Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
File: OCeQLuylKp8IFACI9VjkUuDslV8.mft (raw, json)
Hash identifier: 733YRJyYjcP38mL2sAm7j3092/FzY4kA4Aws47p5ggc=
Subject key identifier: 12:32:80:41:D9:A3:02:E3:20:19:31:56:56:49:F9:3C:46:71:7C:3A
Authority key identifier: 38:27:90:2E:EC:A5:2A:9F:08:14:00:88:F5:58:E4:52:E0:EC:95:5F
Certificate issuer: /CN=3827902eeca52a9f08140088f558e452e0ec955f
Certificate serial: 0199FDDA191F6C478B99131CE709338E6D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
Manifest number: 01A8
Signing time: Sun 19 Oct 2025 19:02:32 +0000
Manifest this update: Sun 19 Oct 2025 19:02:32 +0000
Manifest next update: Mon 20 Oct 2025 19:02:32 +0000
Files and hashes: 1: 7nhLLpXwqJ1voHCkK-P1ueQH-PM.roa (hash: Y5wnVvyZMdqfWGL6r50VzIWMh6QnpnoTzvTu5ABQUTI=)
2: OCeQLuylKp8IFACI9VjkUuDslV8.crl (hash: GyiHH6yzSfcnXDVCirezLFg639LsFuV5WLarLmtODno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:19:1f:6c:47:8b:99:13:1c:e7:09:33:8e:6d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3827902eeca52a9f08140088f558e452e0ec955f
Validity
Not Before: Oct 19 19:02:32 2025 GMT
Not After : Oct 20 19:02:32 2025 GMT
Subject: CN=12328041d9a302e3201931565649f93c46717c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d5:d7:78:27:2e:ba:f6:5a:40:bf:73:a7:37:
7a:98:13:05:98:2f:df:96:02:4e:bb:23:22:7a:b7:
e2:68:3c:3a:18:f5:5d:62:7b:0f:3c:42:2d:24:e6:
9b:2e:4e:fa:88:0d:84:f6:20:a0:44:a0:e1:90:1c:
bf:b8:a2:47:92:a3:4b:67:f3:ee:e0:c3:a2:73:6e:
3d:5c:b1:7e:50:9f:5d:2d:87:01:fa:c1:07:3d:a3:
dd:12:69:d8:09:46:76:64:cc:8b:7e:e5:05:45:7b:
e7:5b:9c:d1:e4:8c:64:43:82:93:96:e2:f3:e6:2d:
29:20:07:05:b9:ff:9a:58:0e:10:ff:67:4c:65:fc:
2f:95:ff:4e:2f:a8:db:b0:a1:f9:e2:b0:7b:95:aa:
a0:b3:65:dc:15:33:e9:ae:1a:5f:b2:24:4d:fb:32:
37:0d:63:f2:f9:dc:82:28:bd:81:35:d9:db:5d:10:
0e:af:5c:cf:ac:e8:a1:7e:22:ed:fb:ff:ca:0b:2a:
2c:f0:b5:cd:4b:a3:0e:e4:a3:e2:46:ae:6b:c8:6b:
9e:fd:04:78:2b:1f:1d:4f:0a:80:ec:11:45:31:4d:
2a:ad:41:56:69:2d:68:8e:48:6a:81:9b:c7:a8:5d:
9c:fb:ba:cb:e5:75:ea:9c:bd:d8:6f:f1:03:cb:a2:
6a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:32:80:41:D9:A3:02:E3:20:19:31:56:56:49:F9:3C:46:71:7C:3A
X509v3 Authority Key Identifier:
keyid:38:27:90:2E:EC:A5:2A:9F:08:14:00:88:F5:58:E4:52:E0:EC:95:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3c:75:67:05:b3:ac:72:80:e5:48:df:88:61:11:a3:88:a7:
dd:a7:aa:e7:af:03:f8:70:fe:4e:48:6c:cc:ef:dc:c7:94:12:
e8:40:9a:db:55:9f:b4:df:f9:13:b8:e9:54:50:7f:ba:04:35:
23:ae:eb:a5:78:b0:91:95:09:f7:fa:a4:3d:d1:8c:0f:d9:4f:
fc:2f:fa:c1:66:05:f1:9f:98:fd:01:f5:ef:e7:9a:f3:8a:b6:
0f:de:81:39:20:64:77:d8:a5:4e:09:0a:f2:6d:8c:67:d0:d5:
86:19:67:9b:57:df:36:91:4a:68:37:43:3f:d6:99:90:25:8a:
d9:fd:b4:38:98:4d:28:6c:eb:94:62:6d:51:ae:14:d9:f7:a2:
9c:1a:31:99:34:d8:6e:21:7b:e0:c1:66:fb:f0:b3:2d:a5:a3:
7f:13:3d:d2:8b:5b:30:f3:04:3d:6f:85:75:7d:3a:ba:ec:2c:
68:ff:01:44:c6:9f:a7:e5:3e:17:3e:44:12:0f:5e:63:51:7f:
21:2c:d1:40:bd:1c:2e:54:f3:3b:85:ab:dd:20:2a:5e:04:d0:
75:de:b9:c7:00:53:5f:e8:76:f8:14:f5:da:4e:a4:2c:40:d8:
60:9b:bb:f5:fd:7f:f8:57:f9:9d:db:aa:ee:7c:14:bd:76:c3:
ac:2c:24:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:08:01 2025 by rpki-client