
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
File: oZ_WM6TT0hDez321fRIrZIuY7SU.mft (raw, json)
Hash identifier: JQkgWmnt1BiyQPO8LuRK/+k0PSnc9a+5BNFvtqLSswc=
Subject key identifier: 38:94:41:EC:79:1C:B0:22:87:30:D3:4D:39:7D:33:AB:4D:DC:D6:C2
Authority key identifier: A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
Certificate issuer: /CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Certificate serial: 0199FC58E9BEC061AFAF2174E717210B6AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
Manifest number: 02EB
Signing time: Sun 19 Oct 2025 12:01:49 +0000
Manifest this update: Sun 19 Oct 2025 12:01:49 +0000
Manifest next update: Mon 20 Oct 2025 12:01:49 +0000
Files and hashes: 1: miHlM9LoOvhYbZQONUYiQ010Y0Y.roa (hash: lxFbzya4PF93jTfC+wdGWG8lRjQOoMqPwgxmgMabAZw=)
2: oZ_WM6TT0hDez321fRIrZIuY7SU.crl (hash: jEhTOYY+vnKw3V/oQ7+lQzQquoRmSJcQtUexQtSR6bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e9:be:c0:61:af:af:21:74:e7:17:21:0b:6a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Validity
Not Before: Oct 19 12:01:49 2025 GMT
Not After : Oct 20 12:01:49 2025 GMT
Subject: CN=389441ec791cb0228730d34d397d33ab4ddcd6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:b3:ac:87:f0:33:50:1d:bb:d5:b6:0c:31:
c6:99:e8:24:66:61:0c:bf:e4:0b:66:6d:2e:f1:7b:
5c:ef:ea:fa:7a:b6:eb:28:05:2d:8b:df:a5:fd:fa:
7c:1a:d4:a9:aa:d8:90:7b:95:97:93:ff:a4:38:3d:
28:a7:b1:5a:15:96:32:68:c5:91:37:94:35:ae:0c:
ea:6b:68:c6:48:92:2a:fe:39:09:76:1c:d8:aa:06:
da:df:57:bd:31:41:81:48:26:d0:07:8f:ec:0e:f8:
9f:7c:da:fa:df:38:12:4d:24:c4:c7:43:5e:41:c5:
80:04:9e:ef:0d:fa:71:f6:33:78:28:8d:8a:85:27:
61:9d:60:0c:cc:11:ea:3e:c5:50:37:51:06:94:d2:
ef:f5:51:39:97:de:ed:a9:10:f0:f1:11:97:a4:0d:
eb:e8:d9:82:d2:ab:e3:dd:40:e8:d1:08:b1:0e:ec:
6d:06:b9:95:2e:fc:97:23:20:ac:4b:43:e6:67:5d:
20:55:5c:ca:b3:05:f6:25:0c:36:33:47:34:eb:c9:
36:3d:ef:73:08:3f:1f:77:d8:d2:6f:fc:7c:e8:bb:
ba:34:60:b2:35:61:de:15:e1:b2:a7:75:03:a7:6d:
fb:b3:2f:6d:30:a2:86:60:f8:b0:b1:4e:b7:30:b4:
ba:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:94:41:EC:79:1C:B0:22:87:30:D3:4D:39:7D:33:AB:4D:DC:D6:C2
X509v3 Authority Key Identifier:
keyid:A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5b:9f:e4:c1:c2:7c:5e:10:21:e1:43:1a:ce:6b:56:12:26:
c3:f1:6d:9a:5b:53:69:58:1f:ba:8e:65:35:c3:1a:a7:d5:73:
06:54:67:9a:e7:4a:b5:d6:5c:f3:bc:e4:fb:88:5e:a3:47:58:
a3:09:cd:df:3c:37:88:86:49:74:78:b7:da:9c:45:44:af:c5:
9d:38:df:40:7f:2b:ea:9d:c9:39:b3:41:d8:73:f0:f8:2e:43:
79:f7:9d:9b:e4:6c:ff:ee:79:ac:25:86:24:93:d0:56:7e:2b:
20:91:cd:35:ce:95:2e:58:77:6a:1a:1b:28:eb:00:28:7e:fc:
d1:dd:c4:98:40:16:93:44:24:46:15:c6:d3:28:a3:69:a4:ba:
ef:33:7a:97:1d:1d:17:2e:2a:78:06:56:30:41:36:2d:63:9d:
0b:74:e8:3e:63:9b:fe:39:f3:25:3e:5c:81:5b:c2:df:0c:f5:
82:4d:f5:8d:aa:b8:34:33:9b:67:02:b6:9d:14:f5:c1:1f:78:
e4:b6:fd:08:54:f3:f5:f6:a1:dc:66:b4:ac:38:02:69:58:2d:
d2:c0:0f:ed:a8:cc:23:55:57:b9:8e:bc:c8:eb:d3:3c:52:9d:
58:2a:e2:f3:43:0a:6b:5c:7b:32:4d:63:b7:d6:bb:04:04:2b:
27:2b:b7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:33:37 2025 by rpki-client