Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
File: oYRAnlwYO7zDFTX0x-7keCzWe-M.mft (raw, json)
Hash identifier: Rtp8Jhoi0U7PYNgaY8S1Pn/e1P9M/0RZ27/JETDrnwY=
Subject key identifier: 48:56:36:55:12:DA:C8:B0:18:F5:D6:87:12:32:26:41:5E:42:9B:D1
Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
Certificate issuer: /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Certificate serial: 0199FBEBDC55489096F403EA84D598ED9A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
Manifest number: 130A
Signing time: Sun 19 Oct 2025 10:02:42 +0000
Manifest this update: Sun 19 Oct 2025 10:02:42 +0000
Manifest next update: Mon 20 Oct 2025 10:02:42 +0000
Files and hashes: 1: PHcuyK5Isl-tObyHXesNd9QiRP0.roa (hash: rHdHpG4qGbN9ifhvJU1UvmMnc7kX+7rc9pla/vN3kgc=)
2: oYRAnlwYO7zDFTX0x-7keCzWe-M.crl (hash: YndCW8NQvRtIfsOlnm0dTSAM7gsSvwjqXokVOohMW2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:dc:55:48:90:96:f4:03:ea:84:d5:98:ed:9a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Validity
Not Before: Oct 19 10:02:42 2025 GMT
Not After : Oct 20 10:02:42 2025 GMT
Subject: CN=4856365512dac8b018f5d687123226415e429bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:b9:0b:e4:13:5c:47:ec:5f:78:76:84:d3:
72:e7:75:11:c7:4c:08:c8:8e:e3:16:b2:3d:21:0b:
67:8d:8e:74:83:b1:5d:ad:44:67:49:29:86:56:63:
3f:21:96:3d:5c:4e:e9:f1:0b:19:91:ca:b7:b3:04:
64:f7:6e:3e:63:8b:49:53:d9:c2:a7:ec:1d:73:ca:
a2:a2:b8:ae:6a:81:f6:1a:95:31:c3:8c:bd:2c:fa:
2d:83:df:55:20:4d:5c:96:ad:6f:f3:25:94:78:da:
ce:60:9e:a6:0e:05:c3:79:02:cf:2f:b8:a8:86:45:
2c:c7:ec:86:d5:8d:35:33:52:58:83:49:c1:0b:67:
da:da:5f:52:5e:c8:25:f1:55:03:a0:61:2f:c3:71:
d3:fa:08:20:2d:c4:1b:67:d6:aa:99:be:9b:41:9f:
8e:40:c0:6e:b4:ae:f1:9a:3f:71:3d:23:42:d0:ff:
3b:4a:81:d8:90:26:ab:41:ce:fb:d0:10:4b:da:7e:
ac:a9:bf:e0:c9:22:67:76:4d:71:82:5c:12:08:f2:
93:72:95:7c:85:8a:64:f8:9a:4e:ec:09:1b:49:67:
f6:9d:91:b0:78:d3:06:bc:f5:c6:5c:52:96:a8:ff:
1a:cd:68:c7:a8:ac:14:47:7c:e9:c6:ae:19:ae:e3:
b9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:56:36:55:12:DA:C8:B0:18:F5:D6:87:12:32:26:41:5E:42:9B:D1
X509v3 Authority Key Identifier:
keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2f:23:f6:68:dc:db:0f:6e:5b:22:43:52:58:da:cf:d6:eb:
6c:bd:f0:91:5c:d9:50:23:ee:9e:13:b4:f9:85:35:95:ab:74:
8f:82:80:00:5b:66:bc:39:e1:90:85:c8:92:a4:89:6e:6f:0e:
df:4e:49:6a:23:c1:72:4b:60:ba:d2:0a:e8:a0:62:5a:bd:a4:
84:97:34:f9:49:10:ea:f8:08:d2:42:da:82:3b:92:02:5d:0c:
49:e5:43:75:16:39:07:2f:65:93:1b:2c:4d:83:e1:68:34:b0:
c7:e8:03:a4:e1:19:4d:c8:72:27:c9:7e:f0:74:d5:e4:62:48:
1f:6f:14:ac:df:bf:ce:0c:75:81:a1:61:07:e4:bc:5b:b9:6b:
85:69:80:4d:18:95:ff:7f:fe:6c:65:32:59:17:8a:bd:66:9f:
de:94:8c:96:23:0a:97:25:94:bf:d6:4c:1a:97:aa:26:33:fd:
b6:f9:45:7a:77:b1:43:4d:f8:30:bd:0d:11:61:c8:b3:55:a1:
74:13:84:27:e1:df:ce:7b:63:2e:9e:27:7b:91:f1:9b:ca:d7:
dd:d7:88:9d:d5:33:2b:d3:12:97:72:e2:bd:b6:ac:4d:c3:44:
a2:32:23:d8:fb:05:ee:dc:6c:39:92:83:88:7b:49:ba:7f:9d:
22:f5:d2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:20 2025 by rpki-client