Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
File: oJzYxxpuMygsBF2PiMOzeKz0G9k.mft (raw, json)
Hash identifier: CH6uDwq+4fvfhJG5pY9wbNEJTMWNzz/USCJSSyYIIxU=
Subject key identifier: 54:13:33:9C:F6:1B:AF:CC:1B:04:BD:FD:DC:E3:CD:F3:14:6D:18:B0
Authority key identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
Certificate issuer: /CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Certificate serial: 0199FE478BA7443FA71306A781CBCFE5FCD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
Manifest number: 1121
Signing time: Sun 19 Oct 2025 21:02:05 +0000
Manifest this update: Sun 19 Oct 2025 21:02:05 +0000
Manifest next update: Mon 20 Oct 2025 21:02:05 +0000
Files and hashes: 1: oJzYxxpuMygsBF2PiMOzeKz0G9k.crl (hash: L1ysgN1urvujd28iLl598g0u5lecEtAB5tB9CInQLUQ=)
2: pO6JOWv_WdU5UYruljyF3xtIEXQ.roa (hash: 6mBeADEPhX3Wn3E6Qd5AZNwAKvX4/dbYe8jgqQoewTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:8b:a7:44:3f:a7:13:06:a7:81:cb:cf:e5:fc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Validity
Not Before: Oct 19 21:02:05 2025 GMT
Not After : Oct 20 21:02:05 2025 GMT
Subject: CN=5413339cf61bafcc1b04bdfddce3cdf3146d18b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:b8:ad:41:9a:53:9b:7e:d1:14:e9:49:db:
f0:4f:5f:80:f4:87:02:f9:b3:07:ee:9d:78:5e:48:
9a:6d:bb:1b:f2:48:d7:58:4e:0b:6d:6c:15:3d:75:
ca:c4:0b:d9:e0:e0:bf:64:a7:62:9f:75:e8:68:6d:
a2:e5:a6:e0:c0:96:de:10:6a:d0:48:fc:7c:6f:d8:
0d:de:20:ed:0b:12:31:ec:9a:03:c9:ef:6b:ab:65:
b3:2d:9c:33:d8:01:30:5a:72:bc:d3:87:68:ef:e5:
39:1b:c6:41:f4:85:64:25:c7:69:15:03:87:03:92:
24:cd:0a:d9:a3:43:ec:9c:46:6e:7e:59:88:73:cd:
13:ac:c5:97:11:df:e3:c4:61:69:7e:16:fe:2e:0c:
4a:d6:65:cb:4a:0b:ff:d0:b8:a2:48:d4:aa:79:d7:
53:69:9f:cb:9f:21:17:03:09:91:c2:aa:2e:b2:42:
d3:c5:26:ae:6b:01:5b:26:10:ea:5d:28:b5:69:1e:
51:9e:ed:ff:eb:6b:84:9b:97:35:d0:be:30:c8:bd:
71:5d:7f:b5:50:b0:7c:e8:ba:33:a0:6c:f4:7f:da:
1a:72:30:70:19:6f:7c:47:b7:04:95:97:f8:dd:93:
58:64:ba:5e:33:74:46:dc:c4:bb:7a:dc:7f:25:81:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:13:33:9C:F6:1B:AF:CC:1B:04:BD:FD:DC:E3:CD:F3:14:6D:18:B0
X509v3 Authority Key Identifier:
keyid:A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6b:9e:f9:7e:25:25:d3:53:e7:9b:3b:34:92:dd:ac:2b:b2:
b8:e0:d0:0e:d3:ae:5b:5b:41:60:a3:04:9b:17:69:32:af:1c:
b1:53:cd:13:b9:30:d8:46:a5:39:34:80:15:53:57:00:53:bd:
ef:18:04:84:8f:48:85:17:9b:42:ae:91:0b:e3:d8:28:99:62:
60:59:ca:35:18:7f:08:0f:49:1c:85:22:1b:1a:34:37:e4:96:
b0:e9:fc:8d:28:f8:39:96:03:fa:0e:c7:80:da:9b:34:ee:f7:
b9:9a:eb:89:f2:fa:ea:66:aa:2a:7e:49:59:92:da:b2:c9:62:
f6:43:df:53:74:8f:b5:c6:6c:4e:06:6b:46:4e:8b:ce:df:c9:
da:2b:5c:c5:7b:ca:9e:be:03:31:8a:f6:c5:c9:ef:ac:b9:1f:
54:38:6e:76:b8:41:d0:3b:e8:4d:76:e8:0e:44:83:ea:a8:1d:
ad:3b:a6:27:b1:13:91:5d:8b:d9:2f:8f:5d:d3:f0:fe:75:d7:
d6:99:f9:51:00:e0:54:b3:f6:0c:f9:d0:d4:c2:a1:cf:4c:a5:
31:88:08:49:d1:58:fa:61:6b:e7:93:93:6f:45:2e:40:ab:ff:
f5:89:2b:9f:d4:a5:6c:a3:9b:92:a7:e8:fa:23:4a:7b:6e:2a:
e6:c0:36:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:07 2025 by rpki-client