Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json)
Hash identifier: bX2gRnyxSoybQ0PjKBL6iymfhojsghLq9lVQjsE3wfU=
Subject key identifier: 9A:59:88:91:BF:88:C4:B4:C1:10:6E:2F:C4:0E:BC:ED:D3:F0:E0:41
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 0198D4E05748D2021A83A639F5E14ED2802F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
Manifest number: 0EB5
Signing time: Sat 23 Aug 2025 03:02:08 +0000
Manifest this update: Sat 23 Aug 2025 03:02:08 +0000
Manifest next update: Sun 24 Aug 2025 03:02:08 +0000
Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: onV7vuGzy3hFj7Nctzz2uXIonmVcCzrtio8MH4Idgfw=)
2: uurNEPjhRtDIDBb3Oc-e5-rgs-I.roa (hash: N52vo6FqVd0GdLu55AAXlbmzEZo+baOISMz+vvdeY6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:57:48:d2:02:1a:83:a6:39:f5:e1:4e:d2:80:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Aug 23 03:02:08 2025 GMT
Not After : Aug 24 03:02:08 2025 GMT
Subject: CN=9a598891bf88c4b4c1106e2fc40ebcedd3f0e041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5c:4b:0a:9e:b8:74:f5:a5:77:0e:14:6a:bd:
85:ed:18:09:ba:3b:94:02:b4:dd:d9:0e:30:a6:11:
ae:1f:a0:96:43:11:85:68:45:f9:ba:1a:11:08:80:
55:4e:16:84:36:9e:be:0c:e0:3b:33:28:37:e7:78:
1a:7c:47:79:3b:24:91:0b:16:15:07:bb:4c:e3:f3:
61:b7:6f:87:f7:e0:97:2d:24:ed:35:20:d2:22:42:
7b:0a:a0:2b:d7:6f:69:92:09:a6:59:f8:c7:dd:91:
1a:5a:ff:a6:b5:f5:d7:c0:a1:55:bd:24:1a:69:45:
d8:76:27:76:a6:a9:4f:4c:23:ef:25:27:c5:02:d7:
5c:47:8a:df:0f:ae:44:83:88:0c:92:90:8c:57:7e:
78:cc:bd:ae:85:a9:a6:3f:f5:63:5a:83:6c:f7:6c:
15:6a:0c:3d:10:f6:e6:0f:5a:98:21:de:da:4b:48:
45:bd:af:e8:79:a7:c2:99:49:38:fc:34:f3:af:62:
9f:e1:c8:c9:f7:2f:53:08:43:b3:69:fe:6c:3e:4e:
d0:5d:af:4d:a5:59:03:9d:2a:e2:68:91:32:61:fc:
2d:01:9a:de:5e:fc:c6:44:11:57:f8:01:c2:94:76:
6b:5d:a9:dd:83:9d:11:2a:e6:46:37:90:de:3f:8e:
26:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:59:88:91:BF:88:C4:B4:C1:10:6E:2F:C4:0E:BC:ED:D3:F0:E0:41
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:67:af:52:1a:10:51:34:81:9f:36:82:0b:6f:0a:e7:ef:56:
e8:06:45:62:84:c5:cd:03:6f:a0:f9:c3:07:24:3c:4e:ff:41:
0e:92:39:40:26:d2:fd:2d:fc:d5:41:d2:57:29:2e:63:5c:be:
ec:0f:4f:eb:b7:95:49:6e:ba:58:25:86:45:f5:4f:1a:c0:f6:
31:54:3d:b5:fb:be:3b:2e:fb:6b:9c:64:89:ad:c1:ef:52:0c:
0e:2d:65:b5:99:cd:99:e6:1b:a3:46:03:ef:5d:7f:45:f7:34:
64:ac:5c:59:32:a6:31:e5:f9:5e:53:ed:e2:a4:49:f4:84:5c:
b2:b5:d7:00:cb:43:54:78:dd:15:e2:ec:92:30:ab:ec:c9:af:
83:c5:df:36:dc:6a:dd:a5:6d:3d:0a:bf:5a:4a:c7:07:d3:80:
30:83:fe:30:83:98:e8:2a:2b:28:7e:7e:03:c0:bc:10:15:7a:
e4:58:50:ea:d0:d1:9b:c5:2f:0f:ea:40:31:9a:2d:7e:33:ae:
fb:01:18:64:b5:11:04:3a:f3:42:cc:ba:ab:5a:20:ee:f8:10:
f0:f6:a7:5c:99:4c:a7:27:96:5b:8f:30:7e:98:72:cc:f0:fd:
d3:b3:ae:e7:cd:a1:85:23:74:aa:5c:95:79:9c:28:1b:df:a2:
65:7f:9e:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4FdI0gIag6Y59eFO0oAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MmM2N2I0YWI0YWY4NmZlNjFlYThjNmUxN2QxMWUzZTA1
ZDBhNTEwHhcNMjUwODIzMDMwMjA4WhcNMjUwODI0MDMwMjA4WjAzMTEwLwYDVQQD
Eyg5YTU5ODg5MWJmODhjNGI0YzExMDZlMmZjNDBlYmNlZGQzZjBlMDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFxLCp64dPWldw4Uar2F7RgJujuU
ArTd2Q4wphGuH6CWQxGFaEX5uhoRCIBVThaENp6+DOA7Myg353gafEd5OySRCxYV
B7tM4/Nht2+H9+CXLSTtNSDSIkJ7CqAr129pkgmmWfjH3ZEaWv+mtfXXwKFVvSQa
aUXYdid2pqlPTCPvJSfFAtdcR4rfD65Eg4gMkpCMV354zL2uhammP/VjWoNs92wV
agw9EPbmD1qYId7aS0hFva/oeafCmUk4/DTzr2Kf4cjJ9y9TCEOzaf5sPk7QXa9N
pVkDnSriaJEyYfwtAZreXvzGRBFX+AHClHZrXandg50RKuZGN5DeP44mAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpZiJG/iMS0wRBuL8QOvO3T8OBBMB8GA1UdIwQY
MBaAFDgsZ7SrSvhv5h6oxuF9EePgXQpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUt
Mjc5OTA2ZWI1Yzg1LzEvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUtMjc5OTA2ZWI1Yzg1
LzEvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmevUhoQ
UTSBnzaCC28K5+9W6AZFYoTFzQNvoPnDByQ8Tv9BDpI5QCbS/S381UHSVykuY1y+
7A9P67eVSW66WCWGRfVPGsD2MVQ9tfu+Oy77a5xkia3B71IMDi1ltZnNmeYbo0YD
711/Rfc0ZKxcWTKmMeX5XlPt4qRJ9IRcsrXXAMtDVHjdFeLskjCr7Mmvg8XfNtxq
3aVtPQq/WkrHB9OAMIP+MIOY6CorKH5+A8C8EBV65FhQ6tDRm8UvD+pAMZotfjOu
+wEYZLURBDrzQsy6q1og7vgQ8PanXJlMpyeWW48wfphyzPD907Ou582hhSN0qlyV
eZwoG9+iZX+eFw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:41:59 2025 by rpki-client