Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
File: OIeaeKWKSFzNiXDwQy2489dxcls.mft (raw, json)
Hash identifier: sVAMaiiGgCpC87QKeKLsEpkdki6+MUROS3WcNHuIuiE=
Subject key identifier: 41:2A:19:83:F7:71:A8:B0:6F:22:E3:D8:61:72:1A:2E:7F:15:17:F4
Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b
Certificate serial: 019A194F2D618EE23FD937549DD64BCA9096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
Manifest number: 16F2
Signing time: Sat 25 Oct 2025 03:00:10 +0000
Manifest this update: Sat 25 Oct 2025 03:00:10 +0000
Manifest next update: Sun 26 Oct 2025 03:00:10 +0000
Files and hashes: 1: OIeaeKWKSFzNiXDwQy2489dxcls.crl (hash: AQujk12c01r56YuHbBJ5CJBqxEG0uyJje+VNfaZVpI4=)
2: aJF-_eUqR8Yma02F31ybPienJuY.roa (hash: duGwNDtPKrkB5Se3luyctTXBg25/A0K/ZPMK4FyGebo=)
3: xj83lBqnCiYenkchlr_-eEoB-30.roa (hash: rDaj6xDIGI3i5anidMQG7nyOyM3UPZwMFnNZdzH+C5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:4f:2d:61:8e:e2:3f:d9:37:54:9d:d6:4b:ca:90:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b
Validity
Not Before: Oct 25 03:00:10 2025 GMT
Not After : Oct 26 03:00:10 2025 GMT
Subject: CN=412a1983f771a8b06f22e3d861721a2e7f1517f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:c9:e0:37:1e:62:f2:9a:c3:18:24:c7:a6:
a3:1d:9f:1e:a8:68:42:bc:33:4c:ee:c9:38:6b:b7:
c5:f9:31:92:cf:ce:ac:94:eb:75:9c:5c:a0:9d:ac:
27:80:5f:43:4c:e0:a7:aa:97:2f:f8:3b:6a:09:67:
f0:29:11:d7:dc:f9:e2:9d:ab:81:21:5d:46:c9:43:
a8:99:db:9a:e1:56:07:ac:76:65:37:a3:23:02:6c:
0d:4a:ce:92:71:78:c5:3a:d4:2c:d8:9c:de:40:9d:
5a:7f:e2:a7:fb:8d:60:d5:f9:b4:2e:76:2a:6b:00:
8d:cc:d0:c6:58:da:5c:a8:63:9d:8e:20:67:3c:61:
c6:e8:54:92:00:50:62:bc:68:7b:ca:a6:0c:32:d3:
5c:9e:69:1f:9e:4c:dd:4f:6c:29:a9:e3:39:f4:d3:
8c:96:e9:40:4d:1e:97:ea:f9:2a:4c:53:2d:90:a1:
42:c4:8a:76:7b:cb:c7:f5:45:43:a1:5c:45:9e:55:
35:9f:12:48:e8:75:6f:81:6e:fb:60:fb:e4:9e:d5:
41:41:8b:b0:7b:03:6e:c2:87:ee:a2:dd:60:9d:01:
50:b6:9c:64:59:53:84:23:9d:8f:b0:7e:6d:80:83:
37:c5:1a:d9:12:71:a3:a2:e4:75:e8:4c:58:d8:9f:
7b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2A:19:83:F7:71:A8:B0:6F:22:E3:D8:61:72:1A:2E:7F:15:17:F4
X509v3 Authority Key Identifier:
keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e8:7c:1c:cf:fa:17:6f:c7:cb:6d:8c:6e:c1:44:c1:4f:e1:
72:cc:dd:28:9a:46:d9:07:14:27:40:ac:7f:c9:82:de:a6:2f:
70:b5:66:f8:1c:0a:ef:5c:5e:84:d8:01:9c:66:f4:7f:5d:22:
87:ef:c7:92:59:17:49:d6:2a:b5:f7:38:d0:40:3c:30:65:73:
fd:db:92:7c:ff:2c:57:4b:f1:8d:e5:4e:27:8f:7a:b9:5b:b2:
8e:77:c6:f7:9b:f5:d3:ef:c4:1d:a4:c9:56:ff:8a:09:b6:33:
fc:e1:00:78:25:c5:b7:1c:2c:93:76:8f:06:09:8f:2b:94:ed:
39:db:8d:f2:5c:d1:ac:10:8c:7e:b6:39:87:73:6d:e5:1d:a5:
a8:b2:80:95:41:5d:8e:bb:4b:5f:6d:31:f1:d5:c9:1e:15:86:
88:86:81:8b:70:2b:ca:ca:db:3c:92:21:59:48:ee:b8:2c:ac:
76:e5:b0:26:b7:cd:47:69:47:9b:3c:7f:e6:fd:8d:4d:44:15:
21:02:37:24:3d:cd:42:2d:f0:d7:d8:1a:ca:3c:58:3b:af:35:
b3:7a:25:6f:25:9a:b4:8e:42:41:2a:96:cf:36:50:ff:bf:84:
38:51:4b:aa:8d:f9:72:e5:31:51:90:4d:c5:78:5c:22:52:01:
60:11:b9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:13:00 2025 by rpki-client