Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
File: oy2niZiHqsRJlYu5DrU1lRqXOgA.mft (raw, json)
Hash identifier: m4M3j2RkxHUBSTADNxguJ5U21wGoFVTa/FkgvhFdJHs=
Subject key identifier: 5A:BC:CA:A5:E4:CA:F3:D7:59:68:85:16:2E:41:A3:6F:BA:58:C6:19
Authority key identifier: A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
Certificate issuer: /CN=a32da7899887aac449958bb90eb535951a973a00
Certificate serial: 0199FDD9FC20B8599B30FF594B7158D346EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
Manifest number: 0FE2
Signing time: Sun 19 Oct 2025 19:02:25 +0000
Manifest this update: Sun 19 Oct 2025 19:02:25 +0000
Manifest next update: Mon 20 Oct 2025 19:02:25 +0000
Files and hashes: 1: oy2niZiHqsRJlYu5DrU1lRqXOgA.crl (hash: 27hkYUCe2S+VBXzZ8wwXNLEFQpjktk5PTJ1BFEVUhnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:fc:20:b8:59:9b:30:ff:59:4b:71:58:d3:46:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32da7899887aac449958bb90eb535951a973a00
Validity
Not Before: Oct 19 19:02:25 2025 GMT
Not After : Oct 20 19:02:25 2025 GMT
Subject: CN=5abccaa5e4caf3d7596885162e41a36fba58c619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:75:df:3d:c1:00:9c:bd:6d:43:74:7c:31:
55:24:de:d6:bf:13:ac:79:13:0c:3b:09:cd:56:d7:
16:7a:ee:d8:d9:3f:26:43:2d:b4:01:37:26:81:9e:
31:be:c6:a9:f7:a6:5f:85:48:d9:11:60:65:de:2d:
58:77:46:e6:3a:19:7a:e3:4a:b9:f4:06:ed:bc:83:
61:eb:ac:80:e0:07:a8:d2:09:d8:b4:ee:bd:f6:e2:
12:43:7c:e0:73:9b:25:4e:ab:a6:31:65:70:c1:92:
07:77:7a:83:1a:0c:eb:e1:ab:68:db:24:a4:6e:85:
85:2c:69:0e:33:ee:78:f7:bb:b2:66:12:3a:8d:e6:
38:e6:f3:d5:2c:84:39:48:10:4d:1f:4d:64:54:ce:
53:ae:d2:36:f7:2e:dc:eb:72:5a:0d:ef:24:05:b3:
93:bf:24:1c:f6:eb:ca:09:04:6d:e5:86:ae:a8:9a:
19:eb:48:a1:ba:17:a6:a9:2d:95:70:fd:0f:98:c2:
02:4e:46:61:69:f5:b6:67:64:90:71:97:cc:83:62:
a0:81:88:03:58:65:0c:20:49:06:1e:7d:92:aa:41:
64:4b:46:0f:72:46:a3:f9:b2:43:09:67:40:64:21:
c9:14:f2:d2:fd:0e:3a:8d:4e:40:11:28:86:54:01:
d2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BC:CA:A5:E4:CA:F3:D7:59:68:85:16:2E:41:A3:6F:BA:58:C6:19
X509v3 Authority Key Identifier:
keyid:A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:68:0f:53:1e:e5:f5:7c:1f:c8:7b:48:7b:5f:d4:37:a6:5d:
b7:72:f1:5b:68:94:cb:07:85:66:11:30:c2:75:61:6a:01:e0:
67:a9:e7:8b:85:28:3f:2f:98:c9:76:04:86:6e:e0:b7:30:66:
ed:d9:a4:25:64:33:1d:4d:c5:bf:af:38:5f:2a:4d:ca:6f:0f:
2c:b7:fa:18:4c:e7:9f:73:4d:65:41:c1:0c:7b:9f:f8:aa:d5:
60:72:88:75:fa:b8:cd:8d:ee:3a:d2:7e:af:06:72:bc:30:81:
ad:f9:2f:f7:e8:80:ab:27:52:ef:23:73:8e:56:fd:1c:b4:f0:
1a:3c:a3:bf:51:c0:bd:2d:9f:69:cd:fe:f7:5c:4b:46:68:b4:
38:04:e8:82:b8:87:de:96:7a:8d:f5:81:60:64:14:6d:43:8b:
6f:41:39:fe:bc:7d:41:d2:da:3f:24:79:08:45:22:7c:94:d7:
c7:66:73:be:66:5b:e7:f3:f6:9b:b6:fe:98:29:48:45:2c:d4:
98:db:ab:06:1c:72:fd:e8:76:0b:6e:98:f7:51:12:c5:6b:af:
ff:84:99:bc:14:79:3b:89:4c:ed:8b:73:f2:22:7a:bd:a8:37:
cf:2a:f6:c1:52:33:fe:64:cb:3d:7a:02:9a:9f:57:a6:ad:03:
89:cc:09:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:03 2025 by rpki-client