Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
File: OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft (raw, json)
Hash identifier: YScmYsolmoUfULy6IJsbrEWoQyNMcwSZUYQXpEFkFkU=
Subject key identifier: FB:E0:67:EE:1E:A5:FD:8A:55:59:0B:77:01:18:D8:86:71:F4:C6:EB
Authority key identifier: 38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91
Certificate issuer: /CN=3841266f2c94ac422b96a68a7500bb82c1179191
Certificate serial: 0199FF5935FC071FC97BA9B7CEC5ED5D1D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
Manifest number: 1639
Signing time: Mon 20 Oct 2025 02:01:00 +0000
Manifest this update: Mon 20 Oct 2025 02:01:00 +0000
Manifest next update: Tue 21 Oct 2025 02:01:00 +0000
Files and hashes: 1: OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl (hash: T3M/64HThtqNr04Xk3uDUS9dHt6dP2Q+jkVunHlrhG4=)
2: QOav3lyPZWYZ9A-33IdmOq4p0Mo.roa (hash: MbjZHir8r+jpFNjo1IiwrrSwZjkeJw6BZ6V05J/2V+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:35:fc:07:1f:c9:7b:a9:b7:ce:c5:ed:5d:1d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3841266f2c94ac422b96a68a7500bb82c1179191
Validity
Not Before: Oct 20 02:01:00 2025 GMT
Not After : Oct 21 02:01:00 2025 GMT
Subject: CN=fbe067ee1ea5fd8a55590b770118d88671f4c6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:17:6a:a9:5a:3a:57:12:63:78:ad:37:24:
fe:98:12:ac:ad:5b:23:a8:5c:4f:4c:36:f8:bd:63:
a0:a4:61:24:21:d5:b0:2c:8c:7c:17:91:a8:6d:d8:
91:55:54:6b:08:2a:85:cc:68:d3:96:cb:01:8b:3a:
38:f3:6a:ad:58:51:e9:37:08:03:cf:28:e7:e5:c5:
25:ee:94:cb:15:35:9e:18:10:05:ee:52:9c:fa:31:
e1:54:f1:bc:be:63:92:4d:98:bc:07:e8:4f:57:14:
fd:b9:0f:f6:ac:d3:e4:7c:ab:cb:3f:ac:3d:f3:83:
5e:7e:a1:41:39:bb:68:62:8b:1f:41:39:ea:b6:be:
d9:71:98:c4:e4:01:a0:9a:6d:d0:bc:92:7a:3a:6f:
99:8e:d2:9a:bb:82:c1:b5:f6:e2:14:45:64:c1:16:
1f:ae:60:1f:ec:fd:11:dd:06:32:95:a9:22:88:d1:
3f:53:eb:08:fa:c0:cb:ab:e6:fa:86:89:a9:28:a6:
1c:54:82:8b:67:21:38:63:c8:aa:e5:70:9c:69:af:
8e:6f:ca:0e:95:cc:7f:13:2e:bc:0b:a5:6f:5b:59:
e3:22:d5:5b:04:70:fb:61:e9:25:05:e7:75:cc:98:
75:1c:86:e7:9d:01:2d:82:46:e9:0a:4e:a6:4e:d1:
41:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E0:67:EE:1E:A5:FD:8A:55:59:0B:77:01:18:D8:86:71:F4:C6:EB
X509v3 Authority Key Identifier:
keyid:38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:86:7b:ac:f9:85:d0:d8:a3:aa:fb:6b:70:fd:29:8f:29:3e:
7a:a6:cd:ef:fd:22:2b:f8:a7:c1:19:8d:c6:c3:c7:36:3a:2e:
90:64:ca:e9:3e:a1:bc:87:96:3d:7c:6b:e3:44:2e:d7:b4:c4:
77:00:85:21:6e:e0:1d:d5:ab:91:87:b8:7b:79:21:c6:bc:14:
60:c9:7e:d1:05:ac:89:6b:72:bb:c3:3c:3e:42:59:9a:57:d1:
8e:d1:08:38:b3:f4:8c:29:b3:3e:2e:43:d7:90:7e:ae:e8:76:
c7:19:c8:17:a3:dd:c2:7b:4a:db:ed:c6:33:7e:4e:45:9d:0c:
9c:e8:e8:48:a6:de:7d:7f:fe:67:85:ed:bc:40:3e:a6:38:dc:
8b:78:62:62:fa:06:f0:42:7d:48:ae:fd:3c:fc:55:20:19:92:
60:17:28:c6:f6:f1:3a:56:e2:8f:61:41:51:9b:b6:49:5f:fc:
d7:5e:fc:03:a4:8b:0a:d8:5c:bf:97:e9:55:13:09:ce:89:68:
f1:a9:d8:c8:73:5c:10:cb:5d:15:4c:61:f4:fa:3a:6e:af:c7:
fd:a3:c9:ab:7e:ee:cc:ea:e4:c1:9f:b4:0b:13:3d:c5:01:80:
9a:9a:1d:59:e8:76:2c:04:7f:ea:9b:94:93:8c:5c:17:86:20:
b2:5a:93:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:56 2025 by rpki-client