Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
File: OuvyLoZEQlX994owxMsLLZHlt1c.mft (raw, json)
Hash identifier: n678ZZmEzfmLqvtuSuaTeZ5N35qSlqclxd+8R1cSyVg=
Subject key identifier: 7C:0B:D7:E7:CE:B9:A2:BB:0B:DB:E8:85:81:71:BE:AE:02:82:8C:A7
Authority key identifier: 3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
Certificate issuer: /CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Certificate serial: 0199FDD8BCFE2B9A7D32E2C106E2A66D5058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 19:01:03 +0000
Manifest this update: Sun 19 Oct 2025 19:01:03 +0000
Manifest next update: Mon 20 Oct 2025 19:01:03 +0000
Files and hashes: 1: OuvyLoZEQlX994owxMsLLZHlt1c.crl (hash: MjpxY0Gy/ys3X7hIysUqd1302O2xmCjnQfizumrsSfw=)
2: XGOc6Yta1j7sUM6Fv0ZGp6ykvs4.roa (hash: c3SifmbdW15nfuTRwIPceqNmWNmz6mVEc9pu384Gaco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:bc:fe:2b:9a:7d:32:e2:c1:06:e2:a6:6d:50:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Validity
Not Before: Oct 19 19:01:03 2025 GMT
Not After : Oct 20 19:01:03 2025 GMT
Subject: CN=7c0bd7e7ceb9a2bb0bdbe8858171beae02828ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:21:56:9c:d6:81:63:9d:69:cd:14:40:ad:
6f:f0:f7:28:35:a9:15:d0:c7:42:7e:ae:1e:d7:8b:
8d:14:14:fd:e8:0e:79:50:c1:d3:08:c0:a5:a4:08:
54:87:2b:d3:06:fc:52:93:20:b7:d4:17:bf:1a:f3:
1b:32:e3:e9:be:f3:d3:6d:c3:e3:28:ab:79:a2:44:
d1:ae:25:8f:64:1a:55:07:48:9b:91:4c:32:31:3b:
93:a4:fe:31:2c:8d:6d:9a:c4:68:6a:6f:6b:bb:28:
f0:48:3c:d2:a4:35:be:86:49:09:b8:92:4b:5a:d5:
c4:84:c7:5d:b3:93:a3:8d:c8:e7:3d:4c:af:b6:c9:
1b:f8:67:e4:56:77:46:88:d5:e8:3d:98:0a:b9:2c:
1a:e0:33:a0:9f:4d:fc:1f:b0:66:65:c2:1e:c1:8d:
b7:a1:66:d6:fc:42:1d:cc:7b:37:7c:e6:0c:ac:c9:
8f:ef:1c:13:aa:34:1f:e5:7a:72:2f:04:6c:11:0d:
2f:45:a7:77:3a:2e:f6:fd:dc:7d:e6:a4:bb:3a:ed:
be:0e:df:37:84:b2:34:9d:bd:cd:87:18:0f:dc:43:
8d:d0:47:d4:e2:0c:d0:d7:84:c7:94:95:b7:4a:fd:
42:35:07:17:5c:a8:ea:9a:b7:9d:a9:92:51:66:62:
88:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0B:D7:E7:CE:B9:A2:BB:0B:DB:E8:85:81:71:BE:AE:02:82:8C:A7
X509v3 Authority Key Identifier:
keyid:3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:5a:a7:f8:d2:63:fd:70:29:da:69:70:a2:75:46:55:06:4e:
83:26:52:a7:80:2a:fc:4d:dd:f9:b9:fa:cc:98:d6:c6:73:27:
a4:50:51:af:d0:db:dc:69:4f:ff:76:f9:bd:42:ec:32:8e:e5:
4d:2a:87:77:23:aa:2b:37:ce:f9:ab:15:2c:c6:b7:1a:1f:e2:
c1:be:17:83:1f:26:3b:98:41:ae:4a:f3:59:ad:02:73:e0:7e:
af:83:86:15:74:72:0b:aa:25:f5:f5:32:9b:1b:eb:91:e7:aa:
a7:4d:aa:e0:58:08:f7:b0:48:9c:a5:53:fe:a4:42:77:21:eb:
d7:34:29:43:79:38:26:b3:9d:d7:86:61:a5:19:34:2d:e0:8f:
cc:4e:85:52:19:17:6f:2b:5a:88:2a:91:87:74:be:37:30:13:
02:04:7f:2e:59:72:a5:b5:3d:58:9b:2f:7a:50:3c:de:b4:9e:
4d:60:da:85:9b:cf:b4:b7:4f:ce:54:72:a5:20:91:35:4d:c2:
59:83:38:09:56:f0:3f:d4:e7:fd:06:b6:e5:18:38:bb:28:53:
28:76:2d:d1:19:ed:2c:c5:41:e9:d9:d6:33:14:59:6c:57:d9:
0a:c3:04:d5:f4:c0:31:e5:05:8c:0a:d8:cf:2a:12:79:64:71:
b0:fd:a9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:34 2025 by rpki-client