Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
File: OCvsQ90a_pemT1brhUx58WP6TuY.mft (raw, json)
Hash identifier: 0csdfSp5xDZrPB/GcUUkriLkulO9zEsMwjOjJFJ++ZA=
Subject key identifier: 3D:53:4D:F1:2B:10:F3:DE:6A:13:DB:38:A4:B6:D9:14:39:AD:DF:AB
Authority key identifier: 38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
Certificate issuer: /CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Certificate serial: 0199FD6B2B68100F4AE7E9260D99F127D530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 17:01:23 +0000
Manifest this update: Sun 19 Oct 2025 17:01:23 +0000
Manifest next update: Mon 20 Oct 2025 17:01:23 +0000
Files and hashes: 1: OCvsQ90a_pemT1brhUx58WP6TuY.crl (hash: Y7HxG0+obGucimsv1TIBsKy3p1hYAFBHS9KasCo4MQ8=)
2: ZcMWvBkTNFkQiz2yA0G8DNGlqp8.roa (hash: ElsDKcX3/AeNMZDxpF6Opg+D9XtiydscqeFlhPJCg+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:2b:68:10:0f:4a:e7:e9:26:0d:99:f1:27:d5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Validity
Not Before: Oct 19 17:01:23 2025 GMT
Not After : Oct 20 17:01:23 2025 GMT
Subject: CN=3d534df12b10f3de6a13db38a4b6d91439addfab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fd:45:a7:26:b1:37:93:12:45:a0:d8:31:8e:
a1:b4:80:10:98:04:70:b6:cc:7b:11:bb:3c:6d:ca:
a4:a3:84:cd:83:95:29:19:22:a7:90:17:6a:39:1e:
24:ce:4d:27:41:04:2c:75:5c:66:1e:fd:89:e2:41:
c0:91:31:6c:cc:af:1b:27:28:e1:00:22:ff:c3:44:
61:81:9b:7c:88:7a:f8:7d:d3:ce:81:f5:af:c0:3d:
1b:fb:7f:c0:23:fb:cf:62:fe:2c:0f:85:d4:fd:90:
1a:6a:19:00:81:20:99:a5:c3:ba:2e:e3:a5:42:b9:
87:75:7a:9b:57:2c:da:a2:94:fe:13:f1:f6:18:db:
e8:42:f9:2a:c8:6a:ef:7d:d9:19:d4:1d:af:ae:41:
29:9b:3c:e6:30:14:81:48:e5:c1:09:eb:79:28:0e:
cf:2a:90:95:ae:c1:20:46:8e:c7:6d:3b:2b:4f:21:
52:b7:05:db:f2:90:c6:06:f4:b9:6f:9a:40:c0:26:
f3:2d:af:46:89:4a:62:46:fa:f5:2d:50:6a:8c:07:
fa:fc:fc:cc:0f:e1:6a:f6:57:04:80:22:1b:f2:75:
c0:48:5a:1d:83:ea:01:34:38:e9:ca:d1:f4:e3:47:
a7:78:0c:80:6d:2d:42:3f:23:de:a3:87:f7:90:a9:
2c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:53:4D:F1:2B:10:F3:DE:6A:13:DB:38:A4:B6:D9:14:39:AD:DF:AB
X509v3 Authority Key Identifier:
keyid:38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b4:2b:56:26:e2:73:dc:ab:c7:60:03:fc:d6:ce:71:bf:f5:
c8:f3:95:8d:43:89:d4:c6:2e:e8:f2:e8:64:34:91:01:cd:8a:
00:d9:84:e6:7c:b2:5f:20:5e:94:c0:f8:b8:07:bc:70:d6:42:
90:ae:31:8b:8f:34:08:7c:9c:01:37:0b:95:d9:01:71:b2:7f:
80:60:8f:2b:6f:4c:13:de:48:0e:a4:12:ce:44:1a:ef:04:61:
2c:9b:8d:a1:5c:52:55:6f:ae:b2:5d:77:fc:56:76:43:70:38:
32:26:04:c7:cf:8d:77:4e:23:70:8b:e4:8d:4e:43:54:59:91:
b7:01:e3:fd:15:6a:20:fe:a4:97:4e:a9:0f:b5:bd:cd:1c:6a:
cd:a1:95:08:d3:d5:d6:ed:0e:d4:3a:3a:0f:08:0b:45:1e:0a:
2a:1b:35:fc:7e:84:f9:db:83:3a:8e:02:6c:82:d9:f5:85:b6:
05:6a:b8:fc:3a:f8:21:16:c6:b8:5f:2c:7c:b5:a9:5d:98:dc:
96:4a:03:1d:6c:8b:2b:fc:87:ef:03:9f:89:fc:38:40:b1:e0:
f7:53:13:1f:d5:0b:0e:81:e0:40:ec:d5:76:58:73:05:9e:8c:
b4:5b:20:7f:02:ea:48:fd:8a:7c:1f:26:ee:54:b3:39:b0:68:
59:06:24:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:28 2025 by rpki-client