Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
File: oqodRGKTg8rfx1F9733ikpWuObQ.mft (raw, json)
Hash identifier: cSxMrtb2JKx6Ap5wMGJ9zbSfBo9hwA3IrzXZXArU2Mk=
Subject key identifier: 4F:67:21:D8:1C:9B:F4:D6:EA:19:D2:5E:7C:43:99:15:D6:6F:CA:D2
Authority key identifier: A2:AA:1D:44:62:93:83:CA:DF:C7:51:7D:EF:7D:E2:92:95:AE:39:B4
Certificate issuer: /CN=a2aa1d44629383cadfc7517def7de29295ae39b4
Certificate serial: 019A725C736F14A5450E1C57469F3C660EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
Manifest number: 0E95
Signing time: Tue 11 Nov 2025 10:00:52 +0000
Manifest this update: Tue 11 Nov 2025 10:00:52 +0000
Manifest next update: Wed 12 Nov 2025 10:00:52 +0000
Files and hashes: 1: oqodRGKTg8rfx1F9733ikpWuObQ.crl (hash: Xm+Dahm2jwC+EaaJOV0Y3pK4eSIT3PesT+t3Ss25XmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:73:6f:14:a5:45:0e:1c:57:46:9f:3c:66:0e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2aa1d44629383cadfc7517def7de29295ae39b4
Validity
Not Before: Nov 11 10:00:52 2025 GMT
Not After : Nov 12 10:00:52 2025 GMT
Subject: CN=4f6721d81c9bf4d6ea19d25e7c439915d66fcad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:2c:4e:99:68:ac:f6:58:be:f1:87:65:e4:
4c:a3:0f:62:a9:7f:54:84:ab:63:af:c1:21:31:aa:
d7:83:40:bc:84:2a:ef:c1:c9:25:4b:ae:1f:ea:63:
69:72:75:1c:f8:69:3f:bf:6c:12:dd:1e:fd:56:ec:
00:75:3b:bf:20:4e:fd:fb:fd:28:ec:ad:ad:95:64:
ad:0a:65:78:ff:97:9d:ad:40:90:dd:34:64:1b:98:
a4:5b:f3:dd:28:4d:f9:bf:cb:8c:08:e9:5a:c8:d9:
e3:d8:e5:41:8d:82:17:57:84:02:bd:47:45:e8:26:
9d:e0:53:54:4c:98:16:42:94:7c:ca:95:08:34:16:
64:38:8c:1b:b7:19:ea:c0:e9:14:3c:94:a8:a2:79:
f1:fb:cb:22:0b:ae:29:75:12:05:b6:f1:00:12:19:
0e:f0:5d:67:5c:16:94:36:c9:b5:0a:03:81:7d:f2:
38:1c:65:c7:9a:57:ef:fa:fc:bb:05:3d:2f:ed:bc:
ff:0f:d6:88:d7:82:3b:8e:8c:a1:60:64:0e:e0:85:
59:34:3e:1c:94:83:8e:29:fe:93:95:44:7c:05:a6:
6d:d5:be:e7:21:32:da:03:53:44:aa:a9:d2:0d:6a:
d4:94:54:0b:80:d9:0d:99:64:1e:64:ec:5c:d0:e9:
20:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:67:21:D8:1C:9B:F4:D6:EA:19:D2:5E:7C:43:99:15:D6:6F:CA:D2
X509v3 Authority Key Identifier:
keyid:A2:AA:1D:44:62:93:83:CA:DF:C7:51:7D:EF:7D:E2:92:95:AE:39:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:65:59:4e:7f:29:61:47:14:5e:cd:43:f6:b6:c9:a8:dd:99:
22:21:81:49:2e:77:1d:e5:2a:d8:23:a7:52:17:c4:dd:d3:68:
ae:b5:fc:9e:0c:73:9c:ca:f5:f1:63:72:2b:9a:9a:1f:27:00:
5c:e2:0c:4e:ec:88:2a:b8:e0:91:6e:df:28:11:d2:f2:24:7a:
52:7a:42:c6:83:b6:73:cc:f7:4c:b9:9c:1f:5c:27:02:d6:4c:
58:2b:b2:53:cc:7c:9a:b4:53:e0:be:f4:01:3b:3f:f8:89:97:
b3:fe:84:d7:22:b6:d6:f0:f3:5a:c7:b4:63:24:5c:f9:b4:e9:
80:b2:34:6c:7b:45:ea:f4:8a:73:28:49:43:0a:05:d6:60:69:
03:50:59:63:19:4e:57:d4:d0:88:88:79:11:21:b8:fa:01:23:
d5:3b:d4:f6:00:ef:be:5c:a7:ce:c0:d4:e5:ee:94:8a:d9:2a:
61:b5:65:78:b8:a4:81:25:34:f8:60:4a:7d:c4:5c:1b:70:2f:
d1:2f:56:91:93:a7:21:fc:25:2e:6f:66:c6:26:6b:02:34:56:
70:61:3c:a5:ad:20:7a:24:b3:b4:2b:d3:02:9f:63:73:41:15:
af:eb:9a:7d:0d:a9:84:9a:6a:59:14:8a:45:f8:e6:79:9f:13:
9b:89:48:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:30 2025 by rpki-client