Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json)
Hash identifier: WRxpF4M4WssvUnKakB2gfUq9Wj2WDdP3bYeeH4p1rwM=
Subject key identifier: FD:61:61:4B:66:C8:F6:AC:42:77:8E:1E:11:D6:9E:EC:CA:E0:59:C8
Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Certificate serial: 019A17617C7486D06195CEA49DC11FEAF512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
Manifest number: 0D6E
Signing time: Fri 24 Oct 2025 18:00:56 +0000
Manifest this update: Fri 24 Oct 2025 18:00:56 +0000
Manifest next update: Sat 25 Oct 2025 18:00:56 +0000
Files and hashes: 1: Mbpk8QVkIW5FKgYutE5nhEuorhg.roa (hash: XJAfJvP6njUJvUjL+QeRVdBXhasJwe6UWIW0OOiZ2es=)
2: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: Jl6gFYUekb6g5FxZ5bZXXx6+dTgNxNxNIQL2YUCbCts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:61:7c:74:86:d0:61:95:ce:a4:9d:c1:1f:ea:f5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Validity
Not Before: Oct 24 18:00:56 2025 GMT
Not After : Oct 25 18:00:56 2025 GMT
Subject: CN=fd61614b66c8f6ac42778e1e11d69eeccae059c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:09:55:99:ef:d1:f0:f2:b8:79:8f:59:9b:
e9:6e:93:a5:68:17:50:cf:dc:fd:62:da:53:b1:d1:
f9:03:0c:bd:65:19:3a:f4:d0:28:d4:d3:20:3a:0c:
cc:37:78:10:d1:3e:50:3a:42:84:74:3f:39:01:dd:
eb:63:04:33:81:eb:bd:ee:72:e2:e6:77:1c:05:89:
31:89:1d:5c:b1:7a:22:3c:21:12:75:97:ef:94:fb:
7c:93:b2:d0:c2:26:15:09:be:85:93:92:e6:28:a1:
b2:ef:86:f0:c7:7b:11:2a:e7:3e:aa:2a:e2:ba:33:
8e:a4:69:5a:96:4d:f4:fd:6d:4c:ec:a8:79:e5:44:
3d:24:39:04:98:39:a5:56:8b:6c:d2:42:37:aa:ec:
e3:73:34:90:fd:40:14:c9:9a:33:7a:b4:f4:50:80:
1b:68:0c:5e:e9:b2:3e:78:c6:4d:e4:f5:62:28:70:
2b:47:eb:e4:95:36:cc:e1:54:cb:19:87:09:92:df:
9a:83:e4:1f:93:25:c2:35:22:8a:d0:c1:3f:48:db:
ee:47:40:ae:5d:4d:dd:e5:db:11:8b:31:12:58:61:
bb:82:a7:96:48:2c:fd:36:6e:0d:9d:49:56:a6:1a:
d2:36:7d:f1:73:32:c6:fc:cf:49:a5:90:b8:1c:7c:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:61:61:4B:66:C8:F6:AC:42:77:8E:1E:11:D6:9E:EC:CA:E0:59:C8
X509v3 Authority Key Identifier:
keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2d:06:3a:a1:14:a8:4b:67:2d:36:05:8f:20:78:80:b5:7d:
96:f3:9c:26:7c:2b:cf:20:b0:ae:51:b7:b0:0e:73:c5:8f:4e:
13:f5:b1:a6:ca:02:09:f4:2c:37:2b:d1:94:8c:89:ac:e7:5f:
42:e7:3a:0f:b0:ad:2e:81:12:e6:44:05:12:20:89:41:76:f0:
ac:09:37:03:29:a5:7c:8a:0a:12:fb:c6:8b:25:5e:04:e3:b6:
31:74:f0:10:4c:2c:f7:71:ec:cc:4d:b6:8b:f9:fb:62:10:c2:
26:4a:4a:03:31:8b:b4:59:ab:70:67:9d:2d:9a:62:c4:eb:48:
bb:60:65:e0:34:f8:97:19:5b:27:d5:f0:b7:61:99:a9:0b:d2:
83:52:e0:20:fe:e2:33:8f:6e:9d:77:c2:26:a5:8d:1f:58:7e:
41:c2:b1:f4:35:6f:06:3b:40:a7:5c:55:b9:ed:67:ab:d9:4e:
f3:84:15:33:9b:d4:98:ec:a3:51:54:37:47:a3:3a:7e:f5:41:
19:41:41:17:bd:bc:4c:25:85:b4:95:3c:ef:65:8c:a0:13:90:
af:ca:6e:94:91:56:1b:ee:ff:cb:c2:19:95:34:84:2e:45:09:
28:68:66:c8:91:6e:70:c7:76:56:6f:be:65:de:5e:de:62:fc:
a9:04:d0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 20:47:25 2025 by rpki-client