Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
File: OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft (raw, json)
Hash identifier: 5LeXnpfh7bhYcGSdKEa2hMjw+r+I1Vz7sLSfaozo9OI=
Subject key identifier: D0:70:46:1A:15:98:B7:0A:64:60:7D:6E:BF:59:4D:C1:68:2A:12:4E
Authority key identifier: 38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91
Certificate issuer: /CN=3841266f2c94ac422b96a68a7500bb82c1179191
Certificate serial: 0198D5F1841B8B4AF917A01768B58743B915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
Manifest number: 159F
Signing time: Sat 23 Aug 2025 08:00:31 +0000
Manifest this update: Sat 23 Aug 2025 08:00:31 +0000
Manifest next update: Sun 24 Aug 2025 08:00:31 +0000
Files and hashes: 1: OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl (hash: a7+o84+D0lU0ch8vJWMAxpQXDNgqbcZ0qiSVw3qSvSU=)
2: QOav3lyPZWYZ9A-33IdmOq4p0Mo.roa (hash: MbjZHir8r+jpFNjo1IiwrrSwZjkeJw6BZ6V05J/2V+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:84:1b:8b:4a:f9:17:a0:17:68:b5:87:43:b9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3841266f2c94ac422b96a68a7500bb82c1179191
Validity
Not Before: Aug 23 08:00:31 2025 GMT
Not After : Aug 24 08:00:31 2025 GMT
Subject: CN=d070461a1598b70a64607d6ebf594dc1682a124e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:41:e3:d1:be:28:ab:99:9a:6c:3e:1b:09:16:
99:a7:70:67:c0:37:be:9f:f2:a8:ef:61:7c:46:c1:
87:f7:d5:a0:bc:6c:dc:c1:91:8c:5d:6c:da:bd:31:
31:30:a8:a4:c0:26:e6:08:2d:b7:17:0f:80:3d:6c:
38:a7:72:83:49:ee:59:17:cd:e7:ee:24:2d:a6:96:
1b:6e:be:2d:6a:2b:2c:7c:1c:91:a7:a4:28:09:17:
f1:f7:2b:9c:3b:2b:18:1a:c3:b4:0d:dc:12:bb:40:
9e:4a:56:cd:e5:f6:eb:4d:8c:43:83:dc:9f:f3:4d:
8a:d4:35:e2:6d:82:de:ac:b3:3c:49:18:63:52:49:
e2:b9:d3:c4:c1:d0:ec:89:8b:2f:b1:b2:4c:3f:25:
b0:0a:bc:21:4d:05:99:ea:83:12:57:f1:a3:53:16:
ed:8b:96:59:6d:2c:d0:c5:f0:e4:37:55:3c:23:80:
84:f5:9e:32:fe:05:c8:ea:21:4b:ef:f4:f0:d0:5c:
34:03:e6:a8:fa:1d:42:81:9d:b2:96:49:5a:18:44:
d6:0d:f1:74:5d:1b:f6:7b:02:12:5d:f1:a4:0c:37:
0c:91:a8:0d:4b:9b:cd:0c:5b:01:41:d0:2a:2f:89:
a0:3b:a2:8f:5c:d6:4b:db:09:f1:91:02:44:81:14:
c9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:70:46:1A:15:98:B7:0A:64:60:7D:6E:BF:59:4D:C1:68:2A:12:4E
X509v3 Authority Key Identifier:
keyid:38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:93:f2:cb:f8:da:fa:60:cd:41:c3:19:9e:c6:d8:c5:91:fb:
