Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
File: oU6-xYG-93sycD2LRtMnjBkaKz0.mft (raw, json)
Hash identifier: vDGeF33XxcBgcmfrU8E3ib0iLp8QMCzla71Br2e64MQ=
Subject key identifier: 4D:67:7C:27:15:B7:51:33:58:8B:5E:69:2A:8F:56:00:F1:58:3F:DB
Authority key identifier: A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
Certificate issuer: /CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Certificate serial: 0199FCFD8C6F4A0E5602A1728ACF0A293FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 15:01:38 +0000
Manifest this update: Sun 19 Oct 2025 15:01:38 +0000
Manifest next update: Mon 20 Oct 2025 15:01:38 +0000
Files and hashes: 1: oU6-xYG-93sycD2LRtMnjBkaKz0.crl (hash: J4V0ZU7Ov1vzF6s2kpWlGSDMQu9L7rgDjUEAbBrKIcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:8c:6f:4a:0e:56:02:a1:72:8a:cf:0a:29:3f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Validity
Not Before: Oct 19 15:01:38 2025 GMT
Not After : Oct 20 15:01:38 2025 GMT
Subject: CN=4d677c2715b75133588b5e692a8f5600f1583fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7f:36:e4:67:59:c6:20:81:71:fa:07:d1:c4:
eb:98:db:92:f6:1f:7a:23:a1:2e:fe:8e:76:d9:aa:
06:81:10:05:9e:9e:f1:ff:6c:41:09:0f:ae:b9:4d:
0f:28:19:ff:60:cc:cf:f5:1a:07:b7:cc:7a:01:8c:
ac:34:03:43:c1:22:23:8d:7d:0e:3a:29:e0:a4:90:
8a:f9:02:af:1f:e5:81:21:4f:2c:60:69:44:aa:36:
b3:ab:33:c2:7e:41:96:8b:f2:38:78:b2:2d:ce:1c:
71:23:82:b5:c6:24:7f:e0:2c:8f:ad:aa:6b:65:7b:
14:3a:3a:13:2e:08:2a:77:ed:48:32:60:66:5d:80:
56:0c:d0:d3:d6:b0:b2:43:9a:97:d6:fe:f7:05:9c:
01:83:98:3e:64:bb:95:7e:d5:49:26:03:ac:bc:bd:
7b:99:12:f7:c6:ac:6e:5b:92:f4:d9:10:c6:48:3b:
9c:8c:e7:c5:94:ba:c4:4b:a9:82:dd:0b:4f:89:54:
97:b8:f9:79:b3:07:18:3a:15:8a:65:cc:dc:8c:a7:
73:da:8c:d2:0c:ba:01:05:78:1f:c0:6f:f5:d3:e9:
d2:0f:45:33:e7:2b:8e:84:e5:2b:ea:60:d8:15:01:
5a:dc:79:18:c3:15:7e:38:6c:49:81:1b:99:2e:f7:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:67:7C:27:15:B7:51:33:58:8B:5E:69:2A:8F:56:00:F1:58:3F:DB
X509v3 Authority Key Identifier:
keyid:A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a2:17:89:21:32:67:36:9e:5c:a3:b1:0f:51:51:2c:02:3a:
41:52:cf:bb:7a:b4:78:8f:3d:38:6e:9b:0a:09:b1:6d:08:c9:
cc:0c:e2:f9:25:35:0d:2f:4e:3b:37:f1:80:66:81:73:94:cb:
4a:6a:8c:98:c9:3f:65:28:fd:e2:0b:0e:3b:50:8c:5e:63:28:
a6:eb:ac:a6:9b:c5:4b:dd:a8:35:26:46:8d:7d:1b:5b:91:bc:
8d:c1:bc:45:45:5c:32:61:a5:98:3e:82:9c:e1:4c:fd:49:13:
78:08:70:e9:74:18:0c:6a:58:ac:3f:ff:9f:a0:7c:02:af:ce:
c1:37:d0:d4:f5:6c:95:23:20:75:01:92:c5:c7:89:d4:5e:c7:
3b:04:c5:5f:5f:63:8b:05:c6:2b:b6:98:89:37:98:c5:bd:a8:
ce:1a:6c:51:0e:ee:46:61:ec:ff:97:71:11:d2:be:49:13:34:
05:fd:0f:fd:b1:25:0a:45:94:c6:30:7b:4a:58:72:87:9a:dc:
37:b0:d1:8f:75:65:43:5a:e5:5b:a7:ea:47:37:26:f4:64:13:
85:41:d6:d7:9f:97:f2:ec:0f:9c:58:a8:60:41:84:40:96:af:
d1:79:44:38:93:4a:8b:34:8d:01:2e:91:06:a3:54:7a:aa:0d:
69:80:09:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:44 2025 by rpki-client