Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
File: OstMHbOigqLFrhaULo1gYb50UWs.mft (raw, json)
Hash identifier: /KwlSrGqd4vhId2uE0Ru4m6FeD/6LIuZMtjMQlot35g=
Subject key identifier: 39:06:27:7B:33:56:01:56:A4:58:90:F2:BA:A0:76:2A:CF:D4:20:9D
Authority key identifier: 3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B
Certificate issuer: /CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b
Certificate serial: 0198D6615005C5DAC1888E280FEF293544B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
Manifest number: 0EB8
Signing time: Sat 23 Aug 2025 10:02:38 +0000
Manifest this update: Sat 23 Aug 2025 10:02:38 +0000
Manifest next update: Sun 24 Aug 2025 10:02:38 +0000
Files and hashes: 1: OstMHbOigqLFrhaULo1gYb50UWs.crl (hash: v7OlF6zb5o5E+4txb6/EkoTqIgNnEX/EqevKMr05LlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:50:05:c5:da:c1:88:8e:28:0f:ef:29:35:44:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b
Validity
Not Before: Aug 23 10:02:38 2025 GMT
Not After : Aug 24 10:02:38 2025 GMT
Subject: CN=3906277b33560156a45890f2baa0762acfd4209d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:e3:5f:cb:51:0c:d5:b4:ef:36:b7:b1:d0:
41:fc:39:de:79:1e:31:c2:57:73:b9:0e:d4:55:1a:
17:74:fa:1d:6e:36:ff:cf:b4:d3:25:58:f4:94:7f:
23:0d:14:18:a9:16:29:21:a9:6f:6b:81:a4:fd:ce:
29:eb:c8:92:02:63:ae:4e:dd:b6:9a:ce:84:3f:b1:
bb:4b:83:2b:1e:59:c3:75:fe:3b:bd:6b:32:f3:83:
9a:fe:c3:0f:39:3a:dc:d2:c7:8e:51:da:25:fd:83:
33:18:11:ef:08:d2:62:ac:fe:ae:a6:7c:03:4d:ff:
8c:1b:bd:b9:af:66:9f:57:d9:a0:a3:e7:d7:87:5c:
a0:e6:ae:48:a2:74:94:13:61:c9:97:95:98:ae:80:
00:8e:a0:e2:0b:5e:85:df:2d:62:ee:5b:b5:71:5e:
57:b7:e0:64:fd:4e:20:77:29:1e:9b:53:27:ab:c4:
3b:63:04:02:1f:6c:d6:b7:de:d0:d8:02:08:22:ba:
95:0d:91:4c:d8:e5:31:4f:5c:76:db:98:99:83:13:
be:a9:a3:21:cd:ef:ae:e6:7d:b6:db:94:fb:c5:8f:
dc:7a:2d:dd:2c:6a:8a:89:2d:4e:a9:26:85:9b:e4:
b2:f7:7e:a5:a6:d6:d7:89:f8:0d:9b:8f:94:ba:b0:
45:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:06:27:7B:33:56:01:56:A4:58:90:F2:BA:A0:76:2A:CF:D4:20:9D
X509v3 Authority Key Identifier:
keyid:3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9b:20:1b:1e:a9:60:a3:f6:4a:a6:29:4a:e3:50:09:5b:08:
29:69:1b:c5:5e:6d:81:97:df:2f:94:bf:64:80:67:80:88:a3:
b7:73:c8:81:8f:5e:52:5b:56:4d:54:c8:1d:ec:bf:f9:1a:50:
e2:c9:78:f6:08:7a:81:8f:7a:16:df:30:66:46:ac:e3:dc:a1:
2b:b2:53:e2:84:cc:da:b4:2c:2e:6d:48:32:a2:bb:f6:ba:f4:
d3:aa:cd:9e:e9:e7:79:57:66:32:8e:b5:34:f0:61:ba:4e:84:
57:6e:a8:2b:e6:7c:5d:e1:e2:6a:2a:f5:4a:1e:72:8f:82:73:
39:0b:78:2f:2b:59:07:9c:20:50:43:49:44:dc:48:4b:f1:b8:
37:c4:48:f4:e1:e7:50:06:03:03:4b:25:ac:1f:c2:c0:68:e8:
e3:60:8e:61:fc:54:81:a0:a3:0a:f3:9c:3a:bb:0f:28:6d:8d:
c8:4c:34:d4:94:0a:34:37:11:41:6d:c7:12:c6:fa:1a:aa:a0:
43:be:27:6d:b0:a0:29:4b:2d:09:9d:6e:0c:75:9f:09:87:b2:
88:f1:4b:fc:65:8a:a4:3b:63:b2:2d:11:95:7b:14:cd:8a:a6:
c5:e3:40:1e:75:26:15:a4:22:e8:c7:d0:93:76:68:79:75:b3:
15:8c:43:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYVAFxdrBiI4oD+8pNUS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhY2I0YzFkYjNhMjgyYTJjNWFlMTY5NDJlOGQ2MDYxYmU3
NDUxNmIwHhcNMjUwODIzMTAwMjM4WhcNMjUwODI0MTAwMjM4WjAzMTEwLwYDVQQD
EygzOTA2Mjc3YjMzNTYwMTU2YTQ1ODkwZjJiYWEwNzYyYWNmZDQyMDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIjjX8tRDNW07za3sdBB/DneeR4x
wldzuQ7UVRoXdPodbjb/z7TTJVj0lH8jDRQYqRYpIalva4Gk/c4p68iSAmOuTt22
ms6EP7G7S4MrHlnDdf47vWsy84Oa/sMPOTrc0seOUdol/YMzGBHvCNJirP6upnwD
Tf+MG725r2afV9mgo+fXh1yg5q5IonSUE2HJl5WYroAAjqDiC16F3y1i7lu1cV5X
t+Bk/U4gdykem1Mnq8Q7YwQCH2zWt97Q2AIIIrqVDZFM2OUxT1x225iZgxO+qaMh
ze+u5n2225T7xY/cei3dLGqKiS1OqSaFm+Sy936lptbXifgNm4+UurBFzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkGJ3szVgFWpFiQ8rqgdirP1CCdMB8GA1UdIwQY
MBaAFDrLTB2zooKixa4WlC6NYGG+dFFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3N0TUhiT2lncUxGcmhhVUxvMWdZYjUwVVdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81YTgyYTctOGY2MS00NzQ5LTkxMTgt
Y2JmMzRlYmNhNGI5LzEvT3N0TUhiT2lncUxGcmhhVUxvMWdZYjUwVVdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi81YTgyYTctOGY2MS00NzQ5LTkxMTgtY2JmMzRlYmNhNGI5
LzEvT3N0TUhiT2lncUxGcmhhVUxvMWdZYjUwVVdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5sgGx6p
YKP2SqYpSuNQCVsIKWkbxV5tgZffL5S/ZIBngIijt3PIgY9eUltWTVTIHey/+RpQ
4sl49gh6gY96Ft8wZkas49yhK7JT4oTM2rQsLm1IMqK79rr006rNnunneVdmMo61
NPBhuk6EV26oK+Z8XeHiair1Sh5yj4JzOQt4LytZB5wgUENJRNxIS/G4N8RI9OHn
UAYDA0slrB/CwGjo42COYfxUgaCjCvOcOrsPKG2NyEw01JQKNDcRQW3HEsb6Gqqg
Q74nbbCgKUstCZ1uDHWfCYeyiPFL/GWKpDtjsi0RlXsUzYqmxeNAHnUmFaQi6MfQ
k3ZoeXWzFYxDKg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:15 2025 by rpki-client