Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
File: oab8cmK6eC3V9kMIWYK102cD2_s.mft (raw, json)
Hash identifier: vu2EMKvT41diloyKH+8C4pyslzmAIlyBUvLnswvSVfI=
Subject key identifier: 3E:D6:FB:02:EF:6D:57:C0:A2:12:FA:15:D0:4E:98:C3:52:EE:D7:F3
Authority key identifier: A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
Certificate issuer: /CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Certificate serial: 0199FD6B61EEDD9EF4CEB167DA574E68216E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
Manifest number: 12CC
Signing time: Sun 19 Oct 2025 17:01:37 +0000
Manifest this update: Sun 19 Oct 2025 17:01:37 +0000
Manifest next update: Mon 20 Oct 2025 17:01:37 +0000
Files and hashes: 1: gbYZs5g8-tzRIgFZupm0nJKzwkw.roa (hash: 71Q7AYKf4HSZ+MQCf6bmElagIFGNwEfBKHJD2B+78+4=)
2: oab8cmK6eC3V9kMIWYK102cD2_s.crl (hash: 2T1WFIRMfUiEERGdgVvEBLvnJPnLvxT+cyVwwcem3s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:61:ee:dd:9e:f4:ce:b1:67:da:57:4e:68:21:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Validity
Not Before: Oct 19 17:01:37 2025 GMT
Not After : Oct 20 17:01:37 2025 GMT
Subject: CN=3ed6fb02ef6d57c0a212fa15d04e98c352eed7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:16:15:ee:fc:06:bd:58:3d:cc:51:6f:a8:
47:28:be:34:2e:41:2e:ed:8e:21:4f:32:41:9e:f1:
1e:71:0d:a0:19:3e:ab:34:03:76:77:49:f0:29:4d:
d1:84:14:0b:55:c0:30:8f:20:32:eb:22:f6:8c:c6:
52:bd:61:50:73:07:3b:5c:a8:02:fa:75:3e:11:05:
3f:75:c6:77:0d:a4:e8:5d:00:a5:ee:ac:92:be:bd:
3d:a4:1e:24:36:f7:34:27:95:a4:04:2f:20:ee:3d:
8b:2c:a9:2d:eb:48:f4:89:7c:75:ab:ca:56:c6:7c:
aa:7c:b3:50:9e:f3:35:92:3f:d9:76:1e:42:81:e4:
51:71:81:c4:39:3e:3e:17:0a:f1:f0:97:d1:0d:ae:
f9:3c:79:e4:f9:10:6d:cc:58:2c:ee:ca:f0:b0:05:
9e:1f:63:f8:31:0d:86:b0:03:54:66:ad:b8:2b:7b:
cb:55:67:3b:26:53:f4:be:ee:fb:97:a5:22:bb:e0:
81:db:95:6b:62:4d:a2:6a:92:e8:6b:e9:83:c9:85:
b5:85:ac:32:05:70:8c:a7:2f:3e:ea:ef:24:0a:ed:
59:57:e2:a5:63:79:b2:26:58:be:ce:fc:a9:5c:02:
0b:7d:ef:2e:dc:18:c9:a7:31:0e:db:ae:d5:13:7e:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D6:FB:02:EF:6D:57:C0:A2:12:FA:15:D0:4E:98:C3:52:EE:D7:F3
X509v3 Authority Key Identifier:
keyid:A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:43:58:f2:f6:27:cb:9c:86:4c:21:be:5d:5b:60:32:48:67:
4a:b8:ba:6d:7d:5c:a1:d7:f4:13:4c:de:24:cc:d8:30:f1:d7:
21:97:57:4e:d4:dd:af:0d:d2:92:0f:0e:22:24:40:10:c0:c7:
6d:22:4e:c3:9f:cb:13:d3:d1:43:63:ec:73:ce:10:e5:be:17:
fc:52:2c:5a:69:7c:ab:dd:88:f4:f3:3f:24:93:5e:cb:9f:7d:
8b:05:4c:11:ca:fc:2d:f1:bd:04:33:29:c7:a6:58:a5:f8:df:
cb:39:72:f7:3c:0c:cb:a2:c5:76:08:62:b1:c7:9c:fe:0f:bb:
a8:a5:12:2c:e3:8a:4a:6e:ec:80:59:00:c2:1f:c8:88:8f:e6:
2b:72:a0:a5:6e:00:3b:a1:19:cc:ea:7f:56:f5:41:20:d4:4c:
d1:d7:a4:b3:ce:4f:e5:f0:21:00:34:00:a9:5b:2d:df:ca:08:
2f:b2:6c:e1:8b:92:cf:0c:94:51:d3:90:fd:dc:9d:04:7c:3d:
21:0d:4c:c3:58:ca:f7:41:5c:96:de:47:12:cc:2e:a8:7d:c7:
f1:b0:96:09:52:f2:70:68:a7:29:4a:a7:ce:86:34:47:97:a9:
dd:00:39:7c:2c:74:9c:13:f0:bf:8d:b5:c5:51:39:10:02:03:
fd:43:c0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:50:16 2025 by rpki-client