Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9db7a3-37f3-4013-985b-4f8005686822/1/OO5CsHmLtsmznyBYZ0__0hOyDmo.mft
File: OO5CsHmLtsmznyBYZ0__0hOyDmo.mft (raw, json)
Hash identifier: vvX3iAZWjw8lOnAYSumCFOLlXNIEIhlOWM6SDGhH9TM=
Subject key identifier: 0E:14:78:3F:0B:11:BA:96:95:66:4C:7C:46:23:6A:1C:85:35:46:9E
Authority key identifier: 38:EE:42:B0:79:8B:B6:C9:B3:9F:20:58:67:4F:FF:D2:13:B2:0E:6A
Certificate issuer: /CN=38ee42b0798bb6c9b39f2058674fffd213b20e6a
Certificate serial: 019A71EEEEBFD7E195A3FBBD9DDF091EB9DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OO5CsHmLtsmznyBYZ0__0hOyDmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9db7a3-37f3-4013-985b-4f8005686822/1/OO5CsHmLtsmznyBYZ0__0hOyDmo.mft
Manifest number: 98
Signing time: Tue 11 Nov 2025 08:01:15 +0000
Manifest this update: Tue 11 Nov 2025 08:01:15 +0000
Manifest next update: Wed 12 Nov 2025 08:01:15 +0000
Files and hashes: 1: OO5CsHmLtsmznyBYZ0__0hOyDmo.crl (hash: IuVn3m6zqfHOjKfvncty2g4CBnNO6kpAX3nLQhuo2Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9db7a3-37f3-4013-985b-4f8005686822/1/OO5CsHmLtsmznyBYZ0__0hOyDmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9db7a3-37f3-4013-985b-4f8005686822/1/OO5CsHmLtsmznyBYZ0__0hOyDmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OO5CsHmLtsmznyBYZ0__0hOyDmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ee:bf:d7:e1:95:a3:fb:bd:9d:df:09:1e:b9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ee42b0798bb6c9b39f2058674fffd213b20e6a
Validity
Not Before: Nov 11 08:01:15 2025 GMT
Not After : Nov 12 08:01:15 2025 GMT
Subject: CN=0e14783f0b11ba9695664c7c46236a1c8535469e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:0b:13:2c:5c:6d:b0:85:d0:1b:d9:fa:ec:
09:86:7d:90:7c:70:3a:0a:44:f3:08:fc:47:8f:f5:
7d:37:b1:01:cd:5d:87:ca:30:ef:74:5d:08:46:46:
5b:20:96:2e:47:2c:a0:53:6d:d7:75:a8:3d:15:88:
47:e8:24:23:e6:ac:ec:7c:f6:61:87:03:84:58:84:
76:e9:d7:7e:b1:1d:4c:df:44:14:d1:c6:5f:47:66:
fe:fb:63:a4:8e:d8:56:24:59:b4:e3:8b:11:5e:fd:
bf:3f:f3:f1:48:82:8d:5a:0d:7a:4c:19:8d:ec:cf:
13:bd:b5:f4:16:83:9a:32:ae:75:11:94:aa:3a:08:
70:02:3b:cb:32:4d:05:9e:19:d7:98:ae:ad:80:39:
da:7b:c2:ae:44:50:e0:d5:aa:c3:4c:68:61:c7:a2:
e7:df:b5:85:02:f0:1f:34:09:51:ee:13:63:fd:88:
ab:43:4f:85:d9:bf:92:bd:10:30:c9:10:39:c2:a1:
46:e2:e7:2e:2c:b3:8f:0d:39:2d:28:6c:54:27:09:
11:b7:a1:cd:1f:91:00:da:0b:13:db:2c:5d:8b:77:
55:b4:61:4d:27:5e:0f:4d:87:8b:ff:60:c7:bc:d4:
d6:fe:a7:26:a2:f9:0c:0f:af:bc:92:e7:1f:bb:ee:
b8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:14:78:3F:0B:11:BA:96:95:66:4C:7C:46:23:6A:1C:85:35:46:9E
X509v3 Authority Key Identifier:
keyid:38:EE:42:B0:79:8B:B6:C9:B3:9F:20:58:67:4F:FF:D2:13:B2:0E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OO5CsHmLtsmznyBYZ0__0hOyDmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9db7a3-37f3-4013-985b-4f8005686822/1/OO5CsHmLtsmznyBYZ0__0hOyDmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9db7a3-37f3-4013-985b-4f8005686822/1/OO5CsHmLtsmznyBYZ0__0hOyDmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:e3:ba:06:36:7c:d7:76:96:4a:6d:35:0b:e1:73:e4:a1:e7:
de:ce:ee:9a:b5:63:a7:a0:f7:23:35:97:fe:38:12:c6:1a:f6:
f4:1a:13:eb:c2:68:ca:5b:15:93:21:4d:b8:90:07:4d:e9:4d:
74:72:ea:23:9c:62:35:fc:ee:44:77:fc:e6:59:67:6a:b3:72:
13:f2:85:45:09:1a:4a:a0:ca:aa:68:ea:04:2f:1d:9b:40:59:
b4:41:37:5b:3d:9e:63:22:89:50:2c:d8:cb:7a:90:a0:2c:1d:
bd:60:f3:7e:5f:e4:6d:67:28:fd:b6:74:de:7c:2b:45:a9:c9:
73:27:50:b5:ba:6a:4f:25:c2:ca:80:d3:fb:52:4b:59:68:fe:
9a:66:c9:13:e2:7f:9e:b0:5f:35:f7:cb:1c:8b:42:38:2d:6e:
f7:e3:b6:41:6f:a5:ea:14:37:d5:fb:0c:fd:f5:c4:c1:b1:d2:
ed:b7:86:81:bd:11:ce:67:9b:e6:1f:59:90:d8:4e:b7:a9:a4:
e4:00:dc:d3:e6:58:e0:4f:e1:2c:92:73:50:90:8b:44:2f:9a:
3c:a1:62:0c:fb:e3:1a:f5:e2:55:de:fb:66:c9:69:f4:d7:c3:
9f:0e:68:3c:b1:a1:9b:73:2c:18:a8:c6:96:ac:a4:6f:25:42:
d0:51:f7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:25 2025 by rpki-client