Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier: 90YJM5+5Qf1pdWHHxjEROHJYKeTg3CP1xHEnj1YtsG4=
Subject key identifier: 28:4E:75:B7:53:69:0F:DF:1C:F2:89:DE:B0:1D:1E:F0:57:8C:43:DE
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 0199FBEC20D76F5198A45A299D2410C647C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number: 1465
Signing time: Sun 19 Oct 2025 10:03:00 +0000
Manifest this update: Sun 19 Oct 2025 10:03:00 +0000
Manifest next update: Mon 20 Oct 2025 10:03:00 +0000
Files and hashes: 1: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: EnymcuCOW7EDpFMTp61XCCUPtjxnSQAoWKThv7WTM9Q=)
2: UR9eQe3KGZ-9c60OTO6AJ5Nv5N4.roa (hash: i7xKIbibG1Wf9vR46/89Xb0uAuY5HlesJatHG5Hh1rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:20:d7:6f:51:98:a4:5a:29:9d:24:10:c6:47:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Oct 19 10:03:00 2025 GMT
Not After : Oct 20 10:03:00 2025 GMT
Subject: CN=284e75b753690fdf1cf289deb01d1ef0578c43de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:49:c0:95:5d:0f:3a:4a:ad:32:05:11:4c:
6a:de:94:82:89:c2:2b:ef:d2:a0:4e:12:93:1a:7f:
92:bc:a5:6f:e0:5d:13:3e:aa:2b:bb:9a:cf:9a:a7:
aa:bb:ff:f9:25:49:d3:e1:b1:ab:8f:07:a5:d2:6a:
12:2a:3c:1c:e0:d9:d9:cd:6f:cf:82:92:e7:f1:57:
61:59:e4:70:24:99:6b:b3:11:d4:35:ed:bf:a0:6f:
b7:01:2a:69:31:6d:7a:bc:2b:1a:04:b8:e1:99:19:
9e:6a:5f:55:6b:7f:97:34:47:1b:ff:6a:d2:9e:62:
e5:91:4e:0c:7b:9a:7e:dc:c0:50:b5:31:c5:63:ae:
aa:82:da:f3:fe:7e:2c:96:d1:b8:12:ff:9d:f7:0b:
00:0a:f9:01:e0:fb:1d:d1:4b:ef:84:25:81:75:c0:
09:d2:ee:3a:a8:24:17:7e:f8:38:7b:f6:d0:a1:bc:
82:64:ad:95:d5:22:de:0a:d5:3a:d1:99:c5:11:8e:
f9:28:c4:85:56:8b:60:00:8a:43:99:37:de:13:0d:
5e:ea:bd:1b:c7:88:9c:f4:00:6f:60:7b:bd:7d:78:
cb:9f:53:6a:aa:92:70:67:94:ab:08:6e:7b:15:9f:
bf:03:b5:34:16:cc:65:3e:a7:57:28:f2:0e:a2:bb:
f1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4E:75:B7:53:69:0F:DF:1C:F2:89:DE:B0:1D:1E:F0:57:8C:43:DE
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c2:14:47:a3:b2:2a:6b:03:79:e3:38:c2:1c:c4:cb:8b:fb:
af:a3:0d:81:c0:5d:4e:33:4b:4e:58:ea:98:d6:f7:9a:4a:ec:
0a:f5:1d:d7:02:7e:c5:53:77:29:4e:6d:af:8e:f8:12:c0:26:
25:d3:29:e3:18:01:74:bd:5b:b0:06:da:91:51:6e:39:f3:88:
65:73:bf:ff:3a:c0:fe:fd:6c:ea:5a:f7:6b:d4:41:4f:7a:48:
6b:30:d2:e8:a6:5f:04:bb:9f:5a:14:c0:ff:da:1e:ce:7b:f7:
b0:02:c0:cf:3e:60:15:97:12:c5:9a:86:c4:2f:75:b1:06:f3:
18:a0:2f:df:1d:0a:e8:82:df:5e:e2:5f:76:8f:78:51:74:31:
73:f5:98:d3:38:d6:3a:56:8a:b5:1a:c5:33:e7:5b:ad:23:7f:
52:f4:af:9a:4e:ff:6c:4e:58:c0:61:87:60:a5:9d:bd:09:6b:
56:70:5e:eb:aa:9b:81:df:e1:18:9e:64:fb:c1:1d:d8:34:c3:
91:2b:3a:f8:fa:95:ee:95:6f:de:d6:0a:9d:f6:c3:b0:6a:12:
1a:73:56:20:49:e2:c3:07:0a:9d:93:8e:ba:96:a8:57:03:d0:
bc:f2:ee:99:6b:00:73:a8:b4:aa:ec:d9:f0:5d:3a:3e:96:bb:
75:36:b4:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77CDXb1GYpFopnSQQxkfDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZWVhODQ2NTUxYzZlNDE5Yjk0N2UwZGExMDdlZWNiMDA3
MDQxOWEwHhcNMjUxMDE5MTAwMzAwWhcNMjUxMDIwMTAwMzAwWjAzMTEwLwYDVQQD
EygyODRlNzViNzUzNjkwZmRmMWNmMjg5ZGViMDFkMWVmMDU3OGM0M2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+tJwJVdDzpKrTIFEUxq3pSCicIr
79KgThKTGn+SvKVv4F0TPqoru5rPmqequ//5JUnT4bGrjwel0moSKjwc4NnZzW/P
gpLn8VdhWeRwJJlrsxHUNe2/oG+3ASppMW16vCsaBLjhmRmeal9Va3+XNEcb/2rS
nmLlkU4Me5p+3MBQtTHFY66qgtrz/n4sltG4Ev+d9wsACvkB4Psd0UvvhCWBdcAJ
0u46qCQXfvg4e/bQobyCZK2V1SLeCtU60ZnFEY75KMSFVotgAIpDmTfeEw1e6r0b
x4ic9ABvYHu9fXjLn1NqqpJwZ5SrCG57FZ+/A7U0FsxlPqdXKPIOorvxiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChOdbdTaQ/fHPKJ3rAdHvBXjEPeMB8GA1UdIwQY
MBaAFDnuqEZVHG5Bm5R+DaEH7ssAcEGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODIt
MjgzMWE0ODUwNjQ1LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODItMjgzMWE0ODUwNjQ1
LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScIUR6Oy
KmsDeeM4whzEy4v7r6MNgcBdTjNLTljqmNb3mkrsCvUd1wJ+xVN3KU5tr474EsAm
JdMp4xgBdL1bsAbakVFuOfOIZXO//zrA/v1s6lr3a9RBT3pIazDS6KZfBLufWhTA
/9oeznv3sALAzz5gFZcSxZqGxC91sQbzGKAv3x0K6ILfXuJfdo94UXQxc/WY0zjW
OlaKtRrFM+dbrSN/UvSvmk7/bE5YwGGHYKWdvQlrVnBe66qbgd/hGJ5k+8Ed2DTD
kSs6+PqV7pVv3tYKnfbDsGoSGnNWIEniwwcKnZOOupaoVwPQvPLumWsAc6i0quzZ
8F06Ppa7dTa0Qw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:34 2025 by rpki-client