Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
File: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft (raw, json)
Hash identifier: VxnDNDoQFIWhb3QD/rcMTMcSx9Z2+jYhMUxm/s6a4g4=
Subject key identifier: 99:C8:80:38:D7:6F:46:A0:72:A4:AA:31:AF:62:22:8B:F4:9E:36:B8
Authority key identifier: 39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
Certificate issuer: /CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Certificate serial: 019A71B8C0467C4FCB366549043A1BD8545A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
Manifest number: 1686
Signing time: Tue 11 Nov 2025 07:02:04 +0000
Manifest this update: Tue 11 Nov 2025 07:02:04 +0000
Manifest next update: Wed 12 Nov 2025 07:02:04 +0000
Files and hashes: 1: 8iSreq9sFy4jQpPohIGSY5mGVho.roa (hash: JWocgKBNIhnSVWHkP0cAfvpMZaqkdklTc5KStlxqdMY=)
2: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl (hash: JHxZ41W/V4CFM42pGvgOROegD1cEY1lUGM99j2Zk2oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c0:46:7c:4f:cb:36:65:49:04:3a:1b:d8:54:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Validity
Not Before: Nov 11 07:02:04 2025 GMT
Not After : Nov 12 07:02:04 2025 GMT
Subject: CN=99c88038d76f46a072a4aa31af62228bf49e36b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5b:7b:6e:22:31:34:27:39:9f:4b:a7:6b:a1:
e4:c7:b6:80:7c:a7:b7:b1:69:0c:96:4d:b5:25:3f:
e0:0f:ee:69:fa:ec:6b:c6:9c:56:1b:17:dc:5c:f2:
1d:cf:45:e5:a0:cf:02:bf:86:e5:3d:d6:67:a5:7d:
02:11:19:42:65:23:f0:5e:99:49:d7:91:7e:04:9b:
7e:d5:29:95:ab:ba:36:51:54:1f:26:15:7a:b3:81:
7b:dd:0c:b0:19:67:33:10:d3:cf:ec:98:41:7e:67:
da:8d:83:ae:ab:9e:86:cb:19:50:3f:a2:93:81:74:
13:9d:ff:a0:c3:e5:74:17:7a:45:fd:4a:79:28:42:
2f:9d:f2:ca:5e:8e:49:50:21:6e:ed:0c:3f:57:29:
7b:3e:58:9e:04:30:fe:69:8a:ae:98:01:45:d5:ba:
f0:be:02:68:7f:03:1d:d0:20:de:08:3f:d0:e6:34:
9c:5c:b8:b4:63:2a:70:4b:93:6f:ba:2e:f4:4f:8c:
03:9f:84:53:21:3d:4e:08:a2:01:48:e5:bd:78:88:
bc:0a:48:0e:1b:5b:d1:cf:3c:62:7c:81:f1:da:3a:
b1:49:e5:c2:75:df:14:38:b4:bb:6a:78:01:3c:94:
11:4c:da:77:37:48:d7:76:b8:ab:e2:c6:cd:ba:7c:
c0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C8:80:38:D7:6F:46:A0:72:A4:AA:31:AF:62:22:8B:F4:9E:36:B8
X509v3 Authority Key Identifier:
keyid:39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:86:ab:28:58:95:f0:26:a0:e7:25:66:98:f1:49:cf:38:9a:
55:7e:87:ef:1a:e7:19:d6:42:81:f2:2b:a2:ce:09:3a:21:b7:
8e:a0:63:5f:63:a2:b0:dc:56:01:53:9b:40:bc:6a:c1:46:b9:
d0:ff:81:20:63:29:6a:d8:fa:75:bf:0e:85:d2:bd:a4:71:fc:
75:db:34:9b:6e:71:fd:bb:69:04:03:f9:09:5c:e8:c2:49:39:
f4:4f:12:df:f3:3b:59:58:c2:16:ff:d9:5c:30:df:98:d4:3c:
c0:3c:d2:56:4b:48:89:4d:4d:a6:d2:f9:ce:f6:31:0d:f7:b4:
03:ae:d6:cc:99:73:62:c7:1f:c7:dc:19:3f:4e:67:a1:f4:72:
6a:d3:d7:2a:dd:99:8a:ce:a3:d6:98:d3:7c:21:ac:50:ed:64:
57:06:3d:57:32:88:5c:e9:cc:d5:67:fe:1b:82:68:3c:a0:c8:
75:c1:91:5d:a9:43:b1:92:f4:fa:9b:e5:24:b8:a7:69:10:0d:
77:51:20:91:9b:19:0e:26:62:0a:99:96:41:13:3a:ac:e7:dd:
1a:27:43:bc:b3:86:44:a1:8e:e2:b3:b2:9b:52:d7:ab:3c:4f:
31:55:ed:1b:d3:6d:14:ce:77:d7:31:8c:57:27:03:7d:36:b6:
fb:ac:82:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:40 2025 by rpki-client