Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.mft
File: OUE-iXxaK1FqQWDTwbevOtWeFCQ.mft (raw, json)
Hash identifier: NXPvou1s/yUYYFhTrTcElZLX6qSyaM7z0gWtYTbBvq8=
Subject key identifier: B4:9C:D3:45:C5:73:15:4F:6F:B0:BE:7F:D1:55:13:2A:E8:31:E8:F2
Authority key identifier: 39:41:3E:89:7C:5A:2B:51:6A:41:60:D3:C1:B7:AF:3A:D5:9E:14:24
Certificate issuer: /CN=39413e897c5a2b516a4160d3c1b7af3ad59e1424
Certificate serial: 0198D6CCD7E49D371F7723B248648DEFAEEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUE-iXxaK1FqQWDTwbevOtWeFCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.mft
Manifest number: 0544
Signing time: Sat 23 Aug 2025 12:00:05 +0000
Manifest this update: Sat 23 Aug 2025 12:00:05 +0000
Manifest next update: Sun 24 Aug 2025 12:00:05 +0000
Files and hashes: 1: OUE-iXxaK1FqQWDTwbevOtWeFCQ.crl (hash: RAWTKI+4VwedZ5mXhlhpr5tmt5npCCOLROvxpHaLRik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUE-iXxaK1FqQWDTwbevOtWeFCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:d7:e4:9d:37:1f:77:23:b2:48:64:8d:ef:ae:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39413e897c5a2b516a4160d3c1b7af3ad59e1424
Validity
Not Before: Aug 23 12:00:05 2025 GMT
Not After : Aug 24 12:00:05 2025 GMT
Subject: CN=b49cd345c573154f6fb0be7fd155132ae831e8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:82:4e:79:c2:ae:d5:5c:ae:50:a4:65:64:
76:68:65:aa:e1:27:52:2e:18:7d:d8:3d:87:04:14:
db:db:4a:b7:b5:12:6d:ad:1b:c7:b7:41:72:57:56:
f2:8d:9d:cb:ad:f3:c6:25:76:78:8e:c1:47:42:20:
4b:1a:39:16:4b:39:63:83:4e:59:cc:14:71:25:e4:
86:0b:06:c2:d7:11:7f:ce:39:aa:f4:ac:eb:ef:ef:
20:c3:a9:27:e6:30:bf:c6:17:ab:a6:14:d1:00:3f:
46:b6:89:b2:35:ad:8a:91:31:cc:f8:df:c6:aa:0a:
33:d7:41:20:9d:0b:c4:38:6e:1d:79:31:eb:a3:9b:
57:9f:4b:1e:00:d3:f2:97:a1:46:41:fc:a2:f2:c2:
e0:fc:e1:19:ab:d7:2f:ca:7c:30:bd:be:bd:7d:56:
a8:4a:81:b1:1d:b7:f4:26:6e:99:db:0c:4f:12:ad:
2a:cd:50:4b:98:fd:d7:4c:a1:cd:6d:23:e7:f2:2c:
66:7f:1e:0c:df:ba:d7:39:52:8b:00:17:3d:a1:34:
86:fd:92:79:d8:67:51:98:28:c9:e6:ea:28:63:e5:
c2:66:3d:6b:46:ba:61:1b:e7:f4:9e:8c:60:59:55:
42:b8:73:b7:5e:7c:04:6f:ab:cc:a6:e0:44:5e:d2:
ac:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9C:D3:45:C5:73:15:4F:6F:B0:BE:7F:D1:55:13:2A:E8:31:E8:F2
X509v3 Authority Key Identifier:
keyid:39:41:3E:89:7C:5A:2B:51:6A:41:60:D3:C1:B7:AF:3A:D5:9E:14:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUE-iXxaK1FqQWDTwbevOtWeFCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2b:20:64:a5:58:ac:80:eb:f7:0c:8d:a6:a1:2b:56:f5:4a:
