
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
File: O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft (raw, json)
Hash identifier: 1msCOC1H4NdCutmNAX374PJw6RR9QagPAvgkmDzon6I=
Subject key identifier: B3:3C:0B:99:3C:53:55:B3:5E:64:9E:59:E0:65:D9:53:D2:91:A0:87
Authority key identifier: 3B:A2:E2:7F:E7:54:26:EF:C8:B5:2B:26:8E:82:93:A8:99:4E:68:FD
Certificate issuer: /CN=3ba2e27fe75426efc8b52b268e8293a8994e68fd
Certificate serial: 0199FBEADC4894C57A4D8B8B34712F62F108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
Manifest number: 0F4A
Signing time: Sun 19 Oct 2025 10:01:36 +0000
Manifest this update: Sun 19 Oct 2025 10:01:36 +0000
Manifest next update: Mon 20 Oct 2025 10:01:36 +0000
Files and hashes: 1: O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl (hash: XX9HsyYoms2bUYd/vZ23Ybf8MVq3pwe4TuWSKBPuOGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:dc:48:94:c5:7a:4d:8b:8b:34:71:2f:62:f1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba2e27fe75426efc8b52b268e8293a8994e68fd
Validity
Not Before: Oct 19 10:01:36 2025 GMT
Not After : Oct 20 10:01:36 2025 GMT
Subject: CN=b33c0b993c5355b35e649e59e065d953d291a087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:4d:0e:ac:1f:78:f8:6e:99:34:02:7a:b9:
d2:09:5b:49:7c:65:ca:c6:c7:bb:87:da:6a:a5:48:
1b:98:7f:59:4b:83:14:2a:43:5e:f1:d0:76:67:2e:
9c:45:87:e3:69:55:1c:77:ee:98:e1:51:0f:2a:48:
a8:28:bc:98:b7:57:33:de:4a:43:3c:e5:dc:a5:b3:
da:bf:6f:a5:4a:4b:30:a5:f8:09:82:e3:8b:71:0d:
fa:fa:d6:26:7a:7b:3e:f8:ff:d9:d3:c5:53:f1:c9:
bb:d2:4b:4e:c6:cb:84:ae:54:33:40:f2:fb:a7:f9:
ba:58:55:6c:36:af:d8:bd:65:ee:10:7f:5b:0e:5e:
a6:f0:c4:63:54:ab:58:4d:ba:5e:c3:d2:d8:17:45:
81:c1:5e:66:b3:80:24:2e:f9:95:92:2c:19:8d:02:
de:25:55:a8:4d:77:06:f7:95:8d:04:dc:24:20:20:
e9:7a:7e:c9:06:29:7f:aa:65:14:e2:c3:78:e4:3b:
2b:48:d2:a9:b3:e6:98:74:71:2e:83:25:9f:25:49:
39:16:86:3f:b2:85:2e:18:19:ee:36:ab:e2:df:46:
74:c6:24:11:53:80:df:c4:28:1d:7a:f7:06:5c:82:
06:4d:bb:99:f1:52:44:a2:2d:37:60:e0:dd:f9:8e:
a3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3C:0B:99:3C:53:55:B3:5E:64:9E:59:E0:65:D9:53:D2:91:A0:87
X509v3 Authority Key Identifier:
keyid:3B:A2:E2:7F:E7:54:26:EF:C8:B5:2B:26:8E:82:93:A8:99:4E:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c9:37:ed:84:2d:35:5b:89:3f:86:24:db:be:c7:7a:70:59:
d7:1c:c3:c7:ed:f9:61:55:bc:ec:a8:de:05:db:88:28:fb:ad:
03:4b:b4:68:2c:48:a6:bc:01:83:09:2e:cd:be:5f:93:6f:cd:
04:c1:f4:e9:90:ca:52:26:31:3b:00:5e:22:f1:9d:bc:e3:8d:
dd:de:34:bd:a0:f6:ec:06:e8:0b:7f:43:f6:8f:80:c8:3f:c9:
18:10:69:bc:32:b5:8d:3e:a5:77:88:b1:1d:f3:f1:ae:5b:91:
7d:bb:3c:4a:cb:02:21:98:bb:84:da:f9:08:8e:48:79:45:cc:
f7:51:e0:0c:92:bd:8c:dc:a9:7d:90:ef:00:48:94:9d:3b:f4:
6c:34:84:70:9d:7c:f6:15:af:a6:e8:db:d2:a2:02:8f:6a:90:
bf:e6:f5:4d:5d:3b:82:46:f3:89:4d:ef:5d:18:57:ec:da:2d:
fa:9a:6e:ea:91:87:15:ab:00:f6:26:18:1f:da:f2:8a:b4:82:
99:b1:2e:41:53:af:d7:19:70:1f:d1:cb:2f:8e:ff:18:77:f0:
f9:37:a2:3e:66:18:79:23:27:a4:52:93:ef:04:6e:83:91:28:
25:11:c6:d4:09:90:d0:81:87:5d:e9:c1:be:a3:54:4d:95:d9:
c6:47:24:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:22 2025 by rpki-client