Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
File: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft (raw, json)
Hash identifier: Q99lJhLeydy81QJm8clXGuo/rznZ6vguuU6aQDPbMbw=
Subject key identifier: 30:1A:DD:7C:E9:16:53:62:85:CC:00:36:7F:DC:00:17:C1:87:7A:DE
Authority key identifier: A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
Certificate issuer: /CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Certificate serial: 0199FD6B710A702BF0325FD0C7CFFD78813E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
Manifest number: 08B6
Signing time: Sun 19 Oct 2025 17:01:40 +0000
Manifest this update: Sun 19 Oct 2025 17:01:40 +0000
Manifest next update: Mon 20 Oct 2025 17:01:40 +0000
Files and hashes: 1: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl (hash: KWftIXU+RN7OmNl12W9KI7PjwHZpFtzRWIQSAKS8Kq8=)
2: swurPPgvx5Mw_k7aI45OkF86THI.roa (hash: dit/va7s8wsuU7O85dlDJKzD74oG/IiETxDpxdGILWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:71:0a:70:2b:f0:32:5f:d0:c7:cf:fd:78:81:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Validity
Not Before: Oct 19 17:01:40 2025 GMT
Not After : Oct 20 17:01:40 2025 GMT
Subject: CN=301add7ce916536285cc00367fdc0017c1877ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a0:8e:ec:4b:e6:af:b9:92:d1:e6:9e:0c:40:
2d:66:e7:7c:c2:f7:7c:f3:db:d9:c2:c3:89:14:62:
45:63:a7:af:0f:af:b1:f9:54:b2:18:02:ba:49:f5:
ba:98:8b:ad:1d:08:84:21:15:ef:f0:85:21:3d:06:
14:31:f2:d0:a0:0f:b6:7b:a3:7c:ed:c6:02:96:88:
55:05:28:f3:72:22:82:59:bb:83:bd:34:b5:77:f1:
f9:d9:be:6e:66:d7:5c:89:dc:46:98:d5:cd:29:a5:
6a:34:8f:b0:44:b9:1c:43:d7:93:28:87:46:10:68:
d9:4e:a8:35:e7:18:7f:81:5d:e0:0a:6b:22:1e:8a:
dd:c7:81:24:4c:09:d7:af:a3:49:28:e4:e7:29:8d:
44:e3:bc:7c:58:c1:67:73:52:a8:05:f2:ee:74:80:
42:f1:16:d9:44:2b:c4:3b:43:3e:92:1a:4e:ab:bf:
79:c4:7f:17:4d:2c:4d:4f:7a:bf:0e:59:c4:95:dd:
de:7b:2b:fc:e1:41:48:06:2f:2a:49:56:b2:f0:07:
fa:20:52:b9:df:b1:96:32:1b:96:f3:6a:4f:c2:3c:
31:c6:7e:e9:9a:bd:fe:1d:39:93:ce:0b:d6:c6:fa:
89:59:64:65:0c:bd:38:5c:95:a7:4a:35:3d:2e:74:
d5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1A:DD:7C:E9:16:53:62:85:CC:00:36:7F:DC:00:17:C1:87:7A:DE
X509v3 Authority Key Identifier:
keyid:A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a2:c8:32:45:6b:86:42:68:b2:94:43:9c:7d:e9:04:1e:73:
7a:25:6c:2f:20:fe:0f:47:85:23:ac:98:ec:cc:fe:1e:38:83:
d3:4f:89:fd:48:a1:72:29:dc:01:ed:1b:cf:19:81:9b:b9:49:
af:c4:70:72:d0:51:d6:4a:da:fd:de:f1:c1:7d:04:b6:ed:8f:
36:c9:f3:b4:0b:38:d9:b1:cc:09:da:8b:d4:7d:aa:bd:ce:4f:
66:db:c5:5b:92:98:f1:a6:f6:3b:5f:6d:5a:1c:ee:07:59:22:
a4:ab:a0:ae:1d:cf:77:dd:5e:0a:a3:12:b7:30:78:5c:1f:3c:
1d:55:e0:7f:9f:74:4e:67:c9:67:1d:e8:34:c1:c1:b4:dc:90:
e0:92:dd:c7:9b:81:31:27:34:85:73:35:ae:e2:36:aa:f7:d3:
b1:0d:58:e9:a5:24:1c:29:87:3d:ad:54:64:1d:48:20:a8:da:
9e:da:60:75:62:cc:b2:a2:86:1d:89:66:53:b7:dc:f1:bb:c9:
27:17:a5:57:e4:9b:84:c8:f5:a0:b4:ab:9b:db:16:1c:74:32:
62:3e:a5:aa:3e:f3:37:51:5d:56:3c:5b:58:e6:b0:05:d0:35:
db:df:6a:33:49:75:b7:18:8a:0c:f7:35:11:a5:a7:1e:e3:29:
49:ad:13:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:03 2025 by rpki-client