Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
File: Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft (raw, json)
Hash identifier: QbRZ4S9dLzWRy82CGgRwqw6wOQPBC9OaL7uzhheZnh0=
Subject key identifier: F0:62:DF:4A:04:27:D2:07:DB:F6:33:87:61:5E:67:17:89:9F:70:02
Authority key identifier: 3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E
Certificate issuer: /CN=3a1d8225b27122794bc82e91b967bb25dbe4508e
Certificate serial: 019A733805504C035874D0DF4E9CDABF4EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
Manifest number: 109C
Signing time: Tue 11 Nov 2025 14:00:42 +0000
Manifest this update: Tue 11 Nov 2025 14:00:42 +0000
Manifest next update: Wed 12 Nov 2025 14:00:42 +0000
Files and hashes: 1: Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl (hash: BqOCfDQeQJgdtB2Otwow3au3LgW0coX5vAtg5m7fy0Q=)
2: X2ZWwlq5JgdZCBhrE-skZo9Zodk.roa (hash: jm4EeR/8LyEqdFtytjbhKQG8mWbwHJBMpiLCK8D6HPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:05:50:4c:03:58:74:d0:df:4e:9c:da:bf:4e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1d8225b27122794bc82e91b967bb25dbe4508e
Validity
Not Before: Nov 11 14:00:42 2025 GMT
Not After : Nov 12 14:00:42 2025 GMT
Subject: CN=f062df4a0427d207dbf63387615e6717899f7002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9c:3d:d4:b0:c1:e3:19:7b:19:0f:82:c7:4a:
af:8a:17:b1:e1:21:c3:d1:77:c2:20:c0:e0:ad:3e:
22:15:ce:b9:06:ff:f0:ac:8f:b2:41:57:f6:bd:36:
6b:bf:1f:05:e3:7a:86:97:ff:95:b9:53:4f:91:7d:
ae:d5:a4:e8:9b:75:54:dd:ea:63:3e:44:7f:f8:af:
8b:89:69:75:f9:86:a1:c3:94:17:4b:df:81:93:63:
bb:eb:4f:fd:d2:db:90:a0:e9:fe:1f:b0:a5:63:2d:
4b:a5:16:0a:34:d6:56:00:68:47:76:95:2b:6a:1a:
90:76:24:cc:8d:7d:c6:d3:5f:56:3f:79:e4:5e:39:
57:96:8f:f0:d4:ff:62:bc:7d:82:90:0e:2d:6f:f2:
54:a5:4b:19:7e:88:6a:95:4a:03:53:67:e3:7c:08:
12:38:55:0a:57:ad:c2:15:b4:dc:eb:8a:02:2c:61:
a7:ea:0d:95:e7:19:db:6f:0d:94:9e:0f:0e:26:3a:
f0:1c:4f:28:86:d8:a0:2c:bd:e4:cf:be:51:84:6f:
20:a0:2b:71:9f:a6:7e:53:2e:c8:ca:fe:92:28:ff:
74:ee:18:38:70:6e:3d:cd:37:cd:99:80:32:8a:c2:
f1:45:a0:3c:e1:bf:6a:f5:a6:54:ad:f2:f9:47:af:
8c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:62:DF:4A:04:27:D2:07:DB:F6:33:87:61:5E:67:17:89:9F:70:02
X509v3 Authority Key Identifier:
keyid:3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f5:80:fd:31:e0:cd:50:9e:a5:7e:b4:79:f2:4c:65:e6:6e:
91:20:80:49:a0:e6:62:30:98:19:7f:db:56:01:e9:c4:5e:be:
24:60:b5:27:c5:4c:4d:6b:51:b0:bf:e9:5c:12:ee:94:7a:b6:
44:ec:e4:b9:8c:ae:1a:26:08:c0:77:d1:98:79:06:a7:b0:6c:
11:23:24:5b:30:99:97:a6:c7:82:89:e0:4d:07:9f:0b:9f:bf:
f8:e2:94:98:29:ac:16:11:c9:e8:e7:b1:4b:3c:a5:95:ac:66:
a4:72:6f:df:da:a0:be:6b:e9:48:8e:1b:4b:d0:2e:90:dd:97:
cf:6e:54:06:6d:ea:37:e9:43:ed:61:87:9d:e6:91:ed:d3:97:
15:10:83:89:ae:11:b9:ac:86:d4:bd:31:de:2f:5c:17:c9:09:
cd:64:01:00:ac:ff:35:99:fe:c0:dc:b0:71:be:f6:5d:1c:2d:
9f:09:6d:2a:77:98:df:f0:f5:8c:78:ca:9f:74:5e:b2:ae:64:
14:f2:c6:21:8a:d1:2c:6e:fc:0a:ea:13:b0:d9:50:85:3f:3b:
3a:47:4b:a7:38:bd:5d:cf:f6:7a:6c:71:d6:fa:19:8e:9a:76:
3f:50:a6:c5:49:1e:7e:ae:0c:c6:53:68:8b:73:8c:0e:14:53:
e5:b4:8d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:34 2025 by rpki-client