
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
File: tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft (raw, json)
Hash identifier: ajGOBH7rFk+jmFicQ/Ygji80guzxAoX5/ZiMRLdgV68=
Subject key identifier: BE:BD:D7:4D:86:DB:38:69:6F:8E:51:E6:6E:2B:13:9D:1E:9C:5E:C6
Authority key identifier: B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
Certificate issuer: /CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Certificate serial: 0199FBEAE38734BEA0A37688F05BE11A84CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
Manifest number: 0F7C
Signing time: Sun 19 Oct 2025 10:01:38 +0000
Manifest this update: Sun 19 Oct 2025 10:01:38 +0000
Manifest next update: Mon 20 Oct 2025 10:01:38 +0000
Files and hashes: 1: tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl (hash: 1ScFuQeiz+vrzZ0TwUG01U9BggsSCxQVJIAsdqpqQhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e3:87:34:be:a0:a3:76:88:f0:5b:e1:1a:84:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Validity
Not Before: Oct 19 10:01:38 2025 GMT
Not After : Oct 20 10:01:38 2025 GMT
Subject: CN=bebdd74d86db38696f8e51e66e2b139d1e9c5ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:4f:39:f4:7d:2e:1d:f5:e7:30:52:e7:76:
b4:5b:8c:88:18:8f:de:f1:8d:19:45:ca:14:82:3a:
fb:16:af:c1:55:27:d8:12:ee:45:cf:74:41:28:5b:
26:2b:f9:53:c0:fe:9c:be:1a:d7:53:9a:57:d0:21:
08:40:fe:80:d0:52:59:ea:58:1a:e5:19:75:1a:de:
ac:47:ec:e4:ed:55:29:3d:49:5d:25:a3:fb:5a:f9:
f9:3a:25:0c:8b:84:1c:f4:fb:c4:69:f9:81:0e:43:
92:41:6b:f7:e0:cf:f8:f6:32:b8:eb:a9:65:03:ea:
a8:eb:de:7e:86:c1:1e:2c:be:f5:30:21:ba:95:94:
01:30:bf:75:c0:1e:e2:2d:71:34:0f:62:8f:0c:da:
d4:7c:94:e4:3f:c7:f6:f7:fb:2d:42:f6:4b:14:05:
9f:71:ba:bf:2d:f9:91:da:bd:35:fe:b6:31:f3:76:
d7:8d:59:60:e5:d9:23:6d:a4:e8:9e:f2:e9:66:8b:
b5:20:f9:3a:97:f6:ec:41:6b:62:cd:26:5c:bc:a7:
f2:cc:d1:c1:1c:95:c7:89:9e:05:8b:ba:2f:a6:5a:
48:19:39:23:21:4a:58:77:5e:8e:48:5f:02:70:46:
57:1d:29:18:95:c0:ff:ff:59:5f:df:f7:a9:0f:1c:
ea:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BD:D7:4D:86:DB:38:69:6F:8E:51:E6:6E:2B:13:9D:1E:9C:5E:C6
X509v3 Authority Key Identifier:
keyid:B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:99:5d:63:7d:09:cf:f8:42:d7:eb:09:87:eb:df:0e:df:32:
15:3a:e3:fb:09:3f:b1:cf:de:1a:f3:6a:3d:e1:74:d1:bb:95:
75:4f:ff:2a:28:80:c2:8b:47:ff:30:42:8c:47:6d:ef:4e:c2:
3c:c0:27:03:1a:93:c1:fa:9b:e9:c6:05:41:bb:b2:11:13:ab:
12:8b:b0:72:a4:54:e2:60:64:c0:0c:de:ed:68:45:40:48:e3:
52:3b:ae:98:b7:a2:63:04:f3:a1:66:98:00:fb:c1:22:50:c5:
b5:06:2e:73:8e:cf:c2:b7:09:4c:12:e3:e2:04:1f:16:0e:81:
ea:b7:4f:56:96:0a:2b:9f:60:d9:d9:e4:b3:93:e1:ac:c7:c4:
27:ad:11:ca:f6:dd:4e:6b:5f:d5:97:53:28:3c:8c:5a:f4:09:
3d:09:b8:19:0d:3f:2e:e1:64:d4:14:c5:f7:db:a7:c4:6d:62:
54:44:37:de:a3:61:f1:e8:ab:07:64:74:86:af:c5:80:bd:3b:
5e:94:c9:b5:a0:66:d6:3d:7d:1e:c5:fe:b2:9d:cd:c5:1e:5f:
c7:23:3e:37:49:f9:ca:18:9d:ce:43:bc:18:a8:15:fc:34:64:
ce:36:c9:2d:9b:e9:3b:6f:9c:77:8e:e4:91:dc:c4:77:df:65:
00:36:5f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:01 2025 by rpki-client