Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
File: oVJEYml6J_56uUtqypBnkx2SEC8.mft (raw, json)
Hash identifier: 2Dd9W/WDukZCGBRHv04uD8U3A+2cQGElV2Olz9T30go=
Subject key identifier: E7:DC:F9:99:C0:64:F1:AA:6B:CA:70:40:8E:33:8F:0B:4E:EF:1D:EC
Authority key identifier: A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
Certificate issuer: /CN=a1524462697a27fe7ab94b6aca9067931d92102f
Certificate serial: 0199FDD8B802CAD8DDDCBA02FE92F15BAF67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 19:01:02 +0000
Manifest this update: Sun 19 Oct 2025 19:01:02 +0000
Manifest next update: Mon 20 Oct 2025 19:01:02 +0000
Files and hashes: 1: oVJEYml6J_56uUtqypBnkx2SEC8.crl (hash: y5MPCnSDI6NQZ24CSTHT0Efqgn4SxvV0Ljm6WsQGpP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:b8:02:ca:d8:dd:dc:ba:02:fe:92:f1:5b:af:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1524462697a27fe7ab94b6aca9067931d92102f
Validity
Not Before: Oct 19 19:01:02 2025 GMT
Not After : Oct 20 19:01:02 2025 GMT
Subject: CN=e7dcf999c064f1aa6bca70408e338f0b4eef1dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f2:a3:09:97:7d:90:7c:71:f5:a9:a7:8b:4f:
28:c7:36:f8:42:28:86:b2:82:eb:10:b9:df:e6:20:
09:77:af:af:08:68:90:37:9d:1c:95:6e:47:63:09:
d2:75:0b:fb:c4:19:d9:93:0d:5e:c7:01:69:18:59:
3a:6a:e2:83:70:7e:ab:e7:df:15:df:22:fd:3d:27:
d3:0b:e3:25:64:28:0a:bd:49:2e:04:91:d9:10:2c:
26:7a:20:cd:8a:be:95:0c:03:37:37:4b:cf:83:bd:
04:84:ac:8f:99:e7:fa:5d:80:f4:9f:52:87:72:35:
d6:8e:ea:87:28:a2:d4:ab:5b:58:d0:e6:c2:09:d0:
4c:da:51:c4:db:95:9b:c2:59:41:5e:21:e6:29:75:
f4:3a:98:c8:ac:67:38:34:b1:82:50:e1:db:dd:62:
55:d2:f6:26:ce:93:7c:39:9f:2f:84:70:6c:07:21:
41:4a:86:09:96:17:f2:e9:74:0e:40:86:78:ad:37:
4b:90:b5:4e:18:8e:0e:b8:32:fe:8a:1c:b6:0d:a8:
dd:85:dc:d8:fe:6d:fd:37:82:0f:48:1a:f3:f0:00:
36:72:29:25:48:35:2e:82:e9:71:64:4e:9a:de:5b:
1d:0e:fb:6f:23:f8:f2:9e:a0:74:2e:c7:b6:1b:e8:
67:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DC:F9:99:C0:64:F1:AA:6B:CA:70:40:8E:33:8F:0B:4E:EF:1D:EC
X509v3 Authority Key Identifier:
keyid:A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e0:c9:f4:4d:bf:0e:80:5f:f0:7f:08:db:4b:f6:ce:20:34:
5d:b1:5b:25:96:56:ca:3e:5f:3f:0b:27:bd:71:c8:b9:8d:41:
4b:d3:29:f4:71:bf:bb:85:0b:89:2d:12:8a:8d:01:46:b0:fd:
84:c7:5f:89:36:76:3d:6d:a0:7a:cb:bc:00:63:8e:8a:d5:27:
6d:49:e9:c6:c3:89:58:df:2e:0e:d7:39:0d:14:dd:40:a0:f4:
a7:aa:bb:67:d8:c4:48:b8:84:cc:86:c5:3c:5e:f0:f3:a7:25:
03:9d:33:2c:63:63:cc:19:17:7a:9d:f0:a5:84:de:a3:08:dc:
b8:51:9f:fe:99:9f:ca:0f:06:1c:49:9c:a0:07:76:9e:10:94:
a0:fe:77:28:f3:ec:69:89:3c:cf:22:f7:05:e8:83:f3:38:51:
6c:24:fd:b8:e8:ca:db:3c:34:ef:ce:e5:cb:13:ee:27:ab:a2:
15:c2:71:1f:32:93:15:6a:44:6d:21:37:98:fe:96:cd:8f:a6:
38:b2:4b:9a:8e:5d:f3:fa:d5:fb:82:07:ac:33:b5:08:54:a7:
3a:4b:f2:58:bf:ab:16:9f:ca:0d:20:64:02:85:e1:0d:56:56:
ff:0a:9a:21:3d:1b:17:84:26:51:15:5f:9c:b7:93:71:7a:b4:
e1:d3:35:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:36 2025 by rpki-client