Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
File: oyHD8vYVgRDoDpLioyIdaVwnp9g.mft (raw, json)
Hash identifier: VyKCxpRK0c0Bct4nrSeR4WpVL1LxEKZ7Ww137jVjvxY=
Subject key identifier: CD:60:47:DF:F4:40:E0:9A:EB:D9:D5:9E:57:32:A1:A1:66:39:E6:53
Authority key identifier: A3:21:C3:F2:F6:15:81:10:E8:0E:92:E2:A3:22:1D:69:5C:27:A7:D8
Certificate issuer: /CN=a321c3f2f6158110e80e92e2a3221d695c27a7d8
Certificate serial: 0197B88F75BEC17AFCBF99129547D3292176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
Manifest number: 0E5A
Signing time: Sat 28 Jun 2025 22:01:38 +0000
Manifest this update: Sat 28 Jun 2025 22:01:38 +0000
Manifest next update: Sun 29 Jun 2025 22:01:38 +0000
Files and hashes: 1: oyHD8vYVgRDoDpLioyIdaVwnp9g.crl (hash: q0Of4n+vZorrtqqnhyhHA50xTTT/TK1QiQS/7KrOOe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:75:be:c1:7a:fc:bf:99:12:95:47:d3:29:21:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a321c3f2f6158110e80e92e2a3221d695c27a7d8
Validity
Not Before: Jun 28 22:01:38 2025 GMT
Not After : Jun 29 22:01:38 2025 GMT
Subject: CN=cd6047dff440e09aebd9d59e5732a1a16639e653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:78:d9:5c:28:de:d8:e4:88:6f:47:0e:4c:
f5:53:53:2e:75:29:03:2e:43:0c:fa:b8:33:e9:d3:
3a:5e:d9:d2:30:18:8a:90:2e:8b:bc:92:44:cc:1d:
81:6e:6a:34:a9:78:8c:f9:50:d4:b9:fb:c0:8d:80:
4e:65:b8:3f:67:59:42:d2:d7:ee:31:cc:a1:91:44:
04:89:9f:b9:e0:1e:e2:5d:0a:0b:e8:4f:ed:91:86:
a1:6c:e2:52:4b:a6:cb:0f:01:d6:83:35:53:d2:71:
01:e8:4e:db:1e:65:67:71:c7:95:69:77:a3:84:29:
e1:a9:f3:80:0c:b1:0a:a5:b3:cb:1d:44:4d:a4:16:
1c:f6:b0:89:58:75:98:bd:7e:8f:cc:9b:29:eb:66:
0c:6e:33:f1:a9:c1:44:70:5d:fd:82:ed:5d:1a:85:
91:fb:8b:49:ae:11:b5:e2:19:01:19:1d:dc:e4:a5:
37:8d:62:9b:20:61:d0:39:c4:63:bc:0d:c8:14:58:
0f:1a:77:bc:56:60:55:54:ab:aa:8e:60:6b:8f:3b:
d5:6c:5f:ec:50:61:d9:79:a9:2d:d3:3b:c6:8a:92:
07:79:12:bc:a9:96:59:6c:7a:ba:e9:9a:c0:44:02:
e4:fd:63:60:d3:3c:79:2c:88:0c:76:1b:a3:f0:e3:
c2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:60:47:DF:F4:40:E0:9A:EB:D9:D5:9E:57:32:A1:A1:66:39:E6:53
X509v3 Authority Key Identifier:
keyid:A3:21:C3:F2:F6:15:81:10:E8:0E:92:E2:A3:22:1D:69:5C:27:A7:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:56:09:47:65:e7:5c:ef:e9:ad:f5:92:57:9b:21:97:65:45:
48:67:be:c6:28:52:69:ea:4d:54:9d:76:f3:40:25:3b:9d:1f:
