Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
File: oYNGitFuaZjU23dpvvv6BuofE0I.mft (raw, json)
Hash identifier: 9/D/IRqxDmNsQdMlhr8iXLiMQos4YmpfrpnAJVIEYD8=
Subject key identifier: A8:5C:88:22:5D:41:B7:43:23:B4:F4:28:E9:F5:9A:96:79:E6:66:89
Authority key identifier: A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42
Certificate issuer: /CN=a183468ad16e6998d4db7769befbfa06ea1f1342
Certificate serial: 019A729368960FFEB3D723E622E2ECC04304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
Manifest number: 109B
Signing time: Tue 11 Nov 2025 11:00:54 +0000
Manifest this update: Tue 11 Nov 2025 11:00:54 +0000
Manifest next update: Wed 12 Nov 2025 11:00:54 +0000
Files and hashes: 1: oYNGitFuaZjU23dpvvv6BuofE0I.crl (hash: YRsHAi9yW2ARrPjuti+D+d7C+e2T63miTIQA1sfzEjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:68:96:0f:fe:b3:d7:23:e6:22:e2:ec:c0:43:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a183468ad16e6998d4db7769befbfa06ea1f1342
Validity
Not Before: Nov 11 11:00:54 2025 GMT
Not After : Nov 12 11:00:54 2025 GMT
Subject: CN=a85c88225d41b74323b4f428e9f59a9679e66689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f4:2a:57:07:fd:0f:bd:2d:27:c5:d5:7c:3e:
e9:bc:77:5e:69:d5:09:3e:a6:2c:42:18:21:ac:c4:
ed:f4:19:0e:69:bd:b0:be:13:7e:da:03:d2:76:80:
f4:9a:88:dc:6a:dc:f3:49:90:fd:44:b5:11:47:04:
19:b3:b2:08:f4:8d:50:71:62:68:9a:5c:53:cc:f0:
ae:de:3e:af:13:af:64:9a:eb:56:66:b9:77:98:18:
cb:f0:ea:84:8f:15:e3:a6:fd:3e:69:4d:ee:9f:36:
64:eb:77:76:97:5e:a2:6d:94:66:1c:29:36:1a:36:
0e:f4:3a:49:cb:f0:19:1a:c7:41:8e:41:48:f7:85:
1f:4c:70:09:7c:3f:be:cf:6a:fa:96:c4:57:66:42:
be:16:72:b8:2f:76:27:d7:86:ce:64:6e:db:f9:c8:
85:21:a6:af:2e:c1:29:3b:e3:cd:aa:57:d1:b4:29:
23:7f:6e:6b:66:66:86:b5:74:5a:be:84:ce:6a:07:
ad:13:6f:4c:51:fb:eb:fb:bb:b1:35:e4:91:2c:4c:
74:16:5c:e5:d6:c3:1e:11:11:32:67:77:a6:5d:95:
44:8f:f8:1a:be:e7:b1:dc:c8:27:7b:5f:67:dd:9c:
da:4a:3d:02:46:03:30:e2:4d:cc:5b:61:31:b8:68:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5C:88:22:5D:41:B7:43:23:B4:F4:28:E9:F5:9A:96:79:E6:66:89
X509v3 Authority Key Identifier:
keyid:A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b5:06:6c:d7:8b:d0:3c:c4:7c:9e:0b:65:93:d1:64:0d:55:
63:b0:68:dc:47:13:f8:10:fd:31:4c:44:f5:1c:ac:6a:b3:e7:
63:fa:b5:0b:61:cc:6c:c7:aa:97:67:f2:04:fe:71:f2:47:6f:
c9:25:55:bd:ca:5e:e0:9d:3d:1f:84:58:fa:d7:c5:9d:b9:50:
19:d1:80:73:f2:1a:90:11:cf:ee:7f:49:88:89:58:02:ea:60:
f8:27:47:1c:b8:0d:a6:ba:80:92:39:51:bc:a6:9c:6e:10:e0:
7c:c8:4f:ef:94:f6:f6:0e:16:17:60:52:3e:e7:1d:4f:2e:eb:
65:5b:c3:3b:7f:08:00:a6:14:3a:e1:4d:2c:6d:5f:71:7b:81:
6b:61:be:43:cf:3a:d4:f0:5a:ef:1c:8c:3d:6c:b8:6b:6a:9d:
0d:73:ad:6a:93:8c:6a:bd:47:7d:16:b4:4c:d7:d4:6b:8b:f9:
34:f8:0a:6c:8b:d5:87:63:bd:de:1e:87:b8:32:67:9c:5e:cf:
df:9b:f0:15:59:3a:24:36:ba:84:4c:7a:44:e8:c1:b1:c2:50:
f3:31:bf:33:60:9b:1f:e5:ec:07:9d:ae:da:be:48:5d:3e:28:
45:12:59:2d:38:f4:65:32:c3:f2:04:02:ea:3d:51:b7:6f:be:
ab:15:9f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:28 2025 by rpki-client