Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
File: OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft (raw, json)
Hash identifier: xHGmcbHvdFyvrF8QJkzBlO9cVFn0WZqsTxFjgqZ77D0=
Subject key identifier: 42:42:B1:25:EC:B3:83:11:C2:CB:AC:65:ED:95:1A:2A:B1:1E:25:E5
Authority key identifier: 39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
Certificate issuer: /CN=39abeb591716e908345d329fffd3700352315b98
Certificate serial: 0199FBEBE2A6767C42C7F8BBC3CC2D460C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
Manifest number: 1376
Signing time: Sun 19 Oct 2025 10:02:44 +0000
Manifest this update: Sun 19 Oct 2025 10:02:44 +0000
Manifest next update: Mon 20 Oct 2025 10:02:44 +0000
Files and hashes: 1: OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl (hash: 88LFZFDoxq8t6KD93OYlXMW8DpYlPsdKK71JoGQo91Y=)
2: sRj9HIjhF6xAzSk8DsZiSona3z0.roa (hash: CKtuOB2HNTtxCaJDk6aobi//RFXR4AYliP1W8tH3cu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e2:a6:76:7c:42:c7:f8:bb:c3:cc:2d:46:0c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39abeb591716e908345d329fffd3700352315b98
Validity
Not Before: Oct 19 10:02:44 2025 GMT
Not After : Oct 20 10:02:44 2025 GMT
Subject: CN=4242b125ecb38311c2cbac65ed951a2ab11e25e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:3a:56:9a:ad:14:e4:f9:21:3e:c1:c2:3b:
f5:52:0e:82:fe:73:c0:c1:1e:19:0c:cf:5d:62:d3:
02:15:95:1d:42:02:ae:ea:b8:a1:d2:89:95:2b:1a:
40:78:a1:c6:aa:c5:72:f6:cf:6b:66:00:9e:cd:5b:
07:82:46:37:bc:65:78:1d:31:f7:ae:1f:ab:25:ef:
f5:7c:e9:5b:20:7d:83:e9:53:8b:67:59:c8:84:9a:
40:97:17:1d:f0:7b:8e:7d:f2:17:4c:40:09:6f:08:
1a:ce:a2:b9:4a:d7:f4:ab:db:d5:34:28:f6:d9:35:
d7:f3:b8:7b:a3:1a:cc:c7:60:16:b1:99:a1:d4:7e:
e9:ee:85:47:8b:1d:8f:51:d5:ed:bf:d7:33:91:31:
c7:a4:1b:91:bf:7b:e7:a6:70:29:d2:be:31:f7:6c:
3e:0a:42:31:1e:27:5d:0d:ac:d1:64:63:92:af:74:
bb:bd:ce:12:86:a0:a0:f8:20:6d:0f:8d:cd:a7:8f:
43:c5:a5:06:db:66:a7:12:87:4b:d2:6f:49:ff:a0:
a1:9b:fe:51:d3:a0:07:03:25:28:2d:7b:51:cf:b9:
16:03:1a:3c:a9:ec:59:a6:07:a3:66:ea:47:7b:64:
d6:0a:79:9b:b9:e7:e6:54:14:04:12:22:ad:28:36:
bd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:42:B1:25:EC:B3:83:11:C2:CB:AC:65:ED:95:1A:2A:B1:1E:25:E5
X509v3 Authority Key Identifier:
keyid:39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d6:b8:10:36:39:6e:27:91:b7:b7:7e:b4:ba:4a:bf:4d:38:
dd:94:31:65:bb:cf:e7:06:c4:c7:ba:b4:73:62:fc:db:28:06:
4c:80:61:b2:a1:11:33:3d:57:d3:b3:04:53:b9:07:a1:20:26:
95:41:4a:fc:2d:35:29:38:06:bf:f0:16:89:c5:ed:e8:02:b8:
f6:8c:37:df:56:25:c6:6d:ab:e5:1b:cb:1a:2f:e4:d3:08:cb:
36:e6:f0:97:fd:4c:4d:73:0e:8a:a4:73:2e:c2:8b:67:05:64:
09:fd:16:72:22:02:2d:ba:d6:09:0d:13:65:2a:9f:54:5f:53:
5f:9b:e4:7e:fe:e8:3a:4b:25:b2:8d:54:42:08:8e:c1:54:00:
65:0f:8d:1c:8e:e2:13:7c:99:14:50:3e:18:bc:ee:82:64:98:
81:89:3d:10:09:cd:0a:0c:d8:a2:40:b1:82:ef:33:58:f5:0f:
e2:77:74:c3:5a:2d:d0:98:3d:c2:09:eb:5a:5c:e5:c0:30:5d:
e3:19:7a:cd:40:77:19:e5:05:c8:10:09:16:c0:fa:a0:cc:9e:
8d:d9:f5:e6:cc:9f:09:da:ff:f9:e8:e1:77:b4:d7:1d:b3:0d:
05:57:f0:43:44:14:0e:64:e7:f7:bd:05:71:f2:39:a9:10:52:
df:4f:3f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:29 2025 by rpki-client