Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
File: OEgrEyC5gPRtbkBP59WL2xHVD9M.mft (raw, json)
Hash identifier: K+m6DPV36SRnR/lyy6prpGRUEVV9rfklBnZGgkyxVmE=
Subject key identifier: 53:DA:CA:33:32:47:8F:FB:8D:A3:69:B4:0B:BF:8E:4D:AC:53:F4:23
Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
Certificate issuer: /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Certificate serial: 0199FC21751497F68D66F04922312844FF23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:14 +0000
Manifest this update: Sun 19 Oct 2025 11:01:14 +0000
Manifest next update: Mon 20 Oct 2025 11:01:14 +0000
Files and hashes: 1: 8cUHkHeMSC76fH99pPRKCG6K4As.roa (hash: 55nCWREAZoiaySk5Kp1IWRogrctw38RXeb5qRSfBuwo=)
2: OEgrEyC5gPRtbkBP59WL2xHVD9M.crl (hash: JEdyT8Vb7Zcd8FZdp6bUBZ3/yRrDu1c0JJCuN9AkZkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:75:14:97:f6:8d:66:f0:49:22:31:28:44:ff:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Validity
Not Before: Oct 19 11:01:14 2025 GMT
Not After : Oct 20 11:01:14 2025 GMT
Subject: CN=53daca3332478ffb8da369b40bbf8e4dac53f423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:34:07:ec:28:c0:53:93:12:f0:74:5d:32:9f:
a0:fb:4b:b9:bb:43:ae:49:b9:3f:14:b3:88:84:9a:
0c:67:03:07:d8:01:af:7a:de:b0:1e:c4:d2:07:0f:
41:36:80:5b:02:29:e3:c3:38:1b:33:c8:64:02:4b:
cc:93:b1:a0:a8:34:c3:31:9b:19:f9:d7:d7:a0:2b:
1f:7f:fe:8a:7c:2f:24:2f:d6:34:81:c3:9d:18:29:
5a:81:48:96:e8:b7:b4:84:e8:10:a7:0f:4f:7c:64:
cf:e0:a6:08:f8:37:65:a0:d0:5f:56:e9:a3:b9:bb:
82:7c:cd:30:e4:71:62:eb:d7:17:29:0b:c5:ef:3a:
61:47:f7:32:42:29:05:18:ea:a7:94:08:67:60:b7:
93:7c:02:99:ec:f7:9d:85:72:1e:7c:4f:5c:64:84:
7a:2c:86:78:20:85:d0:28:df:a2:20:83:f4:b6:57:
51:3a:5b:d4:21:e9:2a:77:82:7a:ad:cc:28:41:6c:
69:78:a6:0f:53:20:b1:0c:55:85:74:f1:94:2a:dd:
4b:9a:0a:00:84:b9:80:dc:3b:8c:aa:64:52:e7:5c:
ce:29:bf:30:97:c0:9f:02:4e:e4:58:27:02:18:e0:
83:58:0c:16:ec:6f:ef:76:cf:04:52:ea:72:ba:ba:
cb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DA:CA:33:32:47:8F:FB:8D:A3:69:B4:0B:BF:8E:4D:AC:53:F4:23
X509v3 Authority Key Identifier:
keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:df:3f:21:42:80:4e:66:6d:aa:18:5e:40:24:4d:0f:b8:0c:
04:6b:cb:57:d9:f6:12:ac:03:61:09:d8:35:58:f4:b0:bb:6c:
6c:f5:12:8f:96:8c:92:2a:60:4c:09:8e:3e:35:a6:b9:03:9e:
6d:2a:4d:9e:93:8c:a9:a2:de:73:20:f4:35:d9:47:6d:78:24:
46:e1:9e:42:e9:80:71:81:20:23:01:9d:0c:a4:63:6e:79:b7:
cb:25:f1:68:7d:77:00:0b:92:c8:f8:9b:8a:08:13:bf:d7:f6:
25:88:63:d7:f2:dc:bf:7c:c1:a4:b0:ec:2d:29:30:95:4d:f1:
03:2f:33:b7:30:90:92:d2:b9:0f:7f:e7:78:0d:00:52:7e:c9:
e4:a9:41:df:c0:ee:bc:e6:83:d4:de:00:46:ce:26:64:dd:6c:
1b:30:29:cc:5c:d7:8e:05:34:76:8d:35:84:af:4f:bf:c2:3c:
b6:5d:b3:8a:83:2a:72:28:ae:84:1a:a0:4a:89:ef:14:76:0d:
e0:70:ec:26:b1:a4:ca:f9:2f:e7:a8:92:b2:27:b8:3c:54:21:
a9:31:8e:2e:0f:d0:e2:97:d0:45:50:6b:90:e4:2a:1e:f1:6d:
7c:71:44:fe:b3:16:c5:b9:cc:20:82:04:a4:b1:ce:d7:d5:4a:
ad:6d:97:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:33 2025 by rpki-client