Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: q9SQjyo3mBbgzs3GhqFN4w1r9znoMonlviQy25RdDPY=
Subject key identifier: 53:28:0E:79:FE:51:77:35:DE:3F:8C:9B:EF:01:6C:01:6D:8B:30:06
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 0199FBEB7A7D999BFE0274F7B4BFDE2B8550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:02:17 +0000
Manifest this update: Sun 19 Oct 2025 10:02:17 +0000
Manifest next update: Mon 20 Oct 2025 10:02:17 +0000
Files and hashes: 1: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: LSvDYs0YKBHM38cQhbekT+zvGsFZVjncN2W738X9078=)
2: qPThmJkS6FxAgaSTFhSE99KManI.roa (hash: Do8CZ36UGaGoT9RKraM+Tjl00O5s0+cXk4PDU/3dbE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7a:7d:99:9b:fe:02:74:f7:b4:bf:de:2b:85:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Oct 19 10:02:17 2025 GMT
Not After : Oct 20 10:02:17 2025 GMT
Subject: CN=53280e79fe517735de3f8c9bef016c016d8b3006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4e:6e:a5:29:20:02:2c:6c:34:a3:3b:12:b2:
09:ea:92:8b:7d:75:76:5f:69:c8:c8:d3:c1:2e:49:
a3:ef:c2:38:6f:ea:d3:3a:28:03:54:57:2d:b9:37:
37:4e:27:29:54:e4:6d:bd:85:bb:01:68:83:c2:93:
7e:a2:77:41:78:c6:8b:73:e8:80:b1:eb:e1:34:e8:
f8:47:b7:ee:ed:c6:59:4e:26:a2:80:f1:e0:e1:62:
a6:8b:22:a8:6a:d3:6d:47:92:2c:b8:09:61:7e:2d:
a8:37:34:a6:c0:7c:ff:64:bf:67:b8:9e:2b:7a:49:
56:fe:6e:75:a7:66:15:4c:54:80:e4:b6:c1:48:7f:
4d:8f:ba:6f:05:dc:ed:44:2e:e8:96:7c:cd:b9:3e:
79:9b:a6:1f:f2:c3:8a:23:f3:55:91:c1:a2:22:8b:
13:2c:83:ef:7d:ea:e9:03:12:fa:6d:3c:96:18:59:
3f:27:c3:1f:27:95:25:f1:7e:4e:3c:d8:d1:fd:8e:
a2:e1:c2:9e:2d:1f:8d:39:1e:90:86:5d:ea:a0:9d:
4f:72:62:0d:ef:99:24:f1:22:57:e4:46:fb:ec:7f:
de:71:97:c6:81:74:25:9e:91:9d:78:7d:3f:d2:d4:
29:2d:31:d2:ff:e4:66:38:d4:ed:38:80:0e:b0:9b:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:28:0E:79:FE:51:77:35:DE:3F:8C:9B:EF:01:6C:01:6D:8B:30:06
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:26:04:03:1f:22:55:88:d3:36:9a:22:7a:76:8b:0f:d0:59:
bc:94:a9:72:26:0e:b1:ed:c4:2f:6b:2a:65:f2:d3:e3:05:15:
1f:6e:b6:ab:32:bd:17:9e:44:ab:a1:47:34:06:40:34:c3:25:
6f:12:51:42:92:ff:58:ad:ef:32:9a:ac:4e:51:9a:50:5e:79:
54:6d:23:d4:bf:e1:82:85:c1:95:1d:82:18:07:61:d4:1e:ad:
28:21:68:c7:00:48:55:d0:fd:ed:19:b5:5b:02:32:d8:49:b9:
ab:05:10:40:a0:d9:3b:c0:63:87:01:cf:ce:33:67:7b:27:0b:
91:99:48:4c:b7:29:0c:c0:99:43:6e:42:cd:d4:90:a9:9d:5f:
b0:5f:c6:68:43:a0:f4:e5:1c:8d:a2:e8:84:5d:dd:5e:dc:fa:
44:d9:ba:04:83:0b:d2:5c:a8:11:e1:ee:d3:52:f5:32:58:91:
ba:97:5b:65:e0:49:ab:a9:6e:ac:7a:3c:72:b6:79:cf:a9:9d:
66:a0:21:c0:3a:64:02:0c:be:54:87:c3:62:c0:e6:65:df:b5:
bb:ce:4b:83:16:1c:a4:64:5b:31:30:48:b8:39:aa:53:e7:e4:
3a:bf:9a:b0:d2:a4:b5:20:9b:98:b9:af:2c:45:f7:b1:0b:22:
dc:80:89:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:53 2025 by rpki-client