Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json)
Hash identifier: NEup7fjZ4w5/5ia6OEWW3MSKC9IvPgUAm+TaISptEZs=
Subject key identifier: 5E:E0:25:6B:17:EC:25:E1:78:E7:E2:41:81:84:23:8B:BD:5F:F4:66
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial: 0199FC216F07A05EBD70F3B7E588A9F86618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
Manifest number: 0ED1
Signing time: Sun 19 Oct 2025 11:01:13 +0000
Manifest this update: Sun 19 Oct 2025 11:01:13 +0000
Manifest next update: Mon 20 Oct 2025 11:01:13 +0000
Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: pvFIX7xMWyX0kMWOsU/wLlC3BTUSEkI4cJUpGGE1VB8=)
2: _Zj7OokHAndWw-2CyHBYUS9Xdjk.roa (hash: ZjJEypsxwCO3RggJNbx1PBjZWJ0rbE6YHt0gcpOxjCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6f:07:a0:5e:bd:70:f3:b7:e5:88:a9:f8:66:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Validity
Not Before: Oct 19 11:01:13 2025 GMT
Not After : Oct 20 11:01:13 2025 GMT
Subject: CN=5ee0256b17ec25e178e7e2418184238bbd5ff466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:3a:ad:7a:48:71:c3:22:91:9e:8e:2c:b6:fa:
5e:fa:1e:1c:11:c6:90:77:a4:55:9c:60:0a:e1:50:
7b:9e:bf:67:62:a3:4b:46:47:76:0f:dc:f2:56:90:
bd:d6:5d:4e:90:fb:3b:cd:3f:e6:bc:34:86:83:96:
0d:91:6d:19:cc:eb:4e:00:b8:a5:d7:59:22:03:28:
eb:3f:f0:7b:dd:4b:e9:76:2f:eb:95:c8:17:34:39:
1c:a7:92:40:51:93:e9:93:12:36:44:39:9f:c8:17:
9f:4b:f4:a6:a5:24:58:59:b9:0e:b6:8c:03:1d:4d:
6b:48:82:3f:65:ac:18:f3:65:d9:66:32:53:d1:6b:
16:2d:f6:7b:a9:b1:a5:c9:0c:95:c4:86:68:83:6c:
ef:44:65:ea:94:3e:4e:0a:72:e1:e1:ce:3d:74:7c:
84:5d:6b:f4:7c:3b:bd:48:7b:df:58:15:f2:3c:84:
09:cd:b6:36:83:40:57:6b:7a:e9:cf:d4:a4:5d:a6:
f6:e4:25:fd:b4:d4:89:97:b7:6b:93:49:ec:07:26:
9e:ee:a8:94:6f:4c:0c:30:4b:f8:33:5f:4b:fa:02:
f9:27:ed:ed:f8:f0:99:94:40:bc:76:df:38:81:5c:
dd:86:58:b6:4a:c0:d1:db:1b:a8:4c:09:70:61:84:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E0:25:6B:17:EC:25:E1:78:E7:E2:41:81:84:23:8B:BD:5F:F4:66
X509v3 Authority Key Identifier:
keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3e:8a:ed:5f:41:67:8a:ad:7e:c8:46:81:3d:48:20:8d:b8:
2c:ab:04:78:64:b0:b1:cf:5a:a6:68:6a:28:32:07:61:d1:f4:
a0:a6:b9:9f:c4:27:34:66:0d:2a:24:7a:0c:1f:96:81:8c:d8:
0d:05:fa:fc:41:4a:5b:e9:9c:0c:fe:e2:12:a1:a9:f2:d4:d4:
17:9b:dd:a7:99:05:36:66:a7:5d:58:2b:11:ae:1a:60:3b:80:
e1:f9:5d:ae:47:1d:d9:5a:31:c1:3c:62:6f:3d:94:44:39:a2:
61:8c:61:ac:c8:7d:90:3a:78:fb:3e:fe:2b:7d:c8:bb:9e:5a:
9d:66:e6:7b:8b:ba:8b:84:5a:f3:24:f2:1f:2d:59:b5:39:5b:
ae:7e:9a:0f:9e:f2:6c:88:88:b7:a0:ef:c4:71:6f:6b:4b:02:
8d:e0:da:43:d8:2c:d6:e1:d9:10:b9:5d:ef:06:ff:b0:bd:2d:
d2:28:a0:31:9f:e1:bc:dd:a1:59:f4:3b:24:56:84:19:5d:d4:
0c:4b:e2:b8:80:ee:b7:11:cc:9c:49:02:f2:43:b9:46:f1:37:
16:b6:8c:27:b5:56:11:2f:5e:10:05:d6:99:25:2c:b3:af:9d:
1b:30:57:36:0c:61:65:ac:cf:bf:82:c4:5c:40:10:a8:a3:82:
d3:1c:5b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:06 2025 by rpki-client