
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
File: OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft (raw, json)
Hash identifier: LmOFNBR9Srt+Vbp+NlpXDnoeb3HtRN/9xQvEYzaeiEg=
Subject key identifier: E3:EF:AC:33:F5:72:1D:92:A8:62:E2:4A:45:11:38:EC:3D:64:85:3E
Authority key identifier: 39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1
Certificate issuer: /CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1
Certificate serial: 0199FC58AF1D763A691A89BFEE487BA79CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:34 +0000
Manifest this update: Sun 19 Oct 2025 12:01:34 +0000
Manifest next update: Mon 20 Oct 2025 12:01:34 +0000
Files and hashes: 1: OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl (hash: GCPrbzXhT5BW0RLIld1oHH+QTuQjvPjazNo3F2Q2Q3c=)
2: ctA-0p3K0spN-aqa_vSCSuEPIl8.roa (hash: 9zjfwehArRYt152AyBxRUd+hpMMW5KWg3wsX7MAnHPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:af:1d:76:3a:69:1a:89:bf:ee:48:7b:a7:9c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1
Validity
Not Before: Oct 19 12:01:34 2025 GMT
Not After : Oct 20 12:01:34 2025 GMT
Subject: CN=e3efac33f5721d92a862e24a451138ec3d64853e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:c9:d5:18:22:6d:93:86:e8:15:f8:7f:18:
96:e7:ee:c8:0a:51:71:a7:fc:f7:2d:97:62:0f:19:
9c:67:e3:8a:cf:e8:1f:47:c9:76:f9:d0:ca:68:74:
37:99:7d:cb:81:58:57:90:ca:ae:8c:93:a3:5b:f4:
b6:0c:d7:70:14:cd:8c:a2:cd:31:fa:8e:d9:34:74:
fb:cf:25:e5:1c:8d:0a:91:fe:d8:46:b1:a1:24:51:
34:91:af:72:05:2d:7a:12:b9:48:c8:c7:81:11:c2:
85:24:d8:f2:d4:65:88:6d:54:a3:08:67:0a:74:ef:
32:b6:39:8f:d6:39:66:74:9b:62:d3:21:4f:98:82:
1f:85:3a:99:3e:dc:de:5e:fa:d7:51:eb:fc:42:51:
1f:40:87:85:15:5c:50:b8:5c:30:a7:97:35:b4:ca:
91:71:c3:93:c5:72:59:86:d4:a9:4f:a1:d2:41:1b:
5a:9b:9b:d1:63:17:be:86:d5:f1:26:9f:5c:bd:ac:
ef:6d:69:82:41:4e:0b:36:93:ef:ab:7b:e3:86:d3:
35:0c:f4:f7:69:7f:07:8f:2b:31:cf:76:5b:d8:53:
8e:0f:d2:93:43:8b:74:ee:ac:fd:ee:53:7b:b8:c9:
11:6e:6e:62:a8:ed:79:83:1e:9f:79:ea:64:6f:47:
d8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EF:AC:33:F5:72:1D:92:A8:62:E2:4A:45:11:38:EC:3D:64:85:3E
X509v3 Authority Key Identifier:
keyid:39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8d:e1:19:cf:4c:d1:44:ce:6a:c8:c9:32:6e:aa:f0:4d:6f:
67:62:f0:d5:0b:9c:1f:63:2c:99:4e:9d:70:1a:a2:80:97:0f:
86:b3:87:77:f6:e6:88:b4:83:cd:1b:7a:a4:28:39:c4:ec:74:
39:08:33:17:c1:1d:52:8f:21:98:de:8c:67:30:9c:98:48:5a:
1c:3c:b9:57:fd:01:f1:6c:29:a4:f1:d6:0d:4c:bb:3f:e8:c6:
a2:23:e9:d5:27:6a:b1:37:83:e0:7f:e7:06:52:64:af:c9:ef:
66:ad:e0:f0:4e:35:fc:be:0b:0e:82:69:c5:84:ca:27:5e:7d:
ae:48:3d:46:c8:e5:f9:d0:b2:97:03:14:f2:58:29:41:f5:20:
4f:a3:e7:95:45:7f:46:3c:dd:07:dc:51:87:67:74:93:57:a0:
af:c3:26:44:a1:6d:59:ed:49:7d:4a:3f:fb:9a:1d:17:a0:37:
a9:81:b4:45:64:84:9b:19:b2:28:9e:84:a7:85:d2:b2:f1:db:
55:f7:a5:6e:2a:df:5b:2e:1c:01:1d:84:4e:c9:8c:0e:14:1d:
42:0a:b5:f8:05:58:c0:5e:c6:a2:1b:41:2a:7d:1d:c9:58:78:
34:81:a5:be:cc:86:b6:7c:8c:d0:5e:25:35:f5:89:e1:31:15:
ca:51:c6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:07 2025 by rpki-client