Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
File: OeHApbBM1BmsHvkjvI1lcDIwYdo.mft (raw, json)
Hash identifier: LWBcpNq92ly5d6tpnf02p6mmhtDG6bMBum0F6HVxXRE=
Subject key identifier: B7:E0:32:22:16:5D:54:C7:31:76:87:B7:11:DE:73:99:16:01:F2:F5
Authority key identifier: 39:E1:C0:A5:B0:4C:D4:19:AC:1E:F9:23:BC:8D:65:70:32:30:61:DA
Certificate issuer: /CN=39e1c0a5b04cd419ac1ef923bc8d6570323061da
Certificate serial: 0199FDD93CE6CFF31C0511A34272FDE4D3F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 19:01:36 +0000
Manifest this update: Sun 19 Oct 2025 19:01:36 +0000
Manifest next update: Mon 20 Oct 2025 19:01:36 +0000
Files and hashes: 1: OeHApbBM1BmsHvkjvI1lcDIwYdo.crl (hash: lf25/wr2RL2OtksMrhQzY3pcx/xNIONQKWQiAD6WDxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:3c:e6:cf:f3:1c:05:11:a3:42:72:fd:e4:d3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e1c0a5b04cd419ac1ef923bc8d6570323061da
Validity
Not Before: Oct 19 19:01:36 2025 GMT
Not After : Oct 20 19:01:36 2025 GMT
Subject: CN=b7e03222165d54c7317687b711de73991601f2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:b1:d9:59:57:aa:00:a3:98:fd:c6:d3:80:
39:1c:92:21:74:1f:2c:91:85:a3:5a:51:95:96:42:
33:7c:89:3f:4f:b2:b6:b9:39:a0:8d:06:65:b5:1b:
de:28:04:07:4d:6b:fa:9e:d4:82:b9:e8:d0:3a:bd:
d0:9a:38:06:67:6a:d7:06:c6:82:ea:7f:ec:66:72:
01:9c:ac:bc:cf:01:99:54:3d:cb:30:53:8f:e2:21:
fd:72:b4:4f:fe:7e:34:9a:f4:20:9d:9b:30:cc:04:
ed:3e:dc:a7:21:c3:e7:f0:b2:56:70:cb:aa:50:8c:
a5:93:ca:da:fb:70:02:7a:1a:05:12:1b:9c:6a:1a:
f1:30:5b:b5:fb:3d:d2:70:44:e2:2d:93:6a:b7:1d:
81:89:23:2f:01:36:97:ac:0d:b2:51:27:b3:05:4f:
86:9d:03:1a:e3:e9:d3:86:10:01:37:f6:89:17:5e:
66:f4:8f:97:06:5f:a5:cb:a0:65:68:8f:39:a8:9e:
9a:c2:bd:84:00:5f:be:95:84:c7:8f:8e:c3:3a:b1:
33:94:51:66:0e:f3:04:4b:38:53:52:83:ba:96:4d:
20:03:f3:90:2d:01:b3:a1:bc:53:ad:f5:36:70:97:
f2:06:f2:db:4d:07:01:1e:8f:ea:2c:42:60:1f:db:
2c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E0:32:22:16:5D:54:C7:31:76:87:B7:11:DE:73:99:16:01:F2:F5
X509v3 Authority Key Identifier:
keyid:39:E1:C0:A5:B0:4C:D4:19:AC:1E:F9:23:BC:8D:65:70:32:30:61:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ae:78:87:c0:d5:0b:ba:51:0f:3c:60:6a:4a:a7:a4:8f:27:
b8:d5:8b:11:17:5d:77:21:49:45:32:f6:b4:2f:81:44:62:46:
70:b7:96:94:ff:cf:3c:8b:0f:8c:08:60:04:0c:1b:93:bb:e5:
49:9d:41:e4:2b:31:ff:69:4d:63:fb:c4:f2:3f:fc:79:1a:0a:
74:23:06:df:5b:41:9e:2d:ec:20:52:45:5f:a9:3b:69:47:fd:
28:be:d5:17:c2:9d:35:6a:93:36:c1:8e:97:0a:b5:6d:a3:d2:
cd:2c:3c:6f:b7:13:47:15:5a:52:8a:6f:fb:18:a2:b2:d9:1a:
a3:5c:4d:85:a2:24:bd:79:b6:92:fa:6e:89:18:dd:7e:b7:9b:
13:5b:e2:e8:8e:6d:5f:74:22:aa:21:c0:0e:42:35:e5:9b:b4:
b2:bc:10:72:9d:2d:1f:0a:90:98:1e:a0:9b:2d:05:41:c2:86:
4c:eb:9f:32:83:53:4c:af:1e:e4:68:ef:a3:0f:cc:2b:32:bf:
13:61:f7:43:8c:41:4b:98:ae:bc:fb:2d:3d:57:65:de:46:f6:
94:96:69:82:4c:9d:30:ba:68:b8:8a:3e:ad:0d:e8:ca:e0:fa:
d7:b4:e1:85:7b:22:3a:a4:50:c7:81:fa:bf:19:53:9a:bc:8d:
ec:48:1d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:23 2025 by rpki-client