Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
File: OEhy6BezpF-Y1LFbZd1FK12i1hE.mft (raw, json)
Hash identifier: fYoK3zQNl9uW5gnzTlO0sbMgNDUh8awiwyqBoNiFijU=
Subject key identifier: 6D:1C:C0:42:D3:E0:19:6C:34:E7:7F:E4:94:87:DA:EC:64:8D:03:CC
Authority key identifier: 38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
Certificate issuer: /CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Certificate serial: 0198D54DCB2DC89D4D8E2052DFAD44952C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:01:41 +0000
Manifest this update: Sat 23 Aug 2025 05:01:41 +0000
Manifest next update: Sun 24 Aug 2025 05:01:41 +0000
Files and hashes: 1: OEhy6BezpF-Y1LFbZd1FK12i1hE.crl (hash: sEUHZMe3wrCRHZxSQYf6p6O+5XmgFukiOfAKY+gOgsA=)
2: vMh15nJtc0WhPa3adfD72rfDpjk.roa (hash: k90mC6UYUEFlWPzqOLS92+FcHPT0CjyGgsFnNEcMpl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:cb:2d:c8:9d:4d:8e:20:52:df:ad:44:95:2c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Validity
Not Before: Aug 23 05:01:41 2025 GMT
Not After : Aug 24 05:01:41 2025 GMT
Subject: CN=6d1cc042d3e0196c34e77fe49487daec648d03cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:b8:1a:b5:32:6f:dd:ee:17:25:ca:f2:c8:
a6:ed:4d:1c:41:93:39:14:4b:65:9c:60:14:b7:fb:
e9:e8:e3:88:2b:9b:a1:cc:25:22:8f:8f:b9:69:97:
84:cd:d5:e1:29:19:ba:90:99:29:85:74:e8:0d:2e:
7a:f0:2f:d1:fb:af:0e:cc:1e:9e:e2:f2:ed:d5:d5:
60:e9:6f:94:72:54:1c:30:67:38:53:87:d5:a3:99:
8a:85:fc:3e:58:1a:03:7f:b8:a3:01:07:98:86:5a:
9b:ca:a3:59:d1:44:ce:8d:71:56:09:40:1a:97:18:
fc:c9:0f:84:54:5c:70:65:49:32:f2:78:31:18:96:
e5:18:59:79:a9:d6:11:68:f5:b6:70:5d:e6:e6:39:
70:f8:f7:73:ef:36:87:9e:97:63:be:76:ad:04:be:
15:c0:ef:97:15:c4:74:49:00:e0:ba:98:84:13:84:
bf:cb:15:02:fe:3c:67:0e:d3:5a:75:c9:14:9e:2b:
1d:bf:c1:bd:f1:59:1c:11:37:3d:c0:ad:4e:8d:0c:
49:64:66:99:0e:d1:71:86:f6:fa:f1:8c:49:b0:db:
78:9f:33:4e:ca:d1:a1:a4:7e:b9:da:f6:56:aa:38:
3d:27:ca:54:f6:0c:61:26:af:ec:d3:1b:27:60:fd:
bb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1C:C0:42:D3:E0:19:6C:34:E7:7F:E4:94:87:DA:EC:64:8D:03:CC
X509v3 Authority Key Identifier:
keyid:38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:93:a7:03:2d:51:4b:11:64:72:ec:36:19:20:94:59:77:e7:
73:a6:43:b1:64:ab:30:c9:9c:6d:d1:56:1d:fb:ee:4d:b7:ac:
c0:e9:60:d5:47:35:e7:6b:20:35:87:27:ec:5e:65:cf:62:87:
