Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft
File: oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft (raw, json)
Hash identifier: 9mF/qT+0VW2eFkjWtO8l8Qg2nOZfmq5V2cz2gebi330=
Subject key identifier: B3:05:81:C5:BF:99:E1:EF:A6:58:55:E7:29:B5:2B:C6:37:3B:14:49
Authority key identifier: A0:A6:7E:06:B5:90:46:35:EB:4D:1C:91:C3:41:28:9F:59:AF:EA:A7
Certificate issuer: /CN=a0a67e06b5904635eb4d1c91c341289f59afeaa7
Certificate serial: 0198D65F22BD77748FC3A4A8049CA42176A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:00:15 +0000
Manifest this update: Sat 23 Aug 2025 10:00:15 +0000
Manifest next update: Sun 24 Aug 2025 10:00:15 +0000
Files and hashes: 1: oKZ-BrWQRjXrTRyRw0Eon1mv6qc.crl (hash: bFh1xp2gfas+IUkdi7KZZkywC+V4s5s7z7G5PxmM97w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:22:bd:77:74:8f:c3:a4:a8:04:9c:a4:21:76:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a67e06b5904635eb4d1c91c341289f59afeaa7
Validity
Not Before: Aug 23 10:00:15 2025 GMT
Not After : Aug 24 10:00:15 2025 GMT
Subject: CN=b30581c5bf99e1efa65855e729b52bc6373b1449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:21:4b:a8:a2:e9:88:12:81:5c:d5:ad:57:b6:
5a:f0:d2:ad:30:3a:79:16:4e:e5:e6:4c:ce:7e:75:
9c:f9:3b:b2:8a:d4:92:83:48:0b:c3:7f:63:1c:bc:
75:84:9a:e6:f6:62:94:dc:1e:08:74:97:f1:dc:6d:
32:57:d7:28:46:d2:02:9d:27:ea:21:e3:cf:99:52:
b2:41:f8:3f:3a:90:46:1a:b8:07:97:1f:14:0b:cf:
42:bc:0d:7a:42:66:b3:67:cf:eb:a2:da:37:f3:7d:
f5:84:70:82:38:15:68:00:1b:70:e3:0e:41:6d:56:
b2:4f:d8:79:6e:c8:ea:ff:07:45:8c:94:8f:08:1c:
c7:57:13:ff:de:73:4d:42:a7:95:29:82:48:cb:1a:
74:a8:f3:73:b8:e2:fa:1f:15:49:f9:23:8e:8d:48:
9a:22:0e:39:6e:d8:9a:a6:06:36:2d:74:26:7d:cd:
9b:4e:f1:7b:e5:4b:29:eb:ce:43:7c:95:39:f3:76:
95:8a:71:d9:3e:59:fc:df:54:40:f5:ac:02:ef:30:
5e:3b:c9:09:f1:5d:e2:0a:3e:0a:14:1c:c0:b8:de:
37:e2:be:b9:13:95:91:d6:1a:aa:91:9a:66:22:45:
07:1f:80:6f:4c:11:29:a7:1f:83:16:4d:d2:70:fe:
7b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:05:81:C5:BF:99:E1:EF:A6:58:55:E7:29:B5:2B:C6:37:3B:14:49
X509v3 Authority Key Identifier:
keyid:A0:A6:7E:06:B5:90:46:35:EB:4D:1C:91:C3:41:28:9F:59:AF:EA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f1:26:27:03:1a:26:7f:40:4b:70:8c:8a:74:08:32:7d:70:
5e:83:2c:85:44:51:0d:74:54:fe:3b:49:20:a2:0f:62:23:bc:
