
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
File: OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json)
Hash identifier: XZvMi0+jt9GSI616bq1t+bKdxnLKJ81PC0frjvwjeTM=
Subject key identifier: D0:22:EA:5E:BE:C4:E9:AC:4C:C4:70:FF:0D:23:83:92:3F:71:C2:36
Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
Certificate issuer: /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Certificate serial: 0199FC215DC8B6B270B06957C0565B02789D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
Manifest number: 07FE
Signing time: Sun 19 Oct 2025 11:01:09 +0000
Manifest this update: Sun 19 Oct 2025 11:01:09 +0000
Manifest next update: Mon 20 Oct 2025 11:01:09 +0000
Files and hashes: 1: AspvYduc_Jb9y8GXYBDLcC-_8EE.roa (hash: ensOUkmx91RQ9/R5jlP5oQpNE74zuacX+6PWKXjdOOE=)
2: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: s0XPxz7mJy05YUfO5SoY6fhJA6X4cW3nT0sCgtdkI+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:5d:c8:b6:b2:70:b0:69:57:c0:56:5b:02:78:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Validity
Not Before: Oct 19 11:01:09 2025 GMT
Not After : Oct 20 11:01:09 2025 GMT
Subject: CN=d022ea5ebec4e9ac4cc470ff0d2383923f71c236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:24:04:54:d4:18:d1:51:06:ed:8a:7b:31:
fb:53:c6:14:19:9b:29:43:a6:5f:29:df:a5:f5:ea:
fc:ed:41:3c:ab:3e:12:50:55:08:2c:5e:87:60:dd:
cb:81:2b:47:d5:d2:03:9d:e5:17:c7:7c:cd:95:23:
99:76:5b:a4:8e:54:09:e5:53:ff:37:c2:43:82:13:
05:72:2e:18:d0:ac:cd:e1:59:58:07:fc:50:84:73:
40:1d:7f:e9:f2:13:38:6e:3a:7a:66:f3:ef:9c:04:
de:86:6e:51:81:93:12:ea:c2:b0:fe:1c:40:56:90:
49:34:76:77:e4:e3:ea:0c:94:b4:d0:b0:d6:9e:5e:
83:3b:72:5c:52:cf:bf:34:b7:de:e8:65:7a:27:15:
6d:a9:5d:ba:50:2a:c1:02:92:78:6b:d8:3c:4f:03:
93:1f:53:d9:01:d9:ba:55:60:26:e8:2a:d0:72:66:
71:29:6c:84:5e:4e:d8:8a:38:69:ab:55:ed:b5:e4:
e3:cd:bb:8f:69:1d:99:57:11:7b:b8:71:82:c8:f0:
1f:36:16:11:19:92:5f:dc:30:7a:f1:30:7f:15:b6:
91:11:f3:a7:73:24:70:9d:c2:c5:20:6e:b8:a1:72:
c1:45:c5:c0:63:56:bb:90:c7:92:51:43:af:98:ec:
d2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:22:EA:5E:BE:C4:E9:AC:4C:C4:70:FF:0D:23:83:92:3F:71:C2:36
X509v3 Authority Key Identifier:
keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ad:16:7c:8c:cb:64:e2:ab:dc:5b:31:14:b1:1f:0c:dc:de:
34:d5:7d:25:2c:02:eb:27:fa:8a:56:65:b0:4e:67:e2:5a:13:
bf:be:55:c5:6e:62:06:44:0e:3a:20:77:7d:52:df:fc:c4:f6:
d8:dd:82:6f:55:74:08:06:4b:8e:a5:d5:b3:94:27:2b:15:32:
35:39:a7:41:fc:b1:a9:66:02:34:39:21:fb:8e:02:9d:34:83:
d3:b9:fb:f2:7e:f9:9a:f7:f2:1d:2e:58:c8:54:05:35:60:fd:
70:d1:5e:11:bd:73:fb:8b:a2:44:da:9f:4e:46:99:07:2a:3e:
a5:41:b1:02:b5:a3:55:a9:ae:dd:fa:c1:23:cb:0b:95:b8:f3:
db:99:3e:c9:7a:6c:c1:8b:1f:45:a7:6f:11:23:c2:93:e4:2d:
73:b0:05:1d:c4:8e:8d:b6:95:e4:3b:6c:d3:b9:3d:5b:f4:9d:
00:c4:ad:f5:bb:4f:08:3e:9f:a4:92:19:eb:bc:dc:73:d5:47:
27:41:4c:77:47:e5:96:6b:f3:08:56:c9:0c:1b:0a:77:f0:29:
aa:fa:79:a1:4e:4f:c1:5a:95:94:9d:e4:07:e3:7c:b1:53:e9:
9e:b8:4b:e8:8d:57:0d:6d:69:74:75:82:86:cd:e9:19:40:79:
f5:91:74:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:50 2025 by rpki-client