Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
File: OXBHadCH2f6PeQplVctPvvzSTTg.mft (raw, json)
Hash identifier: hAbDtRETOYNjxDkhLs7hvK8u4dnwV372HOkb84UO0xk=
Subject key identifier: CC:71:25:B4:B6:09:E1:62:92:9D:3A:7C:F5:D2:61:E1:64:FE:E3:E4
Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Certificate serial: 0199FBEAF2D0A9A005E621D209C589D5F473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
Manifest number: 0396
Signing time: Sun 19 Oct 2025 10:01:42 +0000
Manifest this update: Sun 19 Oct 2025 10:01:42 +0000
Manifest next update: Mon 20 Oct 2025 10:01:42 +0000
Files and hashes: 1: DKYMmdoi70YjC_-L8vJdFhUTolQ.roa (hash: VRVvbtOKDPVO0AG7Nxe+ryERsb8GEeQGYIh0LURsjdI=)
2: GvH_ld4kbG2WgWcG2cx_5y70SCI.roa (hash: aThEESBkBgawQBBj+8NWP1oT0rEWoC0jxTnO1rDLqhk=)
3: OXBHadCH2f6PeQplVctPvvzSTTg.crl (hash: nMTHlA3x4M5W0ApEdHnGQEE1B3pOi/53tjcUb36Dcr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f2:d0:a9:a0:05:e6:21:d2:09:c5:89:d5:f4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Validity
Not Before: Oct 19 10:01:42 2025 GMT
Not After : Oct 20 10:01:42 2025 GMT
Subject: CN=cc7125b4b609e162929d3a7cf5d261e164fee3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:da:03:01:07:49:3e:63:1a:12:7a:53:93:81:
70:17:6c:a2:b8:5d:2e:b4:74:f1:6c:eb:49:72:66:
59:a7:31:1f:0f:80:96:f5:b9:f9:76:93:2e:3f:ec:
3c:ab:ee:c2:06:31:43:72:b0:49:38:ea:67:92:ae:
e4:1d:3b:1d:0b:91:be:27:b3:54:82:d1:ef:04:88:
98:5c:11:c6:3d:e5:24:03:ad:bf:1f:c9:b9:2d:23:
6f:0b:25:82:87:80:9b:91:d0:bb:49:63:c7:ff:c5:
58:ff:f6:0c:6a:f6:e2:bf:f9:24:68:93:3c:8e:55:
5a:b3:ed:45:ca:2b:a4:8e:0b:89:2c:7c:c6:18:13:
11:a4:d2:0b:64:71:39:96:e2:e3:de:c0:0b:32:c9:
03:6e:e7:28:35:00:63:b9:76:ef:69:85:79:13:fb:
8e:d9:69:89:8d:f0:54:30:ce:02:bc:40:01:18:7b:
8b:a8:fc:cb:fd:a4:42:fb:e0:dd:49:e5:64:99:23:
68:71:14:fe:f6:18:dd:60:eb:14:23:4e:ed:c9:25:
0d:bf:4a:2f:47:c9:c1:67:50:15:d3:4d:84:1e:ea:
36:6f:e8:1e:3d:a4:ff:ad:c4:6d:4d:26:be:ba:c3:
c7:58:c7:67:e6:f6:e6:b5:10:df:2b:dd:97:bc:30:
de:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:71:25:B4:B6:09:E1:62:92:9D:3A:7C:F5:D2:61:E1:64:FE:E3:E4
X509v3 Authority Key Identifier:
keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:94:51:77:ed:a0:d5:06:20:01:22:b2:53:d2:ae:96:f2:f0:
78:22:fb:67:29:1b:e1:7d:c8:77:53:54:c6:6c:dd:22:a1:9f:
b4:b3:6d:f9:2d:5b:41:28:64:c8:e6:cb:67:6f:8c:40:27:b4:
ea:f3:aa:c2:8c:2e:d8:40:c4:d2:32:53:a4:e8:c7:ae:83:58:
78:b2:4e:59:6e:73:97:1a:9f:76:59:b6:6c:c7:55:3d:89:10:
b3:30:18:d7:60:de:4f:41:26:39:c0:48:fc:cf:99:a7:fb:07:
da:47:06:d8:69:67:f9:44:71:97:2b:2d:df:2b:f8:0d:eb:d1:
68:d0:c4:c5:7e:18:ad:ad:ea:ba:f0:bb:26:e5:0a:8f:97:0c:
21:bb:3d:82:47:9f:eb:b0:5a:cb:08:4b:5b:49:bf:c9:1d:49:
ff:7e:ba:39:00:5a:d3:9e:a6:30:43:dc:f1:2d:fb:8f:45:03:
bc:d7:31:2b:27:6e:2f:d0:77:0b:47:48:34:7c:3c:e1:8a:02:
20:8a:57:e9:d4:0e:4f:b1:ce:37:00:61:08:e4:8f:4d:cb:f8:
10:e8:d5:44:4a:3b:2b:96:e7:72:48:11:c0:af:4a:57:5e:a2:
b5:74:24:7e:88:42:c5:28:3c:d3:92:4d:99:9f:3b:a9:26:21:
c5:55:90:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:53 2025 by rpki-client