8d:70:31:39:b4:b3:03:44:7d:5e:22:76:a7:bc:cc:6d:0c:4a:
0a:c9:a9:18:93:9a:8e:e3:59:00:4f:bd:2f:ea:a3:5a:73:12:
23:d6:7f:75:a9:7d:07:9e:17:82:c2:25:e2:70:d0:b1:44:4d:
da:fc:22:55:96:14:cc:c4:2a:e0:4c:fe:93:ac:79:4f:76:9d:
8d:68:00:f7:21:17:2e:a8:80:b8:d6:1f:36:de:2b:9f:f7:07:
3f:2f:12:7c:c0:bc:f6:58:de:63:2c:cc:c0:46:82:e3:b8:4f:
8c:7d:57:56:ec:48:d1:80:17:0d:f0:67:c1:1e:df:e4:2e:31:
00:d2:a4:2e:c6:3b:c7:87:3d:59:91:20:6b:0a:48:d2:7e:46:
30:83:7c:b8:b1:ff:64:c3:50:b2:fd:90:1c:3a:e7:e8:03:e7:
6c:8d:bd:1f:71:87:b9:b3:b1:86:ad:7d:ce:ab:04:01:5d:da:
1a:fe:19:7c:ed:cb:5c:0b:d1:76:05:8f:5c:f8:c7:8f:c2:8c:
68:ee:b2:0f:b5:bc:cd:8c:fc:9d:0f:52:18:5b:f7:29:38:3e:
1e:8c:17:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXyK9d3SPw6SoBJykIXamMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTY3ZTA2YjU5MDQ2MzVlYjRkMWM5MWMzNDEyODlmNTlh
ZmVhYTcwHhcNMjUwODIzMTAwMDE1WhcNMjUwODI0MTAwMDE1WjAzMTEwLwYDVQQD
EyhiMzA1ODFjNWJmOTllMWVmYTY1ODU1ZTcyOWI1MmJjNjM3M2IxNDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyFLqKLpiBKBXNWtV7Za8NKtMDp5
Fk7l5kzOfnWc+TuyitSSg0gLw39jHLx1hJrm9mKU3B4IdJfx3G0yV9coRtICnSfq
IePPmVKyQfg/OpBGGrgHlx8UC89CvA16QmazZ8/roto38331hHCCOBVoABtw4w5B
bVayT9h5bsjq/wdFjJSPCBzHVxP/3nNNQqeVKYJIyxp0qPNzuOL6HxVJ+SOOjUia
Ig45btiapgY2LXQmfc2bTvF75Usp685DfJU583aVinHZPln831RA9awC7zBeO8kJ
8V3iCj4KFBzAuN434r65E5WR1hqqkZpmIkUHH4BvTBEppx+DFk3ScP578wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMFgcW/meHvplhV5ym1K8Y3OxRJMB8GA1UdIwQY
MBaAFKCmfga1kEY1600ckcNBKJ9Zr+qnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0taLUJyV1FSalhyVFJ5UncwRW9uMW12NnFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8wNWUxYWMtZTcwMy00ZjU3LWE5MWEt
YjBmZWI0ZjkzMTlhLzEvb0taLUJyV1FSalhyVFJ5UncwRW9uMW12NnFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8wNWUxYWMtZTcwMy00ZjU3LWE5MWEtYjBmZWI0ZjkzMTlh
LzEvb0taLUJyV1FSalhyVFJ5UncwRW9uMW12NnFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfEmJwMa
Jn9AS3CMinQIMn1wXoMshURRDXRU/jtJIKIPYiO8jXAxObSzA0R9XiJ2p7zMbQxK
CsmpGJOajuNZAE+9L+qjWnMSI9Z/dal9B54XgsIl4nDQsURN2vwiVZYUzMQq4Ez+
k6x5T3adjWgA9yEXLqiAuNYfNt4rn/cHPy8SfMC89ljeYyzMwEaC47hPjH1XVuxI
0YAXDfBnwR7f5C4xANKkLsY7x4c9WZEgawpI0n5GMIN8uLH/ZMNQsv2QHDrn6APn
bI29H3GHubOxhq19zqsEAV3aGv4ZfO3LXAvRdgWPXPjHj8KMaO6yD7W8zYz8nQ9S
GFv3KTg+HowXsw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:56 2025 by rpki-client