Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json)
Hash identifier: N5Q2c0HNLWPcTDBKFj6OYvDzsKoEAraEHeaH4z+Fvrw=
Subject key identifier: 67:FB:A3:C4:42:29:3A:49:64:81:8B:52:E0:D1:2C:DB:9D:D6:4B:99
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 0199FE472BBBC3347B30613E5F1700D41323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
Manifest number: 0F4F
Signing time: Sun 19 Oct 2025 21:01:41 +0000
Manifest this update: Sun 19 Oct 2025 21:01:41 +0000
Manifest next update: Mon 20 Oct 2025 21:01:41 +0000
Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: guA9fOMLaNPSGNGYlIDbgQqI/OJ7uB6EjLt2qAvaXTE=)
2: uurNEPjhRtDIDBb3Oc-e5-rgs-I.roa (hash: N52vo6FqVd0GdLu55AAXlbmzEZo+baOISMz+vvdeY6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:2b:bb:c3:34:7b:30:61:3e:5f:17:00:d4:13:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Oct 19 21:01:41 2025 GMT
Not After : Oct 20 21:01:41 2025 GMT
Subject: CN=67fba3c442293a4964818b52e0d12cdb9dd64b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e2:74:0b:0f:b4:6d:22:7e:24:fd:b6:bb:83:
59:0a:3e:17:f2:74:18:87:f3:68:5a:a8:7d:e6:45:
78:af:1d:70:f4:d9:6e:19:c9:da:9b:6a:c2:80:57:
e8:59:21:33:a9:d5:ce:7b:6f:b5:91:47:e6:d8:2b:
c9:5c:00:52:83:cc:86:0c:64:50:9e:51:39:a4:8b:
13:be:73:46:51:32:e2:e9:21:b2:4b:0c:32:33:94:
07:3a:a5:b5:47:a5:11:50:5a:70:76:73:cf:b9:9c:
58:8e:ab:cd:4b:fb:e5:71:80:5c:eb:8b:e3:60:70:
1c:c7:ee:de:54:bc:2d:97:9a:1f:8f:b9:e9:5a:45:
1b:5a:d9:d0:44:ca:f1:1a:9e:9e:63:0b:23:65:bf:
ce:61:91:83:68:e2:a5:8f:35:5c:f8:90:09:40:d3:
d4:6a:c9:8f:41:7e:95:03:c9:c3:09:59:fd:b8:f9:
53:d9:a1:da:22:94:00:ca:eb:16:2a:94:f9:3d:3a:
a8:80:46:7b:2e:cf:65:9b:70:33:25:2d:2e:a1:95:
33:b1:c4:1e:39:d7:d0:08:ec:3a:61:12:99:0e:fc:
b9:e8:52:8d:dc:11:2c:36:f1:9f:73:4d:9a:a6:5a:
7b:57:dc:90:16:78:b6:6f:99:08:cd:18:67:f7:96:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FB:A3:C4:42:29:3A:49:64:81:8B:52:E0:D1:2C:DB:9D:D6:4B:99
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4a:9c:0b:88:3c:29:53:16:d6:f9:97:35:d4:d4:4c:ce:e3:
43:bf:84:c5:df:e3:54:e0:99:c5:a0:e4:06:52:28:19:3a:4f:
5d:5d:3a:b5:69:54:e6:09:d8:e2:7f:46:18:fa:be:d4:80:01:
fb:2d:42:82:c7:b2:97:fd:0b:cc:60:6d:10:ff:c0:b9:f0:ec:
fc:74:15:6f:04:1e:b2:f9:90:2f:da:f3:c5:e4:22:f6:3a:0a:
f9:6d:c1:65:6b:ec:6b:ef:49:e9:f7:86:6f:dc:84:60:33:71:
e3:e2:a0:c4:41:a1:77:db:ac:13:4d:2d:c4:33:93:f6:40:ab:
74:95:15:71:ae:a9:ed:42:8d:43:df:e0:82:8c:f6:51:78:88:
d7:fd:79:b5:23:19:84:0c:4f:70:6b:f3:30:08:66:97:07:66:
58:1e:b5:22:e3:21:64:a4:29:69:f0:be:31:8f:04:1a:f9:2c:
ad:a2:a9:85:82:b2:ed:9b:02:54:7a:b7:0c:f5:8f:c2:22:aa:
46:09:d2:30:c9:c5:a3:8f:3a:41:ff:3c:32:ba:43:9c:33:36:
a1:65:b1:ee:3f:b9:c9:5c:a8:d5:f3:92:dc:17:56:b1:67:fe:
a4:bf:ae:ad:7f:8c:bd:b9:9f:36:e9:1d:c8:4a:1d:3e:67:8f:
29:ff:4d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:47:19 2025 by rpki-client