Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
File: oE_JgO38R54EauArEOVyRbuSyLc.mft (raw, json)
Hash identifier: yzurezm32/gcNi/6SJ5mujXrPQ9ZDQ7TaypD7602lvs=
Subject key identifier: B5:56:DB:E4:1E:91:15:BF:73:8D:0B:B1:E5:F2:82:AC:C6:4F:1E:8E
Authority key identifier: A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
Certificate issuer: /CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Certificate serial: 0198D515D5E9D41196366E93B529BD9C67B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
Manifest number: 064A
Signing time: Sat 23 Aug 2025 04:00:34 +0000
Manifest this update: Sat 23 Aug 2025 04:00:34 +0000
Manifest next update: Sun 24 Aug 2025 04:00:34 +0000
Files and hashes: 1: oE_JgO38R54EauArEOVyRbuSyLc.crl (hash: iqGONVmL/6leKXxlgUcBLSPB0rE9+mBsYV8opaJyHmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d5:e9:d4:11:96:36:6e:93:b5:29:bd:9c:67:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Validity
Not Before: Aug 23 04:00:34 2025 GMT
Not After : Aug 24 04:00:34 2025 GMT
Subject: CN=b556dbe41e9115bf738d0bb1e5f282acc64f1e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:8b:59:53:cc:e1:a5:bc:e9:f7:f8:c6:56:
26:fd:c0:b5:72:8e:1c:bd:4a:d6:07:a2:c4:b7:b4:
3d:ba:db:94:48:e4:0b:16:44:c2:c5:1d:f3:54:0f:
22:86:fd:85:e9:88:9d:5d:71:0b:db:5c:34:45:42:
2b:75:9d:2f:09:d9:8b:d7:1d:cb:e1:ce:71:39:90:
1b:a5:d1:d4:5f:15:4e:f1:a6:51:fe:32:7f:76:5e:
d6:f9:51:98:15:aa:60:ac:ac:43:a4:65:f0:8e:4c:
8e:59:8b:6e:ba:00:81:f1:e9:2d:3b:1f:12:a9:01:
78:4d:30:3f:7d:23:ee:c0:ee:5f:91:de:5e:aa:21:
e6:61:35:83:95:3c:a0:a9:d9:2d:1d:44:dd:91:fc:
8b:a4:f3:ad:eb:ab:61:2d:f0:8e:31:56:c7:e1:9c:
eb:23:b5:33:f6:48:0a:a8:e4:d9:92:b0:2f:7e:c1:
e2:0b:3c:57:48:4f:b3:d5:e8:56:ed:92:36:c7:5e:
2f:3b:90:c0:c4:b1:22:2d:8b:ea:97:d6:db:69:64:
6a:49:cc:45:52:94:fe:a1:42:23:b8:16:d1:d1:02:
fc:3c:38:6e:6c:f9:c3:11:29:60:fe:c6:f8:c8:6f:
77:cd:38:23:f0:1e:24:24:d7:c7:30:77:85:9f:5e:
37:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:56:DB:E4:1E:91:15:BF:73:8D:0B:B1:E5:F2:82:AC:C6:4F:1E:8E
X509v3 Authority Key Identifier:
keyid:A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:be:c4:f2:e0:98:ee:de:2f:a8:46:98:83:c3:7c:c9:47:b2:
68:3b:bf:e0:50:15:4b:65:2e:05:ad:05:41:fc:1e:4b:03:b4:
6e:4b:47:e3:36:25:4c:e9:a6:5e:04:76:50:fe:04:6d:d0:62:
13:7c:67:e5:c3:30:02:17:45:24:dc:b2:0b:95:a8:ce:16:46:
6e:8d:59:3e:8f:6e:6c:78:3d:68:a9:41:11:67:e2:e4:b5:ff:
02:61:b8:13:81:b2:08:a3:7a:c3:68:8e:af:4d:c8:46:d2:c7:
23:81:53:01:9b:d9:6d:88:54:f9:cd:27:9d:bc:f1:ce:b3:76:
d0:fe:0b:01:c4:10:ff:0c:3d:d2:b1:7c:e5:6d:4a:8a:82:9e:
8c:ce:04:35:4b:96:e8:74:1c:19:19:80:b7:55:79:f9:3e:e8:
71:34:61:49:6b:34:87:e1:0d:f2:b8:ab:f0:07:22:e1:69:ea:
d4:0e:1b:f9:4b:36:19:dd:eb:9e:3c:25:5f:65:de:89:d8:9a:
72:63:c3:98:74:1e:4f:40:2c:88:a4:27:f3:67:eb:6a:62:52:
52:00:77:dc:b2:8b:93:45:ce:4c:20:c2:bd:da:16:a6:4d:fc:
1c:db:b8:10:69:73:00:02:36:1d:b5:a6:da:fe:6f:80:82:e9:
f8:19:49:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFdXp1BGWNm6TtSm9nGe5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNGZjOTgwZWRmYzQ3OWUwNDZhZTAyYjEwZTU3MjQ1YmI5
MmM4YjcwHhcNMjUwODIzMDQwMDM0WhcNMjUwODI0MDQwMDM0WjAzMTEwLwYDVQQD
EyhiNTU2ZGJlNDFlOTExNWJmNzM4ZDBiYjFlNWYyODJhY2M2NGYxZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLOLWVPM4aW86ff4xlYm/cC1co4c
vUrWB6LEt7Q9utuUSOQLFkTCxR3zVA8ihv2F6YidXXEL21w0RUIrdZ0vCdmL1x3L
4c5xOZAbpdHUXxVO8aZR/jJ/dl7W+VGYFapgrKxDpGXwjkyOWYtuugCB8ektOx8S
qQF4TTA/fSPuwO5fkd5eqiHmYTWDlTygqdktHUTdkfyLpPOt66thLfCOMVbH4Zzr
I7Uz9kgKqOTZkrAvfsHiCzxXSE+z1ehW7ZI2x14vO5DAxLEiLYvql9bbaWRqScxF
UpT+oUIjuBbR0QL8PDhubPnDESlg/sb4yG93zTgj8B4kJNfHMHeFn143bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVW2+QekRW/c40LseXygqzGTx6OMB8GA1UdIwQY
MBaAFKBPyYDt/EeeBGrgKxDlckW7ksi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNTVkZjEtMGJhNi00MzBmLTgwOWQt
NmIwMzVjZWUxOTgxLzEvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNTVkZjEtMGJhNi00MzBmLTgwOWQtNmIwMzVjZWUxOTgx
LzEvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABL7E8uCY
7t4vqEaYg8N8yUeyaDu/4FAVS2UuBa0FQfweSwO0bktH4zYlTOmmXgR2UP4EbdBi
E3xn5cMwAhdFJNyyC5WozhZGbo1ZPo9ubHg9aKlBEWfi5LX/AmG4E4GyCKN6w2iO
r03IRtLHI4FTAZvZbYhU+c0nnbzxzrN20P4LAcQQ/ww90rF85W1KioKejM4ENUuW
6HQcGRmAt1V5+T7ocTRhSWs0h+EN8rir8Aci4Wnq1A4b+Us2Gd3rnjwlX2Xeidia
cmPDmHQeT0AsiKQn82framJSUgB33LKLk0XOTCDCvdoWpk38HNu4EGlzAAI2HbWm
2v5vgILp+BlJ/g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:11 2025 by rpki-client