Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
File: OeHApbBM1BmsHvkjvI1lcDIwYdo.mft (raw, json)
Hash identifier: tDKVSAuSxiclSiXnkneqvEd1utkmsML10KsS+jSOchU=
Subject key identifier: 15:D1:40:1F:0A:85:7E:DB:F4:A1:58:68:62:BB:37:FB:9F:43:D2:8B
Authority key identifier: 39:E1:C0:A5:B0:4C:D4:19:AC:1E:F9:23:BC:8D:65:70:32:30:61:DA
Certificate issuer: /CN=39e1c0a5b04cd419ac1ef923bc8d6570323061da
Certificate serial: 0198D65EF9156FBD883A120B0CA77007C043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 10:00:04 +0000
Manifest this update: Sat 23 Aug 2025 10:00:04 +0000
Manifest next update: Sun 24 Aug 2025 10:00:04 +0000
Files and hashes: 1: OeHApbBM1BmsHvkjvI1lcDIwYdo.crl (hash: Bdt3fzKFUvoxVkq5KAgrw41Kr/uDX8ueHD+l9XFoNUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5e:f9:15:6f:bd:88:3a:12:0b:0c:a7:70:07:c0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e1c0a5b04cd419ac1ef923bc8d6570323061da
Validity
Not Before: Aug 23 10:00:04 2025 GMT
Not After : Aug 24 10:00:04 2025 GMT
Subject: CN=15d1401f0a857edbf4a1586862bb37fb9f43d28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0e:f0:9f:f3:3e:3a:13:3b:4a:fa:b2:e2:4c:
92:15:f5:29:f1:83:99:a2:02:d0:40:ee:e5:57:76:
03:8a:fc:26:94:ff:e5:17:3f:e4:2a:8b:f3:05:65:
ee:e6:3f:28:11:46:98:b8:6a:ab:b7:ce:9b:53:2a:
05:26:db:9d:12:79:a5:5c:6f:53:78:eb:f7:3d:cd:
28:66:f9:d5:65:c6:be:96:99:f5:9e:21:5a:10:d2:
69:88:04:cd:9b:89:b8:03:97:bb:91:55:7e:23:bc:
b9:2f:73:26:62:52:4c:e5:89:50:7d:02:97:3d:d5:
b6:53:3a:59:14:26:1e:e7:7f:7f:f4:54:f2:1d:6b:
f0:9f:46:a5:a0:ca:8b:57:df:19:93:26:03:a1:94:
7d:ce:dd:ca:5f:b4:17:5e:0c:15:bd:0a:28:c6:6d:
b5:b5:34:d9:7d:77:7c:e7:94:92:00:cd:fd:54:62:
19:1a:fc:3a:bb:8e:57:2d:2c:8a:2d:64:08:f2:ba:
85:b5:8d:41:64:dc:78:60:4d:9b:ab:63:5f:cd:90:
0b:b7:13:f0:aa:9a:0e:bc:f8:46:70:bf:3d:bc:87:
f9:c6:51:9e:6e:87:e9:34:d3:8d:d8:18:dd:7c:d9:
a8:9c:79:b8:45:9d:c2:10:ad:71:72:f6:dd:cd:4f:
39:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D1:40:1F:0A:85:7E:DB:F4:A1:58:68:62:BB:37:FB:9F:43:D2:8B
X509v3 Authority Key Identifier:
keyid:39:E1:C0:A5:B0:4C:D4:19:AC:1E:F9:23:BC:8D:65:70:32:30:61:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:73:4c:f2:e9:f4:b9:4a:95:f6:36:86:31:31:14:b0:f0:75:
f5:31:20:a8:e3:8d:72:57:67:f6:04:22:28:0b:83:c6:3c:43:
7a:8c:5c:15:56:16:55:76:d9:64:14:7e:49:20:59:05:e3:8d:
