
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: PY3gl2hLH2/kw8oyc480fuDuWg7sp4FLqE+3fh0NQo0=
Subject key identifier: B4:EE:A8:DC:63:44:03:B6:7A:D2:49:C3:F1:A5:E6:12:14:51:84:2D
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 0199FCC6092D1B28DD0E66830CFB4BA5D83A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 1316
Signing time: Sun 19 Oct 2025 14:01:00 +0000
Manifest this update: Sun 19 Oct 2025 14:01:00 +0000
Manifest next update: Mon 20 Oct 2025 14:01:00 +0000
Files and hashes: 1: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: oeq4XOQL1hKct9toe48vHiBWaonqjjgRbs/rkHFg7f8=)
2: SkpuG1SShh_Tu0tEsS_zldokzRY.roa (hash: dFYDpE1wahaZPqcUFRinjMxK5eBFUvf/eJm1l8owCY8=)
3: wx1b7wSo3IENdo5aRxstuEb6e_8.roa (hash: Pjk1ZSdAEd1vWaEOWohydmZmcsdRJu6/0hd4TtAw+OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:09:2d:1b:28:dd:0e:66:83:0c:fb:4b:a5:d8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Oct 19 14:01:00 2025 GMT
Not After : Oct 20 14:01:00 2025 GMT
Subject: CN=b4eea8dc634403b67ad249c3f1a5e6121451842d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:db:b9:3a:aa:24:34:51:f7:2f:00:4b:5f:38:
d4:e8:63:ca:a4:13:4c:b1:12:07:38:8b:dc:55:a4:
67:a2:1e:22:cc:79:56:81:c7:47:62:33:39:ef:40:
87:22:98:3f:9f:9d:c7:75:ea:c6:9b:12:cd:3d:09:
fb:79:79:9d:2f:61:2b:4f:d9:41:bd:52:f9:ef:73:
ae:8b:8d:dc:bf:01:45:da:ca:f0:63:9d:8d:5a:f8:
5d:8a:db:c4:94:77:9d:a4:2a:82:b6:3d:b0:31:d4:
5e:c0:91:9a:10:b1:e3:59:0b:48:a3:34:c4:d0:a7:
48:59:ad:a3:39:27:52:c4:cc:51:29:e4:1b:cf:bb:
1d:0d:ec:85:c7:5e:be:51:82:99:84:c3:09:0a:ba:
e2:ae:be:66:12:1a:37:ca:64:bb:24:8c:6a:4b:b8:
9c:7d:82:aa:37:e8:28:04:3c:9e:ce:a6:6b:c8:01:
35:8f:9e:86:1f:f9:34:52:80:b3:d8:a7:e3:40:4b:
41:0b:4b:d2:c9:a8:01:fa:16:9c:42:46:8f:a7:38:
c8:6d:62:09:49:93:f1:67:fe:e3:37:70:1a:6c:f0:
59:a6:bd:59:7b:81:7e:ae:55:42:73:ed:5f:c7:25:
c3:da:04:80:5f:ba:3d:99:a3:04:a6:0e:70:3b:4f:
3c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EE:A8:DC:63:44:03:B6:7A:D2:49:C3:F1:A5:E6:12:14:51:84:2D
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:48:b1:06:e4:ef:ca:b1:2f:d4:52:92:43:ff:9d:e5:91:64:
6c:41:90:6b:0a:5b:76:a4:90:10:2e:c6:b2:e9:aa:02:18:6f:
e9:cc:9a:e6:66:43:2c:e9:fb:13:0f:93:48:09:2b:6a:7d:e8:
07:1f:63:e4:9d:01:63:09:f7:92:b5:58:f8:9b:95:05:51:ea:
c4:51:b9:a2:a4:a7:14:63:f9:a4:f2:b3:42:d6:42:20:44:a4:
bf:28:b1:8b:84:b6:3f:1a:0c:7b:c5:ce:84:af:77:f4:47:c0:
dc:1b:1a:c3:1d:7e:3b:5c:d4:40:70:74:60:90:f0:a0:32:0e:
17:89:3d:bf:a8:e2:d5:23:42:b8:36:03:ed:e3:c2:d0:49:58:
85:96:34:e6:14:2e:58:fe:4c:10:ec:60:ca:70:5e:30:3f:3a:
de:ae:8e:5d:3e:76:6b:86:9f:9a:82:93:d0:f6:bc:17:6c:18:
88:f9:bd:ad:af:91:89:45:f3:c0:2f:73:31:e0:27:6b:c2:1c:
6b:3f:4e:36:fe:7f:b7:7c:b5:28:35:b6:b3:fd:a0:64:49:17:
22:30:fb:48:cc:60:f8:22:1c:18:c2:3a:82:07:19:2b:92:68:
02:d6:a9:23:b9:62:4a:41:f1:77:12:40:fd:a3:73:01:17:a5:
f7:81:1a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:31 2025 by rpki-client