Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
File: OEypWHqC_DdH9GngCUXZ1VhaNbI.mft (raw, json)
Hash identifier: gRahcBZKispTd0MKLoj/AKhIeOWxIzqoLe1YzeK2TAo=
Subject key identifier: C8:D5:EC:B5:9C:B8:60:A9:35:E7:FB:B3:66:29:75:25:52:83:47:3B
Authority key identifier: 38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
Certificate issuer: /CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Certificate serial: 0199FC589425F45473C76713266E9B3FD1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
Manifest number: 031F
Signing time: Sun 19 Oct 2025 12:01:27 +0000
Manifest this update: Sun 19 Oct 2025 12:01:27 +0000
Manifest next update: Mon 20 Oct 2025 12:01:27 +0000
Files and hashes: 1: OEypWHqC_DdH9GngCUXZ1VhaNbI.crl (hash: KFdw2jyx9JE5cozZqWxrlhtpr3TIUgCHiD6z95RbNeM=)
2: jI7_nEj5zlq6z4OVYNSKuGo62t4.roa (hash: i7/oTU3XFkI0q3JhGCgkgLONW91UlNaDNMBJ9HMnxlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:94:25:f4:54:73:c7:67:13:26:6e:9b:3f:d1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Validity
Not Before: Oct 19 12:01:27 2025 GMT
Not After : Oct 20 12:01:27 2025 GMT
Subject: CN=c8d5ecb59cb860a935e7fbb3662975255283473b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a7:8f:7e:62:71:39:ed:f7:47:62:16:3f:4f:
e2:8d:20:4c:77:a6:ea:32:84:d5:ac:58:97:a2:4f:
ab:e1:2c:d6:c0:d5:97:87:8d:d9:fc:82:90:37:59:
95:97:58:2c:f8:e5:fc:04:c8:80:7e:4b:9f:ec:3a:
b3:19:9c:cd:46:c2:c4:9b:64:94:58:94:33:ed:79:
7a:a9:dd:49:3b:0f:1b:11:7f:4b:85:97:e5:d4:9e:
8d:33:3d:ab:cd:6b:92:3f:3b:d2:12:df:c8:3c:2d:
8b:54:88:7d:13:5f:bc:c7:f5:51:3b:85:8d:b1:b4:
c0:e9:9f:c1:3e:e8:00:77:5f:70:ba:47:e1:7e:7f:
6f:04:b5:a3:32:fc:15:05:d4:4b:d9:ee:89:c5:31:
a4:c8:80:59:d5:68:0f:5a:a4:9a:da:cd:c5:7f:ac:
1c:26:07:40:11:0d:0a:a3:28:89:e5:c6:a9:51:52:
d7:e1:8b:b6:15:f8:99:58:76:29:8a:b9:7c:13:6d:
b6:1f:62:33:26:be:f3:2f:d9:aa:0e:62:0c:2e:63:
c7:3f:c5:07:c8:3b:f8:e1:47:44:75:72:2f:89:49:
a5:50:6b:11:46:84:e7:2b:a4:00:c0:66:83:fa:de:
dc:a6:6d:9f:be:07:5a:04:27:c0:7e:d1:9d:29:20:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D5:EC:B5:9C:B8:60:A9:35:E7:FB:B3:66:29:75:25:52:83:47:3B
X509v3 Authority Key Identifier:
keyid:38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:84:41:4a:c4:fa:f7:8f:37:d5:22:87:10:52:48:bd:13:d2:
af:cd:3c:2f:ca:63:e1:99:0f:ff:7b:0f:f6:eb:7b:44:d0:01:
5e:59:2b:34:b3:c3:90:c3:26:f7:e9:37:a0:bf:f0:9f:c9:56:
7b:19:63:70:00:0a:a6:27:f7:80:c1:07:ac:98:cd:93:3d:89:
60:74:df:2e:6a:78:bd:70:b3:8e:39:2e:07:9e:1b:91:f1:03:
a6:cb:ce:f3:ee:ab:bd:b1:86:4d:cd:e6:39:a3:e3:d8:fa:76:
0a:d1:c3:22:8a:82:5b:8d:a5:12:5b:a0:1a:0f:d4:65:e3:bf:
76:a1:09:d1:67:b6:84:16:9e:9d:04:4d:a4:23:c9:ee:e3:9d:
66:41:80:3f:f9:ea:27:67:01:52:17:00:6c:e9:7c:3e:97:e2:
7c:4f:47:3c:6a:80:2f:1c:fe:77:7f:3b:be:58:4a:c1:1e:cf:
35:ae:c0:c1:05:97:47:33:82:97:c9:f3:02:cc:1b:35:ec:58:
d4:e2:25:3a:80:94:6b:e1:ee:4c:cf:f9:c5:a5:4e:21:23:39:
a6:fa:53:1a:8f:b1:1d:a2:28:d9:61:7d:24:70:97:44:bb:43:
ce:85:bb:81:03:24:b3:9d:b3:f8:16:85:ec:92:bf:8f:d9:38:
e7:aa:86:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WJQl9FRzx2cTJm6bP9HnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NGNhOTU4N2E4MmZjMzc0N2Y0NjllMDA5NDVkOWQ1NTg1
YTM1YjIwHhcNMjUxMDE5MTIwMTI3WhcNMjUxMDIwMTIwMTI3WjAzMTEwLwYDVQQD
EyhjOGQ1ZWNiNTljYjg2MGE5MzVlN2ZiYjM2NjI5NzUyNTUyODM0NzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46ePfmJxOe33R2IWP0/ijSBMd6bq
MoTVrFiXok+r4SzWwNWXh43Z/IKQN1mVl1gs+OX8BMiAfkuf7DqzGZzNRsLEm2SU
WJQz7Xl6qd1JOw8bEX9LhZfl1J6NMz2rzWuSPzvSEt/IPC2LVIh9E1+8x/VRO4WN
sbTA6Z/BPugAd19wukfhfn9vBLWjMvwVBdRL2e6JxTGkyIBZ1WgPWqSa2s3Ff6wc
JgdAEQ0KoyiJ5capUVLX4Yu2FfiZWHYpirl8E222H2IzJr7zL9mqDmIMLmPHP8UH
yDv44UdEdXIviUmlUGsRRoTnK6QAwGaD+t7cpm2fvgdaBCfAftGdKSBwywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjV7LWcuGCpNef7s2YpdSVSg0c7MB8GA1UdIwQY
MBaAFDhMqVh6gvw3R/Rp4AlF2dVYWjWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9hMTk2NTQtYWRlYy00Mzk3LThlYjAt
MTdhZDJmMDFjMDA5LzEvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9hMTk2NTQtYWRlYy00Mzk3LThlYjAtMTdhZDJmMDFjMDA5
LzEvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4RBSsT6
94831SKHEFJIvRPSr808L8pj4ZkP/3sP9ut7RNABXlkrNLPDkMMm9+k3oL/wn8lW
exljcAAKpif3gMEHrJjNkz2JYHTfLmp4vXCzjjkuB54bkfEDpsvO8+6rvbGGTc3m
OaPj2Pp2CtHDIoqCW42lElugGg/UZeO/dqEJ0We2hBaenQRNpCPJ7uOdZkGAP/nq
J2cBUhcAbOl8PpfifE9HPGqALxz+d387vlhKwR7PNa7AwQWXRzOCl8nzAswbNexY
1OIlOoCUa+HuTM/5xaVOISM5pvpTGo+xHaIo2WF9JHCXRLtDzoW7gQMks52z+BaF
7JK/j9k456qGrA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:51 2025 by rpki-client