db:43:68:87:dc:46:16:8f:ff:8e:cb:5a:d7:c7:72:1f:c1:81:
c2:25:be:d0:a7:60:d1:14:2d:4f:1f:35:f5:af:22:13:36:13:
42:a8:b1:23:e9:4e:83:c7:f9:0e:47:b3:b2:c1:8f:ab:c8:05:
a9:c9:65:1d:dc:66:81:91:4f:bd:1d:30:80:8f:98:ea:8e:c3:
24:bb:18:60:30:ea:59:30:cc:4c:d7:34:28:bc:30:33:a4:d3:
75:5c:a4:11:43:d0:f7:b8:68:35:d3:42:10:2f:f8:75:68:d4:
27:26:f0:00:5b:6e:00:58:d6:ce:8a:d9:a7:87:c3:aa:a5:f2:
7d:b1:c6:09:1e:c2:0b:66:e1:8a:c8:ba:d3:0d:8b:f7:d1:00:
ec:88:2a:18:22:07:dc:7d:3f:d5:b8:b8:ba:23:5f:e1:d0:a0:
99:a2:0c:6a:26:f6:11:8a:24:40:cc:a4:e3:ce:ed:17:c4:95:
ac:b6:fc:c0:34:72:24:58:d9:f9:65:99:dd:ff:e4:e7:d7:3b:
28:8d:ba:73:a0:e2:c6:e5:54:a4:2d:2d:0f:dd:97:0c:14:5d:
72:38:93:08:12:07:d3:7a:2b:3b:fe:fa:b0:89:2e:e0:12:79:
d3:01:18:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzNfknTcfdyOySGSN767sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NDEzZTg5N2M1YTJiNTE2YTQxNjBkM2MxYjdhZjNhZDU5
ZTE0MjQwHhcNMjUwODIzMTIwMDA1WhcNMjUwODI0MTIwMDA1WjAzMTEwLwYDVQQD
EyhiNDljZDM0NWM1NzMxNTRmNmZiMGJlN2ZkMTU1MTMyYWU4MzFlOGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrGCTnnCrtVcrlCkZWR2aGWq4SdS
Lhh92D2HBBTb20q3tRJtrRvHt0FyV1byjZ3LrfPGJXZ4jsFHQiBLGjkWSzljg05Z
zBRxJeSGCwbC1xF/zjmq9Kzr7+8gw6kn5jC/xherphTRAD9GtomyNa2KkTHM+N/G
qgoz10EgnQvEOG4deTHro5tXn0seANPyl6FGQfyi8sLg/OEZq9cvynwwvb69fVao
SoGxHbf0Jm6Z2wxPEq0qzVBLmP3XTKHNbSPn8ixmfx4M37rXOVKLABc9oTSG/ZJ5
2GdRmCjJ5uooY+XCZj1rRrphG+f0noxgWVVCuHO3XnwEb6vMpuBEXtKsnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSc00XFcxVPb7C+f9FVEyroMejyMB8GA1UdIwQY
MBaAFDlBPol8WitRakFg08G3rzrVnhQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1VFLWlYeGFLMUZxUVdEVHdiZXZPdFdlRkNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9iODBhN2MtYmEwNi00MGMyLTllODgt
ODUwODJjZDk1NDMxLzEvT1VFLWlYeGFLMUZxUVdEVHdiZXZPdFdlRkNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9iODBhN2MtYmEwNi00MGMyLTllODgtODUwODJjZDk1NDMx
LzEvT1VFLWlYeGFLMUZxUVdEVHdiZXZPdFdlRkNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANysgZKVY
rIDr9wyNpqErVvVK20Noh9xGFo//jsta18dyH8GBwiW+0Kdg0RQtTx819a8iEzYT
QqixI+lOg8f5DkezssGPq8gFqcllHdxmgZFPvR0wgI+Y6o7DJLsYYDDqWTDMTNc0
KLwwM6TTdVykEUPQ97hoNdNCEC/4dWjUJybwAFtuAFjWzorZp4fDqqXyfbHGCR7C
C2bhisi60w2L99EA7IgqGCIH3H0/1bi4uiNf4dCgmaIMaib2EYokQMyk487tF8SV
rLb8wDRyJFjZ+WWZ3f/k59c7KI26c6DixuVUpC0tD92XDBRdcjiTCBIH03orO/76
sIku4BJ50wEYWg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:50:46 2025 by rpki-client