Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json)
Hash identifier: hWEVObDT5MTbf1Pe+bTbUOyeoiEriOd0JaWYta2bkGc=
Subject key identifier: 83:93:E7:6B:28:7D:98:6C:0D:FB:56:42:49:FF:A4:AA:9C:D8:9F:73
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 0199C29FA0C2A1C2599D028051FAA661A436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
Manifest number: 16CB
Signing time: Wed 08 Oct 2025 07:01:05 +0000
Manifest this update: Wed 08 Oct 2025 07:01:05 +0000
Manifest next update: Thu 09 Oct 2025 07:01:05 +0000
Files and hashes: 1: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: Iw0iUKODPIf2ZM2U6X5Qs4X3vlUIr3eLW1xfwar6+Bg=)
2: QheNcxsOMuaxLgjUMz8IKhAE4zI.roa (hash: 1qU8I97VIdY7GQVn2XafsvIYaI5J0RtyUS8ikCjbw40=)
3: og2S8T7snwmIfxqWVsKnAziyqjw.roa (hash: nyDnsuqaFzZObVQeI6lulOe/nyo6A3NyWlMKfoM7RSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c2:9f:a0:c2:a1:c2:59:9d:02:80:51:fa:a6:61:a4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Oct 8 07:01:05 2025 GMT
Not After : Oct 9 07:01:05 2025 GMT
Subject: CN=8393e76b287d986c0dfb564249ffa4aa9cd89f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cb:e9:f8:29:e7:c9:09:64:79:6e:41:0b:1e:
3b:ef:d4:a6:af:71:bd:57:22:d4:ff:f2:12:2c:1b:
bb:f3:db:fc:b6:79:60:11:3b:96:7b:70:28:87:8c:
5d:eb:61:15:9d:20:7f:0d:16:be:4b:6c:98:70:e2:
da:e3:6c:61:2b:a6:bc:90:90:34:3f:22:37:4d:f8:
a0:84:09:fb:0b:5a:6f:37:af:75:fd:6b:74:aa:05:
8d:e2:06:8b:5c:3f:dd:5a:81:fa:ce:30:ad:6a:ce:
4a:26:f0:28:34:04:8a:c8:d0:78:3f:d5:24:fc:af:
b9:6f:00:7e:36:11:c5:56:74:23:c5:7b:e3:ca:7d:
c2:ae:c6:de:c6:ef:53:54:d1:33:31:e0:74:55:34:
64:1a:0c:7d:bc:3a:cd:56:3b:8c:da:6e:91:34:ae:
a8:3a:8b:92:1c:bc:c7:2f:b1:41:33:ff:2c:91:1f:
0f:4c:ef:ba:f8:0c:01:ec:65:c9:e2:f1:f9:27:10:
71:48:7e:04:51:c7:b9:e3:f2:67:84:f1:4b:da:1b:
7f:d3:75:da:01:f5:fb:be:d4:84:05:cf:68:92:5b:
47:1e:48:a6:78:43:76:a3:92:96:2d:6c:bc:61:b3:
b6:4c:0e:6e:23:1a:52:28:34:16:a3:d8:7d:90:d6:
75:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:93:E7:6B:28:7D:98:6C:0D:FB:56:42:49:FF:A4:AA:9C:D8:9F:73
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cf:bf:9c:da:cb:63:97:72:45:9f:9a:b1:58:71:e0:71:53:
99:e2:13:1e:19:8c:97:6a:71:f2:70:4c:54:2b:78:2b:cc:92:
d9:5e:49:5e:90:33:f6:46:d5:0f:41:e4:ce:64:97:07:95:7e:
fe:b2:6b:46:2e:6a:b7:79:b2:6d:e9:37:0e:fa:61:61:45:ce:
06:26:6b:a1:e4:90:a7:c9:44:39:6c:1b:52:f6:bf:8c:36:d7:
78:6f:91:54:88:0b:24:ea:2d:27:84:e6:7d:37:08:40:6d:44:
d5:f5:dd:8d:40:c5:fa:b1:1c:ce:e8:9b:6c:f0:e8:24:ff:91:
5f:b2:8c:0d:ec:25:db:53:f8:64:40:47:f2:79:a9:ac:5e:ee:
e0:71:9f:ae:d1:f7:89:04:65:a6:cf:23:df:53:e0:78:74:07:
48:7a:51:a7:82:33:8f:ee:cc:27:3e:c4:65:c9:d4:25:98:9b:
b9:c5:ae:35:b2:fa:07:39:c6:a5:8b:31:f6:b0:25:bd:14:09:
a1:34:1e:d4:ae:72:be:71:2f:76:6b:a8:10:df:9b:40:71:d2:
ce:94:55:d0:59:9b:52:d6:8f:c0:8d:87:dd:54:79:db:3b:b7:
2f:ce:31:ef:6d:5b:3f:47:da:dc:54:49:76:0e:80:12:28:87:
87:9e:d3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:46:36 2025 by rpki-client