Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
File: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft (raw, json)
Hash identifier: ywKUUUMP+OSXRMtPtchMFNEgMRFnbRY5NsqE3XKvh/Q=
Subject key identifier: F0:76:39:BB:A4:74:9B:11:7A:A9:A4:C0:7C:B5:40:55:E0:65:35:68
Authority key identifier: D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
Certificate issuer: /CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Certificate serial: 019A71B79467022E3A156EB9345DD6F6A118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
Manifest number: 114A
Signing time: Tue 11 Nov 2025 07:00:47 +0000
Manifest this update: Tue 11 Nov 2025 07:00:47 +0000
Manifest next update: Wed 12 Nov 2025 07:00:47 +0000
Files and hashes: 1: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl (hash: YSxX6YuWhIHrpn6TtwVQSxSXXQvtRrgusLSmzecjxUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:94:67:02:2e:3a:15:6e:b9:34:5d:d6:f6:a1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Validity
Not Before: Nov 11 07:00:47 2025 GMT
Not After : Nov 12 07:00:47 2025 GMT
Subject: CN=f07639bba4749b117aa9a4c07cb54055e0653568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:da:5c:78:74:7f:24:e0:33:fd:5f:80:2a:
87:5e:9e:e6:92:8e:e8:52:14:33:f5:87:17:c6:ff:
38:c2:29:22:b0:17:b0:02:7d:d5:f8:42:40:81:9b:
ac:60:19:3a:cf:bd:69:5d:6c:10:64:bd:83:1d:0b:
d2:2b:a4:78:5a:b6:e5:b2:ba:d8:df:0e:e0:4f:36:
51:f4:78:13:a7:4d:fb:d0:61:1b:91:fe:51:ac:4c:
10:47:98:f5:b0:2b:78:b8:42:ab:28:a3:d5:73:b5:
1c:74:5e:4b:0d:ba:7c:12:4a:8b:98:f4:de:02:89:
dc:1b:6c:43:3c:00:8b:1e:84:b6:79:99:09:1d:2b:
8e:bc:ce:ad:be:61:83:cf:85:f9:61:9c:60:90:53:
02:f4:e9:d1:b4:99:62:f2:a1:fb:05:36:8a:7a:ef:
01:4f:e4:86:a6:2d:d5:ba:b7:6d:f6:c1:fc:e7:5c:
af:5d:f1:45:d0:ee:ab:5d:f9:cc:e5:ea:c3:0b:61:
ee:d2:3c:86:97:33:1f:69:7f:cd:f0:af:6f:86:c7:
7d:52:b9:f9:1a:e8:b5:b0:ae:b9:a9:01:7a:95:6f:
f8:19:1d:4f:b0:a8:bb:6d:ea:b5:a0:0f:96:ac:ca:
b7:ad:27:fe:23:37:2f:f1:f8:4f:05:6b:1a:c5:34:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:76:39:BB:A4:74:9B:11:7A:A9:A4:C0:7C:B5:40:55:E0:65:35:68
X509v3 Authority Key Identifier:
keyid:D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:34:76:b7:b6:c9:c0:f0:ae:16:64:2d:c7:73:52:3a:d9:e1:
21:7b:fb:4d:9c:d9:e9:dc:04:ef:54:47:cb:92:4b:d2:4b:18:
a5:25:66:ab:7a:ad:d9:2d:cc:df:7e:3f:f0:b5:97:45:66:12:
47:6b:b8:66:28:e6:b5:20:9d:92:5d:73:7c:a6:ab:93:8a:e4:
f6:72:60:31:c6:9d:95:59:8e:c4:00:3a:90:77:0b:0d:22:58:
bc:a1:10:d6:af:0e:6c:43:8e:3b:df:da:46:df:3a:f9:99:47:
8a:e2:a7:29:a0:42:ef:fb:1a:16:8e:40:02:8d:d0:76:4c:e2:
05:b3:99:64:76:2e:b0:72:10:93:08:48:0d:39:65:f9:58:ef:
27:1b:c0:21:b6:ed:1d:83:0f:56:e6:fc:e0:2a:f2:84:95:f2:
a8:35:3d:e3:e5:75:02:00:dc:21:35:8a:f1:7b:42:b7:e7:f8:
03:a1:d2:65:69:2c:4e:27:d7:7b:fc:17:b0:e5:98:6b:6c:d5:
9f:ae:5d:d8:62:01:41:12:c2:b2:03:a3:83:23:a1:55:e0:2b:
ab:9a:e0:79:50:c8:55:eb:93:de:fb:9a:f0:12:02:bb:fb:52:
c4:1e:10:fd:7a:6c:26:d0:9c:1d:4b:64:04:eb:72:1c:db:8a:
25:2b:82:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:57 2025 by rpki-client