Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
File: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft (raw, json)
Hash identifier: JARH9XGfUshkCOM7aEI/aWPHISExrasR03QmgyCpO/w=
Subject key identifier: 05:EC:7B:8A:7E:DD:3B:9D:A4:09:86:22:F2:C0:8F:C6:F5:C7:C3:70
Authority key identifier: FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
Certificate issuer: /CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Certificate serial: 0199FBEB016F665DBC0C9DE930BCF726C33A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
Manifest number: 105C
Signing time: Sun 19 Oct 2025 10:01:46 +0000
Manifest this update: Sun 19 Oct 2025 10:01:46 +0000
Manifest next update: Mon 20 Oct 2025 10:01:46 +0000
Files and hashes: 1: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl (hash: ugVhJcCJ8oHvfNjH7OExCj/fAwEX+hMMILPEq9JBhLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:01:6f:66:5d:bc:0c:9d:e9:30:bc:f7:26:c3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Validity
Not Before: Oct 19 10:01:46 2025 GMT
Not After : Oct 20 10:01:46 2025 GMT
Subject: CN=05ec7b8a7edd3b9da4098622f2c08fc6f5c7c370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:80:72:92:f5:9d:2a:13:d2:59:60:29:34:da:
ce:24:23:4b:ae:17:52:10:2b:ff:f3:40:ee:00:14:
65:da:ea:9f:89:1a:04:32:88:7a:00:e1:b2:6d:9b:
c2:4e:1e:25:0c:5d:07:00:fe:1d:9d:0c:8c:82:c4:
08:d3:40:c9:e2:92:dc:56:41:39:b4:6b:1d:64:5b:
a2:80:2a:20:9c:90:42:c9:cb:7b:3a:a2:87:1b:75:
bc:9f:62:e0:ba:27:88:24:f1:7d:15:f1:6f:fd:e6:
eb:9d:2b:4b:1c:76:cc:22:07:5a:71:59:ab:a5:6a:
04:17:2e:b0:66:19:b0:70:fe:4e:3a:73:6c:ec:67:
94:14:d9:be:a7:4a:85:71:c1:f0:90:ae:f2:c6:9b:
17:76:8a:40:81:a5:16:a6:5e:d3:0d:a0:fe:be:10:
69:45:19:1b:32:b7:58:94:73:30:ad:08:51:aa:f3:
7c:21:b0:68:1d:79:10:f6:5d:c6:c3:92:57:73:cf:
bb:01:8b:8d:1c:08:81:67:66:ff:38:f0:66:70:93:
e9:e3:d2:ca:12:57:99:aa:3d:19:1e:9d:4d:8a:97:
a5:7d:66:60:3c:72:5c:e7:70:21:2f:f1:65:cf:01:
4f:f5:87:db:36:79:eb:22:50:18:0b:c3:e8:b1:fc:
f0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EC:7B:8A:7E:DD:3B:9D:A4:09:86:22:F2:C0:8F:C6:F5:C7:C3:70
X509v3 Authority Key Identifier:
keyid:FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:75:02:11:91:e5:72:ff:6b:f0:b7:9b:a7:44:e2:ce:c2:d8:
73:fb:f7:d3:cb:86:d8:4b:aa:4c:b0:39:0f:d0:2f:4d:e6:f9:
29:5e:f3:02:4a:e9:b8:a5:ec:ff:4d:9b:94:b7:04:4d:80:cb:
a3:87:90:1e:04:ae:9a:db:0b:97:4f:9d:1f:7b:b7:94:a3:32:
73:d9:ba:e1:0b:88:74:48:6c:20:ff:c4:02:eb:0d:b1:33:77:
0b:28:29:b8:3f:70:ee:4f:0f:b5:93:e8:20:e1:0a:c0:9a:30:
ed:88:a1:0d:b5:ba:3b:d5:57:6d:55:fe:d6:34:04:41:36:43:
5e:e0:37:d2:ab:64:57:e7:fc:bc:77:b6:53:e3:64:8a:cd:e0:
48:05:77:6b:5f:5f:1b:c2:f2:7f:55:a8:57:6b:86:42:4f:d4:
ed:d7:ec:f8:7c:22:9e:f4:f5:90:0a:b6:8f:e4:8f:bc:82:4e:
55:1d:48:b1:a9:52:d0:6c:ec:68:ad:01:3b:3a:61:28:d0:88:
4d:4d:98:49:81:9b:7c:77:72:80:7d:1d:41:25:7e:d7:5c:99:
25:55:d2:6b:2a:6c:02:7a:27:2e:dd:e1:e4:c4:0e:b0:86:4a:
03:ca:6d:54:87:60:2f:4d:1c:6b:21:29:2a:10:e0:c3:ee:a0:
15:58:63:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:39 2025 by rpki-client