Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
File: OExnnLr4wq171-FZCG_fCifSooQ.mft (raw, json)
Hash identifier: edtevyiBHPy4OtI8fCqK7FGxj0Czkhsx0y3nyKy5nZU=
Subject key identifier: CF:7F:3C:C8:8D:A5:19:F5:52:A5:C5:B7:69:FA:DD:F3:A9:64:7F:A1
Authority key identifier: 38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
Certificate issuer: /CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Certificate serial: 019A72934CC0D2358DB6B64983DF2C5C8F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
Manifest number: 0D0D
Signing time: Tue 11 Nov 2025 11:00:47 +0000
Manifest this update: Tue 11 Nov 2025 11:00:47 +0000
Manifest next update: Wed 12 Nov 2025 11:00:47 +0000
Files and hashes: 1: OExnnLr4wq171-FZCG_fCifSooQ.crl (hash: H4lDZROpHL4WWaR+W8dQGqOQPPRYFUJdM5xR3T+rLHA=)
2: dOLAcZqxH53yb4L2nTWOqgwfPdw.roa (hash: 2YFuU3G8qtklSATjn4cas6IxZSziYEVnTqShHhdL/7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:4c:c0:d2:35:8d:b6:b6:49:83:df:2c:5c:8f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Validity
Not Before: Nov 11 11:00:47 2025 GMT
Not After : Nov 12 11:00:47 2025 GMT
Subject: CN=cf7f3cc88da519f552a5c5b769faddf3a9647fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bd:b1:de:2a:3a:73:c2:ff:8c:3d:68:a3:4a:
33:1a:cb:d6:47:e8:df:59:38:cb:42:af:fd:ff:ba:
f9:0f:28:e8:c8:71:83:0e:11:ae:89:c3:d5:bc:3e:
a8:e3:60:0d:c7:9a:86:87:a5:f6:74:2b:75:4e:55:
9b:80:99:e7:a5:c2:d0:1d:e9:4d:25:43:bf:a1:dc:
4b:78:8e:97:f0:68:a2:e8:72:ae:a2:78:fa:e0:bc:
82:1b:1d:9c:1d:ab:d2:fb:95:79:f6:50:40:80:9e:
99:6d:47:b8:e5:c3:72:ec:35:ee:31:7c:a1:3a:d1:
cc:df:78:61:42:15:04:45:c0:14:04:a0:49:7b:92:
af:2b:54:fe:e8:47:f1:d8:11:c2:0b:29:df:fb:fe:
bf:ff:bb:37:75:c6:91:35:4a:12:af:f0:74:23:d7:
b5:62:57:91:10:ba:64:a6:5a:61:38:07:bb:37:8e:
36:c4:3d:96:6f:4e:c1:e9:2c:aa:0c:9d:c5:3b:1f:
52:fe:95:5e:2d:3f:fd:76:70:63:8f:7a:36:cc:46:
c8:ac:65:3e:42:db:c2:ce:43:af:53:4e:84:ab:98:
02:ed:e6:43:24:04:72:17:40:47:a5:68:67:92:4a:
d1:2d:ee:68:de:07:ec:30:e0:79:ce:65:e4:22:52:
44:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7F:3C:C8:8D:A5:19:F5:52:A5:C5:B7:69:FA:DD:F3:A9:64:7F:A1
X509v3 Authority Key Identifier:
keyid:38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:45:97:b5:6e:73:eb:2c:c2:3a:31:52:6d:b3:f7:16:fb:ce:
89:7c:0c:dc:61:ef:2a:bf:7a:46:49:75:e3:9e:19:59:88:6c:
8b:ff:b6:3c:f7:26:fb:ab:1c:e5:d9:73:c0:dc:b7:2a:ff:30:
5c:3e:22:a9:ba:e8:e9:56:d3:52:51:34:0d:7c:f1:6a:f8:b9:
26:28:c4:74:97:a1:07:ee:22:86:a9:fc:77:2b:d4:09:1d:25:
8a:4d:1e:ff:7e:19:22:9b:c1:b9:06:ab:cc:97:42:52:88:04:
44:3d:cb:13:5e:e3:b7:ee:2b:cb:12:1f:08:ba:6e:c4:60:ca:
10:cb:fa:38:28:d6:93:80:a3:dc:8f:f9:6f:fd:15:df:e8:e8:
f6:28:fb:dd:9f:d8:59:24:4b:5c:e4:5b:30:20:a2:c2:02:4f:
7d:63:dc:62:1f:da:90:85:77:9d:48:d8:00:9b:90:2a:7b:7c:
e4:5d:b0:6b:ff:61:81:37:01:cb:ea:6e:72:e2:15:d0:f1:11:
12:3c:05:64:06:ed:83:98:40:c8:3d:03:17:ca:a5:28:5d:1d:
56:51:ae:7e:8c:3e:3e:fd:e3:2a:9b:86:3c:f6:52:cc:f4:56:
02:3c:5d:65:ea:5e:b8:e5:e5:9e:be:98:ed:54:16:d3:fe:b5:
7d:f1:0a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:04 2025 by rpki-client