Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
File: oU6-xYG-93sycD2LRtMnjBkaKz0.mft (raw, json)
Hash identifier: 6vZMCIZ1MPayKO5YD246j8bMn30uM/bAapr/yyuANcY=
Subject key identifier: 14:F2:85:50:DD:6F:E2:46:88:9D:FF:CB:FE:A8:38:0A:10:B7:BC:97
Authority key identifier: A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
Certificate issuer: /CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Certificate serial: 0198D583B696622A366740E872DDF73B2E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 06:00:35 +0000
Manifest this update: Sat 23 Aug 2025 06:00:35 +0000
Manifest next update: Sun 24 Aug 2025 06:00:35 +0000
Files and hashes: 1: oU6-xYG-93sycD2LRtMnjBkaKz0.crl (hash: NwCjy5Q2/sRw5KsCkvUPaka+qHzU9WVVEUmyc0nsdQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b6:96:62:2a:36:67:40:e8:72:dd:f7:3b:2e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Validity
Not Before: Aug 23 06:00:35 2025 GMT
Not After : Aug 24 06:00:35 2025 GMT
Subject: CN=14f28550dd6fe246889dffcbfea8380a10b7bc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:73:b3:cb:ff:b2:3d:93:40:bc:ed:ed:4e:5f:
28:1c:a2:85:59:5c:d6:68:8c:5f:26:e0:17:d5:cf:
d2:00:5c:da:bd:28:5a:c8:c1:7d:42:da:5d:43:fa:
65:f2:30:8e:1c:ea:57:e5:17:0b:2f:1a:94:05:97:
65:ab:0f:02:23:73:0e:21:5d:87:0c:4c:c3:78:f6:
23:0d:e1:04:3c:18:b5:60:83:4a:2a:5c:40:7d:08:
7d:30:f1:6c:4b:3d:46:10:87:b5:7c:e1:99:b5:8f:
1f:3d:6c:53:d7:a1:ca:8a:86:bd:07:50:44:32:1d:
b2:bb:43:59:2d:68:74:2e:07:60:90:bd:01:b8:3f:
56:f2:6f:c7:81:8d:7c:d6:58:cd:09:08:aa:20:e5:
da:83:36:09:86:b5:a0:fe:c7:33:8c:77:1b:cb:1b:
a1:3e:df:5a:f6:25:b7:84:40:37:ac:8c:c5:d4:bf:
8d:6a:ea:d7:2a:1e:ce:3b:83:06:1f:7e:0f:05:0c:
44:06:10:c5:80:6a:b9:0e:1d:5d:9f:80:92:8b:d4:
2f:ef:77:62:64:b4:77:8d:aa:bf:22:f6:f7:78:1b:
df:d1:2a:b7:5d:53:7c:8d:b3:0e:e2:83:93:7b:b2:
68:7d:1c:36:8c:40:19:bc:e9:48:46:55:44:1d:86:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F2:85:50:DD:6F:E2:46:88:9D:FF:CB:FE:A8:38:0A:10:B7:BC:97
X509v3 Authority Key Identifier:
keyid:A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:bd:ac:1f:f7:68:e9:ce:1a:bc:ee:77:c7:79:9b:ba:49:d6:
17:12:6a:43:62:17:40:b9:04:cd:82:5a:c8:15:16:cd:b5:f7:
bb:6e:96:95:ea:0d:f3:1c:2c:da:51:5b:10:97:d5:41:8f:de:
03:55:5d:eb:99:8f:94:06:23:f8:5d:f8:0a:42:bf:7d:6c:70:
62:d7:c3:e0:80:5c:95:64:00:99:d1:47:6d:c7:dd:22:2b:82:
30:9a:da:29:c2:6b:82:2f:c5:34:36:0c:08:a2:2c:fd:b5:18:
0a:87:28:f5:69:6b:f1:89:ce:c3:b7:ed:8b:b8:68:44:de:c5:
8c:e1:f3:f5:11:3b:cd:89:8a:aa:f5:ff:14:4c:84:bc:9a:29:
c6:92:17:68:e0:f7:d8:8a:a5:40:9b:e7:9a:80:ac:ee:68:01:
9d:00:a1:a1:95:37:e9:25:d7:48:27:56:52:6a:a9:bf:cf:d1:
b8:35:4e:e9:e4:4b:5d:7a:4c:85:cf:46:cf:13:f9:8a:9f:eb:
a6:03:25:0b:3f:c2:c3:74:b4:9d:01:08:24:26:39:99:67:53:
b4:4d:15:d2:54:9c:a0:80:ad:2d:99:7f:14:a0:ce:55:82:88:
e9:a0:bf:1f:4d:16:80:2f:b9:dc:32:da:b0:cd:82:76:0c:b3:
cf:0b:15:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg7aWYio2Z0Doct33Oy6KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNGViZWM1ODFiZWY3N2IzMjcwM2Q4YjQ2ZDMyNzhjMTkx
YTJiM2QwHhcNMjUwODIzMDYwMDM1WhcNMjUwODI0MDYwMDM1WjAzMTEwLwYDVQQD
EygxNGYyODU1MGRkNmZlMjQ2ODg5ZGZmY2JmZWE4MzgwYTEwYjdiYzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XOzy/+yPZNAvO3tTl8oHKKFWVzW
aIxfJuAX1c/SAFzavShayMF9QtpdQ/pl8jCOHOpX5RcLLxqUBZdlqw8CI3MOIV2H
DEzDePYjDeEEPBi1YINKKlxAfQh9MPFsSz1GEIe1fOGZtY8fPWxT16HKioa9B1BE
Mh2yu0NZLWh0LgdgkL0BuD9W8m/HgY181ljNCQiqIOXagzYJhrWg/sczjHcbyxuh
Pt9a9iW3hEA3rIzF1L+NaurXKh7OO4MGH34PBQxEBhDFgGq5Dh1dn4CSi9Qv73di
ZLR3jaq/Ivb3eBvf0Sq3XVN8jbMO4oOTe7JofRw2jEAZvOlIRlVEHYZiBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTyhVDdb+JGiJ3/y/6oOAoQt7yXMB8GA1UdIwQY
MBaAFKFOvsWBvvd7MnA9i0bTJ4wZGis9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1U2LXhZRy05M3N5Y0QyTFJ0TW5qQmthS3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMDExOWYtMmQyNy00YzFiLWJhZGMt
NDFlNGNkY2ZiZDVhLzEvb1U2LXhZRy05M3N5Y0QyTFJ0TW5qQmthS3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMDExOWYtMmQyNy00YzFiLWJhZGMtNDFlNGNkY2ZiZDVh
LzEvb1U2LXhZRy05M3N5Y0QyTFJ0TW5qQmthS3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKb2sH/do
6c4avO53x3mbuknWFxJqQ2IXQLkEzYJayBUWzbX3u26WleoN8xws2lFbEJfVQY/e
A1Vd65mPlAYj+F34CkK/fWxwYtfD4IBclWQAmdFHbcfdIiuCMJraKcJrgi/FNDYM
CKIs/bUYCoco9Wlr8YnOw7fti7hoRN7FjOHz9RE7zYmKqvX/FEyEvJopxpIXaOD3
2IqlQJvnmoCs7mgBnQChoZU36SXXSCdWUmqpv8/RuDVO6eRLXXpMhc9GzxP5ip/r
pgMlCz/Cw3S0nQEIJCY5mWdTtE0V0lScoICtLZl/FKDOVYKI6aC/H00WgC+53DLa
sM2CdgyzzwsVfw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:18 2025 by rpki-client