Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier: 7bOoz8CJOoGxWTHc7cFURVHvGz5dkAJnhkDoTquNtFo=
Subject key identifier: A5:A8:D5:CD:5A:44:52:35:BF:80:8E:DE:34:38:41:5E:10:7A:39:06
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 0198D84F8E496F40A3AB921474BDDB3BEB4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number: 13CE
Signing time: Sat 23 Aug 2025 19:02:28 +0000
Manifest this update: Sat 23 Aug 2025 19:02:28 +0000
Manifest next update: Sun 24 Aug 2025 19:02:28 +0000
Files and hashes: 1: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: uYFTErmc2zj/GmVra6cDyUH3e90Ogi9DtMM4zqH15UA=)
2: UR9eQe3KGZ-9c60OTO6AJ5Nv5N4.roa (hash: i7xKIbibG1Wf9vR46/89Xb0uAuY5HlesJatHG5Hh1rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 19:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:8e:49:6f:40:a3:ab:92:14:74:bd:db:3b:eb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Aug 23 19:02:28 2025 GMT
Not After : Aug 24 19:02:28 2025 GMT
Subject: CN=a5a8d5cd5a445235bf808ede3438415e107a3906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:94:11:e8:d3:c9:3a:fa:a2:41:37:36:89:e1:
4a:01:06:57:60:40:86:87:ef:8e:42:6c:e3:5d:0f:
48:9f:9b:86:97:ea:46:80:4f:5a:63:e4:83:4d:ac:
78:3e:e4:cc:37:59:03:02:5d:87:01:9e:91:25:3b:
31:32:e4:ea:b6:ae:29:d7:b3:33:93:63:96:54:e9:
4c:a8:83:1b:7b:b3:44:03:e6:41:7a:4c:01:4c:6f:
01:00:66:7e:d8:a1:96:6a:79:7c:c9:13:36:53:84:
2a:c7:15:b4:1e:81:a7:7a:cd:3e:0e:77:b0:46:7b:
6e:88:fd:2b:49:7b:72:f2:a4:04:7f:6a:e8:f5:8c:
4e:7c:5e:97:52:d8:19:41:93:d2:a4:9a:9c:c2:b9:
0c:b4:86:12:58:c4:de:35:e3:19:24:7d:2f:8e:8b:
4d:32:2a:c1:99:69:e7:12:cb:e8:c2:79:5e:36:81:
7e:d5:64:c1:52:8e:22:e7:18:b6:35:00:6f:40:2e:
08:6c:55:e5:ee:61:32:ca:15:28:43:aa:36:45:22:
6e:cf:54:1a:92:b7:ce:93:39:06:1b:74:71:a4:c0:
d3:e7:c2:c4:be:ac:cc:69:1d:0f:78:3c:24:9e:38:
98:9b:d9:ee:1f:ab:0d:b5:78:73:63:16:2c:18:78:
6a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A8:D5:CD:5A:44:52:35:BF:80:8E:DE:34:38:41:5E:10:7A:39:06
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b0:f6:ee:f7:df:80:5c:4e:b9:a7:92:06:02:2c:40:d0:50:
85:5a:a5:de:2e:8a:21:3b:32:50:27:ed:b4:86:89:4d:a2:e4:
84:87:32:44:f5:19:79:3d:16:25:6a:18:5d:b0:9a:14:d3:22:
58:3a:19:73:cc:50:5e:fa:ed:b1:c5:61:21:55:18:3b:65:4e:
82:4b:56:66:00:76:26:99:ad:8c:0c:eb:42:11:00:62:9c:56:
68:2e:6e:c8:a2:24:42:39:dd:af:90:20:a6:5e:ae:78:15:20:
e7:2a:10:67:3a:54:95:1d:fb:d5:08:2f:15:35:6f:e1:b6:21:
be:2a:da:9d:07:6e:56:dd:11:11:24:55:16:95:2c:65:ba:9a:
c8:c0:99:a9:e2:b2:a7:97:70:d6:96:39:7b:67:79:a3:0c:fc:
1a:9b:54:34:d2:d4:da:bb:51:1f:57:c4:b6:fb:5b:27:2a:9a:
56:8b:44:05:1b:11:31:17:2b:58:01:7f:a4:3f:21:10:4e:f1:
b5:76:e2:db:e2:46:6f:06:60:a7:b2:3e:29:b3:48:be:c5:cc:
c0:aa:c4:63:9b:a1:d5:8a:2d:e3:fd:91:d1:a0:42:bd:3d:33:
85:7f:27:7c:52:7b:a5:d6:cb:b8:26:ff:a1:ba:8b:0d:8f:6a:
7a:52:f1:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYT45Jb0Cjq5IUdL3bO+tPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZWVhODQ2NTUxYzZlNDE5Yjk0N2UwZGExMDdlZWNiMDA3
MDQxOWEwHhcNMjUwODIzMTkwMjI4WhcNMjUwODI0MTkwMjI4WjAzMTEwLwYDVQQD
EyhhNWE4ZDVjZDVhNDQ1MjM1YmY4MDhlZGUzNDM4NDE1ZTEwN2EzOTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZQR6NPJOvqiQTc2ieFKAQZXYECG
h++OQmzjXQ9In5uGl+pGgE9aY+SDTax4PuTMN1kDAl2HAZ6RJTsxMuTqtq4p17Mz
k2OWVOlMqIMbe7NEA+ZBekwBTG8BAGZ+2KGWanl8yRM2U4QqxxW0HoGnes0+Dnew
RntuiP0rSXty8qQEf2ro9YxOfF6XUtgZQZPSpJqcwrkMtIYSWMTeNeMZJH0vjotN
MirBmWnnEsvownleNoF+1WTBUo4i5xi2NQBvQC4IbFXl7mEyyhUoQ6o2RSJuz1Qa
krfOkzkGG3RxpMDT58LEvqzMaR0PeDwknjiYm9nuH6sNtXhzYxYsGHhqIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWo1c1aRFI1v4CO3jQ4QV4QejkGMB8GA1UdIwQY
MBaAFDnuqEZVHG5Bm5R+DaEH7ssAcEGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODIt
MjgzMWE0ODUwNjQ1LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODItMjgzMWE0ODUwNjQ1
LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrD27vff
gFxOuaeSBgIsQNBQhVql3i6KITsyUCfttIaJTaLkhIcyRPUZeT0WJWoYXbCaFNMi
WDoZc8xQXvrtscVhIVUYO2VOgktWZgB2JpmtjAzrQhEAYpxWaC5uyKIkQjndr5Ag
pl6ueBUg5yoQZzpUlR371QgvFTVv4bYhviranQduVt0RESRVFpUsZbqayMCZqeKy
p5dw1pY5e2d5owz8GptUNNLU2rtRH1fEtvtbJyqaVotEBRsRMRcrWAF/pD8hEE7x
tXbi2+JGbwZgp7I+KbNIvsXMwKrEY5uh1Yot4/2R0aBCvT0zhX8nfFJ7pdbLuCb/
obqLDY9qelLx7A==
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:28:47 2025 by rpki-client