Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
File: OJDnpFSaVx9otoja1PXO2OUpBos.mft (raw, json)
Hash identifier: BW+nwtCDO4vEjgf1nG4/X80jIcPszwARvUEH6GDOhPw=
Subject key identifier: 12:E9:5C:13:87:D8:67:AD:25:0A:C5:38:7B:5D:EC:7B:FD:6D:FE:94
Authority key identifier: 38:90:E7:A4:54:9A:57:1F:68:B6:88:DA:D4:F5:CE:D8:E5:29:06:8B
Certificate issuer: /CN=3890e7a4549a571f68b688dad4f5ced8e529068b
Certificate serial: 0198D472585266460F01411770EB814F0A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:02:00 +0000
Manifest this update: Sat 23 Aug 2025 01:02:00 +0000
Manifest next update: Sun 24 Aug 2025 01:02:00 +0000
Files and hashes: 1: OJDnpFSaVx9otoja1PXO2OUpBos.crl (hash: NiqRyuIfkKZLOPW6DffIUSooujcMRKSdeGTWD7FW4GA=)
2: XaY9bUiZ_CFGYXPkNboje_P8adc.roa (hash: b9+EkuxILTVWiZrAAhWN9xohV/5GiE1XVfEOgozpLGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:58:52:66:46:0f:01:41:17:70:eb:81:4f:0a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3890e7a4549a571f68b688dad4f5ced8e529068b
Validity
Not Before: Aug 23 01:02:00 2025 GMT
Not After : Aug 24 01:02:00 2025 GMT
Subject: CN=12e95c1387d867ad250ac5387b5dec7bfd6dfe94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3c:92:76:41:7b:64:ad:33:92:b1:0b:52:90:
cf:15:67:32:48:48:b3:e3:4a:f9:1f:7a:18:35:e8:
92:3b:03:f8:a6:73:dd:8b:ad:aa:ae:00:ab:86:c9:
11:86:0b:fc:f3:25:9c:e2:66:af:b0:2a:c4:3e:72:
e5:a2:88:ac:f4:2d:c0:b8:4f:ee:56:8c:09:e1:4e:
c9:ae:68:52:32:d6:56:30:b6:80:01:5f:f9:87:1f:
d1:0b:83:7c:a7:75:65:f4:f7:c2:94:ac:f5:d3:14:
53:98:44:89:dc:d0:2f:62:7d:13:f7:f3:bd:d8:85:
e4:8f:4c:98:63:75:09:0a:81:b1:02:38:ec:fc:aa:
87:1e:3a:89:bc:10:32:4e:3c:4d:34:38:0e:6d:ca:
e0:40:6c:88:48:fa:0d:0d:cd:c1:5d:10:47:bb:99:
1f:09:74:5a:b5:ad:43:72:4f:56:f5:6f:e1:61:59:
5f:ce:56:30:5d:56:38:ed:bb:ae:a2:67:0a:a7:17:
b3:4b:cd:33:63:26:33:28:36:4d:a8:93:02:a4:ef:
d6:00:fc:2c:c7:0a:aa:08:c7:46:c4:13:d1:b7:02:
db:b2:4c:94:2a:9c:6d:6e:9c:f0:82:5c:08:f8:42:
0e:8d:8f:88:17:d2:3c:88:cb:22:74:dd:65:9c:3d:
8e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E9:5C:13:87:D8:67:AD:25:0A:C5:38:7B:5D:EC:7B:FD:6D:FE:94
X509v3 Authority Key Identifier:
keyid:38:90:E7:A4:54:9A:57:1F:68:B6:88:DA:D4:F5:CE:D8:E5:29:06:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:57:e2:9b:af:97:a1:25:ec:8a:ac:9f:fd:56:0b:c1:ea:29:
9a:f6:08:83:f8:15:55:74:48:e4:7f:d5:fe:95:b8:fb:2d:cd:
