Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
File: Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft (raw, json)
Hash identifier: 9jzaIsygzUpGyaRRpcVPd6fQMeTOJAEz0qVd/tKuOwo=
Subject key identifier: 1D:20:31:44:59:E1:5D:70:03:E8:28:53:3A:39:17:07:81:C2:0E:7C
Authority key identifier: 3A:A9:E9:83:2E:D2:5D:E7:8C:3C:E0:50:12:08:26:10:66:28:1F:51
Certificate issuer: /CN=3aa9e9832ed25de78c3ce0501208261066281f51
Certificate serial: 0199FE478C3556EB17E77BEEF8A42663EE8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
Manifest number: 112B
Signing time: Sun 19 Oct 2025 21:02:05 +0000
Manifest this update: Sun 19 Oct 2025 21:02:05 +0000
Manifest next update: Mon 20 Oct 2025 21:02:05 +0000
Files and hashes: 1: Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl (hash: WNkIZX0szdbeJbZWQqAroygKiPddFMqqz1nNNq1w4J0=)
2: aWYIXcaJkiVxLLibbCxl3jRBEqg.roa (hash: is1rfoaga6D1caCReE6B6u2V3E2PMjX4LQvHyaYSnhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:8c:35:56:eb:17:e7:7b:ee:f8:a4:26:63:ee:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa9e9832ed25de78c3ce0501208261066281f51
Validity
Not Before: Oct 19 21:02:05 2025 GMT
Not After : Oct 20 21:02:05 2025 GMT
Subject: CN=1d20314459e15d7003e828533a39170781c20e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:57:d1:a1:7b:c6:77:94:aa:9c:e1:42:1c:
9a:7a:86:f5:1a:2e:de:af:6c:33:6c:c3:0e:25:fd:
93:8e:4c:1d:83:2a:51:aa:30:eb:5e:55:76:cf:a1:
7f:d2:3e:95:52:0c:ba:e7:d3:58:95:7c:b0:a8:01:
40:63:42:f5:81:93:ca:00:09:c1:9b:92:2f:eb:90:
44:ad:62:ba:e0:13:b7:b7:0f:26:6e:7d:0e:5e:75:
c0:ff:16:92:5c:0c:c5:7f:ef:cb:b5:67:80:63:e4:
8b:f5:3a:7c:9c:51:0a:32:fb:2d:71:7b:ff:a0:da:
85:b7:6f:53:37:4f:e8:65:c8:48:ea:9b:3f:a5:37:
82:2d:01:15:84:f5:c3:c5:0d:bc:bd:7c:23:58:d0:
28:24:c4:66:35:88:8a:37:62:0e:2d:39:a4:de:d2:
cd:75:64:66:3c:ba:97:33:74:70:68:00:cb:5b:ac:
0f:34:f8:82:81:cc:7b:f3:ec:90:2a:89:69:b6:38:
ab:0a:4a:aa:3f:96:4c:9d:35:b9:ef:88:44:36:df:
f1:ae:30:0d:9f:1b:b0:38:b5:9b:c1:a8:8e:f8:67:
ab:c7:7a:4f:a9:c8:9d:55:b6:c4:fd:3a:f3:eb:c3:
ea:94:71:b8:df:ae:2b:5a:4f:5d:f6:f7:8d:b8:64:
00:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:20:31:44:59:E1:5D:70:03:E8:28:53:3A:39:17:07:81:C2:0E:7C
X509v3 Authority Key Identifier:
keyid:3A:A9:E9:83:2E:D2:5D:E7:8C:3C:E0:50:12:08:26:10:66:28:1F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f9:fc:49:13:60:5d:04:12:96:14:2e:0a:55:91:7b:90:b6:
b4:8d:f7:76:9f:db:3a:85:04:5a:af:41:b0:c9:84:8c:b9:ab:
ad:9a:ec:41:fe:65:10:4e:04:65:86:db:dc:dd:3b:44:29:f0:
23:4a:64:70:d0:c0:3b:55:26:4b:0f:fd:5f:b3:7e:06:ca:8e:
60:90:13:a7:22:30:d6:60:d8:d3:50:e4:6b:ff:6f:61:52:e5:
5b:92:2e:53:97:e9:af:a9:bf:24:90:f6:b0:c9:ed:c1:8d:db:
8c:8a:84:3a:c1:24:85:73:ab:d3:ac:2f:09:55:6a:7d:e1:c4:
e0:4d:57:88:fd:f8:88:de:15:1a:37:98:0d:47:e8:a5:25:e8:
3b:b5:f4:09:2b:b5:d2:45:53:1f:8d:3f:ce:59:a7:be:e2:0b:
c5:c2:ad:23:ac:de:bb:ed:d3:91:0c:1d:f9:26:1c:dc:55:25:
f1:61:f1:1a:4c:1e:85:82:6b:5b:27:82:b5:1e:da:d5:0c:3c:
9c:ea:36:2b:fe:a6:2a:81:d0:79:40:30:d2:82:3b:b1:66:14:
8a:96:03:11:f8:72:0c:be:f8:f2:ab:7c:3f:ad:f1:a4:bd:ca:
91:8a:12:89:d5:4d:a6:e5:12:3c:f5:2e:84:0e:de:68:79:78:
5c:75:14:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:49 2025 by rpki-client