Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
File: oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft (raw, json)
Hash identifier: VN2JUh/L3ZqPcffxVrq6Kx+jz2PCYapsBl7CYN1MPiw=
Subject key identifier: 4E:7E:9D:61:7A:D9:07:77:C5:8E:92:58:90:3C:8F:CB:C8:46:A1:4E
Authority key identifier: A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
Certificate issuer: /CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Certificate serial: 0199FA6A4990D6E6AFE446A4863681E1320E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
Manifest number: 0836
Signing time: Sun 19 Oct 2025 03:01:33 +0000
Manifest this update: Sun 19 Oct 2025 03:01:33 +0000
Manifest next update: Mon 20 Oct 2025 03:01:33 +0000
Files and hashes: 1: oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl (hash: IoZNTZu0ZQgwJDQFAOv2LJlkcvXJE/8s0rOsgkRgHJ8=)
2: vVp_ERdrnRIqLCUsItb5VjVaAYU.roa (hash: qquI+vjzguENR1gQyNKb61rrA2a/ZfrzpGtiqom6A+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:49:90:d6:e6:af:e4:46:a4:86:36:81:e1:32:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Validity
Not Before: Oct 19 03:01:33 2025 GMT
Not After : Oct 20 03:01:33 2025 GMT
Subject: CN=4e7e9d617ad90777c58e9258903c8fcbc846a14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:30:1c:18:43:eb:10:00:c7:8a:07:5f:9e:
55:3a:0a:2e:ae:f2:ee:8a:20:8e:84:18:f6:5a:5a:
1c:ad:de:de:dd:f8:2d:6f:e3:1c:f4:b8:2d:0f:90:
ac:7a:b2:6f:f4:2e:7a:3f:1a:90:2e:58:58:ac:38:
6c:68:d7:8f:70:f8:59:86:90:77:3d:2d:22:59:f1:
71:52:66:4f:ce:f2:a8:3c:f9:33:61:2e:5f:a7:60:
37:42:1c:6f:20:fa:89:fd:a4:ff:9a:0e:36:ab:25:
8e:9c:8e:d9:3d:7b:2d:85:cc:e3:92:52:52:2c:33:
61:74:0b:19:87:60:0c:e2:b3:10:ac:15:b4:89:1e:
9c:35:55:bf:96:d1:fe:78:38:27:e3:35:15:c8:e4:
93:6c:2c:e9:00:37:11:45:fb:3c:8d:1c:1a:53:ac:
da:7e:7b:b0:b7:a4:77:c5:a6:01:83:c1:78:71:d6:
b4:5b:fd:33:5f:b7:5f:e2:76:cc:ec:ba:4e:1c:ff:
23:be:52:a6:63:10:ed:39:84:9b:5a:0d:aa:4c:88:
43:ed:c7:9c:1a:3e:29:28:2f:6e:b6:a6:88:fa:3f:
29:f6:96:8b:11:b6:75:ff:54:b0:7e:15:7f:8b:25:
50:89:5e:c3:f7:5f:b5:5e:84:3f:9e:f9:3d:87:a2:
e7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7E:9D:61:7A:D9:07:77:C5:8E:92:58:90:3C:8F:CB:C8:46:A1:4E
X509v3 Authority Key Identifier:
keyid:A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fb:2b:ab:42:89:12:88:d8:2b:e3:5e:81:6f:6c:dd:b0:86:
8a:93:1a:9e:ec:21:6e:b3:af:a8:eb:7c:a4:c3:a4:af:70:d7:
0f:c0:04:92:a8:a8:37:df:a6:11:55:e9:05:62:0d:9a:c9:dc:
bc:38:c3:b8:26:c3:66:ff:e8:a6:fe:35:4c:04:6f:dc:fe:70:
ee:dc:fe:15:83:74:d4:d7:d4:22:00:8d:c6:c6:b5:01:30:6e:
14:b7:84:04:84:cc:df:e4:41:36:7b:20:ad:60:de:2a:63:28:
ad:ce:70:cd:a9:bd:b4:16:87:1e:34:8c:bc:e4:a5:31:d5:7b:
83:cc:f9:d8:52:79:40:84:77:db:ad:30:df:73:0d:cb:76:27:
bc:68:d9:e7:ff:56:84:f0:d0:82:3d:75:8b:72:40:e5:af:20:
23:ae:31:11:1c:e0:f3:01:19:2c:80:15:e7:6e:b9:05:d5:72:
1b:00:09:37:d8:90:f2:5c:96:87:b5:0f:6b:c6:3a:cd:16:cc:
98:0a:dc:b5:67:76:82:c9:75:80:08:a7:24:7f:67:67:79:03:
68:e1:35:3d:4b:f6:b0:0f:6c:0a:b3:04:38:65:b3:50:2b:b1:
75:3f:be:d0:fb:77:96:dd:58:8a:a6:79:5b:35:9a:8d:e7:08:
42:87:23:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:44 2025 by rpki-client