Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json)
Hash identifier: 1qMovDofGoV9kC7+R9fJA9xj8y321q0Bg8hRnN1e4H4=
Subject key identifier: E5:80:D5:96:24:78:8B:75:46:39:FE:B0:B3:5D:DB:00:13:16:10:0E
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial: 0199FB0EE7E3DFF3CB7396EDA4124D7A456C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
Manifest number: 0DC7
Signing time: Sun 19 Oct 2025 06:01:21 +0000
Manifest this update: Sun 19 Oct 2025 06:01:21 +0000
Manifest next update: Mon 20 Oct 2025 06:01:21 +0000
Files and hashes: 1: 4DXia6r4DTEgUbfUdc0kmvwmm1Y.roa (hash: Z6UcUFwAm3cKPg0mR+/9vcq4H9MwUtI5vEk+Pz3XR3A=)
2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: DklkfCWA15UtqhrPiyjlSHPpMqkW7palAUwXFI0Nyvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:e7:e3:df:f3:cb:73:96:ed:a4:12:4d:7a:45:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
Validity
Not Before: Oct 19 06:01:21 2025 GMT
Not After : Oct 20 06:01:21 2025 GMT
Subject: CN=e580d59624788b754639feb0b35ddb001316100e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:1d:71:bb:02:7e:08:6b:61:29:49:c3:9a:
96:4c:0a:46:58:6c:e9:a6:1f:31:38:a8:60:19:a8:
35:dd:4a:33:1c:2b:7d:97:5f:a4:0b:7a:e9:e4:4f:
11:92:26:92:a2:c7:34:82:77:90:54:9d:0e:f8:3a:
e8:98:ba:0e:ee:6e:46:cc:29:fa:53:4e:2b:db:55:
60:07:ad:3a:92:5b:c3:5b:40:52:9e:27:28:52:57:
f7:3a:ba:24:ee:d0:81:88:89:7b:1b:ad:bd:31:95:
50:8e:93:53:82:8c:40:f5:a2:6e:ac:46:b8:47:41:
e4:ba:71:48:ad:b8:41:ae:49:1f:5c:25:d9:42:cd:
cd:5b:4f:8a:9d:38:57:8f:de:e4:d7:6f:d2:c3:6d:
5c:d4:8e:f2:6b:f6:9c:fa:d8:75:34:60:9b:3a:28:
fa:c3:84:29:68:7f:e5:a3:e3:22:a3:ed:b0:e7:4e:
ad:d1:85:9f:3b:d6:99:48:26:f7:20:6b:8b:69:41:
b4:81:5b:2d:61:69:29:b9:66:9b:d0:a2:82:47:6e:
bf:ac:ea:db:51:1e:51:1c:b2:93:bf:b6:61:a8:53:
e8:12:65:db:df:a6:aa:5d:cc:32:67:f1:7e:73:d4:
fb:10:ce:3a:21:d2:83:24:cd:bd:6f:cb:fc:a0:4c:
3a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:80:D5:96:24:78:8B:75:46:39:FE:B0:B3:5D:DB:00:13:16:10:0E
X509v3 Authority Key Identifier:
keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a2:58:87:5d:80:51:07:54:ca:f4:fa:0f:9c:50:b5:5b:0b:
ae:ca:fb:c7:b1:47:d5:78:eb:af:3b:52:6e:46:e4:f0:c7:9a:
d3:75:c0:6b:67:68:a4:3e:32:92:a4:4f:a1:c5:5d:6b:2b:45:
15:1a:1b:9b:7a:28:e3:26:42:1c:99:e0:50:92:dc:c0:1d:c0:
09:6d:24:73:37:24:da:be:e6:a1:b9:9f:cf:5b:94:b5:82:84:
12:a1:9f:d4:ca:89:6b:f8:23:37:33:ac:95:f4:b1:dc:84:31:
d2:0e:99:80:1d:a6:c3:8b:66:44:b2:41:84:67:af:92:71:a8:
cf:01:ae:a1:33:df:e9:9d:1d:ed:bf:e2:bc:68:5a:c7:77:30:
83:48:58:fe:b2:13:a7:f0:a1:35:da:c4:39:4d:cd:8b:6c:ba:
15:cb:04:ca:a7:e0:ab:13:85:71:84:93:7c:d3:dd:fe:44:15:
25:46:70:4d:fd:fc:61:c9:0d:13:f8:5c:65:43:bb:94:ba:7c:
fc:24:41:9e:a8:50:39:55:39:85:45:70:18:3c:76:15:a8:5f:
96:8d:22:d7:08:fe:15:85:56:51:35:c7:f0:1a:52:c4:aa:37:
3f:8e:1f:1d:25:79:5f:c3:77:9f:75:17:2d:ba:d7:bf:35:19:
7c:78:6e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:40 2025 by rpki-client