Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: fBRIflS2TGgmp1L7GNm2Aa6retXSeWYKUG/d3ieuyds=
Subject key identifier: 1A:7C:29:E3:FB:07:81:4E:89:01:EA:9D:35:C7:47:25:A2:9C:A1:73
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 0199C4C4B055C0757683D93662A5B7EFCFB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 12F9
Signing time: Wed 08 Oct 2025 17:00:48 +0000
Manifest this update: Wed 08 Oct 2025 17:00:48 +0000
Manifest next update: Thu 09 Oct 2025 17:00:48 +0000
Files and hashes: 1: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: vtKalxtEf+2SBb5HUFhkVYoHoxzGxpIkzrRD+Q+w5jo=)
2: SkpuG1SShh_Tu0tEsS_zldokzRY.roa (hash: dFYDpE1wahaZPqcUFRinjMxK5eBFUvf/eJm1l8owCY8=)
3: wx1b7wSo3IENdo5aRxstuEb6e_8.roa (hash: Pjk1ZSdAEd1vWaEOWohydmZmcsdRJu6/0hd4TtAw+OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c4:b0:55:c0:75:76:83:d9:36:62:a5:b7:ef:cf:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Oct 8 17:00:48 2025 GMT
Not After : Oct 9 17:00:48 2025 GMT
Subject: CN=1a7c29e3fb07814e8901ea9d35c74725a29ca173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:03:20:bc:11:90:ef:11:c4:77:3c:97:0c:
7c:36:04:06:7c:df:fb:86:4d:5a:0a:38:2d:c9:72:
c3:69:d8:d0:b5:be:d7:b6:21:43:4e:55:94:b5:5c:
04:e1:3a:db:b9:26:c4:54:52:6e:2d:29:d4:a2:7e:
2f:50:4f:df:3b:3d:03:17:6b:f9:46:44:44:60:98:
26:2e:ae:7f:0d:32:53:fc:f6:b5:a4:b0:9d:a0:7c:
b8:90:37:3c:e2:e7:d6:b3:47:81:14:78:f7:b5:0f:
25:ea:51:02:09:e3:38:c5:fb:f9:85:f9:42:6e:e0:
e7:27:2e:1e:32:07:6d:bb:31:cb:a2:de:49:fe:4b:
20:23:8e:e9:e6:56:dd:62:d0:a1:7b:95:e4:1d:64:
82:e0:a5:36:d9:25:6b:0f:65:cb:f9:11:56:08:12:
85:82:60:c3:be:5f:3f:32:cc:c0:41:7a:3f:3b:69:
2a:55:c5:79:71:bf:8f:c1:0d:18:a8:17:cd:b3:6a:
59:74:43:d1:f3:5d:6b:fe:fb:ee:28:ae:fe:00:49:
6a:a6:be:a5:05:d5:f3:b4:26:09:53:3b:75:8c:47:
d7:ea:2e:b3:2d:57:c3:85:ff:1a:1e:e6:56:a5:85:
06:4c:57:e5:1c:02:1e:9c:30:01:fc:d9:ec:8f:a5:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7C:29:E3:FB:07:81:4E:89:01:EA:9D:35:C7:47:25:A2:9C:A1:73
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d4:bc:e6:fc:d3:1e:a0:c7:10:4c:a8:01:29:9e:30:c5:ab:
ef:ef:e8:49:27:9f:14:11:b6:5e:ac:27:42:76:af:64:f1:3c:
bd:31:b9:80:02:06:5b:69:79:96:2f:8d:7b:b3:06:18:a5:c1:
ba:af:00:3c:39:fb:c6:20:fc:fa:09:f2:d4:ca:58:66:f9:77:
89:c3:9f:55:0c:6c:72:05:74:f5:4e:aa:5b:9e:1f:cc:f3:77:
13:47:3c:0f:9d:37:ac:1b:ef:5a:60:56:27:f6:2b:f8:98:a2:
ea:d9:94:63:4f:eb:74:2e:76:d5:4c:5e:b7:c9:be:21:13:db:
99:92:8e:75:e2:a2:73:53:31:1e:d3:c7:de:07:ce:29:84:34:
0d:20:44:27:97:4e:2c:ff:c4:61:dd:8f:b0:5e:34:d1:5e:97:
de:28:61:d2:67:f2:c2:d6:e6:bc:84:c1:cc:49:ae:ab:8f:44:
25:83:46:67:65:df:89:6b:c1:b8:ed:f3:db:c6:45:2c:ad:ad:
df:17:40:79:06:40:53:a3:31:e7:60:1f:4b:69:4a:83:d5:f7:
01:85:9b:99:44:a4:50:e1:4d:0b:83:4b:77:99:1f:19:cf:3e:
87:e3:0a:24:42:fa:82:da:91:9c:98:41:cc:93:ce:b5:b4:ca:
63:d8:99:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:21:56 2025 by rpki-client