Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
File: oeqN4xzspVgDzzrxTUpyea6ERtA.mft (raw, json)
Hash identifier: kXs0h7V5LcVxaAjKCXZjo8jNn3PQMDVBoc6hcBwdzvs=
Subject key identifier: 62:5D:D6:D0:E3:6D:F9:4A:03:46:E2:A8:D4:5C:9D:4D:33:53:C2:A4
Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
Certificate issuer: /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Certificate serial: 0199FB7CCFC7FDDB6FF7685D47A828CAA547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
Manifest number: 13AD
Signing time: Sun 19 Oct 2025 08:01:24 +0000
Manifest this update: Sun 19 Oct 2025 08:01:24 +0000
Manifest next update: Mon 20 Oct 2025 08:01:24 +0000
Files and hashes: 1: ZsbPyFKfDnHSbXB5Rdfyon4nTbQ.roa (hash: f+ETlYVDvmS9d48p0ZYmqykWIOKGSt0JzwDEXRuMaVs=)
2: oeqN4xzspVgDzzrxTUpyea6ERtA.crl (hash: Di+p+xyzF2gqPfwS4cGx1oqEusAKdJWwfZ8xwl/0f74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:cf:c7:fd:db:6f:f7:68:5d:47:a8:28:ca:a5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Validity
Not Before: Oct 19 08:01:24 2025 GMT
Not After : Oct 20 08:01:24 2025 GMT
Subject: CN=625dd6d0e36df94a0346e2a8d45c9d4d3353c2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:29:17:69:33:84:bb:90:41:40:d1:d3:2f:
6b:85:0c:d1:4a:ef:83:6f:05:3d:30:34:09:50:3e:
e9:a3:10:c5:c1:7f:1a:66:3d:dd:62:fa:55:eb:34:
8d:cd:09:2e:bd:75:44:56:c4:16:62:1f:8e:6e:63:
19:ed:bf:ab:9b:c5:90:8a:be:f6:6c:aa:a9:00:cc:
a6:84:d4:7d:de:b3:85:c2:43:b5:bd:f0:ab:64:06:
e4:bf:ca:6e:72:f9:72:72:50:ed:49:92:a0:f0:9e:
9f:64:49:79:20:e9:82:fc:f6:90:8c:8b:c8:7c:2d:
ae:6c:37:ed:58:17:6b:c8:0a:ec:7e:50:81:33:f2:
b9:94:a1:c6:79:03:78:3c:f2:87:94:58:38:8e:b5:
95:96:57:44:f7:7f:55:6c:2e:3d:21:81:37:2f:a5:
50:73:c3:f6:66:4b:76:9b:f0:20:cb:b1:1b:3a:5e:
f5:9a:3b:f4:68:db:73:c2:91:b4:05:bb:9c:82:03:
8a:4f:34:4a:36:46:59:6c:c3:39:b7:96:9d:62:75:
92:cb:8b:05:50:9d:ae:73:59:da:39:9d:52:c9:85:
c9:81:54:6f:8b:66:a2:36:50:45:a4:ad:44:70:6d:
51:be:c1:fc:15:44:d5:5c:62:69:e7:d4:16:7d:9d:
3a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5D:D6:D0:E3:6D:F9:4A:03:46:E2:A8:D4:5C:9D:4D:33:53:C2:A4
X509v3 Authority Key Identifier:
keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a3:83:bd:2c:1e:03:1f:89:1d:64:71:90:33:84:ab:f3:0f:
58:4e:63:07:5a:e8:a0:ef:18:6d:13:a5:ee:ca:14:b9:67:2a:
03:e5:76:36:90:bb:36:92:53:4c:5c:aa:8e:8a:49:7b:10:16:
25:20:a6:a0:93:bf:34:ce:c8:c5:65:10:84:e1:bf:c6:c5:41:
a5:bd:95:4f:95:dc:7d:b3:6e:5c:48:57:d8:f4:9f:02:4f:d6:
96:8b:36:17:b5:a1:cc:23:e9:5d:2e:f7:cf:07:9b:fb:17:8a:
07:d7:22:30:78:94:e9:8d:39:78:26:e9:64:44:5b:7b:36:1a:
6d:a8:e2:2c:1e:8d:4a:c0:c1:62:14:c4:80:16:08:57:e7:66:
6a:19:c5:9f:5a:f7:1a:24:0b:48:f5:af:86:d3:38:da:8a:8c:
61:fe:57:a6:85:34:53:80:37:d5:e8:85:6d:f7:9c:90:6d:17:
02:da:12:92:20:ef:90:ba:4c:d0:7d:dd:ac:b2:1d:cc:b0:24:
f5:37:f3:c0:94:e3:f5:28:44:b0:fd:18:89:41:e4:5c:49:7b:
06:e8:b4:05:1c:17:6d:9a:12:c8:ea:a8:e1:40:c3:58:e4:86:
aa:51:04:00:e0:2b:17:fe:77:aa:6a:4f:a0:da:ef:1e:5a:44:
b0:31:5c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:05 2025 by rpki-client