Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
File: OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft (raw, json)
Hash identifier: 8u/FI7jQS6aJDCm/J7WsPBRRlpS1eMZYh40SzbCPvoU=
Subject key identifier: 31:BC:7E:61:85:0D:B1:54:E4:09:C4:1A:B6:AB:04:07:2B:83:D9:00
Authority key identifier: 39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
Certificate issuer: /CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Certificate serial: 019A71B8C4E6D200EFCF0687E421880EE60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
Manifest number: 0BE9
Signing time: Tue 11 Nov 2025 07:02:05 +0000
Manifest this update: Tue 11 Nov 2025 07:02:05 +0000
Manifest next update: Wed 12 Nov 2025 07:02:05 +0000
Files and hashes: 1: OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl (hash: gwg/QQpxC4ilAkfX3qzwFQAxzwn65Ik0xC/GI4X2W+0=)
2: ZheJClH79M-pTRLGEsquKEEr6pM.roa (hash: eeP+fsrVhAPz7GiAy+y57uO8gQvXWPRMB7ruMgXE6Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c4:e6:d2:00:ef:cf:06:87:e4:21:88:0e:e6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Validity
Not Before: Nov 11 07:02:05 2025 GMT
Not After : Nov 12 07:02:05 2025 GMT
Subject: CN=31bc7e61850db154e409c41ab6ab04072b83d900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:00:e3:f1:32:68:14:9b:81:61:e1:7c:70:10:
dc:17:87:bc:a7:e1:ae:46:ff:6a:ab:39:b8:2d:97:
b3:15:17:ca:74:eb:91:cc:ac:79:00:09:f3:b8:31:
11:02:46:8c:b5:72:f5:7f:aa:e8:67:79:eb:52:40:
fd:e9:5c:28:d9:07:d8:f8:80:91:54:45:99:aa:f1:
28:1c:e9:a0:7e:f2:87:1a:cf:70:19:48:11:33:e5:
fe:ff:46:1b:01:8a:4c:da:72:6e:ef:f4:57:e2:2d:
90:39:e2:93:7c:16:2c:32:92:00:9b:76:36:5c:10:
bd:6e:8c:82:a4:b9:e2:17:de:2b:c6:4a:6d:19:69:
10:07:26:49:a7:11:91:34:73:f8:4b:f1:6e:77:17:
f4:e9:2a:c1:d5:5f:da:a3:0f:da:8d:7e:7b:81:0d:
48:8a:f5:46:e7:77:63:98:0e:ec:80:b5:90:9a:d6:
56:a7:ac:a1:ef:1b:4f:e8:ee:d5:61:57:56:1a:6f:
6a:6d:7f:b7:ed:58:d3:db:e0:b8:82:f3:60:10:c9:
b8:0e:07:4a:85:af:5d:1b:f0:0b:46:08:3a:ce:ad:
21:39:62:db:6a:90:d7:7f:e7:69:46:b7:c7:86:fc:
01:b1:7e:16:51:67:e5:bd:f5:5b:a7:af:5a:51:f9:
68:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BC:7E:61:85:0D:B1:54:E4:09:C4:1A:B6:AB:04:07:2B:83:D9:00
X509v3 Authority Key Identifier:
keyid:39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c3:3b:26:c3:e7:6b:17:71:8c:74:95:aa:02:1b:11:0d:a8:
2b:2f:1a:d9:d7:f4:0d:15:34:e1:33:8f:ee:10:45:e0:ec:89:
93:e8:a5:60:7d:05:82:01:f9:e0:25:cb:7c:35:0d:60:33:ae:
3f:9b:de:86:da:83:d8:ed:26:4d:e4:04:71:9f:eb:f1:7d:fc:
3f:58:03:19:73:ae:98:8c:6f:cb:65:e4:0a:3a:7a:40:1b:e9:
ac:68:ff:ab:08:28:4d:b2:39:39:70:93:bf:58:51:a8:74:88:
bb:63:37:0d:e3:72:71:1a:82:b3:33:06:54:a3:96:d7:92:ca:
19:7e:c9:99:17:cf:d7:2a:3f:2b:41:cc:6a:59:80:80:ea:f6:
10:13:87:de:8f:80:54:8e:94:e2:f6:22:e5:32:b0:e9:10:56:
f4:3b:55:cd:36:f3:f9:1d:28:51:ab:e3:b3:c0:0f:15:61:6d:
16:0d:ff:93:09:8b:79:65:d6:0f:bb:23:3c:d3:8a:0f:26:d5:
a0:17:6a:cd:9a:1d:5d:b0:0c:ff:c7:24:51:ea:1b:f7:4c:50:
76:e8:91:12:f4:5b:5e:09:39:d5:20:b1:43:3e:ae:5d:57:36:
92:4b:3c:b6:78:4e:78:11:34:ac:fc:fe:54:0b:c6:d2:fd:5e:
5a:b0:fe:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:11 2025 by rpki-client