Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
File: OEhy6BezpF-Y1LFbZd1FK12i1hE.mft (raw, json)
Hash identifier: Ebbv4taqncLArJCUOf33sykGiTa9bbZKbdQ/sP0CZdE=
Subject key identifier: EF:9E:9D:05:02:AC:B2:17:6C:6B:C1:67:2E:E3:54:F3:6B:E3:65:64
Authority key identifier: 38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
Certificate issuer: /CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Certificate serial: 0199FCC6C33CC095F59CF3021BFC9CFA3083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 14:01:48 +0000
Manifest this update: Sun 19 Oct 2025 14:01:48 +0000
Manifest next update: Mon 20 Oct 2025 14:01:48 +0000
Files and hashes: 1: OEhy6BezpF-Y1LFbZd1FK12i1hE.crl (hash: 2ybopceyEpNyYT81/UH8RjxFS+ZC2fUmCJ2GZo6bSWw=)
2: vMh15nJtc0WhPa3adfD72rfDpjk.roa (hash: k90mC6UYUEFlWPzqOLS92+FcHPT0CjyGgsFnNEcMpl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c3:3c:c0:95:f5:9c:f3:02:1b:fc:9c:fa:30:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Validity
Not Before: Oct 19 14:01:48 2025 GMT
Not After : Oct 20 14:01:48 2025 GMT
Subject: CN=ef9e9d0502acb2176c6bc1672ee354f36be36564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:bd:5d:01:46:ec:57:32:27:9b:ce:5d:e6:
b3:6c:ef:71:7d:c0:43:fb:a8:a7:9a:37:ce:4c:f9:
77:19:54:06:be:bb:dc:ab:a0:08:66:00:ce:61:d7:
c2:0d:00:1b:e9:23:51:fa:74:0b:15:5c:88:57:70:
04:36:cc:07:8f:11:57:74:19:e0:f1:60:04:7d:58:
1c:15:d8:ec:62:24:7d:c3:6b:6a:e6:5a:0d:9c:6e:
ea:19:47:ce:db:c3:61:e0:70:a9:d2:ac:0e:15:e4:
41:e1:24:74:75:98:0b:66:32:3f:dc:4c:74:be:08:
ae:35:b8:33:a6:1f:41:e2:fa:a0:39:88:fa:97:fc:
9b:3f:15:94:ef:26:29:84:8f:cb:54:18:52:32:e0:
98:41:9b:3f:31:9b:7c:e4:3c:6c:36:26:72:49:48:
bb:35:b0:1d:4b:f5:2c:d4:59:87:8a:67:38:3a:a2:
a0:be:c9:7c:df:b8:49:c5:ad:0c:24:21:6b:ba:23:
ea:ce:62:47:b9:98:f8:fb:f8:e2:ac:1e:3e:81:8b:
ac:cb:99:67:d3:d0:a0:72:98:1b:9d:85:0d:7f:81:
c8:4c:6a:cc:86:57:84:b1:2b:29:4a:22:43:fe:ba:
1e:6a:45:fa:7d:45:9a:52:fb:50:2d:fe:bf:73:78:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9E:9D:05:02:AC:B2:17:6C:6B:C1:67:2E:E3:54:F3:6B:E3:65:64
X509v3 Authority Key Identifier:
keyid:38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:20:bf:bd:71:bf:5d:49:ab:24:67:50:65:e7:18:0d:f4:1c:
80:65:ae:ed:45:1e:70:4b:00:0d:93:11:44:e0:70:a1:9a:4e:
ac:36:03:ba:8d:a1:f9:e0:37:dd:4e:aa:9d:30:6d:ff:ff:c8:
b2:da:b0:4e:28:f8:34:80:bb:d3:4c:b0:b1:20:4f:40:0e:67:
2f:a7:09:25:2e:9e:a1:ab:29:a7:42:68:96:12:b3:fd:d3:65:
fa:0e:4b:94:d7:20:a6:fe:3d:55:e7:c6:19:b9:51:54:ed:f3:
a0:59:0a:24:8f:92:e0:74:e1:b5:d8:32:d4:00:80:66:f9:33:
1c:f2:86:02:96:c7:91:16:0c:a2:ea:5e:39:42:60:23:2b:5d:
ce:63:7e:1a:3f:6e:2e:20:f0:e2:34:4a:fa:c9:2e:71:62:54:
20:bf:b7:5e:c0:3d:18:b4:01:bd:d2:7e:ad:9f:ff:9d:40:81:
1d:4f:d3:17:0d:6b:32:d3:0d:27:22:bf:09:03:34:d0:88:e8:
c7:dd:8d:04:a3:c8:4b:4e:f9:6c:d4:4f:6e:f3:24:26:d7:4d:
ed:a4:60:cb:31:54:40:1c:49:77:f3:62:77:04:43:ac:d7:a0:
20:91:01:20:9f:01:32:8b:d4:f7:69:13:f5:41:59:f7:38:86:
c3:f6:20:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:13 2025 by rpki-client