Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier: PfRhmRAdnbibOkXjsXx0C7Omuj59v0VjmwGm8TlxRk8=
Subject key identifier: 8E:EF:47:3E:8E:0C:4C:AB:77:C8:56:E8:B9:AD:2F:28:7D:2D:88:97
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial: 0199FCC6BD794E894590C4633C1304BE85A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number: 0306
Signing time: Sun 19 Oct 2025 14:01:47 +0000
Manifest this update: Sun 19 Oct 2025 14:01:47 +0000
Manifest next update: Mon 20 Oct 2025 14:01:47 +0000
Files and hashes: 1: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: VbOJAY9yUAIxtOv7I4BQ65Cx5+n6aptohvrBsfVqHCE=)
2: OssV7x9D975GtTJ9Zxk9k-IBuBo.roa (hash: HUBvx/9/k5ebmWEXtREoZEFoPPX5mJnk5D0pyuECT50=)
3: v7E-tTxflPnqxg3MpmR53F2Z6QU.roa (hash: Ghunk7sqbhHZuCust1Ewo+nGVQQe1Aek1JX2tRRm0JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:bd:79:4e:89:45:90:c4:63:3c:13:04:be:85:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Validity
Not Before: Oct 19 14:01:47 2025 GMT
Not After : Oct 20 14:01:47 2025 GMT
Subject: CN=8eef473e8e0c4cab77c856e8b9ad2f287d2d8897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:6c:d7:d3:5b:db:d9:65:90:c7:0b:23:c4:
e2:93:09:48:1f:66:92:64:40:4b:39:36:f6:9a:e3:
1c:81:ec:8b:c4:87:e4:95:89:09:36:73:d2:ea:19:
5f:1b:67:43:ce:a9:7a:75:46:e6:b5:0a:79:e2:6d:
58:cf:e7:23:8d:88:6f:61:b0:3d:f4:f7:7e:4e:ce:
73:b9:b2:91:f1:5a:38:59:00:32:34:cf:c0:f8:66:
a1:01:12:25:18:79:60:58:e7:a4:fb:6e:cf:54:be:
78:71:7a:56:af:f6:b4:0a:13:30:da:46:d1:a9:66:
8e:e2:79:8c:a9:b9:a9:70:70:da:69:5e:1c:76:2b:
34:ed:38:5e:08:9c:2a:74:d0:37:87:0d:aa:92:3e:
e6:ac:06:65:a2:96:6b:39:d7:75:1d:69:84:22:c6:
93:2d:cc:5c:7d:7d:55:7a:53:00:b8:d2:99:ee:74:
cd:52:c5:3b:a7:37:67:78:73:f1:8a:be:1b:5a:3f:
05:7f:2c:e8:4b:28:e9:00:78:19:62:27:ee:d2:46:
c0:b9:4b:12:72:eb:5d:a2:ce:d8:7a:1d:84:a5:fd:
a3:e1:bf:09:34:a3:20:d2:fc:91:37:dd:19:eb:ec:
ee:62:29:89:ab:33:b4:6b:a2:b8:77:93:58:3f:cb:
ce:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EF:47:3E:8E:0C:4C:AB:77:C8:56:E8:B9:AD:2F:28:7D:2D:88:97
X509v3 Authority Key Identifier:
keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c4:71:40:d3:9f:0c:7a:52:2c:81:99:30:41:4c:84:68:88:
4d:be:22:c3:2b:49:35:2a:4c:dd:8b:c0:53:50:e8:f4:6b:24:
30:61:06:53:74:45:7e:02:94:0d:b7:c0:9d:e5:63:65:01:2b:
3c:cb:09:c4:b1:7b:99:6d:5e:1c:10:da:4f:ca:4d:f6:5d:05:
5c:f8:3b:79:c5:d3:f8:86:b4:39:e0:b1:3b:1b:8f:8d:44:6c:
2d:55:fc:c4:d0:da:5c:86:80:51:bd:6e:50:a8:77:40:43:75:
88:f4:60:6f:18:6d:40:8b:a1:26:0f:11:b5:7f:55:d3:dd:ea:
a5:2f:79:80:42:85:2f:be:14:83:6f:ab:fa:d0:1f:59:48:ca:
48:47:55:05:b9:32:b3:75:04:2c:81:56:ce:32:5a:27:cc:53:
78:e9:75:5d:57:6a:87:96:c0:5d:e2:e9:02:bb:f7:49:7a:4a:
5a:31:84:ff:10:5f:5c:66:57:8d:0f:c4:ae:32:b5:30:9d:8e:
24:c0:64:f9:06:79:c6:e4:88:4a:aa:5c:77:2c:7d:1e:84:46:
24:28:5d:56:9b:70:60:0a:7a:a1:8c:4d:0c:4a:5c:8c:1c:7f:
35:ab:95:4b:cb:56:ec:64:75:8b:37:77:9f:9c:6d:e0:e2:1c:
e1:27:6c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:35 2025 by rpki-client