20:5e:b5:55:bd:62:38:91:a7:66:4a:0b:97:20:ba:8f:a0:b3:
2d:26:aa:8f:28:f2:66:78:2d:57:b1:43:17:98:93:1d:9c:d2:
66:c7:8c:ac:db:1c:77:e0:9f:29:e4:74:e7:ec:da:25:28:b8:
65:e7:76:28:31:0d:75:fc:26:18:bf:a0:bc:ae:6b:fe:04:dd:
7a:85:37:ca:4f:9d:92:15:bd:c3:d3:6f:c5:04:f6:c7:09:be:
ba:9c:95:fc:c1:fa:1e:28:43:10:f6:f2:94:9c:85:56:80:44:
d5:ab:37:e2:84:5a:32:09:6b:09:db:af:f0:b1:d0:11:e1:5d:
8b:9d:d5:c3:fd:71:b6:99:51:fe:3b:b1:3d:8d:5d:0b:bc:08:
52:d2:c2:cb:b5:12:62:85:74:a4:8c:ce:f9:ab:80:b0:98:58:
c4:14:68:48:39:2b:38:2c:23:1f:46:9f:d4:ab:02:11:63:aa:
ac:c5:d3:30:bd:bc:03:c0:a8:fd:cf:7e:dc:59:cf:26:87:44:
2f:87:c1:a0:92:fa:d1:53:be:b3:c1:60:ff:60:77:28:7f:9a:
cc:66:8e:e5:56:63:fb:d6:91:49:48:f2:93:4c:3c:28:16:fb:
b3:2b:99:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8YQbi0r5F6AXaLWHQ7kVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDEyNjZmMmM5NGFjNDIyYjk2YTY4YTc1MDBiYjgyYzEx
NzkxOTEwHhcNMjUwODIzMDgwMDMxWhcNMjUwODI0MDgwMDMxWjAzMTEwLwYDVQQD
EyhkMDcwNDYxYTE1OThiNzBhNjQ2MDdkNmViZjU5NGRjMTY4MmExMjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUHj0b4oq5mabD4bCRaZp3BnwDe+
n/Ko72F8RsGH99WgvGzcwZGMXWzavTExMKikwCbmCC23Fw+APWw4p3KDSe5ZF83n
7iQtppYbbr4taissfByRp6QoCRfx9yucOysYGsO0DdwSu0CeSlbN5fbrTYxDg9yf
802K1DXibYLerLM8SRhjUkniudPEwdDsiYsvsbJMPyWwCrwhTQWZ6oMSV/GjUxbt
i5ZZbSzQxfDkN1U8I4CE9Z4y/gXI6iFL7/Tw0Fw0A+ao+h1CgZ2ylklaGETWDfF0
XRv2ewISXfGkDDcMkagNS5vNDFsBQdAqL4mgO6KPXNZL2wnxkQJEgRTJywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBwRhoVmLcKZGB9br9ZTcFoKhJOMB8GA1UdIwQY
MBaAFDhBJm8slKxCK5aminUAu4LBF5GRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VFbWJ5eVVyRUlybHFhS2RRQzdnc0VYa1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8xMGE0NDQtM2UzMC00NDIxLWI0Mzkt
ODZlNWE5ZWY4NjJhLzEvT0VFbWJ5eVVyRUlybHFhS2RRQzdnc0VYa1pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8xMGE0NDQtM2UzMC00NDIxLWI0MzktODZlNWE5ZWY4NjJh
LzEvT0VFbWJ5eVVyRUlybHFhS2RRQzdnc0VYa1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZPyy/ja
+mDNQcMZnsbYxZH7IF61Vb1iOJGnZkoLlyC6j6CzLSaqjyjyZngtV7FDF5iTHZzS
ZseMrNscd+CfKeR05+zaJSi4Zed2KDENdfwmGL+gvK5r/gTdeoU3yk+dkhW9w9Nv
xQT2xwm+upyV/MH6HihDEPbylJyFVoBE1as34oRaMglrCduv8LHQEeFdi53Vw/1x
tplR/juxPY1dC7wIUtLCy7USYoV0pIzO+auAsJhYxBRoSDkrOCwjH0af1KsCEWOq
rMXTML28A8Co/c9+3FnPJodEL4fBoJL60VO+s8Fg/2B3KH+azGaO5VZj+9aRSUjy
k0w8KBb7syuZ7Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:22 2025 by rpki-client