Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier: cuFY/5LI8VLnUhk/wzhmTaQ+gNkKSd6CG6Ex55TvFwk=
Subject key identifier: 8F:49:13:4D:FB:D1:A6:EE:D1:8C:1D:3A:4E:BF:70:65:F1:92:73:DC
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 019A209C3BCDD65ABB749EED7AA0E046302B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number: 1478
Signing time: Sun 26 Oct 2025 13:01:41 +0000
Manifest this update: Sun 26 Oct 2025 13:01:41 +0000
Manifest next update: Mon 27 Oct 2025 13:01:41 +0000
Files and hashes: 1: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: htbCyFmdWtspXMI82mKbcPWNem+Q9COQeUMCYsQz95I=)
2: UR9eQe3KGZ-9c60OTO6AJ5Nv5N4.roa (hash: i7xKIbibG1Wf9vR46/89Xb0uAuY5HlesJatHG5Hh1rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9c:3b:cd:d6:5a:bb:74:9e:ed:7a:a0:e0:46:30:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Oct 26 13:01:41 2025 GMT
Not After : Oct 27 13:01:41 2025 GMT
Subject: CN=8f49134dfbd1a6eed18c1d3a4ebf7065f19273dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:af:98:07:0e:07:c4:fb:3b:84:2a:5f:38:b5:
c2:a9:29:21:7b:2e:41:68:ba:66:5a:b4:df:e3:ea:
b4:49:f1:26:a0:0d:b4:0c:6d:ad:bf:50:85:4e:ca:
f8:14:25:e5:0f:a5:28:4a:58:44:0a:e5:ac:45:2f:
d2:33:e0:6a:46:5c:fc:e3:03:fa:97:46:9a:7a:de:
1e:f0:3c:cc:cb:dd:79:44:fc:a7:8b:62:da:21:ba:
b5:5a:74:c7:26:d2:07:f9:ff:c1:da:33:d1:f8:e9:
35:76:20:84:ad:11:c6:a9:44:43:14:d5:37:9b:0a:
72:fe:f9:03:52:4a:a2:ab:50:a2:58:59:3b:91:01:
30:6f:8a:5e:0f:18:a7:84:4f:88:36:46:b7:64:e8:
04:5b:fe:13:3d:27:fb:2c:b6:22:21:f2:db:7e:ed:
cb:68:1a:ee:8f:46:e2:88:b1:9e:cf:ef:a8:f9:17:
11:bd:90:0a:1b:36:a1:56:52:07:05:8b:7c:c2:19:
fc:4f:59:03:04:22:08:36:e7:72:b5:ad:e0:13:d6:
2c:bb:04:bb:dc:b9:a1:e0:04:3e:99:79:d3:28:d6:
08:d7:d1:77:a7:4a:fa:d7:3f:95:5b:dd:e8:26:56:
cf:98:d6:5e:7b:96:12:82:84:40:8f:47:c6:54:81:
73:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:49:13:4D:FB:D1:A6:EE:D1:8C:1D:3A:4E:BF:70:65:F1:92:73:DC
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:29:90:c4:34:96:0c:5f:ae:77:fc:5a:87:92:3e:43:f3:0d:
a1:10:45:18:e3:7c:49:39:32:d2:a1:7b:6f:ba:09:e2:c1:fa:
cc:f8:3f:b9:ee:7a:26:09:54:3e:0f:97:5b:73:be:ab:b8:da:
83:fd:c0:e8:d7:37:2f:cd:d5:ef:6f:04:21:54:35:05:1a:7d:
4d:23:96:f2:20:1e:bc:06:41:e2:3a:58:9a:4a:d3:c0:5b:42:
10:9a:2c:53:38:5f:20:ef:70:ec:d3:51:70:7f:c4:7b:ea:ba:
db:50:f2:c6:7a:90:e8:a0:25:5f:82:58:44:8f:59:1c:0b:ca:
83:6b:fe:b2:bc:1a:c2:a8:cc:68:eb:9d:0b:df:69:d9:a7:e1:
2a:b8:4b:bf:35:e4:1d:1e:6f:22:50:91:c4:43:89:ed:78:d9:
87:f0:73:36:c6:0c:ef:9a:28:6b:30:10:8e:c6:76:1b:d5:b0:
81:6c:1a:d6:e6:19:df:d9:f5:92:81:2e:ed:4a:59:10:25:bd:
11:0d:c6:d9:95:67:46:94:dc:21:a0:c6:c8:16:e5:31:49:9e:
18:0d:10:51:58:c4:e9:ea:30:b1:66:86:d0:6f:11:08:e5:f2:
9d:97:8b:c1:86:26:02:2c:75:03:68:a5:d1:ef:6e:f8:67:e8:
c3:64:2b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:58:26 2025 by rpki-client