Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json)
Hash identifier: l5MPS4JFR8IitU1dyI2dvRcvg07rOEuxEAyi+ZS5qF8=
Subject key identifier: C1:BF:DE:E3:52:4F:24:9E:5B:F6:21:27:AF:0F:BB:D7:31:66:7A:D4
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 019A7225AAEB323E6185B9315EBAE25FD2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
Manifest number: 0F8B
Signing time: Tue 11 Nov 2025 09:01:02 +0000
Manifest this update: Tue 11 Nov 2025 09:01:02 +0000
Manifest next update: Wed 12 Nov 2025 09:01:02 +0000
Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: jkE0iXvvBsMGoN8dNVRKN6n1QZSbhYiwU75AofwXSHE=)
2: uurNEPjhRtDIDBb3Oc-e5-rgs-I.roa (hash: N52vo6FqVd0GdLu55AAXlbmzEZo+baOISMz+vvdeY6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:aa:eb:32:3e:61:85:b9:31:5e:ba:e2:5f:d2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Nov 11 09:01:02 2025 GMT
Not After : Nov 12 09:01:02 2025 GMT
Subject: CN=c1bfdee3524f249e5bf62127af0fbbd731667ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f8:2e:b8:74:80:e6:14:1a:50:fb:0b:a6:8c:
e1:86:18:8a:10:b0:07:93:58:4e:7c:a5:7a:aa:46:
87:33:76:2c:86:1a:3b:14:44:8e:ec:e1:44:10:13:
be:15:09:82:77:b0:e5:a7:96:5f:49:c3:ba:2a:e2:
4d:db:dd:d2:b4:fe:3d:10:a8:aa:7f:51:e9:ab:46:
04:7b:e5:08:da:eb:6e:51:54:69:71:1b:09:6f:4f:
05:ca:bd:99:3c:35:7f:6a:56:65:c9:93:e7:1c:ca:
a6:56:58:8d:cf:95:3a:f1:5e:58:d1:a2:8f:30:fb:
f2:ea:66:1e:15:cf:4c:78:62:22:bf:c0:cd:00:e3:
81:d1:b3:06:e4:13:2a:c4:27:96:c0:10:aa:b3:bf:
73:7a:21:24:92:01:79:87:a9:2f:68:7c:e2:40:c4:
c9:61:a8:e9:11:a0:bd:28:65:04:82:0c:4f:8f:1e:
ee:27:2d:db:d6:ff:2a:a2:91:e7:09:44:79:c8:f5:
42:de:78:71:3b:f2:7e:e5:8b:3c:0c:e1:ce:0e:a3:
fe:b7:8d:84:e8:7d:a4:16:95:bb:70:c0:95:00:63:
d3:c9:5f:6e:d6:ba:44:19:38:f5:32:cb:4d:20:7e:
33:37:6a:38:36:86:0b:d2:f2:79:e7:a4:a9:57:84:
1c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BF:DE:E3:52:4F:24:9E:5B:F6:21:27:AF:0F:BB:D7:31:66:7A:D4
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:07:ce:a7:d8:4a:1f:4e:4c:10:73:1d:28:54:ac:1d:10:22:
fb:21:22:8b:02:ac:20:67:de:4c:b2:fe:bf:a2:75:c0:74:5e:
bb:6e:66:87:0f:31:3f:ce:b0:01:10:ae:92:e9:0c:c3:23:f8:
c8:fc:c7:3f:26:30:81:44:ab:11:3e:d6:4b:13:dd:be:31:76:
d6:34:77:88:76:5b:82:2e:db:5f:e8:3c:65:6f:a1:e6:c6:cf:
31:32:39:da:7d:d4:dd:d1:53:e5:07:23:79:f5:70:d3:13:56:
8a:e9:43:18:cc:e3:41:73:67:fa:82:2d:bd:d3:e9:e6:b7:1d:
00:ac:46:3c:eb:50:cb:5d:fa:3d:9e:50:e5:fe:58:c3:5b:9f:
4c:af:99:3b:f4:b0:fe:a4:1a:99:8e:87:86:c7:c1:49:2a:2a:
7b:d9:0c:b8:a4:fa:7b:16:6f:d1:a8:84:09:38:01:cc:03:3c:
1c:34:32:5c:b8:5b:e4:50:75:2c:9d:54:67:8e:b2:ce:fa:89:
e1:4d:c9:de:7e:53:b0:ef:09:f1:f8:ca:f7:fa:e9:f7:1c:95:
65:a8:65:88:9c:e4:b7:3f:83:58:bb:ce:b5:56:8d:34:b5:ab:
71:b4:56:25:a8:ea:49:47:65:47:f8:08:f8:31:dd:99:57:57:
0a:d5:24:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:34 2025 by rpki-client