f:d9:c3:6d:
eb:f1:22:46:a6:c2:73:05:1e:b2:07:75:ed:d0:3e:
a1:5c:d2:e2:63:17:67:7c:61:73:b0:fc:20:54:0e:
71:80:20:e4:86:b1:d6:35:9e:14:45:7f:ef:fe:94:
18:1a:e2:b9:30:cc:26:df:72:09:91:73:52:12:8b:
fa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2D:EE:77:67:3E:CE:98:B2:23:21:D0:A9:C0:89:44:7B:C1:40:14
X509v3 Authority Key Identifier:
keyid:39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c0:0c:bf:ba:f2:d1:ff:45:63:9b:d6:40:d6:0c:fe:31:2a:
3a:71:a9:5c:6e:4f:80:60:9a:07:a6:79:12:46:5e:49:12:c8:
c7:ee:98:f0:7e:aa:8f:ef:d5:1c:1d:41:52:71:00:ea:08:0c:
a6:cd:d2:82:ab:f6:f3:1b:32:5b:4b:6a:3f:c4:9f:97:16:00:
aa:65:b2:d1:30:9c:01:e0:1c:f9:0e:82:b2:10:de:bc:1a:00:
50:c7:99:2e:97:16:c1:99:45:71:18:ed:85:cc:c2:72:18:93:
9f:7a:a5:6f:f8:a1:1d:8a:99:33:ce:9f:40:9a:56:90:f5:c3:
87:ce:0d:2e:56:e9:0a:1b:1d:a6:c2:8d:8e:fe:87:63:7d:c4:
cb:65:24:4b:60:3c:72:3d:b7:db:d9:fe:d4:71:bd:94:dc:0d:
fc:87:ac:28:a9:51:ba:3d:9a:a6:28:10:56:83:82:fb:69:7f:
82:59:25:56:02:04:ec:2b:f5:1d:9e:b6:b0:4f:a1:f9:0d:b4:
ac:70:77:72:a1:bb:fa:ba:99:fd:f6:7d:e9:25:bf:cd:2c:2c:
4e:7b:66:45:fd:e9:42:5e:21:e5:7b:91:d3:75:5f:2a:fd:e2:
76:94:d8:7e:3d:79:07:a1:c9:5d:f7:34:da:0f:66:5b:ef:29:
d5:f1:5a:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1+72qOTz8gEV5/0XqOjfDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5OGU1MzliY2M1ZTkzNDYyNDM0NGQ4ODRmNjIyOTkzYjFl
ZTlhYTEwHhcNMjUwNjI4MTAwMTAzWhcNMjUwNjI5MTAwMTAzWjAzMTEwLwYDVQQD
EygyZDJkZWU3NzY3M2VjZTk4YjIyMzIxZDBhOWMwODk0NDdiYzE0MDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gtdjAly+ybze2MhEHTDoxw5QDOg
fNZqhE11EG2kTaITvoIIwsjCqnqtN6RYNAT/Oc7acGTEEFKvnJgF3Juk6RpuxzTu
bKpoMahdzktmhPONXpviNH6kIxTwTCn0VPSiTkxTV5EWnQKI6SvG/QJOllCzle3Y
bV45SU3MGLDGDIXoaa88cljAWa9mf/CcNaNifZuAySqg1y3bDpoV4XtPJdZKOIx/
UYHi0Pl5ZnrgVAT3xKaoj/ER8A36LASBpF/Zw23r8SJGpsJzBR6yB3Xt0D6hXNLi
YxdnfGFzsPwgVA5xgCDkhrHWNZ4URX/v/pQYGuK5MMwm33IJkXNSEov68wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0t7ndnPs6YsiMh0KnAiUR7wUAUMB8GA1UdIwQY
MBaAFDmOU5vMXpNGJDRNiE9iKZOx7pqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1k1VG04eGVrMFlrTkUySVQySXBrN0h1bXFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wMTQ1MjYtZGEzMS00N2M1LTlhNWMt
OWQ4NjUyOGRhMDk5LzEvT1k1VG04eGVrMFlrTkUySVQySXBrN0h1bXFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wMTQ1MjYtZGEzMS00N2M1LTlhNWMtOWQ4NjUyOGRhMDk5
LzEvT1k1VG04eGVrMFlrTkUySVQySXBrN0h1bXFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcAMv7ry
0f9FY5vWQNYM/jEqOnGpXG5PgGCaB6Z5EkZeSRLIx+6Y8H6qj+/VHB1BUnEA6ggM
ps3Sgqv28xsyW0tqP8SflxYAqmWy0TCcAeAc+Q6CshDevBoAUMeZLpcWwZlFcRjt
hczCchiTn3qlb/ihHYqZM86fQJpWkPXDh84NLlbpChsdpsKNjv6HY33Ey2UkS2A8
cj2329n+1HG9lNwN/IesKKlRuj2apigQVoOC+2l/glklVgIE7Cv1HZ62sE+h+Q20
rHB3cqG7+rqZ/fZ96SW/zSwsTntmRf3pQl4h5XuR03VfKv3idpTYfj15B6HJXfc0
2g9mW+8p1fFaWw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:41 2025 by rpki-client