Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
File: oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft (raw, json)
Hash identifier: Ihmph0A1MBDx9PW9SkH5ZQIhGQ+fS2I28zJDRvSjTeU=
Subject key identifier: CD:97:4E:ED:B8:D3:EF:A5:C7:86:0D:5B:6F:73:CE:3C:3A:E2:01:A5
Authority key identifier: A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
Certificate issuer: /CN=a1a4582562c3135bb52bdb96145e1ad03786b148
Certificate serial: 0199FBEAB992772C0AFFFC5F14F8B30FCDCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
Manifest number: 1487
Signing time: Sun 19 Oct 2025 10:01:28 +0000
Manifest this update: Sun 19 Oct 2025 10:01:28 +0000
Manifest next update: Mon 20 Oct 2025 10:01:28 +0000
Files and hashes: 1: oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl (hash: dMZX+eGspnCLONz7TXM7f5Ft5qneu+Saj0aBksypV4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b9:92:77:2c:0a:ff:fc:5f:14:f8:b3:0f:cd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a4582562c3135bb52bdb96145e1ad03786b148
Validity
Not Before: Oct 19 10:01:28 2025 GMT
Not After : Oct 20 10:01:28 2025 GMT
Subject: CN=cd974eedb8d3efa5c7860d5b6f73ce3c3ae201a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6a:72:2e:55:4b:d7:c2:ab:a4:4b:1e:c1:53:
8e:46:c3:89:18:b7:ca:f6:29:02:76:95:55:df:5f:
c5:27:de:a5:af:39:aa:7f:40:99:67:1b:c9:ec:ba:
ab:ba:3a:05:1d:6c:c7:32:33:8b:db:0d:88:c0:71:
15:88:f0:1d:d9:6c:0c:f5:8a:5d:2e:9b:70:8f:34:
3c:5b:c0:6d:0f:cb:db:c7:6c:10:8a:b7:d4:7f:a5:
7c:5f:c3:76:f1:49:0e:de:39:55:b0:30:40:ed:11:
00:35:fd:26:c0:48:2c:1f:d5:4b:ab:ab:37:55:4f:
af:4d:e3:f0:a7:82:27:78:6b:40:a1:b7:87:e3:a3:
c9:8d:09:e0:4f:91:62:d3:92:af:bf:6d:e3:37:35:
2c:8f:26:0d:fe:f3:bb:a7:39:99:26:7b:fb:27:aa:
f7:9b:b6:a0:f9:7c:ef:6d:1b:dd:0a:1b:f0:6c:d3:
94:0b:e5:b0:0f:a0:a5:43:8d:9b:ce:57:81:90:0e:
cf:4c:cb:de:82:b6:9e:7c:5c:ec:da:dd:9b:6c:c6:
3c:3a:a8:d5:17:61:f6:92:e5:2d:60:06:90:5f:fe:
b6:34:f0:15:54:9b:cc:9e:e7:a8:b9:98:d8:8b:1c:
cd:c1:d6:8e:00:88:7d:75:94:d0:c4:36:78:6d:83:
53:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:97:4E:ED:B8:D3:EF:A5:C7:86:0D:5B:6F:73:CE:3C:3A:E2:01:A5
X509v3 Authority Key Identifier:
keyid:A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d5:4a:8a:1f:a9:33:37:3b:d4:ce:f0:e9:a6:30:b6:1e:0a:
eb:7d:41:17:54:e8:09:b0:e2:f8:57:be:db:5b:4a:8d:a8:c4:
2a:10:6c:7f:04:59:c5:81:d6:c8:ae:dc:9c:2e:e8:eb:3b:b8:
fe:33:88:ed:18:54:76:2f:f2:5e:6a:1a:6f:49:63:c3:0e:31:
ac:38:14:de:f5:65:89:93:44:22:4e:e3:1e:f0:b8:5f:24:16:
27:ab:0c:a4:3c:f3:84:36:bc:79:ab:e3:8b:48:99:ba:5a:63:
ef:0f:ef:55:b8:88:43:3a:f0:73:39:9c:63:0a:07:75:e0:d2:
10:d9:8f:5e:c5:3a:6e:de:00:ee:0e:87:47:86:48:86:c4:54:
57:a5:7d:dd:47:97:0e:45:7d:47:67:3e:f5:d1:c5:29:15:de:
f3:3a:34:2c:c8:9b:8f:88:bc:66:18:87:0f:fb:3e:16:7a:db:
9e:80:51:10:77:64:bf:9b:3f:36:56:2b:17:2f:18:eb:17:85:
99:a3:7c:cf:f9:cc:9c:22:48:f8:96:b9:fa:57:e2:d5:59:3e:
a8:9b:4f:7c:5e:89:79:08:5a:0d:53:b7:ac:3f:c1:ae:55:28:
90:da:8e:b3:48:14:b9:81:d9:08:3b:bb:ce:81:92:df:5a:ff:
8f:88:cf:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:02 2025 by rpki-client