Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
File: oiw84jcbnyHFfgw6V4fZWnNctQA.mft (raw, json)
Hash identifier: Sv1bFlE6HIV3VLMrpktf4iSWDPBZYpwbJ58s5iIAeSs=
Subject key identifier: D1:8E:BC:10:60:F3:6E:88:2B:6D:31:46:8A:04:B9:5F:A8:70:09:C4
Authority key identifier: A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
Certificate issuer: /CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Certificate serial: 0199FB7CB6D0A32C42ADBC8F0B290BC53343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
Manifest number: 10DC
Signing time: Sun 19 Oct 2025 08:01:18 +0000
Manifest this update: Sun 19 Oct 2025 08:01:18 +0000
Manifest next update: Mon 20 Oct 2025 08:01:18 +0000
Files and hashes: 1: U4H4DXiB1R3t2sbazcIxIzp8LJM.roa (hash: d9YRAg9H/qZYSSHmjXFBkp2EkGuj36QH5Z/4fdmKOEA=)
2: oiw84jcbnyHFfgw6V4fZWnNctQA.crl (hash: x2nS3hgfgpugkw+2ntgtXBT4qDs0Bt4rMBc57WnRZKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b6:d0:a3:2c:42:ad:bc:8f:0b:29:0b:c5:33:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Validity
Not Before: Oct 19 08:01:18 2025 GMT
Not After : Oct 20 08:01:18 2025 GMT
Subject: CN=d18ebc1060f36e882b6d31468a04b95fa87009c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:4d:64:7b:43:ac:89:2b:95:a6:1f:14:04:
1d:6f:57:7e:a0:ca:9e:89:0c:40:69:90:0d:e5:54:
17:f8:2f:a6:c0:64:f4:70:b4:ae:c9:f4:ea:59:f0:
59:d6:91:8c:f9:03:66:76:0a:77:ea:74:e4:01:1a:
14:3e:b8:dc:4c:3b:9a:e6:2b:71:94:e5:0b:46:eb:
0b:b0:dc:d4:c2:1b:ba:68:b6:4d:90:cb:84:2c:4b:
27:c1:9f:4b:48:69:d1:71:55:af:12:40:b2:f7:97:
27:5a:bc:a2:7d:cf:11:74:c3:a8:7c:46:08:4f:1f:
7f:d6:93:a9:88:b2:6a:5d:8d:8d:98:e8:74:62:fa:
63:20:63:b4:aa:7e:ee:c0:d6:f3:bb:9d:42:cb:44:
db:aa:53:ff:57:af:53:d0:b3:53:13:31:4f:05:bc:
20:24:e7:d4:96:0c:68:8e:f2:7f:d4:15:2e:04:6b:
24:c5:77:3d:e1:e1:4f:2f:5a:10:2f:7a:c7:3a:b1:
4c:f6:9d:e2:39:d6:ef:6b:7a:f5:12:4a:01:46:90:
8f:3b:e9:3f:72:74:32:9b:63:18:78:a3:18:81:83:
e9:d9:10:82:3a:3c:7a:e2:ed:cb:0c:87:73:ab:07:
d9:7d:6f:bc:78:e5:81:42:32:48:cc:53:28:52:85:
2a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8E:BC:10:60:F3:6E:88:2B:6D:31:46:8A:04:B9:5F:A8:70:09:C4
X509v3 Authority Key Identifier:
keyid:A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4b:a5:30:55:81:b2:04:75:d2:5d:75:22:6e:b2:d1:83:11:
f9:f0:2c:7b:a6:9c:52:c2:aa:67:a5:09:cf:c1:23:8a:d7:bc:
dd:49:6c:9b:b3:db:41:e6:18:ff:31:f6:b4:4d:14:33:5c:9c:
4a:c3:42:1e:00:7f:ba:93:3e:06:61:6c:0d:65:77:7a:8e:a7:
e9:29:0d:7a:8d:15:af:a2:e4:b3:e1:68:5c:b6:84:38:b8:22:
cd:7b:6e:44:d6:bf:d2:ff:cc:21:d4:01:b4:5a:26:e5:71:95:
49:c1:08:0a:d5:99:86:4d:d4:10:fc:66:7b:92:b7:81:d9:b4:
89:d1:20:da:70:20:83:05:73:2b:78:09:51:26:72:78:bd:d4:
fa:2a:55:1c:7c:00:a1:64:28:a4:b9:69:af:43:1f:75:f3:7b:
5f:69:b9:2e:30:58:89:ff:d0:16:24:bd:09:43:45:94:cf:99:
be:e4:3f:46:9c:1e:d6:bf:33:59:ac:2d:f3:bc:36:3e:6f:35:
bd:df:6e:76:b6:09:03:ba:26:b9:62:23:75:a3:f1:e3:46:c3:
29:b9:dd:d5:bb:12:0c:07:ef:46:52:98:b9:af:27:9b:07:e8:
22:61:72:8e:f4:3f:9a:44:d9:9e:7f:83:7f:59:55:69:ae:5e:
22:e7:c6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:44 2025 by rpki-client