Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
File: OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft (raw, json)
Hash identifier: d/GRi1epAHIooURoUeQmPN0nRlaOloZ7FW/B1fijaOE=
Subject key identifier: 55:81:E6:73:0D:F2:94:BC:FC:B6:2C:C9:7D:76:0B:1F:6A:0C:09:F3
Authority key identifier: 39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1
Certificate issuer: /CN=398e539bcc5e934624344d884f622993b1ee9aa1
Certificate serial: 0199FD3432787326A1D4D8EF3247412D2DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
Manifest number: 0531
Signing time: Sun 19 Oct 2025 16:01:20 +0000
Manifest this update: Sun 19 Oct 2025 16:01:20 +0000
Manifest next update: Mon 20 Oct 2025 16:01:20 +0000
Files and hashes: 1: OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl (hash: 0lTp/Y1c31v2+dKYUS9kljXjvF4EOvO4daqOAB19jrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:32:78:73:26:a1:d4:d8:ef:32:47:41:2d:2d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398e539bcc5e934624344d884f622993b1ee9aa1
Validity
Not Before: Oct 19 16:01:20 2025 GMT
Not After : Oct 20 16:01:20 2025 GMT
Subject: CN=5581e6730df294bcfcb62cc97d760b1f6a0c09f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:71:0a:bd:13:c9:e7:3e:22:c2:b1:e8:dc:49:
ba:4c:5b:80:3d:32:9e:39:d4:34:6b:f6:e8:91:89:
89:92:03:1d:5a:e6:12:f5:a7:eb:72:8a:04:3b:d9:
25:21:a6:c6:e2:47:96:3b:7f:08:1d:7a:fc:bf:c2:
03:c0:d6:07:73:4c:b3:5b:a3:3e:44:14:3a:13:93:
1e:ff:b1:4d:09:20:42:75:c5:a2:7f:3c:8c:25:d6:
74:ab:79:06:97:75:84:dc:54:f1:26:0c:67:2b:db:
b5:4d:c5:9d:9c:78:c1:88:f4:a4:96:f6:e3:5b:04:
d8:ca:64:8e:83:2f:90:7b:83:19:ec:49:9f:db:4c:
4f:22:0b:f0:37:3a:9d:0e:4c:d3:1a:d2:46:a1:c5:
b1:17:8d:2d:0a:9d:dd:7e:96:b8:20:aa:da:d3:98:
5f:eb:8e:9a:83:4c:7d:26:4f:b5:38:ee:9c:51:46:
90:a3:af:cd:97:04:e6:be:8c:0f:ac:d5:f3:aa:cf:
97:19:3d:a7:62:d4:9a:8d:70:2c:a2:f6:7a:4c:06:
b8:87:f9:dd:9c:66:d4:42:5e:6d:f6:39:8f:26:96:
3b:b9:70:c6:d5:63:e6:7e:08:4e:85:7d:5e:69:8f:
ed:00:e4:92:ee:73:1d:86:53:96:26:5e:67:e3:78:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:81:E6:73:0D:F2:94:BC:FC:B6:2C:C9:7D:76:0B:1F:6A:0C:09:F3
X509v3 Authority Key Identifier:
keyid:39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a0:1c:05:62:ee:bf:cd:b2:b3:95:fe:d7:42:f2:0d:89:05:
d8:95:b8:5a:9c:3c:59:db:e3:95:7d:36:61:ad:53:b6:e8:96:
56:bf:25:35:4b:71:03:9a:56:6d:f1:12:cb:9f:24:39:34:f0:
8e:d1:f0:71:9d:4f:4e:6f:f5:20:8e:64:07:78:e8:bb:07:35:
e6:6d:5b:90:3c:fb:7a:32:7c:1a:53:fe:98:20:bc:c4:0e:7d:
e0:66:5f:7c:ec:97:1a:a9:be:83:b0:ea:08:d5:89:b3:03:5f:
21:4c:b6:ae:fa:b8:b3:87:d7:b7:10:05:67:53:a9:d8:12:aa:
5b:b7:94:64:f8:ad:29:e6:26:61:11:a7:c7:5f:9e:6f:d5:57:
53:89:9c:ef:03:56:e4:18:1f:ca:0c:02:47:f9:1c:bc:0c:92:
b9:6e:c0:c9:23:d7:e0:31:b7:1e:9c:16:41:f1:22:95:18:54:
56:c6:ff:f7:e8:48:ad:1f:f8:12:3f:23:bb:b4:d1:f8:97:d5:
4a:ee:f0:3c:fd:52:c8:56:59:04:73:5c:5b:1e:38:ab:de:19:
c5:42:48:06:e8:87:71:7a:9c:c2:af:1f:46:4b:5a:51:76:4f:
cb:26:e4:7b:68:35:c2:59:b2:8a:b2:21:83:9b:1f:f1:46:2a:
5e:c4:2b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:40 2025 by rpki-client