73:91:25:0d:09:bf:30:a3:c6:17:f7:6d:18:20:4b:92:0d:f3:
21:c2:45:2b:52:08:65:b5:51:68:ea:ce:10:9b:6f:c7:4e:85:
e4:7b:24:6b:b2:3d:12:fe:83:0f:af:88:e1:14:47:2d:14:6b:
cc:62:46:f1:5c:89:1b:cd:1d:1e:8d:0a:4c:07:97:b3:02:a4:
d5:86:ba:37:a7:64:56:07:14:86:92:bd:96:06:81:f5:e0:be:
9f:f7:6b:a8:ec:8b:c8:a9:66:60:1b:71:35:41:13:a8:e7:18:
13:75:e1:a1:d7:9a:70:ee:d1:24:c7:65:eb:fb:3a:59:49:29:
f7:47:77:e5:4b:ba:2c:cd:4b:45:15:33:97:bc:ca:b0:45:26:
3f:8f:4c:07:97:9a:e3:f8:39:7d:00:0c:d2:11:45:b4:84:61:
7c:0e:5a:f0:71:ef:43:96:5c:87:45:b8:f8:f6:8a:ee:bc:a4:
75:1e:df:e2:55:33:0e:81:d6:27:10:8e:65:f2:ce:56:f6:17:
79:a2:87:2a:bb:61:9a:ef:1a:11:b2:a1:6d:e0:86:0c:78:bc:
92:df:65:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j3W+wXr8v5kSlUfTKSF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMjFjM2YyZjYxNTgxMTBlODBlOTJlMmEzMjIxZDY5NWMy
N2E3ZDgwHhcNMjUwNjI4MjIwMTM4WhcNMjUwNjI5MjIwMTM4WjAzMTEwLwYDVQQD
EyhjZDYwNDdkZmY0NDBlMDlhZWJkOWQ1OWU1NzMyYTFhMTY2MzllNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHh42Vwo3tjkiG9HDkz1U1MudSkD
LkMM+rgz6dM6XtnSMBiKkC6LvJJEzB2Bbmo0qXiM+VDUufvAjYBOZbg/Z1lC0tfu
McyhkUQEiZ+54B7iXQoL6E/tkYahbOJSS6bLDwHWgzVT0nEB6E7bHmVncceVaXej
hCnhqfOADLEKpbPLHURNpBYc9rCJWHWYvX6PzJsp62YMbjPxqcFEcF39gu1dGoWR
+4tJrhG14hkBGR3c5KU3jWKbIGHQOcRjvA3IFFgPGne8VmBVVKuqjmBrjzvVbF/s
UGHZeakt0zvGipIHeRK8qZZZbHq66ZrARALk/WNg0zx5LIgMdhuj8OPCqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1gR9/0QOCa69nVnlcyoaFmOeZTMB8GA1UdIwQY
MBaAFKMhw/L2FYEQ6A6S4qMiHWlcJ6fYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3lIRDh2WVZnUkRvRHBMaW95SWRhVnducDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83ZDNhNTUtY2NiNy00ZDBjLWJkMjYt
Y2ZmNDYxZTBkZjM0LzEvb3lIRDh2WVZnUkRvRHBMaW95SWRhVnducDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83ZDNhNTUtY2NiNy00ZDBjLWJkMjYtY2ZmNDYxZTBkZjM0
LzEvb3lIRDh2WVZnUkRvRHBMaW95SWRhVnducDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlYJR2Xn
XO/prfWSV5shl2VFSGe+xihSaepNVJ1280AlO50fc5ElDQm/MKPGF/dtGCBLkg3z
IcJFK1IIZbVRaOrOEJtvx06F5Hska7I9Ev6DD6+I4RRHLRRrzGJG8VyJG80dHo0K
TAeXswKk1Ya6N6dkVgcUhpK9lgaB9eC+n/drqOyLyKlmYBtxNUETqOcYE3Xhodea
cO7RJMdl6/s6WUkp90d35Uu6LM1LRRUzl7zKsEUmP49MB5ea4/g5fQAM0hFFtIRh
fA5a8HHvQ5Zch0W4+PaK7rykdR7f4lUzDoHWJxCOZfLOVvYXeaKHKrthmu8aEbKh
beCGDHi8kt9lOg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:13:11 2025 by rpki-client