Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
File: OXbmqwhMnu7ehuKva95yFSdLlac.mft (raw, json)
Hash identifier: l0xwooYsYfTHy1H1E7eoQicSffQQVdRtJrgTitHhpLQ=
Subject key identifier: FF:EE:FB:27:E1:D5:8B:D6:32:94:DD:26:E4:25:B5:BD:13:5B:61:FB
Authority key identifier: 39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7
Certificate issuer: /CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
Certificate serial: 0199FDD99190B907F72EF32FFB855849D2A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 19:01:58 +0000
Manifest this update: Sun 19 Oct 2025 19:01:58 +0000
Manifest next update: Mon 20 Oct 2025 19:01:58 +0000
Files and hashes: 1: OXbmqwhMnu7ehuKva95yFSdLlac.crl (hash: iSV9/C95bNGk2HOJHJudsXjt+LEWp+DMWyZ/IUTLu3k=)
2: bS8D5tTeBAXDkMQSy-j-MAcdPro.roa (hash: R+yA1y5Nb8S44doc/dttKyd8pVatx4WMIyAI41rpB+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:91:90:b9:07:f7:2e:f3:2f:fb:85:58:49:d2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
Validity
Not Before: Oct 19 19:01:58 2025 GMT
Not After : Oct 20 19:01:58 2025 GMT
Subject: CN=ffeefb27e1d58bd63294dd26e425b5bd135b61fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:b1:62:e4:4c:41:c9:c4:ff:c6:ce:70:b6:
df:e0:41:3c:1a:a8:f6:95:cb:89:1b:c7:b3:f5:51:
41:60:9a:03:ad:62:8b:9d:e9:2b:29:67:eb:4f:5b:
6b:94:57:ad:08:34:a4:75:0e:bb:0f:19:eb:6d:8b:
4f:f1:43:c7:06:a5:78:ed:db:4e:24:be:8c:c1:20:
a4:78:39:47:7c:9b:80:c1:e5:65:c8:3e:91:62:b0:
cf:d0:86:81:bd:b7:fa:ea:2f:28:e1:54:66:dc:05:
97:38:32:ab:00:7b:70:ca:4a:1e:6e:be:e8:41:62:
f5:59:e9:73:96:4c:a0:50:0e:f3:18:39:01:48:06:
c3:4e:ac:ee:d9:11:f2:c2:39:85:85:9b:68:d3:99:
e6:2f:c1:a4:5d:46:ac:7d:b3:55:00:08:cd:df:e7:
fb:ec:24:c4:45:04:b7:3a:38:4d:84:7e:90:4f:db:
ba:e6:ec:8e:98:cb:c9:f8:8a:f5:e2:7a:3f:79:72:
0a:76:99:da:cd:6f:95:76:0f:ca:20:26:b1:fc:8c:
ac:d1:27:29:2b:6d:4c:88:2b:4e:9f:b1:18:69:ef:
4a:e5:5e:78:05:01:db:60:2c:fd:a9:a7:dd:19:67:
40:7b:12:49:8b:00:bb:49:28:14:c8:e4:db:1e:99:
e4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EE:FB:27:E1:D5:8B:D6:32:94:DD:26:E4:25:B5:BD:13:5B:61:FB
X509v3 Authority Key Identifier:
keyid:39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:57:b7:ef:98:28:0c:cc:da:66:56:12:3b:8a:b5:ad:ad:1b:
44:60:23:5c:fd:88:f3:31:02:7b:90:d2:91:ef:43:03:90:98:
d4:c8:7c:a3:c5:f0:48:f9:72:79:f5:92:92:93:85:f2:78:bd:
4f:25:ce:06:6e:d6:1f:8b:c9:4c:d0:97:a3:75:a2:35:30:47:
f4:0a:6e:9e:20:1a:61:aa:21:54:e5:cc:e1:35:50:d6:17:c1:
f8:5a:b0:32:40:6f:eb:59:4c:8f:6d:7b:65:b9:9f:6f:c6:0d:
97:bf:1a:b1:93:2a:96:9b:dd:97:a7:12:ff:5e:29:67:2b:f2:
7f:46:e3:34:88:b4:44:5a:dc:cb:1b:31:23:c2:3b:61:78:f4:
6d:72:f6:62:eb:e0:53:d6:39:53:79:a7:37:94:f5:69:79:50:
31:e6:90:20:4b:7d:62:c5:3e:01:3b:28:79:0c:0b:82:74:5b:
bb:78:f5:83:6b:a0:89:6a:62:71:36:ad:4e:14:52:24:f3:11:
c3:5c:7d:73:36:a5:39:50:a5:db:81:a8:8b:4e:a1:25:2d:dc:
b5:87:3b:07:f1:36:30:2f:05:d3:f4:d4:28:83:b7:76:4c:d4:
43:08:9a:69:e7:72:9c:4f:5f:cd:a0:91:a8:7b:f5:7b:e3:00:
b3:ae:15:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:16 2025 by rpki-client