Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
File: oLNzv45HcndefI_F-9Mpze5Eoyw.mft (raw, json)
Hash identifier: j2ZW2JnY+ffCqvL/CjDpuolHNBjLU26uDnqKP7CDzTg=
Subject key identifier: A2:6B:B0:88:5C:83:97:79:51:8F:2C:B0:14:19:6B:99:09:99:D0:25
Authority key identifier: A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C
Certificate issuer: /CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
Certificate serial: 0199FC8F442E2BCCB4E159565AB0498394BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 13:01:11 +0000
Manifest this update: Sun 19 Oct 2025 13:01:11 +0000
Manifest next update: Mon 20 Oct 2025 13:01:11 +0000
Files and hashes: 1: oLNzv45HcndefI_F-9Mpze5Eoyw.crl (hash: Jf9+VE2GyEQlE1Xq2lxEHrMp8Q01LOcK5kDV/Kqr/F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:44:2e:2b:cc:b4:e1:59:56:5a:b0:49:83:94:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
Validity
Not Before: Oct 19 13:01:11 2025 GMT
Not After : Oct 20 13:01:11 2025 GMT
Subject: CN=a26bb0885c839779518f2cb014196b990999d025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:58:3b:57:1d:9b:2b:de:72:a6:f7:68:bb:
4d:ec:01:00:55:0d:84:02:78:e4:dc:07:a9:1c:3e:
f2:2a:6b:f0:81:29:64:fa:19:f5:24:1c:71:3e:52:
26:12:2d:fa:3b:85:a0:bf:66:28:e5:e5:03:2f:4c:
46:ad:d8:2b:30:2b:51:88:39:a1:67:c2:66:71:9b:
2e:3a:a7:ad:24:59:e8:ee:fa:d8:0f:b8:9e:dd:76:
85:15:02:fe:78:4a:0f:bc:60:2f:4e:e6:f9:80:41:
e6:9d:8b:88:b1:64:03:e2:a6:8e:49:7c:88:10:29:
95:95:d7:c2:ac:73:33:68:ab:dc:14:55:c7:65:94:
f9:64:02:0c:50:b2:5d:af:83:60:28:18:91:c3:c7:
c2:12:2f:bb:fc:e8:57:fb:a0:33:1b:82:11:d7:a4:
b5:53:3a:56:e9:ed:1d:1f:53:2c:7d:4c:ed:69:29:
ef:c6:36:a0:82:40:b7:ec:c3:88:08:aa:59:ec:ae:
1c:75:84:f0:41:fb:96:1e:3e:a1:0b:ec:94:f3:f3:
0b:7d:9d:b3:1b:24:23:74:95:22:13:73:e1:6c:a3:
a0:a8:e8:c8:9b:46:e3:be:34:14:b7:09:11:1c:17:
c8:42:92:4d:7e:27:85:c1:ee:ff:fc:4f:25:72:1c:
da:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6B:B0:88:5C:83:97:79:51:8F:2C:B0:14:19:6B:99:09:99:D0:25
X509v3 Authority Key Identifier:
keyid:A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d3:01:35:37:f9:dc:f0:d4:4e:fc:1a:37:5a:30:b9:50:cf:
78:4a:4b:cd:0b:d4:5e:83:eb:c4:d2:64:72:39:c1:7b:61:a6:
ef:a2:5d:ce:ce:9a:5a:9b:08:55:ae:75:0c:f3:6d:fe:00:6e:
1c:be:43:35:bb:bc:89:7d:6e:80:44:90:79:c7:6d:f6:d6:d3:
a2:cc:84:81:81:9b:1a:ed:09:00:35:91:2b:2c:71:29:e1:a8:
73:bf:7b:8d:84:70:60:57:68:6c:d4:b2:81:63:20:09:c4:55:
b8:93:ea:08:46:98:42:45:ec:85:f5:ef:a2:64:53:32:5b:eb:
d3:76:03:f0:5c:d0:e6:88:ba:e2:8a:e3:6e:1b:d2:b7:ec:4a:
fb:cd:16:89:55:43:4f:d3:19:83:68:fb:e8:88:6f:27:53:71:
43:03:a8:96:da:89:d7:a0:45:e7:c4:ba:05:46:a2:76:8e:09:
59:da:92:8f:77:27:a0:eb:80:b1:cc:b1:f4:c4:50:5c:98:86:
e1:44:bc:80:39:b2:b5:ab:50:2a:bd:db:b1:5e:d1:18:31:cd:
9b:a1:2d:2a:28:8e:c0:80:42:42:30:54:42:4b:7b:ae:06:f9:
cc:df:70:27:27:b6:2e:84:9f:24:a6:74:da:36:d4:ab:76:6f:
99:2c:39:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:30 2025 by rpki-client