Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
File: OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft (raw, json)
Hash identifier: BSNpXQq18LsF22mAz+sIUB7GU/Pz2XIY/Vmqy1DpkZE=
Subject key identifier: 50:3A:25:A7:20:E4:94:85:BA:B2:01:A0:E9:E3:5E:64:C7:8E:79:7C
Authority key identifier: 38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58
Certificate issuer: /CN=386ab970bfb6947597e97cefb916ec76a0c56858
Certificate serial: 0198D58346B4F72EDEF1D19F38DA6392F36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 06:00:06 +0000
Manifest this update: Sat 23 Aug 2025 06:00:06 +0000
Manifest next update: Sun 24 Aug 2025 06:00:06 +0000
Files and hashes: 1: I01Lo7qwhvaLI2U54ucZ10pkExs.roa (hash: mTrGRc4f1Skt/0lHfZ3XZbVEvrQ9mBUuWZXJpIXORz4=)
2: OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl (hash: BA9b0AJOVTeRqdv6lm5p7czJtEWjeVczIs257xWnXS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:46:b4:f7:2e:de:f1:d1:9f:38:da:63:92:f3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=386ab970bfb6947597e97cefb916ec76a0c56858
Validity
Not Before: Aug 23 06:00:06 2025 GMT
Not After : Aug 24 06:00:06 2025 GMT
Subject: CN=503a25a720e49485bab201a0e9e35e64c78e797c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e6:f9:92:be:3a:d5:58:84:62:93:11:22:72:
0a:63:26:19:72:86:07:54:d5:55:78:8f:31:3a:e0:
eb:54:f9:46:e5:c8:71:1c:d7:dd:5e:fd:95:2e:6a:
bd:53:b4:17:f6:bd:fb:c5:08:89:ba:1b:87:d6:fd:
17:49:cc:3d:fc:9d:bd:b3:e4:9e:35:0b:04:75:cf:
66:dd:3d:9f:8f:e3:ec:e1:8d:18:a8:d3:85:21:c9:
dc:de:48:32:3c:dd:64:68:02:81:0b:88:ed:82:d1:
f1:fd:e3:19:1e:5a:1e:3d:65:a2:d0:6f:f8:8c:18:
36:68:bd:3d:28:28:10:3a:95:27:80:30:d7:28:b9:
de:74:9f:59:24:4a:de:ec:6b:8b:d4:ea:e2:f2:91:
2f:f8:aa:1a:74:3f:f6:49:d5:f1:88:36:64:c4:5f:
75:00:57:68:de:a3:ec:5d:64:87:49:52:20:df:10:
1b:c5:20:92:ea:96:b8:35:73:34:e8:eb:f6:6e:5c:
0e:bf:1c:e4:2a:21:03:73:d1:b9:94:31:ef:3a:ab:
d7:b2:55:c6:08:33:55:35:36:5b:e3:09:ec:18:fa:
dc:70:a8:eb:0d:19:bc:17:48:be:58:89:c9:74:66:
2a:c5:9f:97:6f:39:8d:c7:54:50:5a:60:0d:f2:ab:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3A:25:A7:20:E4:94:85:BA:B2:01:A0:E9:E3:5E:64:C7:8E:79:7C
X509v3 Authority Key Identifier:
keyid:38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8b:e7:c3:49:cd:7e:e0:b3:da:2d:f7:b4:de:45:a7:e1:96:
99:5e:99:67:e9:6a:2e:d3:0d:92:34:71:46:01:e3:d9:c3:00:
