
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
File: 1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft (raw, json)
Hash identifier: hqEczMyXJt22X0ELPUjnWuuMRNFuKtdf9zCjX6voUmE=
Subject key identifier: EE:73:B2:2B:EC:FA:82:63:36:95:2C:FC:14:17:5B:E9:AA:5B:2B:C0
Authority key identifier: FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4
Certificate issuer: /CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
Certificate serial: 0199FC213DE066ACCC78BD9F1DEF81EEC59C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
Manifest number: 11EE
Signing time: Sun 19 Oct 2025 11:01:00 +0000
Manifest this update: Sun 19 Oct 2025 11:01:00 +0000
Manifest next update: Mon 20 Oct 2025 11:01:00 +0000
Files and hashes: 1: 1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl (hash: WGkX6LNCLHorXA2Qn9dqCDQ/Xm5/AUr3SiNcXZUnjiU=)
2: oCmBMF8iI8CutVf6sdX1dTs5wPg.roa (hash: TfgX1fiboG0xroG328eMyAxUa0ejT6atD6RIyf61++A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3d:e0:66:ac:cc:78:bd:9f:1d:ef:81:ee:c5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
Validity
Not Before: Oct 19 11:01:00 2025 GMT
Not After : Oct 20 11:01:00 2025 GMT
Subject: CN=ee73b22becfa826336952cfc14175be9aa5b2bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3d:be:90:21:ae:02:a2:19:81:60:85:36:b0:
7a:90:75:00:72:11:de:41:f4:72:ce:cd:97:5d:e9:
da:89:5e:ac:05:69:57:02:d9:ee:b1:43:c9:c9:16:
b6:39:3f:05:11:0b:d2:71:b7:fd:2d:8e:4c:f0:4a:
e8:45:e0:cf:91:49:0f:8a:0a:5d:15:98:91:8c:9e:
95:71:da:dc:29:0e:16:62:c5:18:c2:d2:7f:66:40:
5d:12:29:e3:fa:38:97:45:d9:46:2c:ac:e6:8b:78:
9f:95:ca:95:29:11:bf:88:90:6b:2a:ab:b0:cf:e1:
26:04:2f:23:f7:23:f3:7f:5f:71:47:82:80:86:cd:
11:46:51:79:9a:39:5a:5d:e0:56:6a:9a:2f:2b:55:
4e:7f:8e:a8:41:cf:53:d8:59:99:a9:72:9a:3d:23:
4f:d7:6f:c1:3f:f8:d4:25:ae:5b:5c:9b:29:81:c0:
30:ad:15:2b:76:ed:a4:0a:f9:fa:8e:f2:54:a5:48:
98:c5:92:76:da:bf:91:87:4c:16:b7:85:e9:62:e7:
dc:f9:f4:f3:08:62:31:a7:aa:6b:aa:29:4c:01:2d:
d4:90:86:c5:19:a5:5a:f1:66:4f:16:b0:fb:54:e6:
90:ae:4b:3e:ee:a4:b3:6e:fb:ac:53:07:36:36:25:
61:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:73:B2:2B:EC:FA:82:63:36:95:2C:FC:14:17:5B:E9:AA:5B:2B:C0
X509v3 Authority Key Identifier:
keyid:FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b9:fa:13:76:d7:55:96:cc:a1:0e:3f:53:39:01:bd:ff:d6:
d5:66:4c:78:46:2d:10:a7:63:24:2a:b8:81:71:0c:aa:62:23:
54:84:7d:b7:1d:b6:ca:f3:a6:c8:63:5d:4a:f7:cf:23:be:19:
19:d7:f5:be:e7:be:93:33:63:d6:27:cf:0e:13:3a:16:ed:59:
9d:ee:80:ee:2b:18:0a:47:18:65:e7:37:50:9d:76:35:a1:f1:
60:a4:c3:f1:19:78:96:d2:85:5f:61:e0:59:2d:ab:ab:69:be:
0c:90:6e:6c:21:12:a3:1d:9a:0a:2f:3a:9b:ac:65:20:f3:e4:
63:26:ec:d6:03:0d:f8:63:5c:c0:48:77:d1:b5:f7:36:c6:4a:
85:23:47:da:49:81:b6:5a:de:63:17:0c:7d:7c:4e:4b:10:d6:
aa:9f:c2:63:fb:d5:78:7c:70:09:a9:6f:67:64:ae:cc:ec:35:
ef:ff:66:db:9b:52:2d:a7:fc:52:31:36:7e:99:91:ab:4d:be:
cb:f8:4f:3a:52:8f:4a:f5:83:88:0f:2b:ee:38:9a:5b:60:73:
41:08:77:39:fb:01:a8:b9:df:7c:08:ad:5a:bc:d6:db:49:ed:
c1:e4:3e:cd:02:fa:62:9a:0a:bf:28:73:15:93:44:89:36:fc:
f6:37:74:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:09 2025 by rpki-client