
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
File: OEGrqj51xG2YtvqGeNNP7yrDhbA.mft (raw, json)
Hash identifier: Gz7lYzSwc0L4fqSHlKrrDzzFXwc319sHSv576HspZwo=
Subject key identifier: C1:21:E0:6C:52:2D:57:72:68:C8:03:00:0B:9E:D2:96:FA:B6:92:99
Authority key identifier: 38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
Certificate issuer: /CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Certificate serial: 0199FCC67E5B48ABA45E24BC66C51174C022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
Manifest number: 0E3F
Signing time: Sun 19 Oct 2025 14:01:30 +0000
Manifest this update: Sun 19 Oct 2025 14:01:30 +0000
Manifest next update: Mon 20 Oct 2025 14:01:30 +0000
Files and hashes: 1: OEGrqj51xG2YtvqGeNNP7yrDhbA.crl (hash: tWBZBJE7MaJxlq9vuxL3DRuUxpRm/ydi9zGrTGbdFBg=)
2: pBUdyGJF00Aj8L8ciDIjRG3CSGw.roa (hash: 6hEe+Tga9lCPNVaKmIW/t2FOnq+wOL+8Dc3AiID4ekU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7e:5b:48:ab:a4:5e:24:bc:66:c5:11:74:c0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Validity
Not Before: Oct 19 14:01:30 2025 GMT
Not After : Oct 20 14:01:30 2025 GMT
Subject: CN=c121e06c522d577268c803000b9ed296fab69299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:5a:06:2a:3b:c7:82:6e:7d:d4:63:6a:66:
8b:58:30:d1:47:87:05:c2:d8:d0:93:98:bb:f7:3f:
8f:3d:a6:2d:ef:64:f9:7c:da:de:8a:ed:4f:3a:94:
4c:c7:38:66:10:b5:b7:e0:19:ad:5e:28:91:a2:46:
a9:99:0e:72:7d:6a:81:8f:e8:9d:ad:5c:3c:96:ec:
d7:1a:93:15:4f:43:1a:ac:33:22:83:a8:73:d6:cc:
c4:3d:80:29:97:c3:da:6c:04:0c:cb:54:57:0a:26:
4c:49:67:3f:c0:9f:48:d1:ed:42:63:3c:7a:ee:dc:
ed:ef:88:98:95:76:9b:57:9f:79:67:a4:8a:95:51:
b3:b8:a6:8d:a2:c1:b3:e8:ce:3d:32:fa:9c:4d:57:
5b:a2:ec:08:58:5d:65:85:af:8f:0b:a7:89:ba:14:
46:98:c6:b0:cc:bf:3f:4c:16:dd:42:25:ba:89:f5:
bc:7e:f0:9b:e4:0f:0a:61:96:17:48:c7:e6:75:bd:
e0:94:fe:a1:72:31:3c:72:b3:17:b3:b4:7d:6e:b2:
80:79:e3:fb:6c:1d:71:52:22:7e:fb:05:ed:d4:e4:
a0:e4:9b:8b:6d:2d:57:9b:d3:e4:31:1f:40:89:f8:
37:ea:1f:f3:1c:09:05:f2:f1:61:e0:40:dd:f6:0c:
5b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:21:E0:6C:52:2D:57:72:68:C8:03:00:0B:9E:D2:96:FA:B6:92:99
X509v3 Authority Key Identifier:
keyid:38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f0:22:1d:ea:eb:25:b5:c0:33:d3:f4:79:0b:8c:bb:a0:a1:
6e:e3:f3:89:4b:15:a9:7c:97:0a:15:6d:3f:24:82:11:81:57:
d8:31:d3:db:f6:28:97:82:af:22:a3:ae:6f:71:17:00:0f:42:
f0:bd:be:86:d9:a9:2b:5d:bf:15:b2:d0:de:35:e4:61:3e:5e:
b9:2c:a3:bc:57:cd:eb:e5:2a:00:8a:fe:52:d8:38:57:e0:34:
0a:37:79:d8:a7:82:0e:35:2d:27:0a:de:bf:51:25:fb:1e:8d:
22:02:39:4b:88:d6:17:42:73:d1:df:91:a2:c0:d4:0d:5e:fc:
74:c6:d2:b5:6c:9b:89:a2:bf:a2:c2:2e:52:a7:10:9b:49:59:
2a:1a:ad:e4:4e:89:5d:5f:8d:61:ae:ed:18:84:4f:4d:f6:d8:
9f:bd:71:31:9c:1a:ce:ca:bb:86:9c:ea:5d:80:68:22:a3:82:
b3:5d:47:0f:7c:6c:45:42:7b:44:23:4d:8e:31:49:b4:6a:9e:
e7:6c:8f:4d:82:d5:6e:0a:bd:9b:99:77:35:0a:90:8a:ec:a3:
02:98:71:a7:d0:79:85:93:fc:03:fe:a7:3c:b1:be:a5:c6:d0:
b4:9c:75:82:25:07:18:c3:ef:d3:39:ee:1f:82:6d:a2:ed:98:
37:8e:c1:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xn5bSKukXiS8ZsURdMAiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDFhYmFhM2U3NWM0NmQ5OGI2ZmE4Njc4ZDM0ZmVmMmFj
Mzg1YjAwHhcNMjUxMDE5MTQwMTMwWhcNMjUxMDIwMTQwMTMwWjAzMTEwLwYDVQQD
EyhjMTIxZTA2YzUyMmQ1NzcyNjhjODAzMDAwYjllZDI5NmZhYjY5Mjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PpaBio7x4JufdRjamaLWDDRR4cF
wtjQk5i79z+PPaYt72T5fNreiu1POpRMxzhmELW34BmtXiiRokapmQ5yfWqBj+id
rVw8luzXGpMVT0MarDMig6hz1szEPYApl8PabAQMy1RXCiZMSWc/wJ9I0e1CYzx6
7tzt74iYlXabV595Z6SKlVGzuKaNosGz6M49MvqcTVdbouwIWF1lha+PC6eJuhRG
mMawzL8/TBbdQiW6ifW8fvCb5A8KYZYXSMfmdb3glP6hcjE8crMXs7R9brKAeeP7
bB1xUiJ++wXt1OSg5JuLbS1Xm9PkMR9Aifg36h/zHAkF8vFh4EDd9gxbRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEh4GxSLVdyaMgDAAue0pb6tpKZMB8GA1UdIwQY
MBaAFDhBq6o+dcRtmLb6hnjTT+8qw4WwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMTI5ZGUtYmY0My00OTY3LThjMDQt
ZjIyNjEwZTYzYzkyLzEvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8xMTI5ZGUtYmY0My00OTY3LThjMDQtZjIyNjEwZTYzYzky
LzEvT0VHcnFqNTF4RzJZdHZxR2VOTlA3eXJEaGJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPAiHerr
JbXAM9P0eQuMu6ChbuPziUsVqXyXChVtPySCEYFX2DHT2/Yol4KvIqOub3EXAA9C
8L2+htmpK12/FbLQ3jXkYT5euSyjvFfN6+UqAIr+Utg4V+A0Cjd52KeCDjUtJwre
v1El+x6NIgI5S4jWF0Jz0d+RosDUDV78dMbStWybiaK/osIuUqcQm0lZKhqt5E6J
XV+NYa7tGIRPTfbYn71xMZwazsq7hpzqXYBoIqOCs11HD3xsRUJ7RCNNjjFJtGqe
52yPTYLVbgq9m5l3NQqQiuyjAphxp9B5hZP8A/6nPLG+pcbQtJx1giUHGMPv0znu
H4Jtou2YN47BDQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:18 2025 by rpki-client