c5:c3:1c:da:55:ae:d2:3d:cc:1f:04:aa:d4:26:c3:5b:96:60:
cd:56:f3:c3:be:11:b8:21:ad:fc:e5:45:b3:05:15:39:8e:34:
de:fa:43:71:fc:a1:0b:3b:75:88:e5:b7:c5:46:f7:2e:f1:48:
8b:a4:bc:c4:6f:eb:a8:64:df:d2:35:6e:7d:84:eb:7c:b6:67:
ae:12:ff:f2:bb:9c:f4:99:70:f4:e7:66:e5:2b:d1:ef:6e:4f:
34:3e:b5:62:d0:e0:8a:18:68:d4:fd:a3:54:87:50:4b:93:d0:
ff:7e:28:18:fd:5f:6e:30:bf:1d:29:f4:ce:f6:e7:b3:70:9b:
55:ef:c5:52:f5:6d:a7:0b:7b:1d:13:9b:50:79:f6:d9:5c:39:
b8:06:20:8e:fe:6b:da:bd:eb:37:6a:07:69:ea:3f:c1:c3:6b:
2e:4a:e5:49:2c:f9:c8:d5:29:78:41:e1:14:19:4c:db:eb:2b:
fe:28:24:4f:af:de:ed:92:dd:a4:bd:5a:18:c8:99:8f:37:f9:
19:f3:28:71:f7:73:d4:13:9a:5b:31:4f:2c:3e:5f:12:eb:ff:
65:0a:73:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUclhSZkYPAUEXcOuBTwoIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OTBlN2E0NTQ5YTU3MWY2OGI2ODhkYWQ0ZjVjZWQ4ZTUy
OTA2OGIwHhcNMjUwODIzMDEwMjAwWhcNMjUwODI0MDEwMjAwWjAzMTEwLwYDVQQD
EygxMmU5NWMxMzg3ZDg2N2FkMjUwYWM1Mzg3YjVkZWM3YmZkNmRmZTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TySdkF7ZK0zkrELUpDPFWcySEiz
40r5H3oYNeiSOwP4pnPdi62qrgCrhskRhgv88yWc4mavsCrEPnLloois9C3AuE/u
VowJ4U7JrmhSMtZWMLaAAV/5hx/RC4N8p3Vl9PfClKz10xRTmESJ3NAvYn0T9/O9
2IXkj0yYY3UJCoGxAjjs/KqHHjqJvBAyTjxNNDgObcrgQGyISPoNDc3BXRBHu5kf
CXRata1Dck9W9W/hYVlfzlYwXVY47buuomcKpxezS80zYyYzKDZNqJMCpO/WAPws
xwqqCMdGxBPRtwLbskyUKpxtbpzwglwI+EIOjY+IF9I8iMsidN1lnD2O6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLpXBOH2GetJQrFOHtd7Hv9bf6UMB8GA1UdIwQY
MBaAFDiQ56RUmlcfaLaI2tT1ztjlKQaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0pEbnBGU2FWeDlvdG9qYTFQWE8yT1VwQm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yNWRmNGUtYWZjNS00YzUwLThkZTIt
OTQ4MTJjN2Y0NDllLzEvT0pEbnBGU2FWeDlvdG9qYTFQWE8yT1VwQm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8yNWRmNGUtYWZjNS00YzUwLThkZTItOTQ4MTJjN2Y0NDll
LzEvT0pEbnBGU2FWeDlvdG9qYTFQWE8yT1VwQm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApVfim6+X
oSXsiqyf/VYLweopmvYIg/gVVXRI5H/V/pW4+y3NxcMc2lWu0j3MHwSq1CbDW5Zg
zVbzw74RuCGt/OVFswUVOY403vpDcfyhCzt1iOW3xUb3LvFIi6S8xG/rqGTf0jVu
fYTrfLZnrhL/8ruc9Jlw9Odm5SvR725PND61YtDgihho1P2jVIdQS5PQ/34oGP1f
bjC/HSn0zvbns3CbVe/FUvVtpwt7HRObUHn22Vw5uAYgjv5r2r3rN2oHaeo/wcNr
LkrlSSz5yNUpeEHhFBlM2+sr/igkT6/e7ZLdpL1aGMiZjzf5GfMocfdz1BOaWzFP
LD5fEuv/ZQpz6A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:06 2025 by rpki-client