Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
File: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft (raw, json)
Hash identifier: QBv/0yMAy3L216b431Cl2ib4VkXbR+4LPQyRGgnqiWs=
Subject key identifier: C4:96:82:2C:65:1F:D3:0A:C4:9D:7A:0D:B8:68:A3:E8:A3:E8:2E:53
Authority key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
Certificate issuer: /CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Certificate serial: 019A71B76CD78BED22810F34AC3C7EB387EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
Manifest number: 16E8
Signing time: Tue 11 Nov 2025 07:00:37 +0000
Manifest this update: Tue 11 Nov 2025 07:00:37 +0000
Manifest next update: Wed 12 Nov 2025 07:00:37 +0000
Files and hashes: 1: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl (hash: bZHeCqiqTW5rb5VNvlLynynkcyb27rAhjvQ5eoH13FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:6c:d7:8b:ed:22:81:0f:34:ac:3c:7e:b3:87:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Validity
Not Before: Nov 11 07:00:37 2025 GMT
Not After : Nov 12 07:00:37 2025 GMT
Subject: CN=c496822c651fd30ac49d7a0db868a3e8a3e82e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:57:32:a3:2e:0d:58:a0:28:4f:54:40:00:01:
33:ba:b4:d7:7d:23:df:1d:0c:11:16:48:73:57:2b:
e2:09:40:6e:2c:ea:6e:3f:2f:03:22:c0:c1:72:e6:
e3:60:17:2a:e5:fa:87:6b:5b:ce:56:98:04:e7:02:
00:f6:f9:93:ea:1c:53:e9:d7:65:16:3c:40:09:4e:
6a:a5:8c:07:70:67:42:0c:9f:eb:8e:4b:00:88:da:
10:e4:b9:47:f1:4c:cc:99:68:ac:67:d7:b6:ec:87:
47:76:c9:6a:c5:19:28:70:35:f6:f4:8d:51:a6:ea:
ec:fc:c5:0e:08:9e:54:a2:f5:00:cc:82:7c:4b:3d:
1f:b3:94:52:be:b0:d7:04:08:03:3a:05:49:1c:c2:
e8:44:47:e1:6e:4c:06:a1:a3:b3:89:bc:cb:d7:5d:
68:bd:93:04:df:58:ea:de:7f:7f:7b:76:ef:e2:9c:
ea:cd:87:9d:9c:c3:38:12:3d:2f:fb:aa:93:0a:21:
fd:16:00:4c:74:78:69:84:33:be:aa:ed:dd:fa:a9:
4d:6f:b1:d4:2d:c8:c3:f2:a8:d4:50:ed:3d:c5:42:
fa:05:92:1d:d9:1c:3a:54:22:26:3d:e8:93:65:5a:
0d:0d:83:6b:dc:db:6c:f9:94:59:0d:5d:b3:e0:05:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:96:82:2C:65:1F:D3:0A:C4:9D:7A:0D:B8:68:A3:E8:A3:E8:2E:53
X509v3 Authority Key Identifier:
keyid:39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:02:61:8c:32:d3:d2:94:1e:4e:07:b1:38:2e:41:fb:f8:f4:
10:00:e1:1a:bf:cc:d2:82:8c:bb:95:33:31:c5:e8:24:d3:a5:
ba:cd:a9:7e:bc:59:42:48:70:b4:46:16:55:79:9f:4a:2b:e1:
ff:08:77:d4:a3:60:30:56:f3:6b:9c:28:a6:d2:2f:c9:c7:15:
ae:32:73:d2:ab:91:31:29:b8:8b:2f:05:c8:cb:7a:44:43:c0:
f0:04:65:d1:e6:7c:2b:a5:3b:84:e8:7f:ee:30:95:ec:a5:46:
03:9d:de:d4:d6:ef:bf:9a:cc:cb:63:a6:b2:8a:c5:bd:92:72:
9f:28:32:14:e3:12:ad:74:ef:88:81:7a:4d:1e:f1:60:48:45:
3a:5c:6e:87:4b:50:6a:3b:51:f1:b2:bc:d4:05:6a:41:2d:f2:
75:ab:81:97:44:c0:4e:4d:7e:21:bf:67:cf:48:f3:43:8b:ed:
f9:eb:08:7d:2d:3d:cf:da:47:bd:ee:df:09:93:31:76:d6:87:
cb:a0:eb:cc:9b:7f:4d:ad:cf:d0:7d:ed:e6:99:e8:6f:ad:3f:
de:3d:ea:9c:89:ef:d8:ef:73:44:74:6f:df:57:00:a0:b7:a9:
bc:e0:4e:de:52:0b:d0:46:e1:5e:65:43:c7:be:07:87:27:0c:
5c:e6:8e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:06 2025 by rpki-client