
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
File: OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft (raw, json)
Hash identifier: IeNbdlus3DdaDVZx2eOfgvpHXI4F9nh8eDKYZphGx+w=
Subject key identifier: EF:E2:70:80:A6:F4:2B:93:6B:EC:92:28:45:FE:0A:89:DE:A2:A0:BD
Authority key identifier: 39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
Certificate issuer: /CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Certificate serial: 0199FDD8C23A9695BB312B3ECCEEAF38BB03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
Manifest number: 0BAD
Signing time: Sun 19 Oct 2025 19:01:05 +0000
Manifest this update: Sun 19 Oct 2025 19:01:05 +0000
Manifest next update: Mon 20 Oct 2025 19:01:05 +0000
Files and hashes: 1: OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl (hash: 45A+QdWPu2e23EDE7x7Yls18A4Prn4Qlq8tW9XiKgAQ=)
2: ZheJClH79M-pTRLGEsquKEEr6pM.roa (hash: eeP+fsrVhAPz7GiAy+y57uO8gQvXWPRMB7ruMgXE6Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:c2:3a:96:95:bb:31:2b:3e:cc:ee:af:38:bb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Validity
Not Before: Oct 19 19:01:05 2025 GMT
Not After : Oct 20 19:01:05 2025 GMT
Subject: CN=efe27080a6f42b936bec922845fe0a89dea2a0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:83:05:a6:af:cc:f2:5a:ee:45:14:a5:9c:6f:
b2:1f:71:bf:c0:7f:8f:99:e5:63:be:70:cb:57:0b:
b2:c6:df:e9:f9:1c:b6:f9:93:16:80:55:e6:fe:63:
bc:4a:3e:66:41:d7:89:81:42:75:69:cf:ef:f5:d8:
f0:0b:96:3b:c2:13:0e:bd:2d:a2:6b:d5:ec:8a:01:
f9:73:ea:8f:1c:fd:72:90:3b:3a:8b:a0:7c:4f:d8:
f3:cb:11:e0:e2:59:15:47:eb:40:c1:df:09:b4:72:
39:b9:ab:0a:cb:64:60:b0:6f:27:ce:d5:f6:0a:e2:
7c:87:2d:20:06:01:00:e8:88:54:77:a7:bc:6a:f2:
b0:ef:b9:b2:5b:f5:47:ff:03:0b:f9:97:39:72:16:
e8:14:89:8d:57:2f:4c:14:b0:64:ad:8f:38:a2:e8:
ce:13:c7:1b:ff:4f:66:fc:5d:3e:9d:d4:53:55:ea:
59:a0:c8:c4:bd:09:23:21:c7:b6:bf:58:ae:55:23:
a1:61:ba:88:7d:eb:45:dd:47:72:01:ea:12:28:a4:
0f:d4:23:c4:3e:5b:56:8c:8d:54:4f:17:c0:93:09:
5d:07:f0:1e:60:57:e3:c2:86:fc:79:ae:05:45:c3:
88:f6:e7:5a:95:0f:ca:e8:e8:5f:85:9a:6a:ed:08:
b7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E2:70:80:A6:F4:2B:93:6B:EC:92:28:45:FE:0A:89:DE:A2:A0:BD
X509v3 Authority Key Identifier:
keyid:39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:bd:38:c8:d7:6c:52:3a:24:c8:6e:da:32:f1:82:8b:1a:5c:
6d:30:7b:d0:6d:b0:43:de:f5:cf:85:83:42:1a:6d:19:b9:2d:
06:49:33:1f:8c:61:43:8f:42:84:64:84:bf:ec:c0:ed:f7:fa:
a8:12:83:96:0a:92:19:7f:4a:5e:9a:a9:2a:47:f3:1b:68:29:
7b:6c:3e:df:a4:a9:84:ec:e2:61:59:d3:ef:44:c0:3a:9e:48:
74:66:32:33:c9:84:06:60:3c:58:e5:ea:04:aa:87:50:1a:f3:
c0:70:99:33:20:5d:59:f2:d0:2f:e6:d6:cf:6e:a6:ca:d4:3a:
6d:ac:2b:80:91:a5:ec:2d:fb:d0:0f:3a:04:bb:da:94:05:ea:
fe:d8:88:88:28:b4:19:a4:64:87:cd:a8:25:4e:f0:7e:bc:25:
ed:53:69:0a:87:d4:47:b7:96:ba:7b:2c:db:fc:07:2e:45:63:
ef:16:f0:13:56:64:cd:f3:0c:ab:d8:86:74:da:c7:7b:36:8d:
59:d2:7e:6b:cf:e1:8b:bd:2f:18:14:2f:b1:d3:44:fd:f7:15:
67:ca:d8:e0:ef:8d:e3:e0:bf:a1:82:e2:ff:5a:bd:f6:1c:89:
d9:ec:e7:b1:23:e7:ac:c2:0d:2e:f2:8a:54:a3:20:9e:2a:13:
fe:1f:c1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:26:37 2025 by rpki-client