Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
File: OCeQLuylKp8IFACI9VjkUuDslV8.mft (raw, json)
Hash identifier: 1HFf/1qRJjDULDOqu58VN3yPWmqa4NT4z4sOt3jF9PY=
Subject key identifier: 0C:BE:E5:43:63:6F:51:B5:1E:A8:93:5C:58:DB:B8:F5:16:97:B2:FF
Authority key identifier: 38:27:90:2E:EC:A5:2A:9F:08:14:00:88:F5:58:E4:52:E0:EC:95:5F
Certificate issuer: /CN=3827902eeca52a9f08140088f558e452e0ec955f
Certificate serial: 0198D4734C6B8D440205003ABC87DD2DB872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
Manifest number: 010E
Signing time: Sat 23 Aug 2025 01:03:02 +0000
Manifest this update: Sat 23 Aug 2025 01:03:02 +0000
Manifest next update: Sun 24 Aug 2025 01:03:02 +0000
Files and hashes: 1: 7nhLLpXwqJ1voHCkK-P1ueQH-PM.roa (hash: Y5wnVvyZMdqfWGL6r50VzIWMh6QnpnoTzvTu5ABQUTI=)
2: OCeQLuylKp8IFACI9VjkUuDslV8.crl (hash: n7lDImlmfjtmnABm8sHoFI+L3LBBlORMsxKFnaS9xZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:4c:6b:8d:44:02:05:00:3a:bc:87:dd:2d:b8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3827902eeca52a9f08140088f558e452e0ec955f
Validity
Not Before: Aug 23 01:03:02 2025 GMT
Not After : Aug 24 01:03:02 2025 GMT
Subject: CN=0cbee543636f51b51ea8935c58dbb8f51697b2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:66:a6:ef:0b:79:ad:cd:03:b6:74:1e:91:
7f:4a:ae:f4:18:10:0c:94:fb:e8:0f:c7:b1:91:ff:
6b:ab:80:e0:29:ca:62:ec:79:f2:f4:d0:8a:52:75:
b1:97:d7:e0:d7:96:5a:5b:1c:9f:ac:ce:31:10:ab:
dc:2c:93:d3:4b:97:13:fb:b1:77:b4:0e:15:ac:96:
15:8b:09:51:87:43:f8:cc:df:4d:7f:e7:75:30:72:
a8:ee:26:02:57:0d:48:25:8c:54:71:db:63:7f:be:
bf:e8:4e:6e:6b:36:e8:4c:27:c5:77:f6:1a:6e:c7:
66:9f:6b:09:30:01:8c:9d:9f:a8:b2:56:7c:90:e9:
52:ea:d5:a3:b7:e7:2c:54:67:aa:e6:73:09:c9:2e:
9f:33:55:b1:c3:2e:55:d8:1f:2f:90:d4:77:03:27:
ed:83:d5:37:63:05:b5:27:6d:73:67:6b:8e:3c:b5:
ba:16:82:de:4d:9e:77:57:e8:49:84:86:30:17:d1:
ca:37:56:34:dc:52:a2:ba:70:65:0f:bd:6f:21:a9:
8a:86:f2:c0:ae:7d:d3:aa:38:06:d0:0c:46:50:33:
d5:43:5e:59:65:8c:41:dd:8f:a7:0e:92:a2:94:09:
69:58:31:b6:35:49:6f:45:cc:ed:d7:ed:6c:b9:d8:
ef:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BE:E5:43:63:6F:51:B5:1E:A8:93:5C:58:DB:B8:F5:16:97:B2:FF
X509v3 Authority Key Identifier:
keyid:38:27:90:2E:EC:A5:2A:9F:08:14:00:88:F5:58:E4:52:E0:EC:95:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c5:c3:ae:b4:54:63:7b:10:5e:96:b7:dc:30:83:69:7a:c4:
09:02:84:e0:dc:70:73:80:f4:2b:34:f2:1d:99:5d:86:12:4b:
4d:3d:a8:b3:a1:66:63:59:c4:21:e2:15:b7:e3:e1:ab:38:b5:
59:e9:d8:f4:10:d2:13:82:a2:a9:8b:b7:b8:39:15:83:03:86:
75:ba:8c:03:c8:ea:43:20:7e:e9:4a:ba:f1:08:52:d9:25:c0:
13:8c:ca:50:46:f5:88:d3:85:6d:62:8f:8d:b2:53:35:8c:ec:
4d:a2:5b:0e:0d:4f:56:b5:39:0a:84:c7:cf:5f:85:f0:15:41:
a4:3c:91:26:3b:6d:43:48:2f:93:4b:8e:49:85:20:86:d4:11:
3e:04:c7:e5:12:d7:a6:ff:a8:c0:72:5f:37:1b:99:84:be:52:
82:8c:01:16:51:60:ed:8c:00:7f:9c:06:df:3e:36:41:57:7f:
9f:dc:be:f0:bc:da:53:66:c5:55:9e:31:f5:29:ee:2b:ba:84:
de:de:7a:3c:5d:75:70:11:51:72:dd:91:a5:18:00:62:23:44:
1f:d9:c7:95:f6:79:02:2c:8d:7a:1b:bc:ee:ad:8f:cd:fc:89:
52:ef:92:78:e3:2d:d0:45:62:4e:73:30:b7:bf:fb:df:78:55:
a9:32:b4:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc0xrjUQCBQA6vIfdLbhyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4Mjc5MDJlZWNhNTJhOWYwODE0MDA4OGY1NThlNDUyZTBl
Yzk1NWYwHhcNMjUwODIzMDEwMzAyWhcNMjUwODI0MDEwMzAyWjAzMTEwLwYDVQQD
EygwY2JlZTU0MzYzNmY1MWI1MWVhODkzNWM1OGRiYjhmNTE2OTdiMmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz31mpu8Lea3NA7Z0HpF/Sq70GBAM
lPvoD8exkf9rq4DgKcpi7Hny9NCKUnWxl9fg15ZaWxyfrM4xEKvcLJPTS5cT+7F3
tA4VrJYViwlRh0P4zN9Nf+d1MHKo7iYCVw1IJYxUcdtjf76/6E5uazboTCfFd/Ya
bsdmn2sJMAGMnZ+oslZ8kOlS6tWjt+csVGeq5nMJyS6fM1Wxwy5V2B8vkNR3Ayft
g9U3YwW1J21zZ2uOPLW6FoLeTZ53V+hJhIYwF9HKN1Y03FKiunBlD71vIamKhvLA
rn3TqjgG0AxGUDPVQ15ZZYxB3Y+nDpKilAlpWDG2NUlvRczt1+1sudjv+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAy+5UNjb1G1HqiTXFjbuPUWl7L/MB8GA1UdIwQY
MBaAFDgnkC7spSqfCBQAiPVY5FLg7JVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0NlUUx1eWxLcDhJRkFDSTlWamtVdURzbFY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8xOWQxM2EtM2VjNi00MjAyLThkNDgt
NzdkYjMyNjQ3Y2E5LzEvT0NlUUx1eWxLcDhJRkFDSTlWamtVdURzbFY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8xOWQxM2EtM2VjNi00MjAyLThkNDgtNzdkYjMyNjQ3Y2E5
LzEvT0NlUUx1eWxLcDhJRkFDSTlWamtVdURzbFY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMXDrrRU
Y3sQXpa33DCDaXrECQKE4Nxwc4D0KzTyHZldhhJLTT2os6FmY1nEIeIVt+Phqzi1
WenY9BDSE4KiqYu3uDkVgwOGdbqMA8jqQyB+6Uq68QhS2SXAE4zKUEb1iNOFbWKP
jbJTNYzsTaJbDg1PVrU5CoTHz1+F8BVBpDyRJjttQ0gvk0uOSYUghtQRPgTH5RLX
pv+owHJfNxuZhL5SgowBFlFg7YwAf5wG3z42QVd/n9y+8LzaU2bFVZ4x9SnuK7qE
3t56PF11cBFRct2RpRgAYiNEH9nHlfZ5AiyNehu87q2PzfyJUu+SeOMt0EViTnMw
t7/733hVqTK0OA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:00 2025 by rpki-client