Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
File: Or-t4neb0SyuiYiSakZi11cIawE.mft (raw, json)
Hash identifier: Mtf0wnNX2XSyyzN5HZgZgZtOYSWdiSThdcES+B+5tOM=
Subject key identifier: 8D:30:F8:CE:E6:EF:09:B1:2F:5E:53:F0:FA:FE:64:0E:50:EA:76:53
Authority key identifier: 3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01
Certificate issuer: /CN=3abfade2779bd12cae8988926a4662d757086b01
Certificate serial: 0199FC8F85134FD20661DA0A6A98EF027E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
Manifest number: 0C06
Signing time: Sun 19 Oct 2025 13:01:28 +0000
Manifest this update: Sun 19 Oct 2025 13:01:28 +0000
Manifest next update: Mon 20 Oct 2025 13:01:28 +0000
Files and hashes: 1: Or-t4neb0SyuiYiSakZi11cIawE.crl (hash: dEFuJE5cl0IyMUIRNSeZEm1FyF+y7OAPewB/IVboyxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:85:13:4f:d2:06:61:da:0a:6a:98:ef:02:7e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3abfade2779bd12cae8988926a4662d757086b01
Validity
Not Before: Oct 19 13:01:28 2025 GMT
Not After : Oct 20 13:01:28 2025 GMT
Subject: CN=8d30f8cee6ef09b12f5e53f0fafe640e50ea7653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:56:bb:54:29:8f:3d:87:fe:85:32:b0:99:4f:
e5:4f:37:ed:9d:c7:70:e7:36:05:bf:83:db:43:6f:
15:de:b0:69:50:e0:51:fd:ae:b2:6c:f5:b7:3f:a4:
80:d7:ca:b3:aa:50:57:1f:7c:e3:af:68:fd:a3:96:
27:7b:f0:54:20:73:d6:cb:fa:f0:b0:52:b2:7e:b9:
00:b8:da:83:6b:87:16:ed:30:56:56:0e:81:c0:c1:
88:27:d4:de:fd:bc:67:cb:6d:80:63:84:a1:13:f4:
ac:52:6e:2d:2e:6b:2e:89:d9:29:6c:db:a1:80:4f:
3e:fc:4b:c9:07:1d:92:19:0e:ef:62:2a:44:60:ec:
98:2d:10:28:fc:f7:c0:c5:47:06:80:0a:d8:76:c9:
57:b9:0b:3e:d4:3a:67:f4:06:d8:a4:c4:28:2d:e5:
8e:07:2d:81:5c:75:af:22:ea:ad:8b:73:ea:e2:1a:
03:61:d6:21:ff:d2:d3:d3:3d:fd:43:ec:0a:a8:9f:
1f:12:3c:49:78:9a:9d:8e:00:42:05:31:ed:e8:f8:
18:97:f2:34:79:d8:06:09:00:f6:41:42:81:cc:a6:
32:2f:19:45:cd:ee:27:49:c3:11:3c:2a:6b:b1:75:
18:a4:47:e2:13:49:97:73:81:4a:26:8d:7d:69:cd:
ac:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:30:F8:CE:E6:EF:09:B1:2F:5E:53:F0:FA:FE:64:0E:50:EA:76:53
X509v3 Authority Key Identifier:
keyid:3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8d:e4:18:81:59:14:e2:e6:e6:93:8e:9d:6a:24:4d:72:b0:
9c:18:66:e5:b1:2f:27:3b:de:e1:9c:46:fa:ed:21:3d:eb:60:
e3:77:00:3a:b2:75:74:78:c7:59:61:49:67:64:19:72:a3:db:
92:6e:09:ff:73:e8:33:58:bb:7c:7c:a4:de:f9:0a:be:11:31:
67:8f:ec:93:14:09:0d:5b:3f:e5:70:53:48:1e:0c:b2:c2:d4:
9a:84:d4:33:28:1b:8f:9b:13:55:5a:27:9d:7d:b0:63:81:d2:
57:c6:6e:57:d9:0b:fc:e4:c5:a5:2a:b8:2c:15:55:a2:ef:33:
cf:1c:d6:ca:e3:67:18:fe:2d:39:2f:ed:95:e6:3e:6f:8d:81:
fa:96:cd:af:24:30:58:7f:13:0d:16:fe:b5:de:64:e7:61:8e:
1e:75:06:bc:79:9f:f5:20:d0:64:c2:1f:8d:fd:69:b1:1f:a2:
61:42:ae:fb:ca:25:66:8d:b2:de:7f:21:6e:cb:0e:a1:6d:09:
29:ee:1e:aa:b7:e8:09:fd:8e:d2:ed:10:11:54:1f:b1:2b:d3:
0a:de:1e:e8:e5:d6:9e:41:1e:94:d3:f1:1a:de:ef:3f:a7:a4:
83:e2:7d:7e:13:30:d7:de:06:1b:69:e9:57:41:18:79:46:0a:
33:99:16:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:11 2025 by rpki-client