Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
File: OJsvo2UTg6f8aoatulbHxiB9dWg.mft (raw, json)
Hash identifier: 92xqYewEwGns3qeT11IZsllI0C2SJzd4u2+/+8gPGbc=
Subject key identifier: F8:C5:49:62:BB:13:BE:5D:A1:F9:7B:1E:9B:9A:BC:AF:D3:CB:BA:36
Authority key identifier: 38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
Certificate issuer: /CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Certificate serial: 0199FC219AD2E92DB4DB0B9C08147F9FBCD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
Manifest number: 0ECB
Signing time: Sun 19 Oct 2025 11:01:24 +0000
Manifest this update: Sun 19 Oct 2025 11:01:24 +0000
Manifest next update: Mon 20 Oct 2025 11:01:24 +0000
Files and hashes: 1: LVniV-fBUsD2XHyiKXh59lNaKck.roa (hash: e7ROoJyN3pM39RDR+x9hRmjX8OTAnl8OOTQ8mCyFwtU=)
2: OJsvo2UTg6f8aoatulbHxiB9dWg.crl (hash: G4SzaFiECyXKRey+AGMb6pWIq6yqVTxBSyDe64tY48E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9a:d2:e9:2d:b4:db:0b:9c:08:14:7f:9f:bc:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Validity
Not Before: Oct 19 11:01:24 2025 GMT
Not After : Oct 20 11:01:24 2025 GMT
Subject: CN=f8c54962bb13be5da1f97b1e9b9abcafd3cbba36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:a2:20:36:c6:89:28:e6:25:16:3a:27:c3:
7d:1a:ce:26:eb:38:ff:bb:83:67:21:5d:c7:72:81:
2f:4c:12:25:e8:22:30:91:e2:65:cc:10:ae:b2:19:
5a:56:7d:b7:07:78:f3:ef:df:e3:53:a9:3c:f9:a7:
2e:29:13:06:7b:12:b9:73:97:47:dc:bc:eb:6b:73:
40:27:88:67:1e:a3:95:ee:b6:e4:40:0f:6a:09:a1:
d6:52:34:6d:c3:e4:7d:d2:af:02:73:bd:e6:0c:6d:
5d:eb:28:79:19:92:68:19:30:e4:aa:17:de:1a:ae:
7f:8e:07:33:5f:2f:d8:bf:d2:d4:07:d9:cb:84:0c:
e5:d3:0d:b9:38:81:ce:de:fc:87:6f:4c:07:d9:13:
e8:a0:46:47:14:2f:bb:30:aa:0b:6f:ee:ab:6a:25:
e4:a5:6c:7e:57:08:c6:21:ff:02:ad:6b:62:90:78:
b4:79:09:85:a7:8a:8f:8d:9c:99:4c:0e:69:ec:18:
57:0a:5e:b6:e1:8f:b7:e4:33:26:47:c5:9a:d1:c9:
b3:91:72:38:7c:ad:da:f0:6b:1a:21:14:d3:1e:af:
eb:d9:b1:23:6c:0d:f6:c3:53:38:4c:f8:08:83:03:
8f:da:cb:65:82:f5:39:79:ed:5b:1d:fc:7a:c2:16:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C5:49:62:BB:13:BE:5D:A1:F9:7B:1E:9B:9A:BC:AF:D3:CB:BA:36
X509v3 Authority Key Identifier:
keyid:38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:64:cc:41:a8:bc:a4:8f:5d:6a:83:87:66:b1:18:75:c5:65:
2f:30:56:3f:cb:be:f4:b7:9c:69:96:54:9b:f5:ea:e5:e5:9a:
f9:63:a3:ca:61:c7:de:47:69:44:7c:d1:8a:6c:8b:9a:bb:53:
05:5f:6b:6b:b0:5f:55:b0:c0:ea:56:fd:5a:8e:22:b8:dc:60:
b1:90:69:da:44:13:c3:40:19:3f:51:c4:61:45:2a:cb:62:eb:
ab:cf:f7:98:8f:5a:25:e4:e1:0b:b9:89:40:2f:07:bb:ca:23:
5a:10:09:73:a6:3a:fd:d1:d4:8f:a9:0b:d1:f8:4d:c1:76:65:
c7:6e:f6:cd:f7:a0:54:22:29:96:c2:7c:7d:6a:7d:2a:97:80:
3b:dc:fc:7c:1d:46:7b:5c:e1:95:ac:e1:0f:d7:e6:ca:90:2a:
e5:29:69:df:06:b2:b8:a0:53:9b:94:69:38:e5:e9:e3:9f:ea:
1b:3d:6e:74:0f:fe:30:5a:f9:ee:a3:77:32:c6:7c:3c:41:77:
8b:0c:65:60:73:4e:89:a5:e2:11:91:c8:da:34:56:f6:1a:9a:
a8:be:b4:4f:b0:05:64:91:b8:d2:23:fd:72:48:74:66:0c:7c:
85:32:54:84:c2:bb:9a:5a:30:66:95:49:64:b3:db:0b:0e:f6:
ea:1e:e0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:16 2025 by rpki-client