Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
File: oJRwOdnwgKQn91JcXQZvbPYhNPM.mft (raw, json)
Hash identifier: Q+VyDzpC54pUNuKOyY1hOTsodztNcZfxElrpr9iZXMM=
Subject key identifier: 91:10:E3:EB:CC:BD:10:10:3E:5C:0A:F6:22:E5:13:AF:F2:6E:35:9E
Authority key identifier: A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3
Certificate issuer: /CN=a0947039d9f080a427f7525c5d066f6cf62134f3
Certificate serial: 0199FD6AEED34A9AD0391607D9996A86CB52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
Manifest number: 085D
Signing time: Sun 19 Oct 2025 17:01:07 +0000
Manifest this update: Sun 19 Oct 2025 17:01:07 +0000
Manifest next update: Mon 20 Oct 2025 17:01:07 +0000
Files and hashes: 1: 2CUF8fkBOk7BwaT2x7tRMW9KGPA.roa (hash: czarYHJez6qAV6nXVQK9tcHYXpAXKKAJjoacYgptlzg=)
2: oJRwOdnwgKQn91JcXQZvbPYhNPM.crl (hash: bt7g+tIdhpXca1dTLYQVFWac4ppslT22ycb/D893N84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:ee:d3:4a:9a:d0:39:16:07:d9:99:6a:86:cb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0947039d9f080a427f7525c5d066f6cf62134f3
Validity
Not Before: Oct 19 17:01:07 2025 GMT
Not After : Oct 20 17:01:07 2025 GMT
Subject: CN=9110e3ebccbd10103e5c0af622e513aff26e359e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:0c:b5:26:c4:71:d7:91:11:7f:f8:55:bc:
a6:bd:8d:39:0e:a8:ea:9a:8a:24:4e:0c:9e:4f:68:
67:25:12:54:90:8b:68:5f:65:f0:c3:2b:07:15:83:
b7:6b:a6:97:99:74:07:df:ee:c2:fe:c3:a2:e2:67:
f0:5d:db:3b:f1:ea:9d:f8:c4:6c:a9:18:56:48:f4:
6f:a0:b5:c1:5d:20:87:63:07:76:52:8d:0e:97:ae:
86:b1:6b:a4:dd:06:43:1b:a0:98:c5:c5:ec:bc:1e:
04:f8:f9:39:11:0b:3e:02:06:5f:a8:f3:dc:60:b7:
55:95:29:72:92:c4:8f:9d:da:eb:0e:a4:5a:86:95:
c3:32:36:41:bf:dc:1b:63:e7:cf:f3:9b:73:e5:71:
4c:2a:02:90:5b:90:c8:83:1f:5e:e4:8c:84:89:6a:
5a:0d:93:af:16:0f:5e:9c:a6:3d:04:db:19:fc:0d:
a1:17:d3:59:ff:44:d5:52:a8:85:7f:74:3e:49:40:
71:69:8c:f3:24:d1:da:6d:b3:d8:9f:68:92:0e:0b:
eb:51:8e:6e:e2:7b:d5:72:51:f4:b4:70:77:8d:4b:
76:02:d0:ca:31:65:79:b0:2b:cd:0a:08:3a:53:25:
74:52:51:ad:f6:9a:28:b3:1f:0b:78:9b:9c:b5:a5:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:10:E3:EB:CC:BD:10:10:3E:5C:0A:F6:22:E5:13:AF:F2:6E:35:9E
X509v3 Authority Key Identifier:
keyid:A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:66:db:82:41:ae:da:0f:68:86:32:22:15:8d:a4:b1:27:e5:
1f:f1:a1:99:3a:53:4c:68:7d:29:f3:52:85:b8:c4:94:16:af:
3c:2a:22:9a:bd:f5:04:f4:59:c0:59:5a:e2:a0:71:4b:9a:6d:
93:88:51:d6:6a:0e:e7:00:14:9a:b6:d6:c9:9e:8b:cf:67:86:
8b:a8:10:d2:31:07:0d:38:9e:f3:6d:50:22:6c:e6:7e:38:a0:
6b:98:47:a8:43:d1:4e:ae:e5:18:8d:7e:e7:11:0c:0e:37:6b:
b7:03:e5:ac:19:b4:84:14:a9:73:8a:0c:ba:43:77:3b:e7:04:
26:b1:2f:04:f5:a3:f3:2b:a7:f0:18:ed:dc:2d:bd:e5:fd:57:
9d:92:be:7b:c3:41:8e:7f:66:ca:dc:3a:7c:ee:f0:9b:d5:98:
cd:cd:38:7c:27:b6:83:4d:0d:a1:b3:39:ad:53:69:1e:0e:c9:
08:3f:70:a8:61:28:fc:8b:b1:8b:bf:e3:e7:9e:52:51:40:7c:
10:b2:db:9c:dc:1f:29:1d:1f:81:66:ff:7c:42:58:03:4a:ef:
f8:6e:21:eb:b8:72:6e:9f:13:38:c8:32:fa:94:3a:81:cd:26:
65:32:c2:a9:20:ad:8f:ce:83:ab:97:ab:56:a5:69:ba:67:31:
03:59:7c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:36:15 2025 by rpki-client