Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
File: OQW37By46JWiW9SsZ7wxZmFdi2I.mft (raw, json)
Hash identifier: tqh2ZVQ8OT5ghOZpWG6Tow/0zYmuN9v0KoJl4dFT5Ys=
Subject key identifier: D5:35:BE:AB:C9:6D:BB:EC:5E:A9:40:78:53:3B:72:79:F7:63:A5:29
Authority key identifier: 39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
Certificate issuer: /CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Certificate serial: 019A0035DAED9F34629C98432E932D24878A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
Manifest number: 07C8
Signing time: Mon 20 Oct 2025 06:02:00 +0000
Manifest this update: Mon 20 Oct 2025 06:02:00 +0000
Manifest next update: Tue 21 Oct 2025 06:02:00 +0000
Files and hashes: 1: GzEFY4FMaNIn9ALjdEIyqJJseSE.roa (hash: A0TZx6QvZikNrmKwA+Q10TiJHkrQxZ4XZGZdjheoj80=)
2: OQW37By46JWiW9SsZ7wxZmFdi2I.crl (hash: 7W/igeDjj6KWOvBWESLOwyS/Ie24kpz+gVSERK7rVXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:da:ed:9f:34:62:9c:98:43:2e:93:2d:24:87:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Validity
Not Before: Oct 20 06:02:00 2025 GMT
Not After : Oct 21 06:02:00 2025 GMT
Subject: CN=d535beabc96dbbec5ea94078533b7279f763a529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:ba:dc:c3:93:6d:bd:a1:56:eb:48:28:c2:
27:6b:e9:90:40:16:68:65:a9:d2:4d:62:bf:d6:42:
2a:6c:d7:35:30:b9:b4:0f:44:51:d6:77:25:ed:af:
8b:55:c8:cf:c7:20:27:2f:72:56:85:6c:5d:15:33:
f3:ca:de:1c:16:a0:47:a8:9c:bb:4a:e0:6d:96:f9:
16:6d:3f:ae:81:b9:fc:ed:d9:e8:28:7f:ce:01:21:
50:d2:b1:83:f5:45:52:19:2f:fc:c5:7e:b1:0d:9c:
4e:1f:d1:05:d0:ae:48:de:b1:2b:95:ed:3b:c1:64:
96:01:db:b7:58:72:ac:39:b9:b9:b5:0d:00:ae:18:
3c:f1:2a:ec:67:b0:1f:f9:ff:ab:ec:af:57:ca:bc:
42:af:6d:4e:99:95:e2:7c:a3:f5:f3:f4:ee:c5:1c:
47:01:9f:5d:e9:1b:d4:6d:d2:47:b0:d9:95:2f:ba:
c9:e0:ee:6b:82:86:96:82:b4:d0:23:18:24:be:7f:
97:ef:29:86:1b:25:73:ae:3b:e7:59:4b:b2:10:4b:
3b:3a:79:1b:17:e7:53:a2:13:e1:81:b3:31:09:8b:
6f:20:7d:a3:be:a3:59:9d:94:be:3b:1c:c4:44:a6:
c4:02:61:d9:48:06:62:eb:c9:32:99:fc:f4:70:35:
aa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:35:BE:AB:C9:6D:BB:EC:5E:A9:40:78:53:3B:72:79:F7:63:A5:29
X509v3 Authority Key Identifier:
keyid:39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9f:1a:62:36:b5:28:a6:98:40:79:4c:84:f8:ea:5a:7d:45:
78:86:3d:81:47:43:2f:99:68:ed:e6:23:b5:60:21:ee:a9:51:
5b:27:c8:f3:a9:f1:c5:0a:b3:ab:03:13:dc:95:3a:a4:44:30:
f8:aa:75:40:3f:6e:80:3a:1b:18:88:a5:23:c0:1e:93:e8:5c:
68:10:21:24:bf:b4:0b:96:43:44:72:23:dc:d6:e2:73:90:c4:
26:71:73:30:2d:88:2b:50:06:ba:da:03:af:3e:ae:71:83:0a:
26:99:d3:31:f9:b7:cd:a6:94:b4:44:39:fd:a1:e3:c2:ad:ad:
57:88:a0:28:13:4e:00:0d:07:41:24:67:ba:e1:e4:b5:c0:55:
4b:5a:7a:45:23:46:d4:b5:a1:c3:fe:4a:9a:f4:f7:9e:49:d9:
ac:a8:56:91:e8:a7:8b:57:e7:2c:75:8f:de:3c:88:0d:05:1c:
ce:c9:f8:53:04:0f:1b:ee:40:6c:92:9b:aa:43:c9:fa:74:70:
60:d1:5f:d9:5f:2b:91:ea:26:87:ab:3d:ef:ba:a8:10:d3:44:
eb:7e:83:5e:08:ea:d5:1f:f8:55:0e:ca:09:06:59:df:38:5c:
bd:cd:70:df:86:8b:3f:28:52:f1:7f:5c:9e:18:a5:4b:91:61:
db:ab:0e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:52 2025 by rpki-client