Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
File: OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json)
Hash identifier: +LA7+mvW6wwxP0VIwDhMN/tRBWtVT+cZVpRdfGG0ctc=
Subject key identifier: E1:88:84:E8:51:E2:E6:ED:C1:BB:07:A1:39:9C:DC:F3:4C:EC:6A:A1
Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
Certificate issuer: /CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Certificate serial: 019A7112FE12A5E169F81D002494F1C23ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
Manifest number: 1084
Signing time: Tue 11 Nov 2025 04:01:01 +0000
Manifest this update: Tue 11 Nov 2025 04:01:01 +0000
Manifest next update: Wed 12 Nov 2025 04:01:01 +0000
Files and hashes: 1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: tU/CayU3ss44rz4YjPzzPXa30Wjqgk5MzXs83kVXqT4=)
2: mVMhaZyReFl--kv_RJ_-OuFBGYU.roa (hash: IwLGaJq3OYCljCCB7S0knCQn4hKuFoxDOc6G4aTbSQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:fe:12:a5:e1:69:f8:1d:00:24:94:f1:c2:3a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Validity
Not Before: Nov 11 04:01:01 2025 GMT
Not After : Nov 12 04:01:01 2025 GMT
Subject: CN=e18884e851e2e6edc1bb07a1399cdcf34cec6aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0f:d1:b1:6c:0d:39:ce:80:b6:38:7f:2d:ca:
eb:20:31:7a:4b:ae:a2:ce:0e:06:ef:f0:07:06:2d:
43:7e:20:a0:ca:9f:46:26:e6:18:51:2e:43:12:4a:
8d:15:98:68:f0:37:38:0d:68:f1:dd:28:f5:58:ed:
0f:75:c0:45:e8:64:f8:70:f5:2d:63:fb:dd:be:90:
57:a5:f8:a0:99:f6:e6:7f:42:e3:91:61:32:0b:02:
4c:23:0a:6a:73:7c:26:3d:45:51:5e:f6:aa:15:4d:
f5:5f:55:cb:6e:64:7f:16:de:0a:f9:57:3f:09:39:
6f:cd:a7:47:2f:40:cb:c6:af:f0:31:bd:3a:7b:69:
ff:8a:9a:af:41:26:3a:95:0f:27:b0:1b:30:02:70:
51:1e:06:d1:a8:93:61:c3:fd:79:42:e3:c4:50:0c:
41:38:a6:6c:38:87:a9:eb:47:91:8e:e1:61:74:27:
51:00:59:ce:b7:22:6f:87:a6:6a:e0:ef:b7:02:99:
7c:70:98:ec:8f:37:a1:aa:c7:28:18:a5:2a:47:98:
ee:74:8d:30:d7:3d:6e:4c:af:0c:cc:ae:4a:8c:97:
29:a8:7a:18:a6:25:ec:24:3f:9a:e5:2f:fe:a7:52:
92:ec:ed:e9:ea:7d:b6:1e:64:81:58:b8:0b:c3:5a:
5f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:88:84:E8:51:E2:E6:ED:C1:BB:07:A1:39:9C:DC:F3:4C:EC:6A:A1
X509v3 Authority Key Identifier:
keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e9:ee:a5:04:d1:3b:36:ba:6f:b3:3f:64:f2:b6:2e:3b:df:
e5:8c:50:fe:15:4f:44:a6:b2:e3:ba:95:a3:c2:35:fd:e3:20:
aa:59:55:98:56:cc:77:46:9f:2e:c0:b0:6f:c3:b4:bb:a0:6b:
f2:d0:24:48:77:8c:a8:ff:8d:bc:2c:f4:88:a4:8c:63:6c:36:
52:82:be:12:28:97:00:53:a0:b0:23:66:68:3d:32:d2:ab:1a:
65:05:c9:24:1a:22:9d:5f:16:ad:23:25:02:85:4f:70:cc:21:
5c:86:f7:4e:a8:16:cb:f8:02:c4:61:6c:61:4f:a2:0e:f8:4a:
f5:7d:ef:34:34:5d:d2:a3:52:42:64:dd:ad:38:cb:b7:76:2c:
bf:ac:bc:a2:28:a3:d8:fb:df:3b:a6:61:93:61:a0:4c:d1:30:
cb:8c:d6:c0:84:3a:5e:fc:b3:98:5e:7d:0c:3c:f0:20:fd:00:
5a:e4:67:4d:18:ae:a5:34:c0:c6:14:d6:9f:52:c9:36:e6:e6:
f8:07:57:e1:b0:54:1e:1e:a8:4d:0d:00:02:5b:6d:40:38:0a:
9e:b1:10:b9:b5:3c:bc:11:e4:61:5f:c2:e8:20:d3:eb:d8:30:
bf:fa:11:ae:a0:35:5d:61:cc:a1:d4:57:f1:9f:8e:87:e2:d2:
0d:e5:a2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:15 2025 by rpki-client