Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
File: oYNGitFuaZjU23dpvvv6BuofE0I.mft (raw, json)
Hash identifier: k2Qy1ohjp/2dzcArKIUz2ug/oacXnfKurS8c0aO7VCo=
Subject key identifier: D5:12:25:34:A7:7F:44:B5:21:A4:3E:74:A6:FC:29:E6:CB:00:E5:F2
Authority key identifier: A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42
Certificate issuer: /CN=a183468ad16e6998d4db7769befbfa06ea1f1342
Certificate serial: 0199FCC6C96295B2A97BC747B44A100F0567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
Manifest number: 105E
Signing time: Sun 19 Oct 2025 14:01:50 +0000
Manifest this update: Sun 19 Oct 2025 14:01:50 +0000
Manifest next update: Mon 20 Oct 2025 14:01:50 +0000
Files and hashes: 1: oYNGitFuaZjU23dpvvv6BuofE0I.crl (hash: TpT4fMIImfGGEFQS32ckiTpVk0fZU9bMDbzXQ5SRL9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c9:62:95:b2:a9:7b:c7:47:b4:4a:10:0f:05:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a183468ad16e6998d4db7769befbfa06ea1f1342
Validity
Not Before: Oct 19 14:01:50 2025 GMT
Not After : Oct 20 14:01:50 2025 GMT
Subject: CN=d5122534a77f44b521a43e74a6fc29e6cb00e5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cc:02:e1:06:d7:da:00:74:9d:39:47:0b:b6:
4b:4e:bb:54:7d:68:9f:95:e8:21:76:2a:7b:62:6f:
b9:e3:9f:25:0c:46:74:68:09:33:e3:f6:fd:38:ee:
fe:bd:61:2c:af:51:63:0a:bf:5d:5e:97:f1:de:3b:
a0:62:a6:cc:a3:d4:ea:9f:98:33:e0:05:fa:b1:f6:
32:a1:3d:51:be:d7:8f:71:f2:32:aa:46:d4:8f:a0:
f6:2a:ba:1c:6e:d4:a8:fd:cf:e1:a4:f2:20:00:97:
72:59:a2:a4:e3:b1:73:34:9f:a1:ad:f0:18:3d:8e:
28:a0:3d:89:fc:bc:39:67:b8:07:a8:7c:43:4c:b1:
7a:19:2d:e9:fe:26:31:18:38:e6:71:44:3b:42:b7:
0d:35:3a:77:6e:31:98:46:fb:66:a0:31:58:ce:97:
cc:9d:f0:9e:97:63:7c:1d:8c:d4:16:88:94:6b:5d:
57:32:16:7c:3c:62:f3:cf:bc:b2:bd:e0:78:df:e4:
09:eb:e2:93:db:1f:3d:4b:4d:64:e0:6d:75:24:c7:
33:ad:24:68:2f:e1:6a:9f:cc:8b:41:ac:5b:82:b6:
b3:d9:84:a1:49:4b:1e:ba:71:57:cc:9a:21:38:39:
7e:59:1d:4c:b4:60:45:5f:da:c4:ce:26:8d:b1:d7:
06:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:12:25:34:A7:7F:44:B5:21:A4:3E:74:A6:FC:29:E6:CB:00:E5:F2
X509v3 Authority Key Identifier:
keyid:A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e5:0a:9e:7d:78:1f:75:bc:da:43:5b:9e:31:92:9a:30:5a:
9b:b1:92:5a:2d:e1:45:a1:c6:0e:b1:e0:d5:f5:0c:31:38:aa:
f9:85:d9:1f:c4:4c:e8:7d:be:78:e8:3a:8a:10:d0:4d:2c:ba:
6b:78:ff:b1:75:f8:67:25:a6:33:b0:50:58:9b:45:06:8b:8f:
d9:fc:75:e3:c7:2e:0c:15:cd:6d:9e:a7:31:5a:e9:5a:ba:e0:
91:11:fd:77:e6:95:48:f1:de:45:5f:90:aa:6c:dc:d0:82:ea:
1c:9c:c7:30:e3:48:49:15:1a:5d:c9:53:74:c9:59:da:e0:55:
1b:2c:ad:65:0f:83:ea:0c:f4:59:3e:8c:59:4f:c6:d3:3b:4c:
78:44:e2:2e:12:1b:9f:97:ae:8c:09:09:04:b8:6f:13:9e:6a:
b6:b9:07:d7:84:5c:8b:d2:3a:9e:9c:f7:0c:a3:d6:f6:c9:44:
9f:e4:97:1e:6d:de:a9:bc:04:5a:47:a7:92:08:73:fb:1d:29:
bb:8b:90:e5:48:22:15:86:e4:12:8d:0b:8c:0f:f0:34:b4:40:
22:5d:19:a5:7e:35:b8:05:fb:4b:c5:97:d1:ae:4b:d5:1e:1b:
06:76:c2:35:7a:78:a5:70:87:00:93:ea:e5:ba:d1:28:c2:50:
62:e9:7a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:10 2025 by rpki-client