Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
File: OXy939eSBtZcTugWjq9ucJAg-V0.mft (raw, json)
Hash identifier: V36/1CRti2JRkojlS4TRlZuU9hKAGj8h2KXz5Gz/m50=
Subject key identifier: 9A:E3:54:D4:EF:9A:0A:77:A2:85:F6:B2:CC:22:A8:4B:6D:52:D5:E7
Authority key identifier: 39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
Certificate issuer: /CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Certificate serial: 0199FBEB86E87FB3AC9C8C6886AB21A2CAFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
Manifest number: 0AA1
Signing time: Sun 19 Oct 2025 10:02:20 +0000
Manifest this update: Sun 19 Oct 2025 10:02:20 +0000
Manifest next update: Mon 20 Oct 2025 10:02:20 +0000
Files and hashes: 1: OXy939eSBtZcTugWjq9ucJAg-V0.crl (hash: +2oLnCd7I/I+rgWLPSPA2+hioFYxy9fiXWy+YFKpsDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:86:e8:7f:b3:ac:9c:8c:68:86:ab:21:a2:ca:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Validity
Not Before: Oct 19 10:02:20 2025 GMT
Not After : Oct 20 10:02:20 2025 GMT
Subject: CN=9ae354d4ef9a0a77a285f6b2cc22a84b6d52d5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:13:90:3b:0b:47:3b:d0:36:e0:66:8e:92:ae:
a6:e2:8e:a5:96:aa:3e:19:cc:47:6e:f7:1b:55:6d:
62:ff:76:23:9a:ef:6a:17:30:8a:31:29:94:68:9a:
1f:77:36:6e:a2:11:69:13:ff:6f:f6:f4:5c:29:50:
2b:23:34:8b:b4:c9:d3:ef:69:9a:cd:52:f9:0b:58:
47:09:38:34:d5:2f:eb:5f:0f:0c:99:8e:23:ce:00:
dd:02:21:86:07:f6:39:8e:0a:9f:14:4f:59:0c:98:
58:12:dd:4e:da:c4:a3:c3:c9:03:8d:11:8e:0a:4a:
84:3b:8a:66:af:64:c8:df:38:8b:e9:81:bf:af:36:
f2:22:c5:37:81:c6:3d:65:b7:ac:f3:5a:f4:0d:73:
d0:4e:29:a2:16:69:c7:f2:85:e6:85:04:f1:90:2d:
ba:60:51:4b:25:41:86:e8:12:9f:fd:7e:af:86:83:
e0:00:25:0b:73:24:37:45:10:bc:4b:1f:fe:30:58:
14:6d:10:5f:22:a5:2d:58:46:ae:41:f9:a5:e7:ab:
b0:e1:76:69:b0:c0:25:e7:f9:00:72:93:4a:90:8f:
15:e6:03:f2:0a:91:71:8d:b7:37:75:19:74:2b:40:
40:63:de:ce:54:75:a1:54:c6:a2:8d:5d:19:31:99:
8e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E3:54:D4:EF:9A:0A:77:A2:85:F6:B2:CC:22:A8:4B:6D:52:D5:E7
X509v3 Authority Key Identifier:
keyid:39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:01:c1:c4:7c:a7:a2:e1:36:78:4f:a1:74:0e:ca:f3:17:45:
8d:40:ec:c9:ac:1d:4b:12:99:65:e4:ea:fa:5c:1e:6a:a3:93:
26:63:50:d6:8e:13:f8:93:cf:aa:12:74:7e:1b:8e:a2:5f:72:
66:55:ec:ad:dc:9e:00:22:58:df:ef:07:26:7b:a5:84:5d:dc:
41:c9:6a:48:73:12:4d:0f:72:ed:a6:7f:ea:f2:1a:f7:f4:a4:
bd:2e:3f:02:fb:ea:cb:bb:65:8b:dd:ee:b9:cf:a7:75:9d:a5:
df:80:5e:9c:87:4f:64:7a:93:ed:7d:7c:5f:8d:19:08:89:eb:
d7:f6:2c:80:68:0d:f4:60:3b:ec:b2:9e:3a:75:2b:b9:5e:6b:
39:6e:af:01:00:d3:44:6e:f6:82:e1:14:c6:89:6a:63:49:99:
d8:68:69:c1:bd:d7:00:72:2f:18:0f:bf:2a:00:f7:0b:13:f8:
93:4d:4d:a1:61:40:0f:93:19:4c:f3:2b:8b:d4:f2:65:b5:00:
55:f6:76:fd:f0:41:6d:e3:b6:19:1c:52:15:4e:ae:ab:8b:f4:
91:9d:11:65:36:22:95:19:54:f8:a5:4d:b2:20:54:9b:1a:85:
86:1d:80:88:1a:7c:49:77:85:bd:3c:37:dc:3e:f5:db:ba:aa:
15:40:26:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:39 2025 by rpki-client