90:68:30:9e:1c:13:15:81:af:36:64:cf:35:8b:06:34:4f:a3:
06:3d:8a:e6:a8:42:99:69:22:f6:48:b3:ea:80:1d:4c:0d:a9:
9f:46:cd:ec:77:cf:58:30:14:87:ae:8a:76:2d:3d:65:19:d6:
a7:df:15:df:f2:1a:0e:ee:f4:02:c3:25:2c:99:33:52:f1:58:
cb:db:aa:10:bf:f9:c2:41:bc:d7:d8:58:ca:fb:62:1c:b0:cc:
62:a7:d6:1f:b9:a5:d1:c1:ae:c5:57:be:f4:9f:b3:b3:2a:58:
0d:78:24:c1:c0:84:c0:87:57:8f:55:25:06:40:2f:9e:83:0a:
30:db:88:e9:83:5a:26:37:86:d9:4b:e7:78:4c:93:39:94:08:
33:36:ee:e2:3b:da:81:39:d2:71:be:dc:8a:a1:06:42:4c:5c:
75:32:09:97:a4:88:1d:0d:a7:95:d0:99:ba:0d:3a:c2:b7:66:
7a:b7:ef:f1:88:6b:6b:65:be:08:5b:f3:af:3e:29:28:ee:1b:
92:d1:bc:52:5d:97:e3:ec:6e:6f:5b:60:a7:5a:a6:06:65:b6:
b7:fe:1d:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg0a09y7e8dGfONpjkvNtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NmFiOTcwYmZiNjk0NzU5N2U5N2NlZmI5MTZlYzc2YTBj
NTY4NTgwHhcNMjUwODIzMDYwMDA2WhcNMjUwODI0MDYwMDA2WjAzMTEwLwYDVQQD
Eyg1MDNhMjVhNzIwZTQ5NDg1YmFiMjAxYTBlOWUzNWU2NGM3OGU3OTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjub5kr461ViEYpMRInIKYyYZcoYH
VNVVeI8xOuDrVPlG5chxHNfdXv2VLmq9U7QX9r37xQiJuhuH1v0XScw9/J29s+Se
NQsEdc9m3T2fj+Ps4Y0YqNOFIcnc3kgyPN1kaAKBC4jtgtHx/eMZHloePWWi0G/4
jBg2aL09KCgQOpUngDDXKLnedJ9ZJEre7GuL1Ori8pEv+KoadD/2SdXxiDZkxF91
AFdo3qPsXWSHSVIg3xAbxSCS6pa4NXM06Ov2blwOvxzkKiEDc9G5lDHvOqvXslXG
CDNVNTZb4wnsGPrccKjrDRm8F0i+WInJdGYqxZ+XbzmNx1RQWmAN8qs62QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFA6Jacg5JSFurIBoOnjXmTHjnl8MB8GA1UdIwQY
MBaAFDhquXC/tpR1l+l877kW7HagxWhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0dxNWNMLTJsSFdYNlh6dnVSYnNkcURGYUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC80MWZkYTktOTcwMi00NThkLTk4MmYt
OGQxMTI1N2Q0YWY2LzEvT0dxNWNMLTJsSFdYNlh6dnVSYnNkcURGYUZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC80MWZkYTktOTcwMi00NThkLTk4MmYtOGQxMTI1N2Q0YWY2
LzEvT0dxNWNMLTJsSFdYNlh6dnVSYnNkcURGYUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADovnw0nN
fuCz2i33tN5Fp+GWmV6ZZ+lqLtMNkjRxRgHj2cMAkGgwnhwTFYGvNmTPNYsGNE+j
Bj2K5qhCmWki9kiz6oAdTA2pn0bN7HfPWDAUh66Kdi09ZRnWp98V3/IaDu70AsMl
LJkzUvFYy9uqEL/5wkG819hYyvtiHLDMYqfWH7ml0cGuxVe+9J+zsypYDXgkwcCE
wIdXj1UlBkAvnoMKMNuI6YNaJjeG2UvneEyTOZQIMzbu4jvagTnScb7ciqEGQkxc
dTIJl6SIHQ2nldCZug06wrdmerfv8Yhra2W+CFvzrz4pKO4bktG8Ul2X4+xub1tg
p1qmBmW2t/4d1A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:02 2025 by rpki-client