11:a8:6a:49:1b:56:4c:c4:09:52:82:94:99:e9:4e:c7:ef:28:
ae:c0:ae:39:4c:a4:85:ef:9f:61:18:b4:f5:6d:9e:44:24:b7:
55:bf:5a:7f:d8:24:36:d1:7b:5a:c3:61:14:15:70:e6:b4:cf:
23:12:bd:1c:aa:e1:62:5a:19:f4:24:e6:ba:06:ea:0b:7d:db:
72:c8:a6:3b:51:eb:50:f8:65:5b:ef:82:4e:8b:44:02:aa:9c:
98:e1:30:d2:14:b0:24:cf:87:6a:4e:01:2d:3a:29:05:f5:f5:
c4:94:b3:d1:9a:bf:ce:64:29:31:9d:5e:6f:cf:43:ff:36:83:
51:ab:26:52:4c:09:53:cd:c4:7b:5c:9c:d1:4c:4f:d5:93:2f:
3a:87:45:65:9e:ac:d2:a9:62:86:75:e7:c5:48:c6:1e:f1:be:
9a:e6:df:ea:2b:4b:71:a5:28:b5:22:5b:95:04:d8:70:db:07:
1a:6d:71:dd:20:15:79:dc:3b:26:e3:a0:55:32:d3:df:5f:d1:
d1:6e:8d:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXvkVb72IOhILDKdwB8BDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZTFjMGE1YjA0Y2Q0MTlhYzFlZjkyM2JjOGQ2NTcwMzIz
MDYxZGEwHhcNMjUwODIzMTAwMDA0WhcNMjUwODI0MTAwMDA0WjAzMTEwLwYDVQQD
EygxNWQxNDAxZjBhODU3ZWRiZjRhMTU4Njg2MmJiMzdmYjlmNDNkMjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ7wn/M+OhM7Svqy4kySFfUp8YOZ
ogLQQO7lV3YDivwmlP/lFz/kKovzBWXu5j8oEUaYuGqrt86bUyoFJtudEnmlXG9T
eOv3Pc0oZvnVZca+lpn1niFaENJpiATNm4m4A5e7kVV+I7y5L3MmYlJM5YlQfQKX
PdW2UzpZFCYe539/9FTyHWvwn0aloMqLV98ZkyYDoZR9zt3KX7QXXgwVvQooxm21
tTTZfXd855SSAM39VGIZGvw6u45XLSyKLWQI8rqFtY1BZNx4YE2bq2NfzZALtxPw
qpoOvPhGcL89vIf5xlGebofpNNON2BjdfNmonHm4RZ3CEK1xcvbdzU85mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXRQB8KhX7b9KFYaGK7N/ufQ9KLMB8GA1UdIwQY
MBaAFDnhwKWwTNQZrB75I7yNZXAyMGHaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2VIQXBiQk0xQm1zSHZranZJMWxjREl3WWRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zZmE0MTEtYWY5OC00YWY4LWI1Yjgt
NTBlMjJhYjcxZjg0LzEvT2VIQXBiQk0xQm1zSHZranZJMWxjREl3WWRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zZmE0MTEtYWY5OC00YWY4LWI1YjgtNTBlMjJhYjcxZjg0
LzEvT2VIQXBiQk0xQm1zSHZranZJMWxjREl3WWRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnNM8un0
uUqV9jaGMTEUsPB19TEgqOONcldn9gQiKAuDxjxDeoxcFVYWVXbZZBR+SSBZBeON
EahqSRtWTMQJUoKUmelOx+8orsCuOUykhe+fYRi09W2eRCS3Vb9af9gkNtF7WsNh
FBVw5rTPIxK9HKrhYloZ9CTmugbqC33bcsimO1HrUPhlW++CTotEAqqcmOEw0hSw
JM+Hak4BLTopBfX1xJSz0Zq/zmQpMZ1eb89D/zaDUasmUkwJU83Ee1yc0UxP1ZMv
OodFZZ6s0qlihnXnxUjGHvG+mubf6itLcaUotSJblQTYcNsHGm1x3SAVedw7JuOg
VTLT31/R0W6Nug==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:00 2025 by rpki-client