9b:db:9b:75:81:2a:63:ee:b5:01:54:be:fe:7a:b0:32:26:6a:
83:06:57:20:47:5b:36:8b:dd:3e:65:7f:c2:ec:23:0c:bc:4d:
64:76:4a:67:11:a2:b9:ad:1f:9c:ff:50:e5:d7:8e:4c:af:a4:
15:98:14:1d:72:09:54:78:63:ff:52:a9:90:40:f1:ed:5f:3b:
6d:5b:2e:28:c2:d6:d5:92:34:c3:55:b2:a6:cd:a7:90:e3:16:
e1:96:bf:89:07:1c:60:a9:01:c9:6f:1c:8a:ed:b9:d8:51:5c:
a1:7b:ca:5c:ee:ea:d6:5b:af:ec:b9:f8:83:07:0e:98:11:fe:
ca:54:ee:e2:bb:2d:9f:9d:38:a3:46:80:96:c7:e1:6d:34:be:
e4:e4:c8:c1:5e:5b:30:73:b4:3b:6d:88:8d:fc:d7:96:c4:01:
97:26:98:75:fe:74:88:2a:a6:68:0e:d9:30:5f:61:98:7c:bd:
1c:86:b6:8b:83:db:2a:65:5a:3c:54:49:1c:24:c8:03:85:05:
4c:fd:5f:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTcstyJ1NjiBS361ElSyLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDg3MmU4MTdiM2E0NWY5OGQ0YjE1YjY1ZGQ0NTJiNWRh
MmQ2MTEwHhcNMjUwODIzMDUwMTQxWhcNMjUwODI0MDUwMTQxWjAzMTEwLwYDVQQD
Eyg2ZDFjYzA0MmQzZTAxOTZjMzRlNzdmZTQ5NDg3ZGFlYzY0OGQwM2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwG4GrUyb93uFyXK8sim7U0cQZM5
FEtlnGAUt/vp6OOIK5uhzCUij4+5aZeEzdXhKRm6kJkphXToDS568C/R+68OzB6e
4vLt1dVg6W+UclQcMGc4U4fVo5mKhfw+WBoDf7ijAQeYhlqbyqNZ0UTOjXFWCUAa
lxj8yQ+EVFxwZUky8ngxGJblGFl5qdYRaPW2cF3m5jlw+Pdz7zaHnpdjvnatBL4V
wO+XFcR0SQDgupiEE4S/yxUC/jxnDtNadckUnisdv8G98VkcETc9wK1OjQxJZGaZ
DtFxhvb68YxJsNt4nzNOytGhpH652vZWqjg9J8pU9gxhJq/s0xsnYP270wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0cwELT4BlsNOd/5JSH2uxkjQPMMB8GA1UdIwQY
MBaAFDhIcugXs6RfmNSxW2XdRStdotYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VoeTZCZXpwRi1ZMUxGYlpkMUZLMTJpMWhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8xN2U2NjMtZWIxMC00NWVkLTgxZjIt
YmZiZTFiYzE1ZmMyLzEvT0VoeTZCZXpwRi1ZMUxGYlpkMUZLMTJpMWhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8xN2U2NjMtZWIxMC00NWVkLTgxZjItYmZiZTFiYzE1ZmMy
LzEvT0VoeTZCZXpwRi1ZMUxGYlpkMUZLMTJpMWhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZOnAy1R
SxFkcuw2GSCUWXfnc6ZDsWSrMMmcbdFWHfvuTbeswOlg1Uc152sgNYcn7F5lz2KH
m9ubdYEqY+61AVS+/nqwMiZqgwZXIEdbNovdPmV/wuwjDLxNZHZKZxGiua0fnP9Q
5deOTK+kFZgUHXIJVHhj/1KpkEDx7V87bVsuKMLW1ZI0w1Wyps2nkOMW4Za/iQcc
YKkByW8ciu252FFcoXvKXO7q1luv7Ln4gwcOmBH+ylTu4rstn504o0aAlsfhbTS+
5OTIwV5bMHO0O22IjfzXlsQBlyaYdf50iCqmaA7ZMF9hmHy9HIa2i4PbKmVaPFRJ
HCTIA4UFTP1fEg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:03 2025 by rpki-client