Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json)
Hash identifier: eD3dqTjH33+G/r4S7zKN7oIhL1ww7bFAjxRgvC71tsM=
Subject key identifier: 6D:C3:29:9F:1E:0A:E0:12:F1:F6:2B:54:F8:C8:09:8F:3A:69:0C:C7
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial: 019A21ADBA2E2ADC273D84A1AAE191C57E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
Manifest number: 0DDB
Signing time: Sun 26 Oct 2025 18:00:24 +0000
Manifest this update: Sun 26 Oct 2025 18:00:24 +0000
Manifest next update: Mon 27 Oct 2025 18:00:24 +0000
Files and hashes: 1: 4DXia6r4DTEgUbfUdc0kmvwmm1Y.roa (hash: Z6UcUFwAm3cKPg0mR+/9vcq4H9MwUtI5vEk+Pz3XR3A=)
2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: iSojU0JTYxUKQFSulyBh/AUgXvfONCfXFLFvsB3SPS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:ba:2e:2a:dc:27:3d:84:a1:aa:e1:91:c5:7e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
Validity
Not Before: Oct 26 18:00:24 2025 GMT
Not After : Oct 27 18:00:24 2025 GMT
Subject: CN=6dc3299f1e0ae012f1f62b54f8c8098f3a690cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:f0:a9:ba:93:23:d1:46:32:78:97:23:c1:
c6:6e:ab:68:ba:24:64:0e:67:54:20:76:0a:4f:a5:
45:7e:19:64:b5:a8:23:7c:3e:a0:ed:2c:eb:d1:6a:
bf:69:52:e1:12:4b:2e:f8:0e:69:55:d2:7c:f0:74:
7f:8e:46:ef:bb:54:fd:a8:47:01:00:c0:ff:9b:76:
69:45:cc:1e:d2:5d:e6:77:46:8e:17:cb:c8:8e:ee:
c8:2e:88:5e:20:1a:3a:d9:50:4f:8a:d8:d9:d9:eb:
4e:7c:fe:56:b9:46:a6:72:c6:d4:32:74:51:5d:b4:
5f:31:6d:5d:dd:95:19:ce:5f:6e:85:9c:80:0e:a9:
50:0d:b6:f5:c7:fe:ba:b5:56:97:61:74:7f:59:07:
ab:9e:09:ad:77:f3:f9:6e:cd:fe:36:81:90:9d:93:
be:24:9c:c3:54:75:1b:87:d3:82:55:05:5f:a2:d7:
f3:ed:3f:c8:36:b3:5c:cd:19:8b:89:70:e8:a1:a5:
5c:79:8d:ff:62:f8:c6:e8:d3:67:e9:23:18:9d:00:
54:5a:f7:34:22:ac:03:75:ae:88:c8:60:c1:60:2a:
b8:2d:d9:53:2b:58:29:1b:94:7c:3a:3f:df:10:7e:
5e:fa:3b:70:5a:5b:18:df:8e:e7:e1:63:91:82:de:
34:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C3:29:9F:1E:0A:E0:12:F1:F6:2B:54:F8:C8:09:8F:3A:69:0C:C7
X509v3 Authority Key Identifier:
keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:39:b0:c5:81:fe:a4:b4:17:a3:7a:9a:83:33:a0:7c:ef:d8:
28:ed:36:12:22:6a:e0:9e:4b:99:13:54:00:17:c8:b4:2a:4d:
97:f3:38:81:9d:72:21:33:52:8e:ab:9d:55:a7:9f:19:12:fe:
6d:ea:9f:e7:2e:8a:7e:71:56:a2:02:49:e1:9c:65:e6:05:1a:
17:32:26:dd:24:3f:ad:ae:fa:f2:6f:be:92:12:75:1d:3d:2d:
4b:0c:ec:42:1d:60:18:ae:a0:3f:4c:a4:b9:bf:e5:0c:14:bd:
84:31:ce:82:f9:08:88:0d:5b:f3:4a:e7:f9:40:a0:47:78:4b:
ff:07:ff:8d:37:b2:33:16:74:03:c5:8e:84:85:5f:13:c4:de:
7f:96:89:7b:11:8d:a0:5c:d9:4a:e4:73:48:60:18:c7:69:db:
b7:e9:2b:c8:eb:ce:a7:e1:1c:2a:f6:36:dc:29:c3:9f:b8:f6:
d9:71:7a:85:56:db:c4:f7:1f:67:e7:0e:b5:69:0c:91:35:ef:
36:c9:00:0f:69:d0:f3:e1:21:17:88:86:f1:be:58:f1:87:55:
03:0b:f8:44:ac:06:e3:cc:34:a4:30:da:c4:24:97:68:d3:70:
95:09:b6:52:fd:84:94:91:08:a8:54:5a:96:90:e8:2e:ac:41:
47:85:78:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:31:13 2025 by rpki-client