Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: gb60Ypbf5IFWZAygI4c0lHOInvb9uwJaeLO2ukpDuNo=
Subject key identifier: D1:E0:16:E1:90:CF:E2:AD:61:42:29:49:4E:B2:D0:1B:39:E6:2B:9E
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 0199FDDA0B2CFC72185803BED18E1B600116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 1238
Signing time: Sun 19 Oct 2025 19:02:29 +0000
Manifest this update: Sun 19 Oct 2025 19:02:29 +0000
Manifest next update: Mon 20 Oct 2025 19:02:29 +0000
Files and hashes: 1: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: rs4JXBqo4Dsk5Rty1O+lqnzcilzvAaoeoxzU0ke3fHY=)
2: tbot_ZPo7efS_eEBsyLeDHJNVmM.roa (hash: edYIJvl9gSH8k9QetJe1JVzyMvJbYqfDW2Tyrs7Mw9w=)
3: uoHivGDaQdTRu4MbmZ1xXu7l-mk.roa (hash: UPN1y7noDZEvkhcHWjNiVxEsGCr7mcBF0YnibzrND6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:0b:2c:fc:72:18:58:03:be:d1:8e:1b:60:01:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Oct 19 19:02:29 2025 GMT
Not After : Oct 20 19:02:29 2025 GMT
Subject: CN=d1e016e190cfe2ad614229494eb2d01b39e62b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8f:9e:fe:fa:21:59:4b:83:50:16:4e:50:8c:
f0:ed:05:e5:d0:c9:47:f3:99:73:81:cd:97:19:d9:
0f:02:fc:7f:3e:f4:fe:87:70:02:33:ee:6a:b1:df:
d6:3a:56:0c:c9:1e:c3:df:9b:2c:67:f3:fa:4f:df:
fe:71:39:c5:40:ec:48:49:06:3c:82:07:ac:35:b3:
de:f0:ae:64:1f:7c:0a:1e:a7:14:c0:d8:b0:e7:40:
07:79:36:94:c9:c9:bb:33:ea:c3:36:32:8b:c3:13:
b4:a7:6a:90:e0:34:38:4e:21:58:c2:03:d1:db:30:
fd:bb:12:af:48:f7:1a:be:ce:f6:5d:7e:f8:f8:70:
4d:8c:b1:e2:4d:d6:05:86:fa:13:99:c9:4c:4c:f2:
d0:e6:e8:14:97:d1:a8:55:89:c2:5b:a0:55:14:09:
6e:a2:17:8e:d8:ff:59:bc:ef:39:95:89:c6:35:a8:
86:62:62:c4:54:c4:f9:fc:b8:4f:48:a5:b7:37:70:
25:39:7a:c5:98:a1:63:b8:c6:e1:73:bf:0b:5b:e2:
35:1f:3f:14:6d:f8:9a:5d:b1:07:c3:1d:9b:2e:0a:
02:35:19:52:16:e1:7e:f7:10:36:63:6c:b9:76:87:
ed:6b:31:ec:be:e1:3c:25:fd:65:4d:57:2f:f0:3c:
7c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E0:16:E1:90:CF:E2:AD:61:42:29:49:4E:B2:D0:1B:39:E6:2B:9E
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:df:08:5f:1e:02:d4:66:e3:b8:dc:26:23:80:86:2a:28:f2:
cc:d7:d5:1c:96:9b:59:03:b2:b3:ad:46:36:2a:3a:30:f4:68:
87:6d:06:b7:6b:13:f1:ac:3a:f0:c1:72:2a:25:05:c2:2f:46:
d0:ee:20:53:62:e5:a3:5e:9f:b4:3e:47:20:7d:d0:3e:f2:2e:
91:42:fb:7a:df:a9:20:33:4b:b4:a6:71:45:5c:06:8a:d7:24:
85:b5:c4:6d:a3:65:7d:02:7c:7e:0d:8c:82:93:05:1f:ac:ce:
05:14:bb:70:d3:cb:08:40:32:30:0f:3d:84:b4:99:53:de:7b:
c8:27:7d:e4:fa:c7:69:19:85:28:2d:25:64:8a:b8:67:9f:20:
cb:49:88:85:03:8f:08:a0:d9:f7:54:ee:ac:6e:be:4a:01:1e:
0e:03:30:54:64:7e:a0:58:f9:de:9c:91:ca:68:1f:94:5d:b9:
a1:da:61:a6:bb:fd:17:5f:8e:9b:0f:51:4e:96:b6:0e:b2:3c:
be:79:96:d7:ef:95:7d:21:23:67:a6:6d:7e:c7:16:ae:a8:0f:
5e:bd:3e:cc:40:f3:ae:d7:dd:d4:f4:ad:bb:e4:12:20:aa:40:
cc:81:97:71:ad:2f:c9:08:e6:2a:27:c2:88:e3:68:d1:e3:25:
15:e2:4a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:03 2025 by rpki-client