Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
File: OIeaeKWKSFzNiXDwQy2489dxcls.mft (raw, json)
Hash identifier: rtMVkanYTIa0o9JEdm3ZV7KNFwRnTbFk/vT2GKfTVSc=
Subject key identifier: 7B:7E:8D:C6:C2:AC:6F:44:77:3F:45:8B:90:40:49:C0:22:E0:C3:BA
Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b
Certificate serial: 0199FC587BC71B90BC7E9FB1CA9DBEF93685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:21 +0000
Manifest this update: Sun 19 Oct 2025 12:01:21 +0000
Manifest next update: Mon 20 Oct 2025 12:01:21 +0000
Files and hashes: 1: OIeaeKWKSFzNiXDwQy2489dxcls.crl (hash: MKYOuvFbGgTHokUMifkU+5+DwUnk/MHqNsUqpq64Y24=)
2: aJF-_eUqR8Yma02F31ybPienJuY.roa (hash: duGwNDtPKrkB5Se3luyctTXBg25/A0K/ZPMK4FyGebo=)
3: xj83lBqnCiYenkchlr_-eEoB-30.roa (hash: rDaj6xDIGI3i5anidMQG7nyOyM3UPZwMFnNZdzH+C5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7b:c7:1b:90:bc:7e:9f:b1:ca:9d:be:f9:36:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b
Validity
Not Before: Oct 19 12:01:21 2025 GMT
Not After : Oct 20 12:01:21 2025 GMT
Subject: CN=7b7e8dc6c2ac6f44773f458b904049c022e0c3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:23:4a:e5:f9:17:3a:b2:d4:0f:4d:fc:05:2a:
87:57:7b:8c:6b:db:ca:27:e7:51:9c:e8:36:87:ca:
64:1d:c0:1c:a5:a6:ee:03:7c:df:7e:1d:b0:52:4d:
af:43:c3:c5:e3:e5:18:3e:37:8a:ab:30:da:c3:51:
36:2d:ff:0f:f1:e0:22:e6:2c:03:fe:f5:a8:30:07:
38:27:05:ff:c4:86:8f:c8:81:0a:50:96:4b:2e:07:
71:68:12:f0:b4:02:bc:74:d9:5c:af:f4:5f:fb:85:
fa:e5:c1:56:d8:f1:de:9d:3d:cc:27:94:81:6a:28:
0f:8f:78:97:34:f8:9b:a1:dd:4b:96:0e:72:e7:96:
cc:f0:d0:7f:a6:92:01:fa:ad:69:52:a8:ed:30:f5:
2e:1f:2a:af:03:39:9e:49:07:67:47:da:31:e4:48:
3d:9d:ec:7e:26:48:03:8e:f2:58:23:69:e5:b6:7e:
b1:41:a7:86:c6:ba:45:f2:1a:1c:de:20:9f:41:ff:
1f:54:99:60:1c:21:de:1a:02:98:d4:31:79:bb:20:
06:be:64:c8:28:24:8d:be:2e:c7:e9:46:ed:0b:82:
47:a8:0c:d6:99:05:76:a0:55:f5:b3:0a:24:f6:b3:
c0:5c:b5:95:57:fa:51:49:4e:94:d3:a3:d3:42:03:
81:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7E:8D:C6:C2:AC:6F:44:77:3F:45:8B:90:40:49:C0:22:E0:C3:BA
X509v3 Authority Key Identifier:
keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7d:1f:96:2e:e5:78:32:8a:6f:5c:7f:2b:f4:8f:a1:67:84:
f3:9d:34:ab:35:e8:88:f2:a9:e0:f1:84:7d:d3:87:2b:90:48:
02:fc:9f:f6:ae:1f:1c:cc:f8:cb:14:0f:79:d3:a6:9c:35:4d:
cc:f5:78:52:ed:7e:15:c8:e9:6d:dc:18:88:36:c8:2d:6b:0d:
68:6c:88:7c:fe:02:9c:c5:f5:a7:65:d7:43:76:50:1b:c0:05:
a9:d9:d0:c1:87:ef:4b:0b:a2:18:41:c0:95:e1:13:3a:a3:ba:
c8:ee:92:b6:95:f2:53:30:f2:49:0d:73:e5:ae:fa:98:2d:35:
61:4a:fe:e9:38:05:a1:1c:55:b2:7b:b0:da:ea:d2:93:b4:27:
d0:bd:13:04:3a:12:8c:44:9c:89:b9:49:cb:d5:6a:92:3b:37:
07:6b:7c:7e:6c:e6:5e:21:4e:e5:c9:ce:aa:d6:12:6c:08:e6:
9d:7d:7f:63:4b:48:1d:00:02:4e:bb:5e:59:61:2e:70:97:c3:
21:29:78:27:64:7b:cf:7c:89:83:bd:5e:8e:7f:e8:b2:7f:49:
3b:1d:fa:1d:78:94:ed:91:16:27:4b:89:9b:c0:78:46:ca:83:
67:76:67:ee:2f:d3:d1:7b:22:2e:2a:17:2a:fe:e5:83:65:02:
66:20:5e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:23:28 2025 by rpki-client