Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
File: oVJWhcluMm8grjcpwDD0T9FJmwU.mft (raw, json)
Hash identifier: MPFmh0mWfJGdO+l8Hth5oK4QcdIfZxLWTlgFpuN9Uew=
Subject key identifier: C6:93:54:DB:88:62:D7:A4:87:21:AC:36:C5:56:12:2E:AC:88:B2:EF
Authority key identifier: A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
Certificate issuer: /CN=a1525685c96e326f20ae3729c030f44fd1499b05
Certificate serial: 0199FC21883FA7960576195DAA09B2715B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
Manifest number: 08EE
Signing time: Sun 19 Oct 2025 11:01:19 +0000
Manifest this update: Sun 19 Oct 2025 11:01:19 +0000
Manifest next update: Mon 20 Oct 2025 11:01:19 +0000
Files and hashes: 1: oVJWhcluMm8grjcpwDD0T9FJmwU.crl (hash: Hg+6U9BVaWA+jzbU8+90wfToFC/hta0TXDfa+8gYvjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:88:3f:a7:96:05:76:19:5d:aa:09:b2:71:5b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1525685c96e326f20ae3729c030f44fd1499b05
Validity
Not Before: Oct 19 11:01:19 2025 GMT
Not After : Oct 20 11:01:19 2025 GMT
Subject: CN=c69354db8862d7a48721ac36c556122eac88b2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:3b:a1:6a:25:b5:79:fb:f6:cb:11:04:eb:
3a:b7:62:08:5d:11:03:86:13:cd:d4:3f:1e:3b:84:
55:c0:ff:08:ba:d9:0e:ff:e2:f7:2a:f8:38:cb:dc:
75:49:d0:d9:0b:59:13:e0:87:1a:af:81:b1:c7:59:
89:5d:7c:c1:d6:6f:ed:c1:53:5d:ae:e6:70:7b:b4:
c1:2f:92:8d:00:67:99:83:b3:be:3d:82:51:e8:25:
fd:81:0f:de:aa:5e:d9:8c:81:8f:dc:ae:d0:26:59:
73:68:17:3c:68:71:23:09:28:7f:17:75:7a:21:b8:
16:bc:b9:a8:a8:31:e2:e2:87:05:13:75:ec:62:ae:
92:37:06:db:14:0e:ac:d5:80:13:71:eb:61:e5:0d:
31:13:6d:b5:38:e9:98:bf:ae:f8:df:79:7c:f6:5e:
e0:40:c3:40:1c:44:20:89:0e:05:59:71:2e:e6:ef:
49:1a:98:4a:c5:96:db:08:d9:af:29:0f:7b:66:e7:
b0:c9:21:8f:96:d4:a4:5d:b2:2a:39:55:00:1d:7b:
f8:bf:6f:3a:05:b6:db:44:f5:07:36:9c:c9:9d:2d:
48:15:a2:08:85:1c:68:e3:74:6e:f0:30:2b:a4:ef:
b5:bb:e2:2a:ec:45:63:42:d6:04:ef:d4:0b:fa:76:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:93:54:DB:88:62:D7:A4:87:21:AC:36:C5:56:12:2E:AC:88:B2:EF
X509v3 Authority Key Identifier:
keyid:A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e1:58:7a:ab:df:09:df:f5:1e:fa:34:97:09:99:90:7d:12:
c4:01:5d:ec:d0:9f:5b:47:b1:86:86:17:cb:5b:a1:0b:ca:a9:
17:49:5b:21:b9:50:c0:ea:ba:85:f0:31:88:ee:45:73:00:72:
b8:9c:b4:5e:fd:a9:2f:8e:f7:37:c9:04:24:4b:25:e9:f6:6e:
e2:ef:44:bc:3a:8e:a0:9f:47:bc:bf:20:26:ec:ed:a8:0c:3f:
7c:9b:71:91:97:e3:84:f4:0b:31:cd:1d:a8:3d:80:b5:ea:5f:
c2:71:1c:69:35:19:95:af:33:3f:71:e0:c3:3f:92:cb:0a:55:
65:25:cf:26:1f:a1:27:d6:c1:b9:8d:a1:97:17:8c:bc:02:90:
a1:7b:5a:cb:b8:f3:d0:a5:ee:80:24:f8:4f:68:e8:7d:9e:9a:
17:ad:76:f4:43:e1:5b:e5:b6:af:87:7d:0f:27:4e:8b:ae:b5:
af:b0:57:eb:cb:4d:20:9b:42:a8:0d:08:54:d1:27:00:d9:44:
49:cb:b5:49:36:74:dc:e6:32:52:d6:9f:11:5b:87:c3:96:0e:
93:d0:13:91:10:99:3b:4b:63:bb:77:39:00:c7:04:cd:cb:e1:
5d:1f:93:b6:4b:f5:24:ea:b7:5c:94:7b:bf:0d:94:27:a6:c0:
ac:1d:d2:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IYg/p5YFdhldqgmycVtmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNTI1Njg1Yzk2ZTMyNmYyMGFlMzcyOWMwMzBmNDRmZDE0
OTliMDUwHhcNMjUxMDE5MTEwMTE5WhcNMjUxMDIwMTEwMTE5WjAzMTEwLwYDVQQD
EyhjNjkzNTRkYjg4NjJkN2E0ODcyMWFjMzZjNTU2MTIyZWFjODhiMmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYA7oWoltXn79ssRBOs6t2IIXRED
hhPN1D8eO4RVwP8IutkO/+L3Kvg4y9x1SdDZC1kT4Icar4Gxx1mJXXzB1m/twVNd
ruZwe7TBL5KNAGeZg7O+PYJR6CX9gQ/eql7ZjIGP3K7QJllzaBc8aHEjCSh/F3V6
IbgWvLmoqDHi4ocFE3XsYq6SNwbbFA6s1YATceth5Q0xE221OOmYv67433l89l7g
QMNAHEQgiQ4FWXEu5u9JGphKxZbbCNmvKQ97ZuewySGPltSkXbIqOVUAHXv4v286
BbbbRPUHNpzJnS1IFaIIhRxo43Ru8DArpO+1u+Iq7EVjQtYE79QL+naADwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaTVNuIYtekhyGsNsVWEi6siLLvMB8GA1UdIwQY
MBaAFKFSVoXJbjJvIK43KcAw9E/RSZsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ZKV2hjbHVNbThncmpjcHdERDBUOUZKbXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lMmNjOGItODYwNi00ZjI1LTkyZDAt
NDQzNzFiMWNjNzJmLzEvb1ZKV2hjbHVNbThncmpjcHdERDBUOUZKbXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lMmNjOGItODYwNi00ZjI1LTkyZDAtNDQzNzFiMWNjNzJm
LzEvb1ZKV2hjbHVNbThncmpjcHdERDBUOUZKbXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+FYeqvf
Cd/1Hvo0lwmZkH0SxAFd7NCfW0exhoYXy1uhC8qpF0lbIblQwOq6hfAxiO5FcwBy
uJy0Xv2pL473N8kEJEsl6fZu4u9EvDqOoJ9HvL8gJuztqAw/fJtxkZfjhPQLMc0d
qD2AtepfwnEcaTUZla8zP3Hgwz+SywpVZSXPJh+hJ9bBuY2hlxeMvAKQoXtay7jz
0KXugCT4T2jofZ6aF6129EPhW+W2r4d9DydOi661r7BX68tNIJtCqA0IVNEnANlE
Scu1STZ03OYyUtafEVuHw5YOk9ATkRCZO0tju3c5AMcEzcvhXR+Ttkv1JOq3XJR7
vw2UJ6bArB3SaQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:15 2025 by rpki-client