Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft
File: oFZPeYAZBRh04Czu4_0hy86rSuk.mft (raw, json)
Hash identifier: vux5juXKFd3O+St11hd55txpUziHjyjeCpIDRI2y9+Q=
Subject key identifier: 30:1C:D4:D8:C9:71:45:AE:08:9D:86:57:A4:64:31:F1:06:36:B5:9F
Authority key identifier: A0:56:4F:79:80:19:05:18:74:E0:2C:EE:E3:FD:21:CB:CE:AB:4A:E9
Certificate issuer: /CN=a0564f798019051874e02ceee3fd21cbceab4ae9
Certificate serial: 0199FC586FF8AEA8826EFD198604FE108F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFZPeYAZBRh04Czu4_0hy86rSuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft
Manifest number: 0BE8
Signing time: Sun 19 Oct 2025 12:01:18 +0000
Manifest this update: Sun 19 Oct 2025 12:01:18 +0000
Manifest next update: Mon 20 Oct 2025 12:01:18 +0000
Files and hashes: 1: oFZPeYAZBRh04Czu4_0hy86rSuk.crl (hash: 13U9qhqmgcCdLVz8sjqoWQfZp/5MbzEzobka9RUv2u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFZPeYAZBRh04Czu4_0hy86rSuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6f:f8:ae:a8:82:6e:fd:19:86:04:fe:10:8f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0564f798019051874e02ceee3fd21cbceab4ae9
Validity
Not Before: Oct 19 12:01:18 2025 GMT
Not After : Oct 20 12:01:18 2025 GMT
Subject: CN=301cd4d8c97145ae089d8657a46431f10636b59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6c:4e:bc:4e:69:70:3c:4e:78:c2:be:39:96:
37:29:7d:21:96:c4:0c:74:cb:2f:ca:f9:1f:48:e8:
d2:63:0e:16:0e:04:8e:f8:e9:52:e4:f9:99:76:09:
dc:0a:c6:dd:c8:04:79:f2:1f:b2:71:5a:bb:26:f4:
19:be:15:52:99:5f:6b:8e:e4:2f:02:f7:c2:9e:6c:
43:de:c7:2a:e1:1c:ed:52:d4:cd:e2:16:3a:d0:09:
a1:33:bf:53:e9:ac:87:fb:69:73:40:13:39:29:8a:
aa:66:7b:8f:c1:72:e8:2f:45:a3:f1:22:2d:67:67:
c6:ce:74:50:0e:70:36:71:32:f8:de:85:50:6b:8e:
8f:16:1c:b1:9a:78:ce:4b:cf:b2:62:2a:27:4b:b5:
68:87:a5:3f:0d:59:3a:23:f7:f4:b1:ab:a9:0f:ca:
97:10:d8:dd:55:41:0b:40:69:26:71:50:14:12:a6:
4c:67:c0:91:3b:54:a4:0b:ed:15:eb:9c:57:48:13:
b3:44:a6:77:9c:96:15:18:3a:dc:bf:5f:49:16:d8:
3b:1f:fa:28:fb:24:aa:1e:92:c2:0e:49:ec:9b:fe:
20:83:cb:39:de:8f:5a:16:bd:36:b1:b7:b9:85:0c:
d1:51:de:33:08:05:7f:b1:df:5e:e8:6b:81:94:4d:
c5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1C:D4:D8:C9:71:45:AE:08:9D:86:57:A4:64:31:F1:06:36:B5:9F
X509v3 Authority Key Identifier:
keyid:A0:56:4F:79:80:19:05:18:74:E0:2C:EE:E3:FD:21:CB:CE:AB:4A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFZPeYAZBRh04Czu4_0hy86rSuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4c:ea:71:d0:43:8a:2c:61:60:a7:ac:89:61:76:bb:af:fe:
ed:48:75:1c:e5:1b:0c:74:a1:0c:5b:eb:03:b6:8a:78:4d:f0:
bd:40:cb:91:7a:46:0f:fd:15:da:92:99:52:10:a5:9f:bf:f2:
91:64:07:f1:11:98:e7:1d:0b:64:67:36:e4:c0:e8:8b:31:1e:
10:3a:07:1c:8a:c5:dc:c4:8b:8b:71:2a:be:35:74:a0:30:d5:
43:b1:28:1d:d1:f0:df:af:b8:71:f3:10:c4:0f:f4:a6:51:04:
06:de:26:ea:44:72:e2:86:ed:0e:ad:32:3c:dd:9c:02:56:f8:
66:14:e8:5e:c0:64:16:ce:0f:bc:5d:fa:58:eb:50:79:e1:a6:
08:0b:94:de:46:67:f5:7b:23:ff:4a:7d:e9:1e:53:64:a2:8f:
7f:f3:b2:c1:e9:95:f4:4a:5e:fd:20:15:96:ad:61:e2:0f:86:
69:b6:f6:15:bd:c5:e3:69:01:70:f1:48:f0:f3:02:8d:d6:5d:
4b:bc:58:60:02:a5:8b:99:4b:78:44:58:67:85:25:2b:22:07:
23:31:b5:83:1d:5f:f3:73:68:2a:6d:b0:cd:b5:61:8e:1b:eb:
5d:54:4a:10:e1:de:e3:15:0d:ea:74:16:71:bf:c0:f0:04:5e:
3a:ac:99:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:01 2025 by rpki-client